last executing test programs: 25m18.40946886s ago: executing program 32 (id=513): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r1, 0xffffffffffffffff, 0x2c, 0x0, @val=@netkit={@void, @value}}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000001b40)={0x2020}, 0x2020) syz_clone3(0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) syz_open_dev$tty1(0xc, 0x4, 0x1) 23m19.660083227s ago: executing program 33 (id=686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r1) r2 = socket(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) keyctl$join(0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000f00c0000", 0x12) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 15m9.566366901s ago: executing program 34 (id=1815): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(r0, r1, 0x0, 0x8000002b) 12m35.640443197s ago: executing program 7 (id=2136): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000f40)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m32.030224055s ago: executing program 7 (id=2143): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x8000, 0x8000, 0x9, 0x1, {{0xb, 0x4, 0x1, 0x3, 0x2c, 0x65, 0x0, 0xff, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@rr={0x7, 0x3, 0xcd}, @timestamp_prespec={0x44, 0x14, 0x86, 0x3, 0x5, [{@private=0xa010101, 0x9}, {@rand_addr=0x64010100, 0xffffff1b}]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="05000806", 0x4, 0x0, &(0x7f0000000040)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @random="a641cb3a73c9"}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}}, 0x20000840) 12m30.587092734s ago: executing program 7 (id=2147): socket(0x8, 0x2, 0x5b5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) socket$inet6_udplite(0xa, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r10 = semget$private(0x0, 0x4000000009, 0x0) semop(r10, &(0x7f00000002c0), 0x0) semop(r10, &(0x7f0000000200), 0x53) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) semctl$GETZCNT(r10, 0x0, 0xf, 0x0) 12m28.861225949s ago: executing program 7 (id=2151): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000400)=@in6={0xa, 0x4e22, 0x0, @empty, 0x8}, 0x80, 0x0}, 0x200ce0c0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='n', 0xfdef}], 0x11}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000000)={'some', 0x20, 0x8, 0x20, 0x4}, 0x2f) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f0000000200)={0x3, @default}) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee01}) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x2}, 0x10) write(r6, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff020000000a0000", 0x1e5) syz_emit_ethernet(0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaa8c40aaaaaaeeb507030c9608004800006400000000002f9078ac1414bbac141414890754e000000186020000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000020000000000000000000000080065"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff0400001ca800000000bcf737660b68ff00000000000000000000000000000000000000000200002000000000223506a5b076485c1a93cfd4367dad6009078592da23cb4930f82f2f03b8b2fbeb49b4601c571ce3f44df0919ae237d2ca3ec3101353ad9c825f5aadb22cf7ed21d977962c910b293a59f8a0cf365ad21e1c7e3a07e37334bff2ff84d05738030a8510", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1001000, 0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x64842, 0x4) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 12m27.578175856s ago: executing program 7 (id=2155): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x20, 0x4b, 0x2, 0xfffff013}]}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x6, 0x61, 0x11, 0x4c, 0x4}, [@call={0x85, 0x0, 0x0, 0x63}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = socket$kcm(0xa, 0x4, 0x11) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}]}], {0x14}}, 0x90}}, 0x0) chdir(&(0x7f0000000080)='./file1\x00') inotify_init1(0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 12m25.985487434s ago: executing program 7 (id=2160): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r4 = syz_open_dev$ndb(&(0x7f0000000b80), 0x0, 0xa0840) ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x3) 12m9.136448444s ago: executing program 35 (id=2160): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r4 = syz_open_dev$ndb(&(0x7f0000000b80), 0x0, 0xa0840) ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x3) 11m22.381950066s ago: executing program 8 (id=2198): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) 11m21.314865889s ago: executing program 8 (id=2283): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, 0x0, 0x13f}}, 0x20) lseek(r1, 0x102, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa66027c"], 0x2c}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) 11m20.334314603s ago: executing program 8 (id=2285): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xee01, 0x0) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r5, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 11m15.438012921s ago: executing program 8 (id=2292): syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000240)='./file0\x00') symlinkat(&(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000140)='./file1\x00') renameat2(r4, &(0x7f0000000080)='./file0\x00', r4, &(0x7f00000000c0)='./file1\x00', 0x0) 11m13.744235319s ago: executing program 36 (id=2292): syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000240)='./file0\x00') symlinkat(&(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000140)='./file1\x00') renameat2(r4, &(0x7f0000000080)='./file0\x00', r4, &(0x7f00000000c0)='./file1\x00', 0x0) 7m59.566720102s ago: executing program 4 (id=2603): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7ff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getgroups(0x27, &(0x7f0000002540)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/211) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter6\x00') read$msr(r5, &(0x7f0000000040)=""/59, 0xffb5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r5, 0x2, 0x0, r0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x8201}], 0x1, 0x0, 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, &(0x7f00000000c0)={0x10000001}) read(r0, &(0x7f0000000580)=""/119, 0x77) 7m56.525114972s ago: executing program 4 (id=2608): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40000000000000}, {0x0, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1502, 0x4, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0) 7m44.860497457s ago: executing program 4 (id=2626): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @loopback, 0xd8}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001340)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/105, 0x69, 0x1, 0x0}, &(0x7f0000001380)=0x40) 7m42.353232108s ago: executing program 4 (id=2630): r0 = socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0x78) sendfile(0xffffffffffffffff, r4, &(0x7f00000001c0), 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000040)={0x2, r2}) fcntl$addseals(r5, 0x409, 0xb) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) fallocate(r2, 0x0, 0x0, 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) mkdir(&(0x7f00000000c0)='./file1\x00', 0xf164388e587ce7f8) mount(&(0x7f00000009c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000a80)=',\x00') sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 7m36.357849281s ago: executing program 4 (id=2638): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x1c}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r6, &(0x7f0000001a80)=[{{&(0x7f0000000400)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000580)="e200183df9", 