last executing test programs: 53m16.268613552s ago: executing program 32 (id=218): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000180)=0x3, 0x12) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r7], 0x50}, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 50m36.731430309s ago: executing program 33 (id=895): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg$unix(r6, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002102, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r7 = dup(r1) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000003a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000000c0)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18) r9 = accept$alg(r8, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) readv(r9, &(0x7f0000000780)=[{&(0x7f0000000280)=""/165, 0xa5}], 0x1) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) truncate(&(0x7f0000000080)='./file0\x00', 0x101000) 50m30.847152067s ago: executing program 34 (id=898): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 9m12.37583567s ago: executing program 6 (id=7751): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rename(0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r7, &(0x7f0000000580)="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", 0x120, 0x0, &(0x7f0000000540)={0xc9, 0x4, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, r9, r10, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r10, 0x0, &(0x7f0000236000/0x800000)=nil, 0x800000, 0x400000000000000}) 9m6.166743378s ago: executing program 6 (id=7754): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 9m5.417586231s ago: executing program 6 (id=7757): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) pipe(&(0x7f0000000000)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) chdir(0x0) pipe2$9p(&(0x7f0000000000), 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r4, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) 9m3.343749077s ago: executing program 6 (id=7761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d3120900"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9m1.882557745s ago: executing program 5 (id=7766): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = syz_io_uring_setup(0x38b2, &(0x7f0000000300)={0x0, 0xfffffffd, 0x10100, 0x0, 0x240, 0x0, r0}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(r1, 0x353, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/106, 0x6a}], 0x1}, 0x2) 9m1.773963135s ago: executing program 6 (id=7768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x484d, 0x4, 0x7, 0x8, 0x40, 0xc0f, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0x9, 0x2, 0x1000, 0x7, 0x4, 0xc, 0x7, 0x6, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x1ff, 0x7ff, 0x3, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x8, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x7, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb758, 0x2, 0xb9, 0x4, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x10000400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace$cont(0x9, r0, 0xa3b, 0x5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000500)=0x7, 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000700)={{r4}, "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"}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x800, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/41, 0x29}, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) 9m1.249431669s ago: executing program 5 (id=7769): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f0000001940)=""/4077, 0xfed) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) 9m0.156051963s ago: executing program 6 (id=7770): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x6) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40080, 0x0) io_setup(0x4, &(0x7f0000010440)=0x0) io_submit(r3, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0xfdfe}]) 8m58.703030986s ago: executing program 5 (id=7771): socket(0x10, 0x803, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea", 0x10}], 0x1}], 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b000000080003", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 8m58.510613487s ago: executing program 5 (id=7773): socket(0x1d, 0x2, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000180), 0x4) r2 = socket(0x10, 0x803, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000d40)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000cc0)={0x1c, r4, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) 8m57.527897082s ago: executing program 7 (id=7775): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400, '\x00', r2, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$sysctl(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) 8m56.121952093s ago: executing program 7 (id=7776): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x6, &(0x7f0000000100)=[{0x5}, {0xac, 0x0, 0x9}, {0x6, 0xf0, 0x0, 0xa19}, {0x5, 0x4, 0x0, 0x3}, {0x4, 0xa, 0xff, 0x20000000}, {0x8, 0x8, 0x2, 0x200}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 8m56.11605981s ago: executing program 5 (id=7777): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 8m55.438632151s ago: executing program 5 (id=7778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d3120900"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m51.933880225s ago: executing program 7 (id=7780): sched_setscheduler(0x0, 0x2, 0x0) getpid() r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x3f00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$FBIOGET_FSCREENINFO(r3, 0x4602, &(0x7f0000000240)) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe", 0x47, 0x0, &(0x7f0000000340)={0xc9, 0xf6, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000008000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000c647572aa67c27bc1f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, r4, 0xf6466a61131948ab}, 0x38) recvfrom(0xffffffffffffffff, &(0x7f0000001580)=""/4109, 0x100d, 0x123, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000380), 0x4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) 8m50.616310478s ago: executing program 7 (id=7782): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f0000001940)=""/4077, 0xfed) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) syz_clone(0xc800411, 0x0, 0x0, 0x0, 0x0, 0x0) 8m46.819118796s ago: executing program 35 (id=7764): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}, {&(0x7f0000000900), 0x4000}], 0xe) 8m44.443019156s ago: executing program 7 (id=7785): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, r1, 0xfb59b128081ca7fb}, 0x14}}, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) preadv(r2, 0x0, 0x0, 0x5, 0x5) r3 = syz_usbip_server_init(0x4) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) write$usbip_server(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="00000003000000014369000000000001000000040027dd513cca5e"], 0x30) syz_usbip_server_init(0x4) r4 = fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000040"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f00000005c0), 0x20000000}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 8m43.983284521s ago: executing program 36 (id=7770): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x6) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40080, 0x0) io_setup(0x4, &(0x7f0000010440)=0x0) io_submit(r3, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0xfdfe}]) 8m39.606697424s ago: executing program 7 (id=7788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x840000000002, 0x3, 0xfa) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00004bc000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000005253000204000000050000000200000000060000c200000000000000060000000000000001000000000000800000000000000000000000000000000000100000000000000000000000000000ffffff7f000000000500000000000000010100000000000000000800"/128]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0xb, 0x3, 0x2, 0x2, 0x1, 0x7, 0x8, 0x0, 0x0, 0x40000, 0x7, 0xec1, 0xa, 0x3ffffd, 0xfffffffffffffffd, 0x1002], 0x1, 0x283704}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) 8m39.241314477s ago: executing program 37 (id=7778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d3120900"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m23.116703487s ago: executing program 38 (id=7788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x840000000002, 0x3, 0xfa) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00004bc000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000005253000204000000050000000200000000060000c200000000000000060000000000000001000000000000800000000000000000000000000000000000100000000000000000000000000000ffffff7f000000000500000000000000010100000000000000000800"/128]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0xb, 0x3, 0x2, 0x2, 0x1, 0x7, 0x8, 0x0, 0x0, 0x40000, 0x7, 0xec1, 0xa, 0x3ffffd, 0xfffffffffffffffd, 0x1002], 0x1, 0x283704}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) 2m58.801036212s ago: executing program 4 (id=8494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xaf4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) 2m58.386125053s ago: executing program 4 (id=8497): close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x5169, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 2m56.676761977s ago: executing program 4 (id=8502): socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000080)) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[], 0x0) epoll_create1(0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x5, 0x2}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 2m52.670949813s ago: executing program 4 (id=8512): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x5169, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 2m51.299900775s ago: executing program 4 (id=8514): r0 = fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000023896) 2m50.518339891s ago: executing program 4 (id=8515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x200, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000000)={0x3, 0xffffffff, 0x0, 0x3, 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019400)=ANY=[@ANYBLOB="e800000000010104000000000000000002000000240001801400018008000100ac26db1108000200000000030c0002800500010000000000240002801400018008000100ac14140008000200ac1414280c0002800500010000000000080007400000000084000d8008000200e0000001080001000000000014000400000000000000000000000000000000012c000380060002"], 0xe8}}, 0x0) read(r2, 0x0, 0x0) 2m50.503369884s ago: executing program 2 (id=8516): syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x2, 0x0, 0x0}) 2m50.384193916s ago: executing program 2 (id=8517): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time_for_children\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file1\x00'}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r5, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000300)={0xa, @pix_mp={0x0, 0x0, 0x33565348, 0x0, 0x0, [], 0x7}}) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600015a25b505240000000d240f0100000000000000000006241a00000005240100000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) 2m47.294144535s ago: executing program 2 (id=8520): ioctl$TIOCGRS485(0xffffffffffffffff, 0x5418, 0x0) socket$tipc(0x1e, 0x2, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x1000}, &(0x7f00000000c0), &(0x7f0000000280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f0000"], 0x125) r4 = io_uring_setup(0x79ac, &(0x7f0000000340)={0x0, 0x5, 0x0, 0x0, 0x1e6, 0x0, r3}) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r5, 0x20000005) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r7) close_range(r4, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) 2m45.891799418s ago: executing program 2 (id=8524): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x5169, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 2m43.859158814s ago: executing program 2 (id=8529): creat(&(0x7f0000000040)='./bus\x00', 0x4b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES16=r1], 0x1a8}, 0x1, 0x0, 0x0, 0x24000880}, 0x0) syz_io_uring_submit(r5, 0x0, 0x0) rt_sigsuspend(0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) io_uring_setup(0x3e24, &(0x7f0000000080)={0x0, 0x6de, 0x1826, 0x0, 0x149}) write$P9_RSTATu(r7, 0x0, 0x20e) mount(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='ecryptfs\x00', 0x0, 0x0) 2m42.004332803s ago: executing program 2 (id=8532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x200, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000000)={0x3, 0xffffffff, 0x0, 0x3, 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019400)=ANY=[@ANYBLOB="e800000000010104000000000000000002000000240001801400018008000100ac26db1108000200000000030c0002800500010000000000240002801400018008000100ac14140008000200ac1414280c0002800500010000000000080007400000000084000d8008000200e0000001080001000000000014000400000000000000000000000000000000012c000380060002"], 0xe8}}, 0x0) read(r2, 0x0, 0x0) 2m34.136744457s ago: executing program 39 (id=8515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x200, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000000)={0x3, 0xffffffff, 0x0, 0x3, 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019400)=ANY=[@ANYBLOB="e800000000010104000000000000000002000000240001801400018008000100ac26db1108000200000000030c0002800500010000000000240002801400018008000100ac14140008000200ac1414280c0002800500010000000000080007400000000084000d8008000200e0000001080001000000000014000400000000000000000000000000000000012c000380060002"], 0xe8}}, 0x0) read(r2, 0x0, 0x0) 2m25.478553503s ago: executing program 40 (id=8532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x200, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000000)={0x3, 0xffffffff, 0x0, 0x3, 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019400)=ANY=[@ANYBLOB="e800000000010104000000000000000002000000240001801400018008000100ac26db1108000200000000030c0002800500010000000000240002801400018008000100ac14140008000200ac1414280c0002800500010000000000080007400000000084000d8008000200e0000001080001000000000014000400000000000000000000000000000000012c000380060002"], 0xe8}}, 0x0) read(r2, 0x0, 0x0) 16.363206687s ago: executing program 3 (id=8844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000016c0)=""/4096) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, &(0x7f0000000000), 0x0, 0x40, 0xed, &(0x7f0000000500)=""/237, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)=[{0x1, 0x4, 0x4, 0x5}], 0x10, 0xfffffff9, @void, @value}, 0x94) accept4$unix(r5, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x300, &(0x7f0000000400)={[{@dyn}]}) 16.250302839s ago: executing program 1 (id=8845): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time_for_children\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) pipe2(&(0x7f0000000180), 0x800) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc}) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000300)={0xa, @pix_mp={0x0, 0x0, 0x33565348, 0x0, 0x0, [], 0x7}}) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600015a25b505240000000d240f0100000000000000000006241a00000005240100000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009c147010861246205bb4018203010902240001000000000904000002ff04"], 0x0) 14.819155115s ago: executing program 3 (id=8848): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48940, 0x0) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') inotify_init1(0x0) acct(0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) setpriority(0x2, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) 13.907623476s ago: executing program 3 (id=8850): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000580)="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", 0x120, 0x0, &(0x7f0000000540)={0xc9, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=""/116, 0x74) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r7, 0x0, &(0x7f0000236000/0x800000)=nil, 0x800000, 0x400000000000000}) 13.905470978s ago: executing program 8 (id=8851): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, 0x0) fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x4c, 0x1a, 0x150, 0x73, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'virt_wifi0\x00', 'veth1_macvtap\x00'}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "b9841be2dff2a8dd83bc97b5f34260959e200db9f88bf6dd11184d5ee7a3a5ef8af3283b738a0cfcfc00260bcee5b87a41f3a4e3d2a0b7ac5fb319f56a68f5918ceb1b9c738ba1e7ca7613be181247b661b7a34e5088af9a5cf650cc70163dfefd3ac6254b09f0d749ca32087c31c737e754803ad55c24a5fd83ffef9389bd37"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r6, &(0x7f0000000040)='fd/4\x00') r7 = io_uring_setup(0xdac, &(0x7f0000000180)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000006c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) close_range(r7, 0xffffffffffffffff, 0x0) 12.800491412s ago: executing program 1 (id=8852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x10}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_IFALIAS={0x14, 0x14, 'ip6_vti0\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 12.571655638s ago: executing program 8 (id=8853): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r0, 0x0, 0x6) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9fef0100180000000000000000000000000084ffffffff0000000000000006"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="b90000"], 0xb8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_DIRENTPLUS(r5, 0x0, 0x0) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) 12.464819993s ago: executing program 9 (id=8855): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x16) getpid() prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000fcf9a36587699be4244f5ddb78592e95805fb814c8b81b7e0dee735b6d1c02a535259b03e1be9c214a2ac4c201cb8ac4e8e5f8832a7e68bc4e209de4b72e48803ad95c90ecdfac05dccf6158eebde9690b9541c34b4054f8ca9e105657f3999d053aac"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) 10.925466951s ago: executing program 9 (id=8856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c2", 0x17) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/96, 0x60}], 0x1}, 0xc}, {{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2}, 0x7e0}], 0x3, 0x60002000, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x9e966e64318092aa, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040b0b80c900bcd9b200298759ef3708a22262065866b37016f91c"], 