0x5}], 0x1}}, {{&(0x7f0000001080)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001280)=[{&(0x7f00000010c0)="d0de852e", 0x4}], 0x1}}], 0x2, 0x40) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0), 0x8) r7 = userfaultfd(0x1) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000000), 0x4) sendto$inet6(r8, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r8, 0x0, 0xfffffffffffffe24, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x400046a8, 0x0, &(0x7f0000000100), 0x0) r9 = shmget(0x0, 0x2000, 0x100, &(0x7f00007ac000/0x2000)=nil) shmctl$SHM_STAT(r9, 0xd, 0x0) 7m33.238384928s ago: executing program 4 (id=2642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="181b00000000000000000000000000eb8400000050000000181100002b7c60b8098a2fc0aec5c1692cf286437b1f77dfcec31208252fbbad57dfb06e12e2ccb4ec4da9f3e8666fad7749428060c5bd7589945d59c7c8bf8fb0d6d4262b405502b5dafec831f2676e394a798f1b937c0a81642259ae054883ceff000e7a17fabf4c392b1a4212d82a8c28227e168a12ed4ae05a743086756c3520134c3c4e5c42270465f8a1641f78c15a14b377017371dc6412ba587d22b71646eae5c89954c60165f2", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000037994edbc51bcc43ffffffff03000000d6b286ee8dfcf0483f53723e49577cedbabd3a173fd7ef59cbb363a21076ac9cbcce74d5c479"], 0x14}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') close_range(0xffffffffffffffff, r4, 0x0) socket$kcm(0x29, 0x2, 0x0) socket(0x25, 0xa, 0x4) write$binfmt_script(r4, &(0x7f00000005c0)={'#! ', './file0', [], 0xa, "abeb0ccadb15361bc75cf90ab28ac609046a32a0a8a88f25d89ed582acf5b1ed97c18e1e4bf0dde1bc7d9f116486cf883342cb9534c4907542bbf39df6533d6b84dffcff11b91358e720d068a1bc3bc9d2c2f1f98d75238315ef9bb6bbe3bc7c604c5fad237c8b4ac90b1343035ef2a5e6ac9cf123ca2dda692267c245fb49520883f026c163f270d70a289c5c07956d2f810d9ca788699b2c2275db8a76c2947c8c9f"}, 0xae) preadv(r4, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x82a80) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000040)=0xf0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x21d) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e22, 0x80, @private1, 0x2}}, 0x0, 0x0, 0x46, 0x0, "f8290acb60351d4886fe034e840e390c34dc97a20a0ed8614a5a1f1fb54e64ea3ecfd2ca7ae337d89002aa54521c7d44cdcfe108e297042ff52849dd9323172abded95c733b50e526489dbd285bb9a55"}, 0xd8) 7m15.422355594s ago: executing program 37 (id=2642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="181b00000000000000000000000000eb8400000050000000181100002b7c60b8098a2fc0aec5c1692cf286437b1f77dfcec31208252fbbad57dfb06e12e2ccb4ec4da9f3e8666fad7749428060c5bd7589945d59c7c8bf8fb0d6d4262b405502b5dafec831f2676e394a798f1b937c0a81642259ae054883ceff000e7a17fabf4c392b1a4212d82a8c28227e168a12ed4ae05a743086756c3520134c3c4e5c42270465f8a1641f78c15a14b377017371dc6412ba587d22b71646eae5c89954c60165f2", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000037994edbc51bcc43ffffffff03000000d6b286ee8dfcf0483f53723e49577cedbabd3a173fd7ef59cbb363a21076ac9cbcce74d5c479"], 0x14}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') close_range(0xffffffffffffffff, r4, 0x0) socket$kcm(0x29, 0x2, 0x0) socket(0x25, 0xa, 0x4) write$binfmt_script(r4, &(0x7f00000005c0)={'#! ', './file0', [], 0xa, "abeb0ccadb15361bc75cf90ab28ac609046a32a0a8a88f25d89ed582acf5b1ed97c18e1e4bf0dde1bc7d9f116486cf883342cb9534c4907542bbf39df6533d6b84dffcff11b91358e720d068a1bc3bc9d2c2f1f98d75238315ef9bb6bbe3bc7c604c5fad237c8b4ac90b1343035ef2a5e6ac9cf123ca2dda692267c245fb49520883f026c163f270d70a289c5c07956d2f810d9ca788699b2c2275db8a76c2947c8c9f"}, 0xae) preadv(r4, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x82a80) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000040)=0xf0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x21d) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e22, 0x80, @private1, 0x2}}, 0x0, 0x0, 0x46, 0x0, "f8290acb60351d4886fe034e840e390c34dc97a20a0ed8614a5a1f1fb54e64ea3ecfd2ca7ae337d89002aa54521c7d44cdcfe108e297042ff52849dd9323172abded95c733b50e526489dbd285bb9a55"}, 0xd8) 3m23.676387945s ago: executing program 1 (id=3456): r0 = socket(0x11, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3m22.456846961s ago: executing program 1 (id=3461): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) read$FUSE(r1, &(0x7f00000024c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 3m19.157036229s ago: executing program 1 (id=3465): syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='W', 0x1}], 0x1}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) shutdown(r0, 0x2) 3m13.698443366s ago: executing program 1 (id=3478): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12011001000000202505a8a4720b1c25030109021f000101ff8008090400fd010701010109050102"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x62, @lang_id={0x0, 0x3, 0x804}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_disconnect(r0) 3m10.014187679s ago: executing program 1 (id=3493): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 3m9.735953518s ago: executing program 1 (id=3497): socket(0x8, 0x2, 0x5b5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3589], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) socket$inet6_udplite(0xa, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r10 = semget$private(0x0, 0x4000000009, 0x0) semop(r10, &(0x7f00000002c0), 0x0) semop(r10, &(0x7f0000000200), 0x53) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) semctl$GETZCNT(r10, 0x0, 0xf, 0x0) 2m53.522682832s ago: executing program 38 (id=3497): socket(0x8, 0x2, 0x5b5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3589], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) socket$inet6_udplite(0xa, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r10 = semget$private(0x0, 0x4000000009, 0x0) semop(r10, &(0x7f00000002c0), 0x0) semop(r10, &(0x7f0000000200), 0x53) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) semctl$GETZCNT(r10, 0x0, 0xf, 0x0) 2m48.263164743s ago: executing program 6 (id=3556): bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket(0x2a, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r3, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40) 2m47.369761994s ago: executing program 6 (id=3559): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000500)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_generic(0x11, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x0, 0x10, "f79eb4cf48b5a5788fc15a45b5b1"}, {0x0, 0xf, "749018c9a54b61394327f11535"}]}]}}}}}}}, 0x0) 2m47.121185605s ago: executing program 6 (id=3562): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x4d6, 0x2, 0x9, 0xbc, 0x4}]}, 0x30}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x20, 0x0, 0x8010002}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x4}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8000, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m45.022595209s ago: executing program 6 (id=3565): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0) creat(&(0x7f0000002240)='./file1\x00', 0x804000000000040) syz_io_uring_setup(0xec4, 0x0, 0x0, 0x0) 2m44.415824268s ago: executing program 6 (id=3569): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0x276, 0x0, &(0x7f0000000300)="0068596df2bb6bb7361c0d93bf161bb5c56ede47852037ff7038aab635c2149a05527ffe321ceb0abccbeb473b3f2122", 0x0, 0x30}) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, 0x0}], 0x1, 0x7d, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m38.122474605s ago: executing program 6 (id=3583): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000640)=""/232, 0xe8}, {0x0}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 2m37.497655532s ago: executing program 39 (id=3583): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000640)=""/232, 0xe8}, {0x0}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 22.911487017s ago: executing program 0 (id=3821): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000100)=0x10000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="c4e1fa7045000546f43e450f01cf66ba4000ed67420f01d166b8d9008ed0640f2324c744240056000000c74424020b000000ff1c2466b8db000f00d8f4", 0x3d}], 0x1, 0x40, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000000)="3af6f7b80fb5", 0x6}], 0x1, 0x8, 0x4) r9 = socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r9, 0x4008f50a, &(0x7f0000000040)={0x5, 0x8}) r10 = openat$sysfs(0xffffff9c, &(0x7f0000001480)='/sys/kernel/notes', 0x41069b67e620c8cc, 0x10f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_restrict_self(r10, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 21.111056181s ago: executing program 0 (id=3826): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, 0x0, 0x0) openat$cgroup_type(r2, &(0x7f0000000080), 0x2, 0x0) vmsplice(r3, 0x0, 0x0, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000200)={0x1, 0x6}, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x8000, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000340)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000380)=r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r9, 0xf01, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1021}, 0x4000000) 20.979278822s ago: executing program 9 (id=3827): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000780)={0x4, 0x395e, 0x3, {0x1, @sdr={0x3031334d, 0xdd17}}, 0x6}) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r7, 0x3b84, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f0000000180)={0x18, r8, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, 0x0) ioctl$IOMMU_IOAS_UNMAP(r7, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000440)={0x28, 0x5, r8, 0x0, 0x0, 0x0, 0x2}) ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r8, 0x1c, 0x3, 0x2}) sendmsg$netlink(r0, &(0x7f0000007d80)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000002440)=ANY=[@ANYBLOB="5c1500006a001500000000000000000049150080a0000f8008000e80"], 0x155c}], 0x1}, 0x0) 19.449083468s ago: executing program 5 (id=3829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100000600bd"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r6, 0x2, 0x2, &(0x7f0000000180)=[{}, {}], 0x0) io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xffff, r5, 0x0}]) r7 = eventfd(0x10000000) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) io_submit(r6, 0x3, &(0x7f0000000580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xfff5, r2, &(0x7f0000000180)="aaba5175e9173aec86a864866c0f8f4ff20585771b8478c3dc36b099d1dc7767905371105626fdf2589faca820d5e96e1342a098a381b859c78be472f07ccae944030c4c70c01f0ba05349809453bce818555542c6ac6522716694bd2812fcbd1b4d7716d9b9fddea0b68da0cc98b9986a88368fac3ee90b132d7edcc83cef", 0x7f, 0x2, 0x0, 0x2, r7}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x80, 0xffffffffffffffff, &(0x7f0000000300)="216b511f5b07ec77333ed69aad3913ac24733f2e8a8708686006d61179ad15c33552863fbc1c0ff5ef14d61b512febc6a13e62e21b57185be10fdb164b6d0df07eaf8046b42671c4f5e316f627c82a974a93834f", 0x54, 0xffffffffffffffff, 0x0, 0x3, r8}, 0x0]) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002080), 0x0) pselect6(0x40, &(0x7f00000007c0), &(0x7f0000000800)={0x7f}, 0x0, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x2, 'aead\x00', 0x0, 0x0, 'pcrypt(essiv(gcm_base(ctr(aes-aesni),ghash-generic),hmac(sha256-'}, 0x58) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'L'}]}]}}}]}]}], {0x14}}, 0xf0}}, 0x0) 17.707954194s ago: executing program 9 (id=3832): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r0, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000024c0)=0x80) r2 = socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0xf3a, 0x0) splice(r5, 0x0, r7, 0x0, 0x80, 0x4) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r6) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x8031, 0xffffffffffffffff, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rename(0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r8 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x30, r10, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}}, 0x40084) close(r8) r12 = userfaultfd(0x1) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f00000000c0)) 17.304152193s ago: executing program 0 (id=3833): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$inet_tcp(0x2, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000040c0)={0x8, {"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", 0x1000}}, 0x1006) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) fchdir(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440), 0x1) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) close(0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0xf07, 0x4) fchmod(r6, 0x80) 16.86232116s ago: executing program 5 (id=3835): io_uring_setup(0x6d94, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd0000000c000100080c100000000000224e0000", 0x58}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800010000000000", @ANYBLOB='\f\x00K\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) accept4(r4, &(0x7f0000000380)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x80800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4c0, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0xc000}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x86451fb2e11699f8) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r8 = socket(0x11, 0x6, 0x5) getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000240)=0x8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) 16.749406152s ago: executing program 0 (id=3836): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c011, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r7 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r7) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 16.323703359s ago: executing program 3 (id=3837): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) creat(0x0, 0x84) syz_open_procfs(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x3, 0x20000000, 0x4) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 15.463056291s ago: executing program 5 (id=3839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x32) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x2, &(0x7f00000000c0)={{0x0, r1/1000+10000}, {0x77359400}}, 0x0) setitimer(0x2, 0x0, &(0x7f0000000980)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x6000000, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) sendto$inet6(r2, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) ioctl$FITHAW(r0, 0xc0045878) 13.260911642s ago: executing program 2 (id=3840): socket(0x8, 0x2, 0x5b5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) socket$inet6_udplite(0xa, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r10 = semget$private(0x0, 0x4000000009, 0x0) semop(r10, &(0x7f00000002c0), 0x0) semop(r10, &(0x7f0000000200), 0x53) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) semctl$GETZCNT(r10, 0x0, 0xf, 0x0) 12.980660131s ago: executing program 5 (id=3841): syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x19, 0x79, 0x2e, 0x20, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0xbd, 0x0, 0x2, 0x34, 0x67, 