0xe) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = request_key(&(0x7f0000000300)='id_resolver\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='sched_switch\x00', 0xfffffffffffffffe) r8 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r7, 0x0, r8, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)) close_range(r9, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) 9.550131846s ago: executing program 9 (id=8858): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,access=', @ANYRESDEC]) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fanotify_init(0x0, 0x0) memfd_create(&(0x7f00000006c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x6) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 9.336242378s ago: executing program 8 (id=8859): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={r2, 0x0, 0x9, 0x8, 0x0, [0x0], [0x4], [0x0, 0x0, 0x100, 0xd], [0x4, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) 8.791951774s ago: executing program 9 (id=8861): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x2, &(0x7f0000000300)=@raw=[@generic={0x6, 0x6, 0x0, 0xb, 0xffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000240), &(0x7f0000000280)) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0), 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000680)={0x0, 0x2157, 0x0, 0x2, 0xfffffffd}, &(0x7f00000004c0)=0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x169802, 0x0) r6 = dup(r5) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0x19}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r10, 0x0, 0x10001, 0x0, 0x5, 0x1f4861, 0x22371}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f00000004c0)={0x48, 0x7, r10, 0x0, 0x10000, 0x0, 0x4, 0x1acb64, 0x270cde}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r10, 0x0, 0x10000, 0x0, 0x50000, 0x1, 0x32bb90}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r10, 0x0, 0x1, 0x0, 0x4000, 0x0, 0x3ee222}) write$P9_RGETLOCK(r6, &(0x7f0000000100)=ANY=[], 0xfffffff0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r11, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x4c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7ff, 0x1000}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 8.752752458s ago: executing program 8 (id=8862): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file1\x00') 7.927792214s ago: executing program 8 (id=8863): ioctl$TIOCGRS485(0xffffffffffffffff, 0x5418, 0x0) socket$tipc(0x1e, 0x2, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x1000}, &(0x7f00000000c0), &(0x7f0000000280)) r4 = io_uring_setup(0x79ac, &(0x7f0000000340)={0x0, 0x5, 0x0, 0x0, 0x1e6, 0x0, r3}) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r5, 0x20000005) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r7) close_range(r4, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) 7.846133375s ago: executing program 0 (id=8864): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) 7.347747518s ago: executing program 0 (id=8865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x200, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000000)={0x3, 0xffffffff, 0x0, 0x3, 0x2}) mount$9p_fd(0x0, 0x0, 0x0, 0x20002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019400)=ANY=[@ANYBLOB="e800000000010104000000000000000002000000240001801400018008000100ac26db1108000200000000030c0002800500010000000000240002801400018008000100ac14140008000200ac1414280c0002800500010000000000080007400000000084000d8008000200e0000001080001000000000014000400000000000000000000000000000000012c000380060002"], 0xe8}}, 0x0) read(r2, 0x0, 0x0) 6.664731288s ago: executing program 1 (id=8866): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)=ANY=[]) 6.442744263s ago: executing program 1 (id=8867): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xef) syz_open_dev$usbfs(0x0, 0x74, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x4, r5}) 6.201032213s ago: executing program 3 (id=8868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x200000100000011, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000016000300686173683a6e6574"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'pim6reg1\x00'}) 5.57056184s ago: executing program 0 (id=8869): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = fanotify_init(0x200, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000001280)={0x2020}, 0x2020) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/4014, 0xfae) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x0, @multicast}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000010c0)=0x5) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000e40)}], 0x1) 4.360283065s ago: executing program 1 (id=8870): syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') bpf$PROG_LOAD(0x5, 0x0, 0xfffffd01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0x78) sendfile(0xffffffffffffffff, r2, &(0x7f00000001c0), 0x8) fcntl$addseals(r2, 0x409, 0x8) 4.205025596s ago: executing program 0 (id=8871): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000000000001}) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2.95597231s ago: executing program 3 (id=8872): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={r2, 0x0, 0x9, 0x8, 0x0, [0x0], [0x4], [0x0, 0x0, 0x100, 0xd], [0x4, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) 2.953668822s ago: executing program 1 (id=8873): r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xd, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000001300)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x28, 0x8, 0x0, 0x5, 0x0, 0x3e, 0xf, 0x20b, 0x40, 0x343, 0x2, 0x2, 0x38, 0x1, 0x1, 0x8, 0x2}, [{0x0, 0x5, 0x4, 0x8, 0x1, 0xd329686, 0x6, 0x8}]}, 0x78) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x810, r4, 0x180000000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) readv(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.530919722s ago: executing program 3 (id=8874): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r0 = syz_open_procfs(0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 2.529793012s ago: executing program 8 (id=8875): syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_req={{0x17, 0x8, 0x10}, {0x1, 0x2, 0xa, 0x6, [0x33, 0x2, 0x50, 0x5]}}}}, 0x1d) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) r7 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x0) utimensat(r8, 0x0, &(0x7f00000002c0)={{0x0, 0x2710}, {0x77359400}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8}]}, 0x24}}, 0x9590f6cc3aa711f2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.18206674s ago: executing program 0 (id=8876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x10}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_IFALIAS={0x14, 0x14, 'ip6_vti0\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.178221875s ago: executing program 9 (id=8877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x200000100000011, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000016000300686173683a6e6574"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'pim6reg1\x00'}) 231.40806ms ago: executing program 0 (id=8878): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x400080, 0x0) socket$inet(0xa, 0x801, 0x84) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000001c0)={0x400, 0x301, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, {0x0, 0x0, 0x1}, {0x8000}, {0xf8}, {0x0, 0x1}, 0x3, 0x3f0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x2, 0xa}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000000)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfca804a0, 0x3c, 0x0, 0x0, 0x0, 0x5ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x20008000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x0, 0x0}) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 0s ago: executing program 9 (id=8879): sched_setscheduler(0x0, 0x2, 0x0) getpid() r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x3f00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, r2, 0xf6466a61131948ab}, 0x38) recvfrom(0xffffffffffffffff, &(0x7f0000001580)=""/4109, 0x100d, 0x123, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x8) kernel console output (not intermixed with test programs): .737100][T23793] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2815.784276][ T1115] chnl_net:caif_netlink_parms(): no params data found [ 2815.798762][T23793] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2815.859557][T23793] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2815.902836][T23793] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2815.963701][ T1122] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2816.420174][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 2816.427685][ T1115] bridge0: port 1(bridge_slave_0) entered disabled state [ 2816.440903][ T1115] bridge_slave_0: entered allmulticast mode [ 2816.449071][ T1115] bridge_slave_0: entered promiscuous mode [ 2816.464248][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 2816.472095][ T1115] bridge0: port 2(bridge_slave_1) entered disabled state [ 2816.480453][ T1115] bridge_slave_1: entered allmulticast mode [ 2816.489008][ T1115] bridge_slave_1: entered promiscuous mode [ 2816.552111][ T1119] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2816.629473][ T1119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2816.643297][ T1119] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2816.652352][ T1119] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2816.660689][ T1119] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2816.669527][ T1119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2816.818315][ T1119] Bluetooth: hci5: command tx timeout [ 2817.055950][ T1139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2817.099430][ T1139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2817.121398][ T1122] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 2817.127953][ T1122] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2817.183370][ T1115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2817.248842][ T1115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2817.397541][ T1122] vhci_hcd vhci_hcd.0: Device attached [ 2817.508108][ T1115] team0: Port device team_slave_0 added [ 2817.552764][ T1122] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(8) [ 2817.559328][ T1122] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2817.588086][T23793] vhci_hcd: vhci_device speed not set [ 2817.615009][ T1115] team0: Port device team_slave_1 added [ 2817.652113][T23793] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 2817.721933][ T1122] vhci_hcd vhci_hcd.0: Device attached [ 2817.763887][ T1141] vhci_hcd: connection closed [ 2817.764431][ T2998] vhci_hcd: stop threads [ 2817.774804][ T1137] vhci_hcd: connection reset by peer [ 2817.790520][T30126] usb 8-1: USB disconnect, device number 68 [ 2817.796531][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2817.796580][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2817.863387][ T1115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2817.877372][ T2998] vhci_hcd: release socket [ 2817.883171][ T2998] vhci_hcd: disconnect device [ 2817.889494][ T2998] vhci_hcd: stop threads [ 2817.893747][ T2998] vhci_hcd: release socket [ 2817.904390][ T1115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2817.941162][ T2998] vhci_hcd: disconnect device [ 2817.950513][ T1115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2818.160613][ T1115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2818.218692][ T1115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2818.475229][ T1115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2818.723691][ T1115] hsr_slave_0: entered promiscuous mode [ 2818.770966][ T1115] hsr_slave_1: entered promiscuous mode [ 2818.824964][ T1115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2818.836920][ T1115] Cannot create hsr debugfs directory [ 2818.875510][ T1119] Bluetooth: hci6: command tx timeout [ 2819.052770][ T1119] Bluetooth: hci5: command tx timeout [ 2819.238173][ T1135] chnl_net:caif_netlink_parms(): no params data found [ 2819.690307][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 2819.704091][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 2819.730356][ T1135] bridge_slave_0: entered allmulticast mode [ 2819.767856][ T1135] bridge_slave_0: entered promiscuous mode [ 2819.788054][T10184] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2819.801956][T10184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2819.815931][T10184] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2819.824398][T10184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2819.831974][T10184] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2819.843072][T10184] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2819.928045][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 2819.944219][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 2819.961368][ T1135] bridge_slave_1: entered allmulticast mode [ 2819.973125][ T1135] bridge_slave_1: entered promiscuous mode [ 2820.002667][ T1115] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2820.031785][ T1115] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2820.105545][ T1115] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2820.130015][ T1135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2820.159732][ T1115] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2820.189787][ T1135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2820.289304][ T1135] team0: Port device team_slave_0 added [ 2820.321148][ T1135] team0: Port device team_slave_1 added [ 2820.457959][ T1135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2820.473414][ T1135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2820.535149][ T1135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2820.607731][ T1135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2820.623804][ T1135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2820.674862][ T1135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2820.729299][ T1115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2820.905172][ T1135] hsr_slave_0: entered promiscuous mode [ 2820.924829][ T1135] hsr_slave_1: entered promiscuous mode [ 2820.932226][ T1135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2820.944726][ T1135] Cannot create hsr debugfs directory [ 2820.997347][ T1156] chnl_net:caif_netlink_parms(): no params data found [ 2821.024296][ T1115] 8021q: adding VLAN 0 to HW filter on device team0 [ 2821.094706][T10184] Bluetooth: hci6: command tx timeout [ 2821.137425][ T1894] bridge0: port 1(bridge_slave_0) entered blocking state [ 2821.144561][ T1894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2821.265556][T10184] Bluetooth: hci5: command tx timeout [ 2821.343954][T31265] bridge0: port 2(bridge_slave_1) entered blocking state [ 2821.351098][T31265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2821.427656][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 2821.444037][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 2821.464601][ T1156] bridge_slave_0: entered allmulticast mode [ 2821.479602][ T1156] bridge_slave_0: entered promiscuous mode [ 2821.557911][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 2821.574458][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 2821.599752][ T1156] bridge_slave_1: entered allmulticast mode [ 2821.645596][ T1156] bridge_slave_1: entered promiscuous mode [ 2821.987282][ T1156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2822.035542][T10184] Bluetooth: hci2: command tx timeout [ 2822.127174][ T1156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2823.179171][T23793] vhci_hcd: vhci_device speed not set [ 2823.225146][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2823.231537][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2823.263664][ T1156] team0: Port device team_slave_0 added [ 2823.438078][T10184] Bluetooth: hci6: command tx timeout [ 2823.499032][T10184] Bluetooth: hci5: command tx timeout [ 2824.658795][T10184] Bluetooth: hci2: command tx timeout [ 2824.954147][ T1156] team0: Port device team_slave_1 added [ 2825.627215][ T1119] Bluetooth: hci6: command tx timeout [ 2826.825100][ T1119] Bluetooth: hci2: command tx timeout [ 2827.894473][ T1178] sctp: [Deprecated]: syz.0.7792 (pid 1178) Use of int in maxseg socket option. [ 2827.894473][ T1178] Use struct sctp_assoc_value instead [ 2827.987351][ T1156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2828.000701][ T1156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2828.088729][ T1156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2828.274962][ T1156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2828.288920][ T1156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2828.351686][ T1156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2828.468127][ T1115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2828.773354][ T1156] hsr_slave_0: entered promiscuous mode [ 2828.793540][ T1156] hsr_slave_1: entered promiscuous mode [ 2828.804732][ T1156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2828.832806][ T1156] Cannot create hsr debugfs directory [ 2828.854388][ T1135] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2828.887318][ T1135] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2829.020851][ T1135] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2829.048736][ T1119] Bluetooth: hci2: command tx timeout [ 2829.156672][ T1135] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2829.686033][ T1096] bridge_slave_1: left allmulticast mode [ 2829.703803][ T1096] bridge_slave_1: left promiscuous mode [ 2829.713250][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 2829.740008][ T1096] bridge_slave_0: left allmulticast mode [ 2829.767103][ T1096] bridge_slave_0: left promiscuous mode [ 2829.780521][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 2831.034219][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2831.060339][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2831.072810][ T1096] bond0 (unregistering): Released all slaves [ 2831.467049][ T1115] veth0_vlan: entered promiscuous mode [ 2831.530859][ T1115] veth1_vlan: entered promiscuous mode [ 2831.594830][ T1096] hsr_slave_0: left promiscuous mode [ 2831.608321][ T1096] hsr_slave_1: left promiscuous mode [ 