0xc3, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = dup(r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x2, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) fadvise64(r3, 0x18, 0x0, 0x4) mq_open(0x0, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000040)=""/217, 0xd9, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r8 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010009594b29dd00000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x9, {[@global=@item_4={0x3, 0x1, 0x3, "c56bf304"}, @global=@item_012={0x0, 0x1, 0x4}, @global=@item_012={0x0, 0x1, 0x9}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) 12.748550734s ago: executing program 3 (id=3842): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x80, 0x0, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000000177fbac141416e000030afe079f03b180004404050300845013f2325f009402050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f2", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403}, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x0, 0x138, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x100000000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b9040a02080006007c09e8fe04a10a0015c00200142603600e120800080024000000a86286cf6c00014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db701000000400ad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xcb}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x6b, &(0x7f00000001c0)=""/107, 0x41100, 0x78, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) 12.542350419s ago: executing program 9 (id=3843): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000640)=""/102400, 0x19000) r2 = socket(0x10, 0x2, 0x0) get_robust_list(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) r4 = request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000180)='/dev/ptmx\x00', 0xfffffffffffffffc) keyctl$get_persistent(0x16, r3, r4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)=ANY=[]) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000017c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x0, "fb99101719afec01"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 11.226639436s ago: executing program 9 (id=3844): socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x201, 0x0, 0x0, {}, [{0x8, 0xf}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8008, 0x2f5}, &(0x7f0000010080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000010300)=[{0x0}], 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/233, 0xe9}], 0x1, &(0x7f0000000d00)=""/4079, 0xfef}, 0x40000103) close(r5) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}, 0x20) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x4e24, 0x2, 'sed\x00', 0x0, 0xfffffffc}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 11.065697914s ago: executing program 3 (id=3845): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x3, 0x8d) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x2000804}, 0x0) socket(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(r0) r7 = socket$inet6(0xa, 0x3, 0x3) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0xfffff7fe, @mcast2}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="0600"], 0x84}}, 0x0) socket$inet6(0xa, 0x1, 0x0) 10.938517271s ago: executing program 2 (id=3846): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x10000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x3201}) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x0) 10.490370939s ago: executing program 2 (id=3847): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x21, 0x0, 0x3, 0x0, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x40004, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4, 0x2, 0x0, 0x1, [@vti_common_policy]}}}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000000c0)=""/32, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x800) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x290380) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 9.275396249s ago: executing program 3 (id=3848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x0, &(0x7f0000000300)) io_destroy(r3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020}, 0x2020) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}, 0x3}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) setsockopt(r6, 0x84, 0x7f, 0x0, 0x0) recvmsg(r6, 0x0, 0x0) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) add_key(&(0x7f0000000480)='asymmetric\x00', 0x0, &(0x7f00000007c0), 0x0, r7) 8.608246019s ago: executing program 5 (id=3849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x32) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x2, &(0x7f00000000c0)={{0x0, r1/1000+10000}, {0x77359400}}, 0x0) setitimer(0x2, 0x0, &(0x7f0000000980)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x6000000, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b231a0987f70e06d038e7ff7fc6e5539b324b078b089b080f384b090890e0878f0e1ac6e7049b334d959b729a240d5b67f3988f7ef3195201c0ffe8d178708c523c921b1b5d500f0d30090936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc90da8196c28d920bab05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d21487b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a158b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae7183cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a799567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461600000000000000206ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f86b8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a75500000000d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) sendto$inet6(r2, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) ioctl$FITHAW(r0, 0xc0045878) 5.772338003s ago: executing program 9 (id=3850): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x150, 0x150, 0x270, 0xf8010000, 0x340, 0x238, 0x238, 0x340, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x0, {0x2}}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [], 0x0, 0x2000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x30}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r6, &(0x7f0000000180)="bcfc7650b30052add7d3dc73ec8e34729f8604037254d5af17", &(0x7f00000001c0)=""/228, 0x4}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in=@multicast2, 0x0, 0x3c}, @in6=@remote, {0x0, 0x0, 0xfffffffffffffffe}, {}, {}, 0x0, 0x3503, 0xa, 0x2, 0xfd, 0x2c}, [@coaddr={0x14, 0xe, @in=@broadcast}]}, 0x104}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="0002020100000000ff02010000000000000010000000dcb1df601f0d5d1fdbee3be8ae1ee7c0a9f25b994e22ef01db716da0e84137c325f765bf8dfb79ea04f116a2a2343b3cd5aaad089523ffdd10c90c50ace873d68eb7e8c34135609e4964d6436e7dfdc4d6a9011a0408d355e0e443998a663f77d8a62fdd3a3efdd6f9dea27a56e17b1272ba5121001c2ee170f84c6c4aea298b2543730b8f21b51da0a27fae1f71f1d6d69609ac74db3a2bd4172f307671f4af228ea5f6169790146e549ca655"], 0x18) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000440)) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000007f0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) sendfile(r9, r8, &(0x7f0000002080)=0x66, 0x23b) 5.770381556s ago: executing program 0 (id=3851): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='maps\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x80, 0x10, 0x7, 0x13, 0x0, 0x0, 0x4, 0x5}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x2b2}, @FRA_DST={0x14, 0x1, @remote}]}, 0x38}}, 0x40810) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f00001b6000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) 5.500838256s ago: executing program 3 (id=3852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) syz_open_dev$dri(0x0, 0x5, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsmount(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2040094) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={0x24, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 5.500016208s ago: executing program 2 (id=3853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0x19}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000480), 0x701000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2, {r7}}, './file0\x00'}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r8, 0x0, 0x10000, 0x0, 0x50000, 0x1, 0x32bb90}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ee222}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), 0x0) 3.670299093s ago: executing program 9 (id=3854): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x6, &(0x7f0000000000)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000002ec0)={0x1, @vbi={0xfffffffc, 0x6, 0x33524742, 0x32314742, [0xa, 0x8], [0x5, 0x7], 0x108}}) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0x20) 3.638736509s ago: executing program 0 (id=3855): mkdir(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x1, 0x4002) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) capget(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000001c0)={0x99, 0xfffffffd, 0x6, 0x978, 0xfffffffd, 0x4}) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x6210, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', 0xee00, 0x0) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000040)='./file0/bus\x00', 0x86) 3.364313905s ago: executing program 5 (id=3856): socket(0x8, 0x2, 0x5b5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) socket$inet6_udplite(0xa, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r10 = semget$private(0x0, 0x4000000009, 0x0) semop(r10, &(0x7f00000002c0), 0x0) semop(r10, &(0x7f0000000200), 0x53) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) semctl$GETZCNT(r10, 0x0, 0xf, 0x0) 1.576591286s ago: executing program 2 (id=3857): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x143c40, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x808, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1100000007000000070000000800000005000000", @ANYRES32, @ANYBLOB="0000000000000000000000ecac7b9426b0e57a00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x24001000) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0xfffffea2}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) 1.018168667s ago: executing program 3 (id=3858): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00'], 0x30, 0x48060}], 0x1, 0x200000d0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200ef6000000877ed0c2ccb7f2ae19d1dbda37c6d1"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20004090) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_usb_control_io(r3, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000680)={0x0, 0x18, 0x4, "63a24030"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000280)={0x14, &(0x7f0000000340)={0x0, 0x23, 0xce, {0xce, 0x0, "e113ed70f20c43fbd14d03a35cdd2e215b0ba92074e852f90248d60bbf40f071830a69f324db7f25515c2d5773b6d8a59d24f367ab5042c177180dc47f3bd3a9e1c744c363d1aa30a3900aefa63c7018401fc6a3d25d5f9d7a55da6937f9b8862935b3784de8b1f81d5b089e3858c6ab605ea5a2325ab58523eacfe5337622d86a4e136447452d91ea9c6d538e0da7fcd1fc7295bd4ef39910b74905043ccfb05b185cbaa30b5457bf9f1af94eb107a0ccf3ae340dfed220fbe63e4b0aa1021d44ed73009164ace79c5e8a40"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x1c, &(0x7f0000000480)={0x0, 0x11, 0x81, "ad5aedbe3dff114738c6a5e42df5d509a6b3380bfa0df6ded0ba6e9a7eba0b2d58675ceae77c96fae61981f3abb79cc20bb7b7ca03060a533a9b0b0e5462f9be65be733cd2f2a4caf9e0b1421386e3fc108d1fdd3b17bab735d11ab32f12a31df442a979e86a969203adf7a778437d517458d15dde72cee8fece77911fd3c4b357"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xc}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180), 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xd, 0x10012, r7, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000000)={0x0}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, 0x0) r8 = dup(r2) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x2000, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 0s ago: executing program 2 (id=3859): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, 0x0, 0x7, 0x0) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f00000000c0)={'full', 0x20, 0x0, 0x20, 0x2}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061104e00"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x78, &(0x7f0000000380)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e20, 0x3, @private0, 0x6}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e21, 0xfffff5df, @private2, 0x81}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f00000002c0)=0x10) kernel console output (not intermixed with test programs): 17919] JFS: charset not found [ 1477.389201][T17701] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1477.900675][T17701] usb 4-1: Using ep0 maxpacket: 16 [ 1478.295364][T17701] usb 4-1: device descriptor read/all, error -71 [ 1478.448725][T15951] IPVS: starting estimator thread 0... [ 1478.566780][T17953] IPVS: using max 18 ests per chain, 43200 per kthread [ 1484.289293][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1486.618475][T18003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1488.903337][T18023] ptrace attach of "./syz-executor exec"[5822] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 1489.699681][T18026] Mount JFS Failure: -22 [ 1489.796591][T18026] jfs_mount failed w/return code = -22 [ 1491.194962][T17956] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1491.362539][T17956] usb 4-1: Using ep0 maxpacket: 16 [ 1491.377896][T17956] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.444746][T17956] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1491.478517][T17956] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 0.40 [ 1491.478957][T17956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.479162][T17956] usb 4-1: Product: syz [ 1491.479302][T17956] usb 4-1: Manufacturer: syz [ 1491.479462][T17956] usb 4-1: SerialNumber: syz [ 1491.937376][T17956] usb 4-1: 0:76 : does not exist [ 1492.006374][T17956] usb 4-1: 0:10 : does not exist [ 1492.213889][T17956] usb 4-1: USB disconnect, device number 35 [ 1492.443523][T17660] udevd[17660]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1492.679098][T18058] tun0: tun_chr_ioctl cmd 1074025677 [ 1492.684802][T18058] tun0: linktype set to 776 [ 1493.301834][T18051] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1493.311907][T18051] IPv6: NLM_F_CREATE should be set when creating new route [ 1493.320748][T18051] netlink: 'syz.9.2757': attribute type 27 has an invalid length. [ 1494.660077][T18051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.667852][T18051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.790995][T18093] tty tty23: ldisc open failed (-12), clearing slot 22 [ 1498.565495][T18051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1498.806811][T18051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1499.834755][T18051] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.844166][T18051] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.853211][T18051] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.862479][T18051] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.401329][T18143] futex_wake_op: syz.0.2771 tries to shift op by 144; fix this program [ 