2831.625049][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2831.633696][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2833.104404][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 2833.264222][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 2835.128524][ T1135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2835.312475][ T1115] veth0_macvtap: entered promiscuous mode [ 2835.380767][ T1135] 8021q: adding VLAN 0 to HW filter on device team0 [ 2835.408496][ T1115] veth1_macvtap: entered promiscuous mode [ 2835.459288][T31265] bridge0: port 1(bridge_slave_0) entered blocking state [ 2835.466448][T31265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2835.618046][T31265] bridge0: port 2(bridge_slave_1) entered blocking state [ 2835.625197][T31265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2835.796187][ T1115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2835.837314][ T1115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2835.871988][ T1115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2835.892074][ T1115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2835.933912][ T1115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2835.987978][ T1115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2836.034777][ T1115] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2836.091276][ T1115] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2836.119348][ T1115] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2836.155382][ T1115] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2836.206581][ T1156] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2836.269829][ T1156] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2836.362015][T10184] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2836.383339][T10184] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2836.392732][T10184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2836.400628][T10184] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2836.408417][T10184] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2836.415917][T10184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2836.501968][ T1156] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2836.527577][ T1156] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2837.204204][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2837.256956][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2837.771490][T31265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2837.815122][T31265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2837.936208][ T1156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2838.236633][ T1135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2838.287978][ T1156] 8021q: adding VLAN 0 to HW filter on device team0 [ 2838.350481][ T1096] bridge_slave_1: left allmulticast mode [ 2838.356160][ T1096] bridge_slave_1: left promiscuous mode [ 2838.424539][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 2838.488783][ T1096] bridge_slave_0: left allmulticast mode [ 2838.496048][ T1096] bridge_slave_0: left promiscuous mode [ 2838.542412][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 2838.638481][T10184] Bluetooth: hci0: command tx timeout [ 2838.958531][ T117] usb 6-1: USB disconnect, device number 91 [ 2839.054643][ T117] usb 6-1: ath9k_htc: USB layer deinitialized [ 2840.577475][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2840.612725][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2840.636040][ T1096] bond0 (unregistering): Released all slaves [ 2840.822248][ T1894] bridge0: port 1(bridge_slave_0) entered blocking state [ 2840.829420][ T1894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2840.862527][T10184] Bluetooth: hci0: command tx timeout [ 2841.153179][ T1232] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2841.161381][ T1232] F2FS-fs (loop17): Can't find valid F2FS filesystem in 1th superblock [ 2841.170252][ T1232] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2841.178228][ T1232] F2FS-fs (loop17): Can't find valid F2FS filesystem in 2th superblock [ 2841.216603][T31265] bridge0: port 2(bridge_slave_1) entered blocking state [ 2841.223761][T31265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2841.362055][ T1156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2841.408920][ T1156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2841.550237][ T1096] hsr_slave_0: left promiscuous mode [ 2841.583347][ T1096] hsr_slave_1: left promiscuous mode [ 2841.592348][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2841.605693][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2842.037259][ T117] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2842.213890][ T117] usb 9-1: Using ep0 maxpacket: 16 [ 2842.221862][ T117] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2842.249158][ T117] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2842.262319][ T117] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 2842.295581][ T117] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2842.310847][ T117] usb 9-1: config 0 descriptor?? [ 2842.320518][ T117] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2842.396099][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 2842.456133][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 2843.176845][ T1119] Bluetooth: hci0: command tx timeout [ 2843.215593][T23793] IPVS: starting estimator thread 0... [ 2843.384398][ T1252] IPVS: using max 26 ests per chain, 62400 per kthread [ 2843.704560][ T1192] chnl_net:caif_netlink_parms(): no params data found [ 2843.725377][ T1249] mkiss: ax0: crc mode is auto. [ 2843.913846][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state [ 2843.925801][ T1192] bridge0: port 1(bridge_slave_0) entered disabled state [ 2843.936637][ T1192] bridge_slave_0: entered allmulticast mode [ 2843.948093][ T1192] bridge_slave_0: entered promiscuous mode [ 2843.962194][ T1135] veth0_vlan: entered promiscuous mode [ 2843.985114][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state [ 2843.992359][ T1192] bridge0: port 2(bridge_slave_1) entered disabled state [ 2844.000577][ T1192] bridge_slave_1: entered allmulticast mode [ 2844.007905][ T1192] bridge_slave_1: entered promiscuous mode [ 2844.043098][ T1192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2844.055080][ T1192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2844.096206][ T1192] team0: Port device team_slave_0 added [ 2844.119484][ T1192] team0: Port device team_slave_1 added [ 2844.127963][ T1135] veth1_vlan: entered promiscuous mode [ 2844.162115][ T1156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2844.171127][ T1192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2844.179070][ T1192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2844.206813][ T1192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2844.235573][ T1192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2844.251747][ T1192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2844.278842][ T1192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2844.344168][ T1192] hsr_slave_0: entered promiscuous mode [ 2844.360587][ T1192] hsr_slave_1: entered promiscuous mode [ 2844.374026][ T1192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2844.385507][ T1192] Cannot create hsr debugfs directory [ 2844.399075][ T1135] veth0_macvtap: entered promiscuous mode [ 2844.411100][ T1135] veth1_macvtap: entered promiscuous mode [ 2844.534023][ T1135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2844.552180][ T1135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.563386][ T1135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2844.574209][ T1135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.585501][ T1135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2844.650276][ T1135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2844.661043][ T1135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.671307][ T1135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2844.682578][ T1135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.693763][ T1135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2844.719107][ T1135] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2844.728123][ T1135] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2844.737413][ T1135] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2844.746607][ T1135] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2844.912022][ T1156] veth0_vlan: entered promiscuous mode [ 2844.982145][ T1156] veth1_vlan: entered promiscuous mode [ 2845.048861][ T9889] usb 9-1: USB disconnect, device number 2 [ 2845.163690][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2845.177972][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2845.269631][ T1156] veth0_macvtap: entered promiscuous mode [ 2845.343573][ T1096] bridge_slave_1: left allmulticast mode [ 2845.349310][ T1096] bridge_slave_1: left promiscuous mode [ 2845.355141][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 2845.375070][ T1096] bridge_slave_0: left allmulticast mode [ 2845.563629][ T1119] Bluetooth: hci0: command tx timeout [ 2845.592301][ T1096] bridge_slave_0: left promiscuous mode [ 2845.617349][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 2847.473245][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2847.483314][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2847.496901][ T1096] bond0 (unregistering): Released all slaves [ 2847.511725][ T1894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2847.519581][ T1894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2847.538688][ T1284] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2847.547875][ T1284] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2847.556913][ T1284] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2847.565886][ T1284] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2847.575596][ T1284] geneve2: entered promiscuous mode [ 2847.580838][ T1284] geneve2: entered allmulticast mode [ 2847.640589][ T1156] veth1_macvtap: entered promiscuous mode [ 2847.725435][ T1192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2847.785262][ T1156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2847.797286][ T1156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2847.810527][ T1156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2847.831541][ T1156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2847.842939][ T1156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2847.864065][ T1156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2847.886397][ T1156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2847.894267][ T1192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2847.925672][ T1192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2847.947057][ T1192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2848.029246][ T1156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2848.048811][ T1156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2848.939018][ T1297] input: syz1 as /devices/virtual/input/input92 [ 2849.140516][ T1156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2849.482222][ T1156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2849.541559][ T1156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2849.552331][ T1156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2849.563542][ T1156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2849.733453][ T1299] sp0: Synchronizing with TNC [ 2849.750340][ T1156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2849.776659][ T1156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2849.828138][ T1156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2849.838658][ T1156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2849.910853][ T1096] hsr_slave_0: left promiscuous mode [ 2850.000627][ T1096] hsr_slave_1: left promiscuous mode [ 2850.007138][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2850.024508][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2850.106521][ T1306] F2FS-fs (loop19): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2850.114506][ T1306] F2FS-fs (loop19): Can't find valid F2FS filesystem in 1th superblock [ 2850.123375][ T1306] F2FS-fs (loop19): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2850.131290][ T1306] F2FS-fs (loop19): Can't find valid F2FS filesystem in 2th superblock [ 2850.757748][ T1307] sctp: [Deprecated]: syz.8.7809 (pid 1307) Use of int in maxseg socket option. [ 2850.757748][ T1307] Use struct sctp_assoc_value instead [ 2852.645491][ T1322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2855.225289][ T1337] netlink: 'syz.0.7816': attribute type 27 has an invalid length. [ 2856.830218][ T1348] netlink: 560 bytes leftover after parsing attributes in process `syz.9.7819'. [ 2856.839455][ T1348] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7819'. [ 2856.849561][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 2856.933800][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 2858.665691][ T1357] sctp: [Deprecated]: syz.0.7822 (pid 1357) Use of int in maxseg socket option. [ 2858.665691][ T1357] Use struct sctp_assoc_value instead [ 2858.675756][ T1192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2859.015867][ T1192] 8021q: adding VLAN 0 to HW filter on device team0 [ 2859.164714][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2859.172559][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2859.198223][T15353] bridge0: port 1(bridge_slave_0) entered blocking state [ 2859.205336][T15353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2859.434841][T15353] bridge0: port 2(bridge_slave_1) entered blocking state [ 2859.441995][T15353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2859.851807][ T1363] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2859.860731][ T1363] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2859.869575][ T1363] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2859.878357][ T1363] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2859.887441][ T1363] geneve2: entered promiscuous mode [ 2859.892757][ T1363] geneve2: entered allmulticast mode [ 2859.973605][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2860.002069][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2861.562197][ T1192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2861.651359][ T1192] veth0_vlan: entered promiscuous mode [ 2861.680601][ T1192] veth1_vlan: entered promiscuous mode [ 2861.701373][ T1192] veth0_macvtap: entered promiscuous mode [ 2861.709936][ T1192] veth1_macvtap: entered promiscuous mode [ 2861.723595][ T1192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2861.734123][ T1192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2861.744331][ T1192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2861.754798][ T1192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2861.764643][ T1192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2861.775162][ T1192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2861.785078][ T1192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2861.795571][ T1192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2861.816017][ T1192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2861.867223][ T1192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2861.911133][ T1192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2861.921544][ T1192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2861.954511][ T1192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2861.964835][ T1192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2861.980344][ T1192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2862.028681][ T1192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2862.062405][ T1192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2862.093836][ T1192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2862.120636][ T1192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2862.138209][ T1192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2862.156956][ T1192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2862.187339][ T1192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2862.541153][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2862.541556][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2862.549292][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2862.660039][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2863.576969][ T1401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2863.584302][ T1401] IPv6: NLM_F_CREATE should be set when creating new route [ 2863.600397][ T1401] netlink: 'syz.8.7831': attribute type 27 has an invalid length. [ 2863.969169][ T1401] bridge0: port 2(bridge_slave_1) entered disabled state [ 2863.976439][ T1401] bridge0: port 1(bridge_slave_0) entered disabled state [ 2864.056366][ T1401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2864.077522][ T1401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2864.147672][ T1401] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2864.157106][ T1401] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2864.165995][ T1401] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2864.174933][ T1401] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2864.227520][ T1401] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2864.236569][ T1401] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2864.246777][ T1401] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2864.255899][ T1401] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2864.467807][ T1401] geneve2: left promiscuous mode [ 2864.472795][ T1401] geneve2: left allmulticast mode [ 2864.834275][ T1409] mkiss: ax0: crc mode is auto. [ 2866.493499][ T1417] sctp: [Deprecated]: syz.8.7833 (pid 1417) Use of int in maxseg socket option. [ 2866.493499][ T1417] Use struct sctp_assoc_value instead [ 2867.291105][ T1427] netlink: 'syz.2.7837': attribute type 27 has an invalid length. [ 2867.858018][ T1427] bridge0: port 2(bridge_slave_1) entered disabled state [ 2867.865386][ T1427] bridge0: port 1(bridge_slave_0) entered disabled state [ 2871.588542][ T1453] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7843'. [ 2871.607613][ T1453] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7843'. [ 2871.905672][ T1427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2872.054132][ T1427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2872.334424][ T1427] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2872.343607][ T1427] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2872.352745][ T1427] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2872.361863][ T1427] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2872.838921][ T1465] hub 5-0:1.0: USB hub found [ 2872.844520][ T1465] hub 5-0:1.0: 1 port detected [ 2873.743425][ T1470] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2873.751447][ T1470] F2FS-fs (loop17): Can't find valid F2FS filesystem in 1th superblock [ 2873.760305][ T1470] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2873.768204][ T1470] F2FS-fs (loop17): Can't find valid F2FS filesystem in 2th superblock [ 2874.299075][ T1472] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7849'. [ 2874.308546][ T1472] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7849'. [ 2876.414569][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 2876.424608][ T29] audit: type=1107 audit(1735350176.804:1715): pid=1491 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 2877.026962][ T1498] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 2877.036344][ T1498] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 2877.045515][ T1498] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 2877.054568][ T1498] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 2877.066723][ T1498] geneve2: entered promiscuous mode [ 2877.072096][ T1498] geneve2: entered allmulticast mode [ 2877.757735][ T1503] Can't find a SQUASHFS superblock on nullb0 [ 2878.576720][ T1511] F2FS-fs (loop19): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2878.584959][ T1511] F2FS-fs (loop19): Can't find valid F2FS filesystem in 1th superblock [ 2878.597726][ T1511] F2FS-fs (loop19): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2878.605776][ T1511] F2FS-fs (loop19): Can't find valid F2FS filesystem in 2th superblock [ 2879.495302][ T1509] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2879.502597][ T1509] IPv6: NLM_F_CREATE should be set when creating new route [ 2879.503402][ T5898] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 2879.511282][ T1509] netlink: 'syz.4.7860': attribute type 27 has an invalid length. [ 2879.871440][ T5898] usb 9-1: Using ep0 maxpacket: 8 [ 2879.881323][ T5898] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 2879.898518][ T5898] usb 9-1: config 179 has no interface number 0 [ 2879.924920][ T5898] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2879.936983][ T5898] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2879.950900][ T5898] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2879.978514][ T1519] hub 5-0:1.0: USB hub found [ 2879.988313][ T1519] hub 5-0:1.0: 1 port detected [ 2880.548738][ T5898] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2880.560304][ T5898] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2880.573644][ T5898] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2880.582789][ T5898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2880.673414][ T1508] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2880.763343][ T1509] bridge0: port 2(bridge_slave_1) entered disabled state [ 2880.770789][ T1509] bridge0: port 1(bridge_slave_0) entered disabled state [ 2880.866692][ T1509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2880.880980][ T1509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2881.167900][T26279] usb 9-1: USB disconnect, device number 3 [ 2881.167933][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2881.182031][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2881.485318][ T1509] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2881.494276][ T1509] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2881.503221][ T1509] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2881.512319][ T1509] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2882.164119][ T1535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7864'. [ 2883.495256][ T1544] sctp: [Deprecated]: syz.2.7867 (pid 1544) Use of int in maxseg socket option. [ 2883.495256][ T1544] Use struct sctp_assoc_value instead [ 2884.394227][ T1555] sctp: [Deprecated]: syz.0.7872 (pid 1555) Use of int in maxseg socket option. [ 2884.394227][ T1555] Use struct sctp_assoc_value instead [ 2885.724244][ T1569] mkiss: ax0: crc mode is auto. [ 2886.591200][ T1574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2888.201031][ T1581] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7878'. [ 2888.210664][ T1581] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7878'. [ 2889.367683][ T1585] sp0: Synchronizing with TNC [ 2889.434392][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2889.440789][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2889.598158][ T1590] Can't find a SQUASHFS superblock on nullb0 [ 2890.677082][ T1606] sctp: [Deprecated]: syz.8.7887 (pid 1606) Use of int in maxseg socket option. [ 2890.677082][ T1606] Use struct sctp_assoc_value instead [ 2890.872677][T23793] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2891.043334][T23793] usb 10-1: Using ep0 maxpacket: 16 [ 2891.051476][T23793] usb 10-1: config 0 has an invalid interface number: 231 but max is 1 [ 2891.061373][T23793] usb 10-1: config 0 has no interface number 1 [ 2891.062370][ T1610] input: syz1 as /devices/virtual/input/input93 [ 2891.076335][T23793] usb 10-1: too many endpoints for config 0 interface 231 altsetting 15: 203, using maximum allowed: 30 [ 2891.088316][T23793] usb 10-1: config 0 interface 231 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 2891.124496][T23793] usb 10-1: config 0 interface 231 has no altsetting 0 [ 2891.136698][T23793] usb 10-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 2891.146872][T23793] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2891.160653][T23793] usb 10-1: Product: syz [ 2891.164925][T23793] usb 10-1: Manufacturer: syz [ 2891.192534][T23793] usb 10-1: SerialNumber: syz [ 2891.214991][T23793] usb 10-1: config 0 descriptor?? [ 2891.637669][T23793] usb 10-1: USB disconnect, device number 2 [ 2893.849864][ T29] audit: type=1107 audit(1735350193.061:1716): pid=1630 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 2895.088882][ T1649] Can't find a SQUASHFS superblock on nullb0 [ 2895.330220][ T29] audit: type=1800 audit(1735350193.781:1717): pid=1644 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.7896" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2899.405675][ T1671] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 2899.414577][ T1671] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 2899.423378][ T1671] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 2899.432409][ T1671] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 2899.446948][ T1671] geneve3: entered promiscuous mode [ 2899.452247][ T1671] geneve3: entered allmulticast mode [ 2900.570877][ T1688] Can't find a SQUASHFS superblock on nullb0 [ 2902.143687][ T1700] hub 5-0:1.0: USB hub found [ 2902.150048][ T1700] hub 5-0:1.0: 1 port detected [ 2903.048963][ T1696] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7909'. [ 2903.057942][ T1696] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7909'. [ 2903.174000][ T1710] Can't find a SQUASHFS superblock on nullb0 [ 2905.865212][ T1736] sctp: [Deprecated]: syz.2.7917 (pid 1736) Use of int in maxseg socket option. [ 2905.865212][ T1736] Use struct sctp_assoc_value instead [ 2905.971020][ T1739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2908.181617][ T1754] Can't find a SQUASHFS superblock on nullb0 [ 2908.577127][ T1755] syz_tun: entered allmulticast mode [ 2908.593014][ T1755] syz_tun: left allmulticast mode [ 2909.558153][ T1761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7925'. [ 2909.599727][ T1761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7925'. [ 2909.636920][ T1765] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7924'. [ 2909.676915][ T1765] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7924'. [ 2911.966321][ T1776] mkiss: ax0: crc mode is auto. [ 2912.271168][ T1789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2913.044794][T16083] IPVS: starting estimator thread 0... [ 2913.349814][ T1787] IPVS: using max 34 ests per chain, 81600 per kthread [ 2913.410433][ T1794] input: syz1 as /devices/virtual/input/input94 [ 2915.385239][ T1810] Process accounting resumed [ 2915.904169][ T1817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2918.713244][ T29] audit: type=1800 audit(1735350215.969:1718): pid=1831 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.7938" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 2918.872680][ T29] audit: type=1326 audit(1735350216.409:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1826 comm="syz.4.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0516785d29 code=0x7ffc0000 [ 2918.896384][ T29] audit: type=1326 audit(1735350216.409:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1826 comm="syz.4.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0516785d29 code=0x7ffc0000 [ 2918.920416][ T29] audit: type=1326 audit(1735350216.409:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1826 comm="syz.4.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0516785d29 code=0x7ffc0000 [ 2918.944271][ T29] audit: type=1326 audit(1735350216.409:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1826 comm="syz.4.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0516785d29 code=0x7ffc0000 [ 2918.968199][ T29] audit: type=1326 audit(1735350216.409:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1826 comm="syz.4.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0516785d29 code=0x7ffc0000 [ 2918.992267][ T29] audit: type=1326 audit(1735350216.409:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1826 comm="syz.4.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0516785d29 code=0x7ffc0000 [ 2919.017319][ T29] audit: type=1326 audit(1735350216.409:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1826 comm="syz.4.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0516785d29 code=0x7ffc0000 [ 2919.074079][ T29] audit: type=1326 audit(1735350216.409:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1826 comm="syz.4.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0516785d29 code=0x7ffc0000 [ 2919.097750][ T29] audit: type=1326 audit(1735350216.418:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1826 comm="syz.4.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f0516785d29 code=0x7ffc0000 [ 2919.315092][ T1839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 2919.324109][ T1839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 2919.333034][ T1839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 2919.341932][ T1839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 2919.351922][ T1839] geneve2: entered promiscuous mode [ 2919.357266][ T1839] geneve2: entered allmulticast mode [ 2919.594704][ T1841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2923.289198][T10184] Bluetooth: hci3: sending frame failed (-49) [ 2923.296810][ T1119] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 2924.587349][ T1866] syz_tun: entered allmulticast mode [ 2924.606437][ T1866] syz_tun: left allmulticast mode [ 2926.356938][ T1878] F2FS-fs (loop19): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2926.365086][ T1878] F2FS-fs (loop19): Can't find valid F2FS filesystem in 1th superblock [ 2926.373924][ T1878] F2FS-fs (loop19): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2926.381966][ T1878] F2FS-fs (loop19): Can't find valid F2FS filesystem in 2th superblock [ 2928.874933][ T1901] input: syz1 as /devices/virtual/input/input95 [ 2929.796601][ T1119] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2929.806934][ T1119] Bluetooth: hci5: Injecting HCI hardware error event [ 2929.816366][ T1119] Bluetooth: hci5: hardware error 0x00 [ 2930.679397][ T1924] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7969'. [ 2930.693959][ T1924] netlink: 'syz.8.7969': attribute type 27 has an invalid length. [ 2931.178489][ T1929] Process accounting resumed [ 2932.073814][ T1119] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2932.923828][ T1957] input: syz1 as /devices/virtual/input/input96 [ 2933.113450][ T1965] Can't find a SQUASHFS superblock on nullb0 [ 2933.521495][ T1966] Process accounting resumed [ 2933.698817][ T5898] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 2933.901924][ T5898] usb 9-1: Using ep0 maxpacket: 16 [ 2933.921946][ T5898] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2933.932493][ T5898] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2933.978738][ T5898] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2934.005838][ T5898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2934.071638][ T1975] netlink: 'syz.9.7983': attribute type 27 has an invalid length. [ 2934.099458][ T5898] usb 9-1: config 0 descriptor?? [ 2934.400623][ T5898] usb 9-1: USB disconnect, device number 4 [ 2934.430687][ T1975] bridge0: port 2(bridge_slave_1) entered disabled state [ 2934.438121][ T1975] bridge0: port 1(bridge_slave_0) entered disabled state [ 2934.530384][ T1975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2934.545392][ T1975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2934.608385][ T1975] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2934.617307][ T1975] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2934.627302][ T1975] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2934.636255][ T1975] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2934.675007][ T1975] netdevsim netdevsim9 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2934.684600][ T1975] netdevsim netdevsim9 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2934.693634][ T1975] netdevsim netdevsim9 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2934.702635][ T1975] netdevsim netdevsim9 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2934.716754][ T1975] geneve2: left promiscuous mode [ 2934.721724][ T1975] geneve2: left allmulticast mode [ 2934.733688][ T1976] sp0: Synchronizing with TNC [ 2935.010118][ T1980] netlink: 'syz.9.7987': attribute type 27 has an invalid length. [ 2938.017850][ T2002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2938.429572][ T2003] kvm: kvm [1984]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 2938.702505][ T2003] kvm: kvm [1984]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 2938.793838][ T2007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7994'. [ 2938.803127][ T2007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7994'. [ 2939.497658][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 2939.497675][ T29] audit: type=1800 audit(1735350235.725:1778): pid=2011 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.7995" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2939.525373][ C1] vkms_vblank_simulate: vblank timer overrun [ 2939.743761][ T2019] Process accounting resumed [ 2940.996803][T26279] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2941.154709][ T2030] Process accounting resumed [ 2941.545948][T26279] usb 10-1: Using ep0 maxpacket: 16 [ 2941.573566][T26279] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2941.601200][T26279] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2941.730568][T26279] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2941.740191][T26279] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2941.750579][T26279] usb 10-1: config 0 descriptor?? [ 2943.536829][ T1195] usb 10-1: USB disconnect, device number 3 [ 2947.917629][ T2053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2950.804076][ T2084] netlink: 'syz.4.8016': attribute type 27 has an invalid length. [ 2951.017648][ T2084] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2951.026841][ T2084] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2951.035935][ T2084] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2951.045024][ T2084] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2951.058171][ T2084] geneve2: left promiscuous mode [ 2951.063235][ T2084] geneve2: left allmulticast mode [ 2952.223728][ T2100] mkiss: ax0: crc mode is auto. [ 2952.547727][T10184] Bluetooth: hci6: command 0x0406 tx timeout [ 2952.554472][T10184] Bluetooth: hci2: command 0x0406 tx timeout [ 2952.594890][ T972] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2952.655286][ T1195] IPVS: starting estimator thread 0... [ 2952.802791][ T2104] IPVS: using max 30 ests per chain, 72000 per kthread [ 2952.826499][ T972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2952.836926][ T972] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2952.846084][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2952.871429][ T972] usb 3-1: config 0 descriptor?? [ 2952.887289][ T972] pwc: Askey VC010 type 2 USB webcam detected. [ 2953.157900][ T2107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2953.330191][ T972] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2953.342294][ T972] pwc: recv_control_msg error -32 req 02 val 2700 [ 2953.355313][ T972] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2953.392942][ T972] pwc: recv_control_msg error -32 req 04 val 1000 [ 2953.408499][ T972] pwc: recv_control_msg error -32 req 04 val 1300 [ 2953.418348][ T972] pwc: recv_control_msg error -32 req 04 val 1400 [ 2953.425823][ T972] pwc: recv_control_msg error -32 req 02 val 2000 [ 2953.438844][ T972] pwc: recv_control_msg error -32 req 02 val 2100 [ 2953.445963][ T972] pwc: recv_control_msg error -71 req 04 val 1500 [ 2953.458276][ T972] pwc: recv_control_msg error -71 req 02 val 2500 [ 2953.472976][ T972] pwc: recv_control_msg error -71 req 02 val 2400 [ 2953.485239][ T972] pwc: recv_control_msg error -71 req 02 val 2600 [ 2953.514530][ T972] pwc: recv_control_msg error -71 req 02 val 2900 [ 2953.536919][ T972] pwc: recv_control_msg error -71 req 02 val 2800 [ 2953.578424][ T972] pwc: recv_control_msg error -71 req 04 val 1100 [ 2953.593309][ T972] pwc: recv_control_msg error -71 req 04 val 1200 [ 2953.616303][ T972] pwc: Registered as video103. [ 2953.637874][ T972] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input97 [ 2953.886986][ T972] usb 3-1: USB disconnect, device number 9 [ 2954.289028][ T1119] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2954.299917][ T1119] Bluetooth: hci0: Injecting HCI hardware error event [ 2954.309461][ T1119] Bluetooth: hci0: hardware error 0x00 [ 2954.569262][ T29] audit: type=1800 audit(1735350249.821:1779): pid=2115 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.8025" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 2954.578376][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2954.578443][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2955.518397][ T2115] tty tty38: ldisc open failed (-12), clearing slot 37 [ 2955.869037][ T2128] netlink: 'syz.0.8029': attribute type 27 has an invalid length. [ 2955.903237][ T2128] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2955.912545][ T2128] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2955.921841][ T2128] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2955.931229][ T2128] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2955.956426][ T2128] geneve3: left promiscuous mode [ 2955.961516][ T2128] geneve3: left allmulticast mode [ 2956.708005][ T1119] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2957.314239][ T2138] sctp: [Deprecated]: syz.0.8031 (pid 2138) Use of int in maxseg socket option. [ 2957.314239][ T2138] Use struct sctp_assoc_value instead [ 2957.428671][ T2132] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2957.893756][ T29] audit: type=1107 audit(1735350253.002:1780): pid=2145 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 2959.252238][ T2162] loop2: detected capacity change from 0 to 7 [ 2959.290081][ T2162] Dev loop2: unable to read RDB block 7 [ 2959.355819][ T2162] loop2: unable to read partition table [ 2959.408937][ T2162] loop2: partition table beyond EOD, truncated [ 2959.463782][ T2162] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2959.908730][ T2167] netlink: 'syz.9.8041': attribute type 27 has an invalid length. [ 2960.863532][T16083] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2960.909827][ T1119] Bluetooth: hci2: unexpected event for opcode 0x0004 [ 2961.443479][T16083] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2961.453997][T16083] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2961.463291][T16083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2961.474518][T16083] usb 3-1: config 0 descriptor?? [ 2961.491350][T16083] pwc: Askey VC010 type 2 USB webcam detected. [ 2961.940815][T16083] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2961.976015][ T2190] Process accounting resumed [ 2962.264744][ T2193] Process accounting resumed [ 2962.562302][T16083] pwc: recv_control_msg error -32 req 02 val 2700 [ 2962.840099][T16083] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2962.847430][T16083] pwc: recv_control_msg error -32 req 04 val 1000 [ 2962.854431][T16083] pwc: recv_control_msg error -32 req 04 val 1300 [ 2962.861769][T16083] pwc: recv_control_msg error -32 req 04 val 1400 [ 2962.869223][T16083] pwc: recv_control_msg error -32 req 02 val 2000 [ 2963.043081][ T2199] sctp: [Deprecated]: syz.9.8051 (pid 2199) Use of int in maxseg socket option. [ 2963.043081][ T2199] Use struct sctp_assoc_value instead [ 2964.356959][T16083] pwc: recv_control_msg error -71 req 04 val 1500 [ 2964.434460][T16083] pwc: recv_control_msg error -71 req 02 val 2500 [ 2964.441170][T16083] pwc: recv_control_msg error -71 req 02 val 2400 [ 2964.448933][T16083] pwc: recv_control_msg error -71 req 02 val 2600 [ 2964.459546][T16083] pwc: recv_control_msg error -71 req 02 val 2900 [ 2964.469614][T16083] pwc: recv_control_msg error -71 req 02 val 2800 [ 2964.878631][T16083] pwc: recv_control_msg error -71 req 04 val 1100 [ 2964.886036][T16083] pwc: recv_control_msg error -71 req 04 val 1200 [ 2965.001636][ T2218] input: syz1 as /devices/virtual/input/input98 [ 2965.014748][T16083] pwc: Registered as video103. [ 2965.203915][ T1119] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2965.213240][ T1119] Bluetooth: hci2: Injecting HCI hardware error event [ 2965.221961][T10184] Bluetooth: hci2: hardware error 0x00 [ 2965.251365][T16083] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input99 [ 2965.987320][T16083] usb 3-1: USB disconnect, device number 10 [ 2966.639720][ T2233] input: syz1 as /devices/virtual/input/input100 [ 2967.526859][T10184] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2967.605874][ T2247] gre1: entered promiscuous mode [ 2967.610954][ T2247] gre1: entered allmulticast mode [ 2967.854758][ T2248] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2970.592243][ T2279] Process accounting resumed [ 2970.859311][ T29] audit: type=1107 audit(1735350263.740:1781): pid=2267 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 2970.877970][ T2277] fuse: Bad value for 'group_id' [ 2970.936004][ T2277] fuse: Bad value for 'group_id' [ 2972.371013][ T2301] gre1: entered promiscuous mode [ 2972.376095][ T2301] gre1: entered allmulticast mode [ 2974.348634][ T2316] netlink: 'syz.2.8079': attribute type 27 has an invalid length. [ 2974.623147][ T2316] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2974.632195][ T2316] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2974.641282][ T2316] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2974.650286][ T2316] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2974.665125][ T2316] geneve2: left promiscuous mode [ 2974.670225][ T2316] geneve2: left allmulticast mode [ 2975.412864][ T2324] syz.2.8082 (2324): drop_caches: 0 [ 2975.780403][ T2332] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8084'. [ 2976.664365][ T5898] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2976.986998][ T5898] usb 10-1: Using ep0 maxpacket: 16 [ 2977.241493][ T5898] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2977.251835][ T5898] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2977.266916][ T5898] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2977.301908][ T5898] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2977.333884][ T5898] usb 10-1: config 0 descriptor?? [ 2977.394088][ T5898] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2978.244368][ T5898] usb 10-1: USB disconnect, device number 4 [ 2978.973706][ T29] audit: type=1800 audit(1735350272.215:1782): pid=2357 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.8090" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 2980.312211][ T2378] hub 5-0:1.0: USB hub found [ 2980.317735][ T2378] hub 5-0:1.0: 1 port detected [ 2981.893780][ T2397] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8098'. [ 2981.909675][ T2397] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8098'. [ 2982.794537][ T2408] Process accounting resumed [ 2984.731647][ T2411] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2988.627926][ T2472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8119'. [ 2989.763908][ T5898] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 2990.048939][ T5898] usb 10-1: Using ep0 maxpacket: 16 [ 2990.567351][ T5898] usb 10-1: device descriptor read/all, error -71 [ 2991.831162][T10184] Bluetooth: hci6: unexpected event for opcode 0x0004 [ 2992.343594][ T2508] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8127'. [ 2992.358478][ T2508] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8127'. [ 2993.362275][ T29] audit: type=1107 audit(1735350285.544:1783): pid=2514 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 2993.674207][ T1230] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2994.616383][ T1230] usb 3-1: Using ep0 maxpacket: 8 [ 2994.628009][ T1230] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2994.636466][ T1230] usb 3-1: config 179 has no interface number 0 [ 2994.642964][ T1230] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2994.654172][ T1230] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2994.665600][ T1230] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2994.836547][ T2538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2994.913036][ T1230] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2994.924827][ T1230] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2994.938559][ T1230] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2994.947931][ T1230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2996.420653][ T1119] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 2996.429420][ T1119] Bluetooth: hci6: Injecting HCI hardware error event [ 2996.431962][ T2512] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2996.439641][ T1119] Bluetooth: hci6: hardware error 0x00 [ 2996.603005][ T1230] usb 3-1: can't set config #179, error -71 [ 2996.616431][ T1230] usb 3-1: USB disconnect, device number 11 [ 2998.740609][ T1119] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 3001.244787][ T2584] mkiss: ax0: crc mode is auto. [ 3002.245436][ T2601] Process accounting resumed [ 3003.237955][ T5898] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 3003.509561][ T5898] usb 9-1: Using ep0 maxpacket: 16 [ 3003.519763][ T5898] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3003.531016][ T5898] usb 9-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 3003.542342][ T5898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3003.568901][ T5898] usb 9-1: config 0 descriptor?? [ 3003.845055][ T2610] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3004.877111][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 3004.898191][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 3004.905627][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 3004.912953][ T5898] usbhid 9-1:0.0: can't add hid device: -32 [ 3004.919960][ T5898] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 3004.984439][ T972] usb 9-1: USB disconnect, device number 5 [ 3016.027539][ T972] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 3017.101525][ T2734] Process accounting resumed [ 3017.466140][ T972] usb 10-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 3017.475880][ T972] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3017.484084][ T972] usb 10-1: Product: syz [ 3017.488348][ T972] usb 10-1: Manufacturer: syz [ 3017.493129][ T972] usb 10-1: SerialNumber: syz [ 3017.549725][ T1230] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 3017.552971][ T972] usb 10-1: config 0 descriptor?? [ 3017.908504][ T1230] usb 3-1: Using ep0 maxpacket: 16 [ 3017.916715][ T1230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3017.927610][ T1230] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 3017.937288][ T1230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3018.264508][ T2752] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3018.324036][ T1230] usb 3-1: config 0 descriptor?? [ 3018.979171][ T1230] usb 3-1: can't set config #0, error -71 [ 3018.996035][ T1230] usb 3-1: USB disconnect, device number 12 [ 3020.239540][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.245854][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.314081][ T2769] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3021.451218][ T972] usb 10-1: f81604_read: reg: 100f failed: -EPROTO [ 3021.464544][ T972] usb 10-1: f81604_read: reg: 200f failed: -EPROTO [ 3021.487122][ T972] usb 10-1: USB disconnect, device number 7 [ 3022.226076][ T972] usb 10-1: f81604_read: reg: 100f failed: -ENODEV [ 3024.387191][ T2820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3024.409612][ T972] usb 10-1: f81604_read: reg: 200f failed: -ENODEV [ 3024.982593][ T29] audit: type=1800 audit(1735350315.767:1784): pid=2828 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.8195" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 3025.618615][ T2825] Process accounting resumed [ 3026.260598][ T2836] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3027.802713][ T29] audit: type=1107 audit(1735350318.414:1785): pid=2833 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 3029.823013][ T2860] mkiss: ax0: crc mode is auto. [ 3029.970087][ T2861] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3031.728698][ T2878] syz_tun: entered allmulticast mode [ 3031.735170][ T2878] syz_tun: left allmulticast mode [ 3032.419128][ T2884] sctp: [Deprecated]: syz.9.8207 (pid 2884) Use of int in maxseg socket option. [ 3032.419128][ T2884] Use struct sctp_assoc_value instead [ 3034.773626][ T29] audit: type=1107 audit(1735350324.345:1786): pid=2894 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 3034.948010][ T2905] syz_tun: entered allmulticast mode [ 3034.954476][ T2905] syz_tun: left allmulticast mode [ 3035.560953][ T1230] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 3035.740884][ T1230] usb 9-1: Using ep0 maxpacket: 16 [ 3035.765310][ T1230] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3035.850372][ T1230] usb 9-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 3035.869125][ T1230] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3035.909048][ T1230] usb 9-1: Product: syz [ 3035.933166][ T1230] usb 9-1: Manufacturer: syz [ 3035.954818][ T1230] usb 9-1: SerialNumber: syz [ 3035.989569][ T1230] usb 9-1: config 0 descriptor?? [ 3036.011051][ T1230] gspca_main: etoms-2.14.0 probing 102c:6151 [ 3036.131380][ T2914] input: syz1 as /devices/virtual/input/input101 [ 3037.124088][ T1230] usb 9-1: USB disconnect, device number 6 [ 3037.665108][ T2925] fuse: Unknown parameter 'group_i00000000000000000000' [ 3038.801578][ T2941] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8223'. [ 3040.961781][ T2951] Process accounting resumed [ 3041.137682][ T2960] Process accounting resumed [ 3045.329896][ T1195] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 3045.441053][ T3004] Process accounting resumed [ 3045.523044][ T1195] usb 3-1: Using ep0 maxpacket: 16 [ 3045.580891][ T1195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3045.687784][ T1195] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 3045.697376][ T1195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3045.891664][ T1195] usb 3-1: config 0 descriptor?? [ 3049.444828][ T1195] usbhid 3-1:0.0: can't add hid device: -71 [ 3049.452675][ T1195] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3049.472560][ T1195] usb 3-1: USB disconnect, device number 13 [ 3049.529901][ T3034] input: syz1 as /devices/virtual/input/input102 [ 3049.874970][ T3042] netlink: 48 bytes leftover after parsing attributes in process `syz.9.8252'. [ 3049.875043][ T3042] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8252'. [ 3050.233481][ T3044] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8251'. [ 3050.233546][ T3044] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8251'. [ 3051.746304][ T3053] Process accounting resumed [ 3053.267975][ T3066] sctp: [Deprecated]: syz.0.8257 (pid 3066) Use of int in maxseg socket option. [ 3053.267975][ T3066] Use struct sctp_assoc_value instead [ 3053.385818][ T3067] netlink: 80 bytes leftover after parsing attributes in process `syz.9.8258'. [ 3053.429405][ T1195] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 3053.791223][ T3065] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8260'. [ 3053.801311][ T3065] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8260'. [ 3053.959076][ T3072] netlink: 'syz.9.8262': attribute type 27 has an invalid length. [ 3054.000866][ T3072] gre1: left promiscuous mode [ 3054.005635][ T3072] gre1: left allmulticast mode [ 3054.294137][ T3075] input: syz1 as /devices/virtual/input/input103 [ 3054.317628][ T1195] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 3054.319743][ T3077] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3054.331236][ T1195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3054.349347][ T1195] usb 3-1: Product: syz [ 3054.354165][ T1195] usb 3-1: Manufacturer: syz [ 3054.358861][ T1195] usb 3-1: SerialNumber: syz [ 3054.417921][ T1195] usb 3-1: config 0 descriptor?? [ 3054.920231][ T3082] sctp: [Deprecated]: syz.0.8266 (pid 3082) Use of int in maxseg socket option. [ 3054.920231][ T3082] Use struct sctp_assoc_value instead [ 3054.996393][ T3081] netlink: 48 bytes leftover after parsing attributes in process `syz.9.8265'. [ 3055.005592][ T3081] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8265'. [ 3055.994869][T26279] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 3056.339222][T26279] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3056.351247][T26279] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3056.380708][T26279] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3056.444018][ T3099] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8270'. [ 3056.453319][ T3099] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8270'. [ 3057.219818][T26279] usb 9-1: config 0 descriptor?? [ 3057.263692][ T3101] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8271'. [ 3057.274418][ T3101] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8271'. [ 3057.698794][T26279] pwc: Askey VC010 type 2 USB webcam detected. [ 3057.779215][ T1195] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 3057.817193][ T1195] usb 3-1: USB disconnect, device number 14 [ 3058.038910][ T3108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8273'. [ 3058.072066][ T1195] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 3058.087379][T26279] pwc: recv_control_msg error -32 req 02 val 2b00 [ 3058.344135][T26279] pwc: recv_control_msg error -32 req 02 val 2700 [ 3058.351374][T26279] pwc: recv_control_msg error -32 req 02 val 2c00 [ 3058.358691][T26279] pwc: recv_control_msg error -32 req 04 val 1000 [ 3058.365864][T26279] pwc: recv_control_msg error -32 req 04 val 1300 [ 3058.373362][T26279] pwc: recv_control_msg error -32 req 04 val 1400 [ 3058.396534][T26279] pwc: recv_control_msg error -32 req 02 val 2000 [ 3058.752671][ T3116] netlink: 'syz.2.8274': attribute type 27 has an invalid length. [ 3058.844969][ T3119] input: syz1 as /devices/virtual/input/input104 [ 3058.860494][T26279] pwc: recv_control_msg error -71 req 04 val 1500 [ 3058.862391][ T1195] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 3058.889511][T26279] pwc: recv_control_msg error -71 req 02 val 2500 [ 3058.910819][T26279] pwc: recv_control_msg error -71 req 02 val 2400 [ 3058.944450][T26279] pwc: recv_control_msg error -71 req 02 val 2600 [ 3058.951313][T26279] pwc: recv_control_msg error -71 req 02 val 2900 [ 3059.174355][T26279] pwc: recv_control_msg error -71 req 02 val 2800 [ 3059.217373][T26279] pwc: recv_control_msg error -71 req 04 val 1100 [ 3059.399778][T26279] pwc: recv_control_msg error -71 req 04 val 1200 [ 3059.641230][ T29] audit: type=1800 audit(1735350348.010:1787): pid=3126 