1504.968312][T18165] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1506.239889][T18166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1506.251724][T18166] netlink: 'syz.9.2772': attribute type 2 has an invalid length. [ 1506.259748][T18166] netlink: 'syz.9.2772': attribute type 8 has an invalid length. [ 1506.267655][T18166] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2772'. [ 1508.050438][T18172] syz.1.2777: attempt to access beyond end of device [ 1508.050438][T18172] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1508.391438][T18175] tun0: tun_chr_ioctl cmd 1074025677 [ 1508.490577][T18175] tun0: linktype set to 776 [ 1510.982488][T18185] input: syz1 as /devices/virtual/input/input27 [ 1516.653560][T18232] new mount options do not match the existing superblock, will be ignored [ 1521.278077][T18276] ptrace attach of "./syz-executor exec"[15541] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8 [ 1522.493937][T18281] syz_tun: entered allmulticast mode [ 1522.585028][ C0] vkms_vblank_simulate: vblank timer overrun [ 1522.604767][T18281] lo: entered allmulticast mode [ 1522.610589][T18281] lo: left allmulticast mode [ 1522.615569][T18281] syz_tun: left allmulticast mode [ 1525.903391][T18318] No such timeout policy "syz1" [ 1526.075352][T18313] netlink: 'syz.6.2804': attribute type 10 has an invalid length. [ 1526.094397][T18313] netlink: 55 bytes leftover after parsing attributes in process `syz.6.2804'. [ 1527.855979][T18339] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[18339] [ 1529.035443][T18329] tun0: tun_chr_ioctl cmd 1074025677 [ 1529.042901][T18329] tun0: linktype set to 776 [ 1530.821120][T18352] lo: entered allmulticast mode [ 1530.826500][T18354] lo: left allmulticast mode [ 1531.860838][T11322] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1532.178969][T11322] usb 2-1: Using ep0 maxpacket: 16 [ 1532.187752][T11322] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1532.204768][T18415] ptrace attach of "./syz-executor exec"[5831] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 1532.343193][T11322] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1533.024375][T11322] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1533.033840][T11322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.043033][T11322] usb 2-1: Product: syz [ 1533.048229][T11322] usb 2-1: Manufacturer: syz [ 1533.052888][T11322] usb 2-1: SerialNumber: syz [ 1533.468960][T18428] tun0: tun_chr_ioctl cmd 1074025677 [ 1533.477592][T18428] tun0: linktype set to 776 [ 1535.099877][T11322] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1535.118542][T11322] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1535.158172][T11322] usb 2-1: USB disconnect, device number 9 [ 1535.365956][T18372] udevd[18372]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1536.006912][T18119] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1536.722469][T18119] usb 4-1: Using ep0 maxpacket: 8 [ 1536.742064][T18119] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.219585][T18119] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1537.384040][T18119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.459987][T18119] usb 4-1: Product: syz [ 1537.464241][T18119] usb 4-1: Manufacturer: syz [ 1537.476055][T18119] usb 4-1: SerialNumber: syz [ 1537.565054][T18119] usb 4-1: config 0 descriptor?? [ 1537.575539][T18119] cdc_phonet 4-1:0.0: skipping garbage [ 1537.584636][T18119] cdc_phonet 4-1:0.0: probe with driver cdc_phonet failed with error -22 [ 1537.694390][T18475] ptrace attach of "./syz-executor exec"[15541] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8 [ 1537.917383][T18116] usb 4-1: USB disconnect, device number 36 [ 1538.011580][ C1] vkms_vblank_simulate: vblank timer overrun [ 1539.687774][T15553] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1539.697683][T15553] Bluetooth: hci5: Injecting HCI hardware error event [ 1539.738839][ T54] Bluetooth: hci5: hardware error 0x00 [ 1542.025129][ T54] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1542.385988][T18537] 9pnet: Unknown protocol version 9p200 [ 1542.412868][T18537] lo speed is unknown, defaulting to 1000 [ 1542.419575][T18537] lo speed is unknown, defaulting to 1000 [ 1542.432040][T18537] lo speed is unknown, defaulting to 1000 [ 1542.460721][T18537] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1542.524251][T18537] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1543.054388][T18537] lo speed is unknown, defaulting to 1000 [ 1543.062035][T18537] lo speed is unknown, defaulting to 1000 [ 1543.068985][T18537] lo speed is unknown, defaulting to 1000 [ 1543.076438][T18537] lo speed is unknown, defaulting to 1000 [ 1543.083409][T18537] lo speed is unknown, defaulting to 1000 [ 1543.090311][T18537] lo speed is unknown, defaulting to 1000 [ 1543.097371][T18537] lo speed is unknown, defaulting to 1000 [ 1543.528494][T18557] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2866'. [ 1544.915116][T18565] ptrace attach of "./syz-executor exec"[5831] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 1545.143040][T18563] block device autoloading is deprecated and will be removed. [ 1545.249033][T18563] syz.9.2866: attempt to access beyond end of device [ 1545.249033][T18563] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1547.397383][T18593] ptrace attach of "./syz-executor exec"[5831] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 1548.075828][T18598] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1549.402143][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.079944][T18125] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1551.103015][ T977] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1551.304544][T11322] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1551.328163][ T977] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 1551.346104][ T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.356711][ T977] usb 2-1: config 0 has no interface number 0 [ 1551.367865][T18606] could not allocate digest TFM handle md4-generic [ 1551.421685][ T977] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 1551.466987][T11322] usb 4-1: config 7 has an invalid interface number: 109 but max is 0 [ 1551.487109][T11322] usb 4-1: config 7 has no interface number 0 [ 1551.513241][ T977] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 1551.537712][T11322] usb 4-1: config 7 interface 109 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1551.605503][T11322] usb 4-1: config 7 interface 109 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1551.630543][ T977] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 1551.640940][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.662594][T11322] usb 4-1: config 7 interface 109 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1551.689288][ T977] usb 2-1: Product: syz [ 1551.693539][ T977] usb 2-1: Manufacturer: syz [ 1551.704325][T18125] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1551.722220][T18125] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.730674][T11322] usb 4-1: config 7 interface 109 altsetting 4 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 1551.753840][T18125] usb 10-1: config 0 descriptor?? [ 1551.754003][ T977] usb 2-1: SerialNumber: syz [ 1551.776648][T18125] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1551.797704][ T977] usb 2-1: config 0 descriptor?? [ 1551.802983][T11322] usb 4-1: config 7 interface 109 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1551.831115][ T977] HFC-S_USB 2-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 1551.859316][T11322] usb 4-1: config 7 interface 109 has no altsetting 0 [ 1551.885570][T11322] usb 4-1: New USB device found, idVendor=1965, idProduct=0018, bcdDevice=d9.4d [ 1551.895211][T11322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.913665][T11322] usb 4-1: Product: syz [ 1551.918145][T11322] usb 4-1: Manufacturer: syz [ 1551.922796][T11322] usb 4-1: SerialNumber: syz [ 1551.957371][T18627] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1551.976098][T18627] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1551.999354][T18125] gspca_cpia1: usb_control_msg 05, error -71 [ 1552.032612][T18125] gspca_cpia1: usb_control_msg 01, error -71 [ 1552.038712][T18125] cpia1 10-1:0.0: only firmware version 1 is supported (got: 0) [ 1552.084233][T18125] usb 10-1: USB disconnect, device number 7 [ 1552.141670][T18119] usb 2-1: USB disconnect, device number 10 [ 1552.397545][T11322] usbhid 4-1:7.109: couldn't find an input interrupt endpoint [ 1552.417327][T18662] netlink: 'syz.0.2895': attribute type 1 has an invalid length. [ 1552.417427][T11322] usb 4-1: USB disconnect, device number 37 [ 1552.935157][ T29] audit: type=1400 audit(1735342359.760:157): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=18681 comm="syz.1.2902" saddr=172.30.0.2 daddr=172.20.20.170 netif=wpan0 [ 1553.507004][T18699] ptrace attach of "./syz-executor exec"[17539] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8 [ 1554.733223][T18727] ptrace attach of "./syz-executor exec"[11159] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8 [ 1554.824886][ C0] vkms_vblank_simulate: vblank timer overrun [ 1554.917167][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.430426][T18795] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2938'. [ 1557.439546][T18795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2938'. [ 1557.915677][T18811] ptrace attach of "./syz-executor exec"[5831] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 1557.926125][T18809] netlink: 'syz.9.2939': attribute type 7 has an invalid length. [ 1559.079804][T18834] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2946'. [ 1560.543358][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2951'. [ 1560.590419][T18857] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2951'. [ 1562.026022][T18865] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1562.047879][T18865] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1562.306605][T18889] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2959'. [ 1562.559569][T18899] ptrace attach of "./syz-executor exec"[5822] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 1562.617438][T18896] netlink: 120 bytes leftover after parsing attributes in process `syz.6.2962'. [ 1562.763215][T18896] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1563.007845][T18908] syz.9.2965: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1563.054459][T18908] CPU: 1 UID: 0 PID: 18908 Comm: syz.9.2965 Not tainted 6.13.0-rc4-syzkaller-00069-g8379578b11d5 #0 [ 1563.065330][T18908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1563.075526][T18908] Call Trace: [ 1563.078857][T18908] [ 1563.081835][T18908] dump_stack_lvl+0x241/0x360 [ 1563.086575][T18908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1563.091836][T18908] ? __pfx__printk+0x10/0x10 [ 1563.096471][T18908] ? __rcu_read_unlock+0xa1/0x110 [ 1563.101571][T18908] warn_alloc+0x278/0x410 [ 1563.105938][T18908] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 1563.112046][T18908] ? __pfx_warn_alloc+0x10/0x10 [ 1563.116933][T18908] ? kasan_save_track+0x3f/0x80 [ 1563.121814][T18908] ? __kasan_kmalloc+0x98/0xb0 [ 1563.126623][T18908] ? xsk_setsockopt+0x598/0x950 [ 1563.131589][T18908] ? do_sock_setsockopt+0x3af/0x720 [ 1563.136818][T18908] ? __x64_sys_setsockopt+0x1ee/0x280 [ 1563.142240][T18908] ? do_syscall_64+0xf3/0x230 [ 1563.146995][T18908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.153108][T18908] __vmalloc_node_range_noprof+0x126/0x1380 [ 1563.159060][T18908] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1563.165430][T18908] ? __kasan_kmalloc+0x98/0xb0 [ 1563.170232][T18908] vmalloc_user_noprof+0x74/0x80 [ 1563.175203][T18908] ? xskq_create+0xb6/0x170 [ 1563.179733][T18908] xskq_create+0xb6/0x170 [ 1563.184097][T18908] xsk_init_queue+0xa1/0x100 [ 1563.188717][T18908] xsk_setsockopt+0x598/0x950 [ 1563.193430][T18908] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1563.198661][T18908] ? __pfx_lock_acquire+0x10/0x10 [ 1563.203712][T18908] ? __fget_files+0x2a/0x410 [ 1563.208331][T18908] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1563.213562][T18908] do_sock_setsockopt+0x3af/0x720 [ 1563.218635][T18908] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1563.224214][T18908] ? __fget_files+0x395/0x410 [ 1563.228933][T18908] ? __fget_files+0x2a/0x410 [ 1563.233552][T18908] __x64_sys_setsockopt+0x1ee/0x280 [ 1563.238786][T18908] do_syscall_64+0xf3/0x230 [ 1563.243353][T18908] ? clear_bhb_loop+0x35/0x90 [ 1563.248064][T18908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.254030][T18908] RIP: 0033:0x7f93fcf85d29 [ 1563.258512][T18908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1563.278171][T18908] RSP: 002b:00007f93fdd6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1563.286650][T18908] RAX: ffffffffffffffda RBX: 00007f93fd175fa0 RCX: 00007f93fcf85d29 [ 1563.294675][T18908] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 1563.302670][T18908] RBP: 00007f93fd001b08 R08: 0000000000000020 R09: 0000000000000000 [ 1563.310672][T18908] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1563.318672][T18908] R13: 0000000000000000 R14: 00007f93fd175fa0 R15: 00007ffdef40e088 [ 1563.326693][T18908] [ 1563.343000][T18908] Mem-Info: [ 1563.346309][T18908] active_anon:385 inactive_anon:7056 isolated_anon:0 [ 1563.346309][T18908] active_file:25932 inactive_file:34009 isolated_file:0 [ 1563.346309][T18908] unevictable:768 dirty:162 writeback:0 [ 1563.346309][T18908] slab_reclaimable:6351 slab_unreclaimable:114216 [ 1563.346309][T18908] mapped:32310 shmem:1469 pagetables:1202 [ 1563.346309][T18908] sec_pagetables:0 bounce:0 [ 1563.346309][T18908] kernel_misc_reclaimable:0 [ 1563.346309][T18908] free:1307338 free_pcp:574 free_cma:0 [ 1563.480680][T18908] Node 0 active_anon:1540kB inactive_anon:28224kB active_file:103540kB inactive_file:136036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129128kB dirty:648kB writeback:0kB shmem:4340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13124kB pagetables:4808kB sec_pagetables:0kB all_unreclaimable? no [ 1563.515595][T18919] ptrace attach of "./syz-executor exec"[17539] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8 [ 1563.590825][T18908] Node 1 active_anon:0kB inactive_anon:0kB active_file:188kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1564.760626][T18908] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1564.906600][T18908] lowmem_reserve[]: 0 2465 2466 0 0 [ 1564.912214][T18908] Node 0 DMA32 free:1292736kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1476kB inactive_anon:39552kB active_file:102772kB inactive_file:135984kB unevictable:1536kB writepending:652kB present:3129332kB managed:2552772kB mlocked:0kB bounce:0kB free_pcp:1984kB local_pcp:20kB free_cma:0kB [ 1565.082937][T18908] lowmem_reserve[]: 0 0 0 0 0 [ 1565.144380][T18908] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:768kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1565.200690][T18908] lowmem_reserve[]: 0 0 0 0 0 [ 1565.205829][T18908] Node 1 Normal