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.8276" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 3059.693309][T26279] pwc: Registered as video103. [ 3059.758795][T26279] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input105 [ 3059.816154][T26279] usb 9-1: USB disconnect, device number 7 [ 3059.858485][ T1195] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 3060.313375][ T1195] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 3060.323153][ T1195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3060.335954][ T1195] usb 3-1: Product: syz [ 3060.489256][ T1195] usb 3-1: Manufacturer: syz [ 3060.497323][ T1195] usb 3-1: SerialNumber: syz [ 3060.507813][ T1195] usb 3-1: config 0 descriptor?? [ 3063.749827][ T1195] usb 3-1: f81604_read: reg: 105 failed: -EPROTO [ 3063.764321][ T1195] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 3063.782409][ T1195] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 3063.905090][ T3158] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8285'. [ 3064.355204][ T3168] input: syz1 as /devices/virtual/input/input106 [ 3064.545527][ T1195] usb 3-1: USB disconnect, device number 15 [ 3065.921282][ T3184] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3066.780111][ T3186] Device name cannot be null; rc = [-22] [ 3069.336711][ T3203] Process accounting resumed [ 3069.343692][ T3204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8296'. [ 3069.394499][ T3204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8296'. [ 3069.781682][ T3208] input: syz1 as /devices/virtual/input/input107 [ 3070.430086][ T29] audit: type=1800 audit(1735350358.122:1788): pid=3211 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.8298" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 3070.639505][ T3218] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3070.673011][ T3219] Process accounting resumed [ 3070.675515][ T3218] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3070.821072][ T3218] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3071.100504][ T3218] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 3071.255620][ T3226] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8294'. [ 3071.265023][ T3226] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8294'. [ 3071.664441][ T3228] Process accounting resumed [ 3072.020666][ T3231] netlink: 92 bytes leftover after parsing attributes in process `syz.4.8306'. [ 3076.742300][ T3248] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3077.602926][ T29] audit: type=1800 audit(1735350364.978:1789): pid=3251 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.8312" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 3077.639264][ T3257] input: syz1 as /devices/virtual/input/input108 [ 3077.665243][ T3259] random: crng reseeded on system resumption [ 3077.690433][T23793] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 3078.247688][T23793] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3078.258283][T23793] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3078.267458][T23793] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3078.317859][T23793] usb 10-1: config 0 descriptor?? [ 3078.337342][T23793] pwc: Askey VC010 type 2 USB webcam detected. [ 3079.245988][T23793] pwc: recv_control_msg error -32 req 02 val 2b00 [ 3079.263118][T23793] pwc: recv_control_msg error -32 req 02 val 2700 [ 3079.317831][T23793] pwc: recv_control_msg error -32 req 02 val 2c00 [ 3079.336578][T23793] pwc: recv_control_msg error -32 req 04 val 1000 [ 3079.549561][T23793] pwc: recv_control_msg error -32 req 04 val 1300 [ 3079.557142][T23793] pwc: recv_control_msg error -32 req 04 val 1400 [ 3079.586305][T23793] pwc: recv_control_msg error -32 req 02 val 2000 [ 3080.418169][T23793] pwc: recv_control_msg error -71 req 04 val 1500 [ 3080.429557][T23793] pwc: recv_control_msg error -71 req 02 val 2500 [ 3080.647377][T23793] pwc: recv_control_msg error -71 req 02 val 2400 [ 3080.673597][T23793] pwc: recv_control_msg error -71 req 02 val 2600 [ 3080.684162][T23793] pwc: recv_control_msg error -71 req 02 val 2900 [ 3080.695067][T23793] pwc: recv_control_msg error -71 req 02 val 2800 [ 3080.705517][T23793] pwc: recv_control_msg error -71 req 04 val 1100 [ 3080.712617][T23793] pwc: recv_control_msg error -71 req 04 val 1200 [ 3080.725758][T23793] pwc: Registered as video103. [ 3080.731837][T23793] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input109 [ 3081.849905][T23793] usb 10-1: USB disconnect, device number 8 [ 3083.222503][ T29] audit: type=1800 audit(1735350370.254:1790): pid=3303 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.8324" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 3084.291156][T23793] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 3084.407956][ T3311] sctp: [Deprecated]: syz.2.8327 (pid 3311) Use of int in maxseg socket option. [ 3084.407956][ T3311] Use struct sctp_assoc_value instead [ 3085.504966][T23793] usb 10-1: Using ep0 maxpacket: 16 [ 3085.520678][T23793] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3085.521985][ T3318] sctp: [Deprecated]: syz.4.8326 (pid 3318) Use of int in maxseg socket option. [ 3085.521985][ T3318] Use struct sctp_assoc_value instead [ 3085.903584][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3085.921139][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3086.218135][T23793] usb 10-1: string descriptor 0 read error: -71 [ 3086.263750][ T3315] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8328'. [ 3086.272768][ T3315] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8328'. [ 3086.285743][T23793] usb 10-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 3086.305644][T23793] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3086.322175][T23793] usb 10-1: config 0 descriptor?? [ 3086.327944][T23793] usb 10-1: can't set config #0, error -71 [ 3086.339288][T23793] usb 10-1: USB disconnect, device number 9 [ 3086.513085][ T3323] sctp: [Deprecated]: syz.0.8329 (pid 3323) Use of int in maxseg socket option. [ 3086.513085][ T3323] Use struct sctp_assoc_value instead [ 3086.899524][ T3325] Process accounting resumed [ 3088.854648][ T3342] ALSA: mixer_oss: invalid OSS volume '' [ 3089.346407][ T29] audit: type=1800 audit(1735350375.464:1791): pid=3341 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.8335" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 3092.466877][ T3370] netlink: 80 bytes leftover after parsing attributes in process `syz.9.8337'. [ 3094.799235][ T3398] netlink: 64 bytes leftover after parsing attributes in process `syz.9.8348'. [ 3096.034347][ T3412] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8351'. [ 3099.570406][ T1230] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 3099.794407][ T1230] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 3099.840729][ T1230] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3099.855735][ T1230] usb 9-1: Product: syz [ 3099.861749][ T1230] usb 9-1: Manufacturer: syz [ 3099.873409][ T1230] usb 9-1: SerialNumber: syz [ 3100.900622][ T1230] usb 9-1: config 0 descriptor?? [ 3100.926637][ T3440] Process accounting resumed [ 3101.664359][ T3452] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8362'. [ 3101.674355][ T3452] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8362'. [ 3102.226057][ T3458] input: syz1 as /devices/virtual/input/input110 [ 3104.943881][ T1230] usb 9-1: f81604_read: reg: 100e failed: -EPROTO [ 3104.954745][ T1230] usb 9-1: f81604_read: reg: 200f failed: -EPROTO [ 3104.978090][ T1230] usb 9-1: USB disconnect, device number 8 [ 3105.040383][ T1230] usb 9-1: f81604_read: reg: 100f failed: -ENODEV [ 3105.159059][ T1230] usb 9-1: f81604_read: reg: 200f failed: -ENODEV [ 3105.948915][ T3481] netlink: 'syz.0.8370': attribute type 27 has an invalid length. [ 3109.341471][ T3515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8379'. [ 3109.420310][ T3515] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8379'. [ 3111.267420][ T29] audit: type=1107 audit(1735350396.483:1792): pid=3528 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 3112.341422][ T3543] Can't find a SQUASHFS superblock on nullb0 [ 3113.734460][ T3553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3114.255901][ T3563] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3115.749984][ T1230] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 3116.101755][ T1230] usb 10-1: Using ep0 maxpacket: 16 [ 3116.110350][ T1230] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3116.120998][ T1230] usb 10-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 3116.130758][ T1230] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3116.143014][ T1230] usb 10-1: config 0 descriptor?? [ 3116.583849][ T29] audit: type=1800 audit(1735350401.459:1793): pid=3584 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.8397" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 3116.605431][ C1] vkms_vblank_simulate: vblank timer overrun [ 3116.614215][ T1230] lenovo 0003:17EF:60EE.0011: unknown main item tag 0x0 [ 3116.622371][ T1230] lenovo 0003:17EF:60EE.0011: unknown main item tag 0x0 [ 3116.645698][ T1230] lenovo 0003:17EF:60EE.0011: unknown main item tag 0x0 [ 3116.685288][ T1230] lenovo 0003:17EF:60EE.0011: unknown main item tag 0x0 [ 3116.716035][ T1230] lenovo 0003:17EF:60EE.0011: unknown main item tag 0x0 [ 3116.754362][ T1230] lenovo 0003:17EF:60EE.0011: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.9-1/input0 [ 3117.128807][ T1230] lenovo 0003:17EF:60EE.0011: Failed to switch middle button: -71 [ 3117.150586][ T1230] lenovo 0003:17EF:60EE.0011: Fn-lock setting failed: -71 [ 3117.182790][ T1230] lenovo 0003:17EF:60EE.0011: Sensitivity setting failed: -71 [ 3117.196126][ T1230] usb 10-1: USB disconnect, device number 10 [ 3118.711417][ T3595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3118.862013][ T1195] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 3118.964680][ T3602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8404'. [ 3119.019288][ T3602] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8404'. [ 3119.041157][ T3603] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 3119.058120][ T1195] usb 9-1: Using ep0 maxpacket: 8 [ 3119.341329][ T1195] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 3119.349762][ T1195] usb 9-1: config 179 has no interface number 0 [ 3119.356490][ T1195] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 3119.367878][ T1195] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 3119.379448][ T1195] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 3119.389885][ T1195] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3119.576814][ T1195] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 3119.615353][ T1195] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3119.626613][ T3593] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 3120.905524][ T3593] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 3120.912079][ T3593] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 3120.932333][ T3593] vhci_hcd vhci_hcd.0: Device attached [ 3120.949025][ T3617] vhci_hcd: connection closed [ 3120.949595][ T2249] vhci_hcd: stop threads [ 3120.959817][ T2249] vhci_hcd: release socket [ 3120.964371][ T2249] vhci_hcd: disconnect device [ 3121.367193][ T972] usb 9-1: USB disconnect, device number 9 [ 3121.794201][ T3625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3122.605920][ T1230] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 3122.847714][ T1230] usb 10-1: Using ep0 maxpacket: 16 [ 3122.867198][ T1230] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3122.880973][ T1230] usb 10-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 3122.890445][ T1230] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3122.898541][ T1230] usb 10-1: Product: syz [ 3123.069627][ T1230] usb 10-1: Manufacturer: syz [ 3123.088895][ T1230] usb 10-1: SerialNumber: syz [ 3123.107981][ T1230] usb 10-1: config 0 descriptor?? [ 3123.182753][ T1230] gspca_main: etoms-2.14.0 probing 102c:6151 [ 3123.489172][ T3642] Process accounting resumed [ 3123.956661][ T3646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3124.170770][ T3650] Can't find a SQUASHFS superblock on nullb0 [ 3124.310732][ T1230] usb 10-1: USB disconnect, device number 11 [ 3125.525620][ T3663] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8420'. [ 3125.534853][ T3663] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8420'. [ 3127.857342][ T29] audit: type=1800 audit(1735350411.898:1794): pid=3680 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.8423" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 3129.252704][ T3690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3129.629732][ T29] audit: type=1800 audit(1735350413.600:1795): pid=3700 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.8431" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 3134.514839][ T3731] tipc: Enabling of bearer rejected, failed to enable media [ 3134.833022][ T3739] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8440'. [ 3134.842502][ T3739] netlink: 44 bytes leftover after parsing attributes in process `syz.8.8440'. [ 3136.588607][ T3756] Process accounting resumed [ 3137.526664][ T3761] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8446'. [ 3137.539860][ T3761] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8446'. [ 3139.975508][ T5898] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 3140.303204][ T3784] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8451'. [ 3140.313553][ T3784] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8451'. [ 3140.876236][ T3789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3141.107107][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 3141.138523][ T5898] usb 3-1: device descriptor read/all, error -71 [ 3143.111404][ T3803] Process accounting resumed [ 3144.723017][ T3818] Process accounting resumed [ 3148.762960][ T3843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8464'. [ 3148.825771][ T3843] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8464'. [ 3151.705348][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3151.711741][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3153.104262][ T3881] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8479'. [ 3153.120049][ T3881] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8479'. [ 3153.191225][ T29] audit: type=1804 audit(1735350435.704:1796): pid=3884 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.8480" name="/newroot/133/file1" dev="fuse" ino=1 res=1 errno=0 [ 3153.266156][ T29] audit: type=1800 audit(1735350435.704:1797): pid=3884 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.8480" name="/" dev="fuse" ino=1 res=0 errno=0 [ 3153.529969][ T3890] /dev/nullb0: Can't open blockdev [ 3155.134700][ T3900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3156.289764][ T3912] /dev/nullb0: Can't open blockdev [ 3159.174354][ T29] audit: type=1804 audit(1735350441.298:1798): pid=3927 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.8491" name="/newroot/127/file1" dev="fuse" ino=1 res=1 errno=0 [ 3159.336351][ T29] audit: type=1800 audit(1735350441.457:1799): pid=3927 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.8491" name="/" dev="fuse" ino=1 res=0 errno=0 [ 3160.766926][ T3948] netlink: 48 bytes leftover after parsing attributes in process `syz.9.8498'. [ 3160.776372][ T3948] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8498'. [ 3162.237897][ T3967] Can't find a SQUASHFS superblock on nullb0 [ 3164.455856][ T3979] IPv6: NLM_F_CREATE should be specified when creating new route [ 3165.132206][ T3991] tipc: Enabling of bearer rejected, failed to enable media [ 3166.862321][ T4004] Can't find a SQUASHFS superblock on nullb0 [ 3167.952852][ T4018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3168.278893][ T4017] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8515'. [ 3168.288150][ T4017] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8515'. [ 3168.715809][ T4024] mkiss: ax0: crc mode is auto. [ 3169.174040][ T4027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3172.654490][ T4046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3174.420300][ T4053] Process accounting resumed [ 3175.613180][ T4059] Device name cannot be null; rc = [-22] [ 3176.638235][ T4061] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8530'. [ 3176.648407][ T4061] netlink: 'syz.9.8530': attribute type 27 has an invalid length. [ 3176.689209][ T4066] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3178.071691][ T29] audit: type=1804 audit(1735350458.977:1800): pid=4078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.8535" name="/newroot/146/file1" dev="fuse" ino=1 res=1 errno=0 [ 3178.114368][ T4079] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8532'. [ 3178.124016][ T4079] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8532'. [ 3178.213940][ T4081] loop2: detected capacity change from 0 to 7 [ 3178.226598][ T4081] Dev loop2: unable to read RDB block 7 [ 3178.244000][ T4081] loop2: unable to read partition table [ 3178.262247][ T29] audit: type=1800 audit(1735350459.154:1801): pid=4078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.8535" name="/" dev="fuse" ino=1 res=0 errno=0 [ 3178.282473][ T4081] loop2: partition table beyond EOD, truncated [ 3178.339346][ T4081] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3179.150642][ T4092] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8540'. [ 3179.159692][ T4092] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8540'. [ 3180.236207][ T4099] Process accounting resumed [ 3182.682110][ T4117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3183.898612][ T4125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3184.487652][T10184] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3184.543034][T10184] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3184.574920][T10184] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3184.631363][T10184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3184.652601][T10184] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3184.671617][T10184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3185.083762][ T4141] /dev/nullb0: Can't open blockdev [ 3185.472076][ T4129] chnl_net:caif_netlink_parms(): no params data found [ 3185.635886][ T4147] Process accounting resumed [ 3185.991149][ T4155] overlayfs: failed to resolve './file0': -2 [ 3186.048832][ T4129] bridge0: port 1(bridge_slave_0) entered blocking state [ 3186.065522][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 3186.085387][ T4129] bridge_slave_0: entered allmulticast mode [ 3186.205515][ T4129] bridge_slave_0: entered promiscuous mode [ 3186.222677][ T4129] bridge0: port 2(bridge_slave_1) entered blocking state [ 3186.233632][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 3186.240933][ T4129] bridge_slave_1: entered allmulticast mode [ 3186.252804][ T4129] bridge_slave_1: entered promiscuous mode [ 3186.283270][ T4129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3186.900125][ T4129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3186.962597][ T4129] team0: Port device team_slave_0 added [ 3187.002059][T10184] Bluetooth: hci3: command tx timeout [ 3187.040774][ T4129] team0: Port device team_slave_1 added [ 3187.324747][ T29] audit: type=1800 audit(1735350467.639:1802): pid=4166 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.8557" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 3187.412376][ T4129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3188.380678][ T4129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3188.406693][ C1] vkms_vblank_simulate: vblank timer overrun [ 3188.761994][ T4129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3189.149388][ T4171] syz_tun: entered allmulticast mode [ 3189.155175][ T4173] syz_tun: left allmulticast mode [ 3189.215839][T10184] Bluetooth: hci3: command tx timeout [ 3189.251581][ T4129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3189.315948][ T4129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3189.397081][ T4129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3190.227264][ T4185] syz_tun: entered allmulticast mode [ 3190.232791][ T4186] syz_tun: left allmulticast mode [ 3191.028404][ T4129] hsr_slave_0: entered promiscuous mode [ 3191.049061][ T4129] hsr_slave_1: entered promiscuous mode [ 3191.061499][ T4129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3191.070455][ T4129] Cannot create hsr debugfs directory [ 3191.439118][T10184] Bluetooth: hci3: command tx timeout [ 3191.444648][ T29] audit: type=1800 audit(1735350471.436:1803): pid=4197 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.8565" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 3191.659045][ T4200] Process accounting resumed [ 3192.922771][ T4214] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8569'. [ 3192.932085][ T4214] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8569'. [ 3193.725187][T10184] Bluetooth: hci3: command tx timeout [ 3193.870479][ T4129] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3193.933226][ T4129] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3193.972879][ T1119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3194.525972][ T1119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3194.535001][ T1119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3194.542797][ T1119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3194.550367][ T1119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3194.559748][ T1119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3194.579966][ T4129] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3194.587615][ T29] audit: type=1800 audit(1735350474.027:1804): pid=4228 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.8572" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 3194.612764][ T4129] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3195.097397][ T4129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3195.155758][ T4129] 8021q: adding VLAN 0 to HW filter on device team0 [ 3195.166436][T29795] bridge0: port 1(bridge_slave_0) entered blocking state [ 3195.173524][T29795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3195.195997][T15353] bridge0: port 2(bridge_slave_1) entered blocking state [ 3195.203104][T15353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3195.362762][ T4129] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3195.373214][ T4129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3195.390496][ T4222] chnl_net:caif_netlink_parms(): no params data found [ 3196.720917][ T1119] Bluetooth: hci4: command tx timeout [ 3197.090431][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state [ 3197.103525][ T4222] bridge0: port 1(bridge_slave_0) entered disabled state [ 3197.112278][ T4222] bridge_slave_0: entered allmulticast mode [ 3197.125361][ T4222] bridge_slave_0: entered promiscuous mode [ 3197.779374][ T4222] bridge0: port 2(bridge_slave_1) entered blocking state [ 3197.799425][ T4222] bridge0: port 2(bridge_slave_1) entered disabled state [ 3197.806755][ T4222] bridge_slave_1: entered allmulticast mode [ 3197.821649][ T4222] bridge_slave_1: entered promiscuous mode [ 3197.838359][ T4129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3197.875573][ T4129] veth0_vlan: entered promiscuous mode [ 3197.885965][ T4129] veth1_vlan: entered promiscuous mode [ 3197.906313][ T4129] veth0_macvtap: entered promiscuous mode [ 3197.916643][ T4129] veth1_macvtap: entered promiscuous mode [ 3197.968346][ T4222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3197.995161][ T4222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3198.321066][ T5898] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 3198.547048][ T4129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3198.567403][ T4129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3198.578749][ T4129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3198.610479][ T4222] team0: Port device team_slave_0 added [ 3198.632837][ T4222] team0: Port device team_slave_1 added [ 3198.687769][ T5898] usb 10-1: Using ep0 maxpacket: 32 [ 3198.694759][ T5898] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 3198.704887][ T4222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3198.715088][ T5898] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3198.729717][ T4222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3198.794087][ T5898] usb 10-1: config 0 descriptor?? [ 3198.829268][ T4222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3198.991074][ T1119] Bluetooth: hci4: command tx timeout [ 3199.425248][ T5898] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 3199.454046][ T4222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3199.462377][ T4222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3199.544841][ T4222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3199.565762][ T4129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3199.585016][ T4129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3199.731899][ T4280] Process accounting resumed [ 3199.779921][ T4129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3200.107437][ T4129] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3200.134116][ T4129] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3200.160772][ T4129] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3200.180508][ T4129] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3200.227479][ T4222] hsr_slave_0: entered promiscuous mode [ 3200.246249][ T4222] hsr_slave_1: entered promiscuous mode [ 3200.265764][ T4222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3200.276329][ T4222] Cannot create hsr debugfs directory [ 3200.515548][ T5898] gspca_vc032x: reg_w err -71 [ 3200.520371][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 3200.527257][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 3200.532598][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 3200.547986][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 3200.553385][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 3200.560805][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 3200.567488][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 3200.738963][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 3200.744915][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 3200.750521][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 3200.755876][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 3200.761316][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 3200.766672][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 3200.772328][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 3200.777852][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 3200.783492][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 3200.789044][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 3200.794483][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 3200.799873][ T5898] gspca_vc032x: Unknown sensor... [ 3200.805087][ T5898] vc032x 10-1:0.0: probe with driver vc032x failed with error -22 [ 3200.829773][ T5898] usb 10-1: USB disconnect, device number 12 [ 3201.166987][ T1119] Bluetooth: hci4: command tx timeout [ 3201.244013][ T1894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3201.272055][ T1894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3201.508749][ T3965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3201.517354][ T3965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3202.715970][ T4303] input: syz1 as /devices/virtual/input/input112 [ 3203.356630][ T2249] bridge_slave_1: left allmulticast mode [ 3203.362795][ T2249] bridge_slave_1: left promiscuous mode [ 3203.368590][ T2249] bridge0: port 2(bridge_slave_1) entered disabled state [ 3203.398644][ T2249] bridge_slave_0: left allmulticast mode [ 3203.415599][ T2249] bridge_slave_0: left promiscuous mode [ 3203.426069][ T1119] Bluetooth: hci4: command tx timeout [ 3203.443608][ T2249] bridge0: port 1(bridge_slave_0) entered disabled state [ 3205.337267][ T2249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3205.361797][ T2249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3205.519049][ T2249] bond0 (unregistering): Released all slaves [ 3206.558081][ T4322] syz_tun: entered allmulticast mode [ 3206.563752][ T4323] syz_tun: left allmulticast mode [ 3206.697467][ T4326] Process accounting resumed [ 3208.378761][ T2249] hsr_slave_0: left promiscuous mode [ 3208.402741][ T2249] hsr_slave_1: left promiscuous mode [ 3208.419240][ T2249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3208.445647][ T2249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3208.608779][ T4350] Can't find a SQUASHFS superblock on nullb0 [ 3209.304677][ T4354] Device name cannot be null; rc = [-22] [ 3210.885213][ T4362] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3213.941534][ T2249] team0 (unregistering): Port device team_slave_1 removed [ 3214.795760][ T2249] team0 (unregistering): Port device team_slave_0 removed [ 3217.325928][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3217.332468][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3219.669895][ T4421] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 3219.678348][ T4421] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 3222.670793][ T4440] input: syz1 as /devices/virtual/input/input113 [ 3222.679640][ T4222] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3223.049476][ T4222] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3223.160083][ T4222] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3223.266389][ T4222] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3223.659345][ T4222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3223.676410][ T4222] 8021q: adding VLAN 0 to HW filter on device team0 [ 3223.701821][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 3223.709019][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3223.965408][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 3223.973692][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3224.127020][ T4222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3224.295785][ T2249] IPVS: stop unused estimator thread 0... [ 3226.206050][ T4222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3226.380069][ T4483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3226.387326][ T4483] IPv6: NLM_F_CREATE should be set when creating new route [ 3226.646039][ T4222] veth0_vlan: entered promiscuous mode [ 3226.656075][ T4222] veth1_vlan: entered promiscuous mode [ 3227.344145][ T4222] veth0_macvtap: entered promiscuous mode [ 3227.354837][ T4222] veth1_macvtap: entered promiscuous mode [ 3227.393559][ T4222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3227.416832][ T4222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3227.771400][ T4222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3227.782086][ T4222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3227.793444][ T4222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3228.369933][ T4222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3228.381225][ T4222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3228.391152][ T4222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3228.401567][ T4222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3228.412455][ T4222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3228.422380][ T4222] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3228.431428][ T4222] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3228.440388][ T4222] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3228.449107][ T4222] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3228.905289][ T4505] input: syz1 as /devices/virtual/input/input114 [ 3229.821032][T15353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3229.842356][T15353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3229.982974][T15353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3229.991560][ T2249] bridge_slave_1: left allmulticast mode [ 3230.006864][ T2249] bridge_slave_1: left promiscuous mode [ 3230.014866][T15353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3230.031448][ T2249] bridge0: port 2(bridge_slave_1) entered disabled state [ 3230.051558][ T2249] bridge_slave_0: left allmulticast mode [ 3230.065443][ T2249] bridge_slave_0: left promiscuous mode [ 3230.075439][ T2249] bridge0: port 1(bridge_slave_0) entered disabled state [ 3230.893457][ T4515] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 3230.901701][ T4515] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 3232.320995][ T4527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8647'. [ 3234.173220][ T2249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3234.187829][ T2249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3234.200331][ T2249] bond0 (unregistering): Released all slaves [ 3234.692764][ T4526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3235.926349][ T4566] netlink: 'syz.8.8654': attribute type 27 has an invalid length. [ 3236.117441][ T4563] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8654'. [ 3236.293292][ T4566] gre1: left promiscuous mode [ 3236.301076][ T4566] gre1: left allmulticast mode [ 3238.798111][ T2249] hsr_slave_0: left promiscuous mode [ 3238.799129][ T4592] netlink: 80 bytes leftover after parsing attributes in process `syz.9.8662'. [ 3239.035229][ T2249] hsr_slave_1: left promiscuous mode [ 3239.169955][ T2249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3239.173447][ T2249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3239.749468][ T4599] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8664'. [ 3241.759293][ T1230] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 3241.941350][ T1230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3241.951687][ T1230] usb 2-1: config 0 has no interfaces? [ 3241.957209][ T1230] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3241.970750][ T1230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3241.981697][ T1230] usb 2-1: config 0 descriptor?? [ 3242.053128][ T2249] team0 (unregistering): Port device team_slave_1 removed [ 3242.206314][ T2249] team0 (unregistering): Port device team_slave_0 removed [ 3242.322083][ T4617] program syz.8.8670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3244.098938][ T4626] tipc: Enabling of bearer rejected, failed to enable media [ 3244.244072][ T4635] input: syz1 as /devices/virtual/input/input115 [ 3244.796608][ T1265] usb 2-1: USB disconnect, device number 13 [ 3245.239162][ T4640] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3245.340286][ T4640] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 3245.654506][ T4640] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3245.672701][ T4640] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 3245.789193][ T4650] syz_tun: entered allmulticast mode [ 3245.800543][ T4650] syz_tun: left allmulticast mode [ 3246.827012][ T4659] Can't find a SQUASHFS superblock on nullb0 [ 3247.882185][ T4671] tipc: Enabling of bearer rejected, failed to enable media [ 3248.768964][ T4678] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8684'. [ 3249.191976][ T4681] Process accounting resumed [ 3250.912064][ T4690] input: syz1 as /devices/virtual/input/input116 [ 3251.733894][ T4697] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 3255.488807][ T4734] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 3256.882835][ T4749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3257.156974][T10184] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3257.169717][T10184] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3257.179842][T10184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3257.193048][T10184] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3257.304963][T10184] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3257.315992][T10184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3259.795907][T10184] Bluetooth: hci0: command tx timeout [ 3260.043871][ T4751] chnl_net:caif_netlink_parms(): no params data found [ 3261.009120][ T4751] bridge0: port 1(bridge_slave_0) entered blocking state [ 3261.016379][ T4751] bridge0: port 1(bridge_slave_0) entered disabled state [ 3261.025410][ T4751] bridge_slave_0: entered allmulticast mode [ 3261.032787][ T4751] bridge_slave_0: entered promiscuous mode [ 3261.040577][ T4751] bridge0: port 2(bridge_slave_1) entered blocking state [ 3261.976137][T10184] Bluetooth: hci0: command tx timeout [ 3262.091712][ T4751] bridge0: port 2(bridge_slave_1) entered disabled state [ 3262.107579][ T4751] bridge_slave_1: entered allmulticast mode [ 3262.119021][ T4751] bridge_slave_1: entered promiscuous mode [ 3262.763904][ T4751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3262.866995][ T4751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3263.661237][ T4751] team0: Port device team_slave_0 added [ 3264.094691][ T4751] team0: Port device team_slave_1 added [ 3264.145503][ T4811] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 3264.199307][T10184] Bluetooth: hci0: command tx timeout [ 3264.228884][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3264.248940][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3264.275356][ T4751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3264.339898][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3264.395495][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3264.437581][ T4751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3265.047719][ T4751] hsr_slave_0: entered promiscuous mode [ 3265.071707][ T4751] hsr_slave_1: entered promiscuous mode [ 3265.078575][ T4751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3265.088195][ T4751] Cannot create hsr debugfs directory [ 3266.259863][ T4826] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 3266.422968][T10184] Bluetooth: hci0: command tx timeout [ 3269.508737][ T4855] tipc: Enabling of bearer rejected, failed to enable media [ 3269.550171][ T4751] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3269.869980][ T4751] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3269.880903][ T4751] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3269.910897][ T4751] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3270.028791][ T4751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3270.095014][ T4751] 8021q: adding VLAN 0 to HW filter on device team0 [ 3271.071512][ T2249] bridge0: port 1(bridge_slave_0) entered blocking state [ 3271.078670][ T2249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3271.110070][ T2249] bridge0: port 2(bridge_slave_1) entered blocking state [ 3271.117230][ T2249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3271.684424][ T4751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3272.194105][ T4878] sctp: [Deprecated]: syz.1.8731 (pid 4878) Use of int in maxseg socket option. [ 3272.194105][ T4878] Use struct sctp_assoc_value instead [ 3273.091861][ T4751] veth0_vlan: entered promiscuous mode [ 3273.143230][ T4751] veth1_vlan: entered promiscuous mode [ 3273.392891][ T4623] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 3273.544578][ T4751] veth0_macvtap: entered promiscuous mode [ 3273.590881][ T4751] veth1_macvtap: entered promiscuous mode [ 3274.185530][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3274.205629][ T4623] usb 10-1: Using ep0 maxpacket: 16 [ 3274.220230][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3274.230561][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3274.241355][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3274.241929][ T4623] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3274.251636][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3274.271973][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3274.283451][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3274.294648][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3274.307535][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3274.318274][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3274.318690][ T4623] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 3274.328877][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3274.328903][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3274.328919][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3274.330023][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3274.376035][ T4623] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3274.412247][ T4623] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 3274.619254][ T4751] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3274.693013][ T4623] usb 10-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 3274.831061][ T4623] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 3274.857034][ T4751] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3274.873233][ T4623] usb 10-1: Product: syz [ 3274.877523][ T4623] usb 10-1: Manufacturer: syz [ 3274.882649][ T4623] usb 10-1: SerialNumber: syz [ 3274.889616][ T4751] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3274.898355][ T4751] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3274.938273][ T4623] usb 10-1: config 0 descriptor?? [ 3275.279272][ T4623] usb 10-1: USB disconnect, device number 13 [ 3276.918469][ T4910] tipc: Enabling of bearer rejected, failed to enable media [ 3277.016843][T25448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3277.024692][T25448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3277.275334][ T1894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3277.277321][ T4922] tipc: Enabling of bearer rejected, failed to enable media [ 3277.283208][ T1894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3277.427914][ T4925] Process accounting resumed [ 3278.311117][ T4932] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 3279.099215][ T4936] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 3280.256832][ T4917] IPv6: NLM_F_CREATE should be specified when creating new route [ 3281.611374][ T29] audit: type=1800 audit(1735350554.724:1805): pid=4954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.8751" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 3282.909383][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3282.915952][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3286.455156][ T5004] syz_tun: entered allmulticast mode [ 3286.473697][ T5004] syz_tun: left allmulticast mode [ 3286.781612][ T5005] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8765'. [ 3289.089762][ T5025] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 3289.102057][ T5025] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 3289.749520][ T5032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3292.585283][ T5036] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8778'. [ 3296.427311][ T5084] Process accounting resumed [ 3301.600161][ T5130] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 3304.911798][ T5167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3308.034149][ T5198] Process accounting resumed [ 3309.319972][ T5211] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8818'. [ 3309.331503][ T5211] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8818'. [ 3309.835101][ T5216] Process accounting resumed [ 3316.131918][ T5253] input: syz1 as /devices/virtual/input/input117 [ 3318.357382][ T5257] Bluetooth: hci3: command 0x0406 tx timeout [ 3318.689443][ T5282] program syz.8.8836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3318.771117][ T5283] input: syz1 as /devices/virtual/input/input118 [ 3319.725898][ T4623] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 3319.910290][ T4623] usb 9-1: config 0 has no interfaces? [ 3319.917033][ T4623] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3319.926916][ T4623] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3319.948803][ T4623] usb 9-1: SerialNumber: syz [ 3319.975508][ T4623] usb 9-1: config 0 descriptor?? [ 3321.327733][ T5286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3321.350968][ T5286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3322.087230][ T5308] Can't find a SQUASHFS superblock on nullb0 [ 3322.151172][ T1230] usb 9-1: USB disconnect, device number 10 [ 3323.268331][ T5316] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8846'. [ 3323.277623][ T5316] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8846'. [ 3324.155640][ T5324] Process accounting resumed [ 3324.236079][T16083] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 3324.579519][T16083] usb 2-1: Using ep0 maxpacket: 16 [ 3324.588166][T16083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3324.608564][T16083] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 3324.651610][T16083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3324.681709][T16083] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 3324.698578][T16083] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 3325.450463][T16083] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 3325.458823][T16083] usb 2-1: Product: syz [ 3325.463133][T16083] usb 2-1: Manufacturer: syz [ 3325.467930][T16083] usb 2-1: SerialNumber: syz [ 3325.528302][T16083] usb 2-1: config 0 descriptor?? [ 3325.535244][T16083] usb 2-1: can't set config #0, error -71 [ 3325.700831][T16083] usb 2-1: USB disconnect, device number 14 [ 3325.743321][ T5336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3327.651927][ T29] audit: type=1800 audit(1735350598.782:1806): pid=5351 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.8853" name="/" dev="9p" ino=2 res=0 errno=0 [ 3331.026595][ T5389] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8865'. [ 3331.035720][ T5389] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8865'. [ 3338.302945][ T5440] ------------[ cut here ]------------ [ 3338.303057][ T5440] WARNING: CPU: 0 PID: 5440 at drivers/gpu/drm/vkms/vkms_crtc.c:98 vkms_get_vblank_timestamp+0x185/0x1e0 [ 3338.303107][ T5440] Modules linked in: [ 3338.303151][ T5440] CPU: 0 UID: 0 PID: 5440 Comm: syz.0.8878 Not tainted 6.13.0-rc4-syzkaller-00069-g8379578b11d5 #0 [ 3338.303186][ T5440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3338.303204][ T5440] RIP: 0010:vkms_get_vblank_timestamp+0x185/0x1e0 [ 3338.303237][ T5440] Code: da fb e8 ce a9 c8 fb 48 89 e9 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 50 48 89 45 00 eb c0 e8 9c e3 da fb 90 <0f> 0b 90 eb b5 e8 01 8f 3d fc e9 dc fe ff ff 48 89 df e8 84 8f 3d [ 3338.303262][ T5440] RSP: 0018:ffffc9000526f580 EFLAGS: 00010287 [ 3338.303301][ T5440] RAX: 0000000000002e12 RBX: 000002d9b6a5fd56 RCX: ffffc9000f159000 [ 3338.303320][ T5440] RDX: 0000000000080000 RSI: ffffffff85bf3214 RDI: 0000000000000006 [ 3338.303339][ T5440] RBP: ffffc9000526f6e8 R08: 0000000000000006 R09: 000002d9b6a5fd56 [ 3338.303357][ T5440] R10: 000002d9b6a5fd56 R11: 0000000000000000 R12: 000002d9b6a5fd56 [ 3338.303375][ T5440] R13: ffff888025c04000 R14: 0000000000004e20 R15: ffffffff85bf3090 [ 3338.303393][ T5440] FS: 00007f30ccdf36c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 3338.303418][ T5440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3338.303460][ T5440] CR2: 0000001b2c217ff8 CR3: 000000004677a000 CR4: 00000000003526f0 [ 3338.303480][ T5440] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3338.303497][ T5440] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3338.303515][ T5440] Call Trace: [ 3338.303525][ T5440] [ 3338.303537][ T5440] ? __warn+0xea/0x3c0 [ 3338.303565][ T5440] ? vkms_get_vblank_timestamp+0x185/0x1e0 [ 3338.303611][ T5440] ? report_bug+0x3c0/0x580 [ 3338.303680][ T5440] ? handle_bug+0x54/0xa0 [ 3338.303727][ T5440] ? exc_invalid_op+0x17/0x50 [ 3338.303773][ T5440] ? asm_exc_invalid_op+0x1a/0x20 [ 3338.303816][ T5440] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 3338.303853][ T5440] ? vkms_get_vblank_timestamp+0x184/0x1e0 [ 3338.303883][ T5440] ? vkms_get_vblank_timestamp+0x185/0x1e0 [ 3338.303910][ T5440] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3338.303944][ T5440] drm_crtc_get_last_vbltimestamp+0x103/0x1b0 [ 3338.303990][ T5440] ? __pfx_drm_crtc_get_last_vbltimestamp+0x10/0x10 [ 3338.304033][ T5440] drm_crtc_next_vblank_start+0x182/0x300 [ 3338.304066][ T5440] drm_atomic_helper_wait_for_fences+0x1fc/0x820 [ 3338.304103][ T5440] ? vkms_prepare_fb+0x5f/0xb0 [ 3338.304129][ T5440] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 3338.304187][ T5440] drm_atomic_helper_commit+0x1cf/0x380 [ 3338.304221][ T5440] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 3338.304255][ T5440] drm_atomic_commit+0x232/0x300 [ 3338.304282][ T5440] ? __pfx_drm_atomic_commit+0x10/0x10 [ 3338.304322][ T5440] ? __pfx___drm_printfn_info+0x10/0x10 [ 3338.304358][ T5440] ? drm_client_rotation+0x4d9/0x6a0 [ 3338.304398][ T5440] drm_client_modeset_commit_atomic+0x6a2/0x7f0 [ 3338.304444][ T5440] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 3338.304562][ T5440] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3338.304657][ T5440] drm_client_modeset_commit_locked+0x14d/0x580 [ 3338.304713][ T5440] drm_fb_helper_pan_display+0x2a5/0x990 [ 3338.304781][ T5440] ? fb_pan_display+0x1d/0x7d0 [ 3338.304847][ T5440] fb_pan_display+0x477/0x7d0 [ 3338.304887][ T5440] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 3338.304936][ T5440] bit_update_start+0x49/0x1f0 [ 3338.304981][ T5440] fbcon_modechanged+0x589/0x6e0 [ 3338.305046][ T5440] fbcon_set_all_vcs+0x1d6/0x450 [ 3338.305109][ T5440] fbcon_update_vcs+0x2c/0x50 [ 3338.305150][ T5440] do_fb_ioctl+0x781/0x7d0 [ 3338.305193][ T5440] ? __schedule+0x3d6c/0x5ad0 [ 3338.305232][ T5440] ? __pfx_do_fb_ioctl+0x10/0x10 [ 3338.305305][ T5440] ? __schedule+0x3d6c/0x5ad0 [ 3338.305530][ T5440] fb_ioctl+0xe5/0x150 [ 3338.305576][ T5440] ? __pfx_fb_ioctl+0x10/0x10 [ 3338.305621][ T5440] __x64_sys_ioctl+0x190/0x200 [ 3338.305691][ T5440] do_syscall_64+0xcd/0x250 [ 3338.305739][ T5440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3338.305782][ T5440] RIP: 0033:0x7f30cbf85d29 [ 3338.305826][ T5440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3338.305866][ T5440] RSP: 002b:00007f30ccdf3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3338.305932][ T5440] RAX: ffffffffffffffda RBX: 00007f30cc175fa0 RCX: 00007f30cbf85d29 [ 3338.306121][ T5440] RDX: 00000000200001c0 RSI: 0000000000004601 RDI: 0000000000000005 [ 3338.306153][ T5440] RBP: 00007f30cc001b08 R08: 0000000000000000 R09: 0000000000000000 [ 3338.306185][ T5440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3338.306216][ T5440] R13: 0000000000000000 R14: 00007f30cc175fa0 R15: 00007ffedb898248 [ 3338.306301][ T5440] [ 3338.306330][ T5440] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3338.306344][ T5440] CPU: 0 UID: 0 PID: 5440 Comm: syz.0.8878 Not tainted 6.13.0-rc4-syzkaller-00069-g8379578b11d5 #0 [ 3338.306372][ T5440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3338.306386][ T5440] Call Trace: [ 3338.306394][ T5440] [ 3338.306403][ T5440] dump_stack_lvl+0x3d/0x1f0 [ 3338.306437][ T5440] panic+0x71d/0x800 [ 3338.306480][ T5440] ? __pfx_panic+0x10/0x10 [ 3338.306516][ T5440] ? show_trace_log_lvl+0x29d/0x3d0 [ 3338.306555][ T5440] ? vkms_get_vblank_timestamp+0x185/0x1e0 [ 3338.306583][ T5440] check_panic_on_warn+0xab/0xb0 [ 3338.306606][ T5440] __warn+0xf6/0x3c0 [ 3338.306628][ T5440] ? vkms_get_vblank_timestamp+0x185/0x1e0 [ 3338.306655][ T5440] report_bug+0x3c0/0x580 [ 3338.306686][ T5440] handle_bug+0x54/0xa0 [ 3338.306717][ T5440] exc_invalid_op+0x17/0x50 [ 3338.306747][ T5440] asm_exc_invalid_op+0x1a/0x20 [ 3338.306776][ T5440] RIP: 0010:vkms_get_vblank_timestamp+0x185/0x1e0 [ 3338.306803][ T5440] Code: da fb e8 ce a9 c8 fb 48 89 e9 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 50 48 89 45 00 eb c0 e8 9c e3 da fb 90 <0f> 0b 90 eb b5 e8 01 8f 3d fc e9 dc fe ff ff 48 89 df e8 84 8f 3d [ 3338.306825][ T5440] RSP: 0018:ffffc9000526f580 EFLAGS: 00010287 [ 3338.306845][ T5440] RAX: 0000000000002e12 RBX: 000002d9b6a5fd56 RCX: ffffc9000f159000 [ 3338.306861][ T5440] RDX: 0000000000080000 RSI: ffffffff85bf3214 RDI: 0000000000000006 [ 3338.306876][ T5440] RBP: ffffc9000526f6e8 R08: 0000000000000006 R09: 000002d9b6a5fd56 [ 3338.306892][ T5440] R10: 000002d9b6a5fd56 R11: 0000000000000000 R12: 000002d9b6a5fd56 [ 3338.306907][ T5440] R13: ffff888025c04000 R14: 0000000000004e20 R15: ffffffff85bf3090 [ 3338.306923][ T5440] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 3338.306958][ T5440] ? vkms_get_vblank_timestamp+0x184/0x1e0 [ 3338.306989][ T5440] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3338.307023][ T5440] drm_crtc_get_last_vbltimestamp+0x103/0x1b0 [ 3338.307051][ T5440] ? __pfx_drm_crtc_get_last_vbltimestamp+0x10/0x10 [ 3338.307088][ T5440] drm_crtc_next_vblank_start+0x182/0x300 [ 3338.307119][ T5440] drm_atomic_helper_wait_for_fences+0x1fc/0x820 [ 3338.307154][ T5440] ? vkms_prepare_fb+0x5f/0xb0 [ 3338.307177][ T5440] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 3338.307218][ T5440] drm_atomic_helper_commit+0x1cf/0x380 [ 3338.307250][ T5440] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 3338.307281][ T5440] drm_atomic_commit+0x232/0x300 [ 3338.307306][ T5440] ? __pfx_drm_atomic_commit+0x10/0x10 [ 3338.307331][ T5440] ? __pfx___drm_printfn_info+0x10/0x10 [ 3338.307362][ T5440] ? drm_client_rotation+0x4d9/0x6a0 [ 3338.307400][ T5440] drm_client_modeset_commit_atomic+0x6a2/0x7f0 [ 3338.307445][ T5440] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 3338.307510][ T5440] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3338.307551][ T5440] drm_client_modeset_commit_locked+0x14d/0x580 [ 3338.307590][ T5440] drm_fb_helper_pan_display+0x2a5/0x990 [ 3338.307624][ T5440] ? fb_pan_display+0x1d/0x7d0 [ 3338.307654][ T5440] fb_pan_display+0x477/0x7d0 [ 3338.307679][ T5440] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 3338.307712][ T5440] bit_update_start+0x49/0x1f0 [ 3338.307739][ T5440] fbcon_modechanged+0x589/0x6e0 [ 3338.307769][ T5440] fbcon_set_all_vcs+0x1d6/0x450 [ 3338.307797][ T5440] fbcon_update_vcs+0x2c/0x50 [ 3338.307823][ T5440] do_fb_ioctl+0x781/0x7d0 [ 3338.307849][ T5440] ? __schedule+0x3d6c/0x5ad0 [ 3338.307875][ T5440] ? __pfx_do_fb_ioctl+0x10/0x10 [ 3338.307901][ T5440] ? __schedule+0x3d6c/0x5ad0 [ 3338.307981][ T5440] fb_ioctl+0xe5/0x150 [ 3338.308007][ T5440] ? __pfx_fb_ioctl+0x10/0x10 [ 3338.308036][ T5440] __x64_sys_ioctl+0x190/0x200 [ 3338.308069][ T5440] do_syscall_64+0xcd/0x250 [ 3338.308099][ T5440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3338.308128][ T5440] RIP: 0033:0x7f30cbf85d29 [ 3338.308146][ T5440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3338.308168][ T5440] RSP: 002b:00007f30ccdf3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3338.308191][ T5440] RAX: ffffffffffffffda RBX: 00007f30cc175fa0 RCX: 00007f30cbf85d29 [ 3338.308206][ T5440] RDX: 00000000200001c0 RSI: 0000000000004601 RDI: 0000000000000005 [ 3338.308220][ T5440] RBP: 00007f30cc001b08 R08: 0000000000000000 R09: 0000000000000000 [ 3338.308234][ T5440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3338.308248][ T5440] R13: 0000000000000000 R14: 00007f30cc175fa0 R15: 00007ffedb898248 [ 3338.308279][ T5440] [ 3338.308495][ T5440] Kernel Offset: disabled