free:3910992kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:188kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1565.235185][T18908] lowmem_reserve[]: 0 0 0 0 0 [ 1565.240013][T18908] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1565.253143][T18908] Node 0 DMA32: 20*4kB (UE) 573*8kB (UME) 970*16kB (UME) 751*32kB (UME) 568*64kB (UME) 116*128kB (UME) 90*256kB (UME) 74*512kB (UME) 42*1024kB (UME) 10*2048kB (UME) 262*4096kB (M) = 1292984kB [ 1565.327220][T18908] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1565.383445][T18908] Node 1 Normal: 232*4kB (UME) 48*8kB (UME) 47*16kB (UME) 224*32kB (UME) 109*64kB (UME) 34*128kB (UME) 21*256kB (UME) 6*512kB (UME) 5*1024kB (UME) 5*2048kB (UME) 944*4096kB (UM) = 3910992kB [ 1565.444538][T18908] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1565.487285][T18908] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 1565.512324][T18908] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1565.543074][T18908] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1566.409307][T18908] 64265 total pagecache pages [ 1566.419135][T18908] 0 pages in swap cache [ 1566.436009][T18908] Free swap = 124404kB [ 1566.440264][T18908] Total swap = 124996kB [ 1566.444660][T18119] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1566.502368][T18908] 2097051 pages RAM [ 1566.530444][T18908] 0 pages HighMem/MovableOnly [ 1566.535212][T18908] 427006 pages reserved [ 1566.559967][T18908] 0 pages cma reserved [ 1566.613422][T18119] usb 4-1: Using ep0 maxpacket: 32 [ 1566.655046][T18119] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1566.697278][T18119] usb 4-1: config 0 has no interface number 0 [ 1566.878328][T18119] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1567.142574][T18119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.543401][T18119] usb 4-1: Product: syz [ 1567.547661][T18119] usb 4-1: Manufacturer: syz [ 1567.552313][T18119] usb 4-1: SerialNumber: syz [ 1567.563856][T18119] usb 4-1: config 0 descriptor?? [ 1567.573340][T18119] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 1567.581787][T18119] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 1567.878412][T18119] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1567.964362][T11322] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1568.100007][T18119] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 1568.189278][T11322] usb 2-1: Using ep0 maxpacket: 8 [ 1568.217542][T11322] usb 2-1: config 5 has an invalid interface association descriptor of length 2, skipping [ 1568.241896][T11322] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.289761][T11322] usb 2-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 1568.324032][T11610] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1568.350401][T11322] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 1568.353398][T18119] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 1568.366807][T11322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.381167][T18119] usb 4-1: USB disconnect, device number 38 [ 1568.398642][T18119] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 1568.404398][T11322] usb 2-1: Product: syz [ 1568.465926][T11322] usb 2-1: Manufacturer: syz [ 1568.497068][T11610] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1568.517640][T11322] usb 2-1: SerialNumber: syz [ 1568.535611][T11610] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1568.595690][T11610] usb 10-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 1568.691632][T11610] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.756838][T11610] usb 10-1: config 0 descriptor?? [ 1568.819329][T11322] usb 2-1: USB disconnect, device number 11 [ 1569.046863][T19020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2996'. [ 1569.258134][T11610] aquacomputer_d5next 0003:0C70:F012.000D: unknown main item tag 0x0 [ 1569.286557][T11610] aquacomputer_d5next 0003:0C70:F012.000D: hidraw0: USB HID v0.00 Device [HID 0c70:f012] on usb-dummy_hcd.9-1/input0 [ 1569.476293][T11610] usb 10-1: USB disconnect, device number 8 [ 1571.989411][T19072] tun0: tun_chr_ioctl cmd 1074025677 [ 1571.995582][T19072] tun0: linktype set to 776 [ 1572.129977][T11610] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1572.226364][T19077] overlayfs: failed to clone upperpath [ 1573.256686][T18119] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1573.275245][T11610] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.455345][T18119] usb 2-1: Using ep0 maxpacket: 8 [ 1573.488130][T11610] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1573.509135][T18119] usb 2-1: config 30 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.509994][T11610] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1573.521472][T18119] usb 2-1: config 30 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1573.539508][T11610] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1573.558076][T11610] usb 10-1: SerialNumber: syz [ 1573.572015][T18119] usb 2-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 1573.597545][T18119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.083589][T18116] usb 10-1: USB disconnect, device number 9 [ 1574.102294][T18119] asus 0003:0B05:18C6.000E: hidraw0: USB HID v0.04 Device [HID 0b05:18c6] on usb-dummy_hcd.1-1/input0 [ 1574.113914][T18119] asus 0003:0B05:18C6.000E: Asus input not registered [ 1574.122932][T18119] asus 0003:0B05:18C6.000E: probe with driver asus failed with error -12 [ 1574.316346][T11322] usb 2-1: USB disconnect, device number 12 [ 1574.599431][T18116] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1574.772361][T18116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.790524][T18116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1574.800812][T18116] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1574.810054][T18116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.821289][T18116] usb 4-1: config 0 descriptor?? [ 1575.048546][T18114] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1575.191206][T11322] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1575.250922][T18114] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1575.275594][T18114] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1575.294154][T18116] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 1575.315497][T18114] usb 10-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1575.329729][T18116] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 1575.366889][T18114] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.377292][T18116] arvo 0003:1E7D:30D4.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 1575.383132][T11322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1575.396016][T18114] usb 10-1: config 0 descriptor?? [ 1575.437105][T11322] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1575.469599][T11322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.500855][T11322] usb 2-1: config 0 descriptor?? [ 1575.507826][T18116] arvo 0003:1E7D:30D4.000F: couldn't init struct arvo_device [ 1575.529336][T18116] arvo 0003:1E7D:30D4.000F: couldn't install keyboard [ 1575.562642][T18116] arvo 0003:1E7D:30D4.000F: probe with driver arvo failed with error -71 [ 1575.597178][T18116] usb 4-1: USB disconnect, device number 39 [ 1575.900152][T18114] arvo 0003:1E7D:30D4.0010: unbalanced delimiter at end of report description [ 1575.919241][T18114] arvo 0003:1E7D:30D4.0010: parse failed [ 1575.940545][T18114] arvo 0003:1E7D:30D4.0010: probe with driver arvo failed with error -22 [ 1575.978704][T11322] uclogic 0003:145F:0212.0011: interface is invalid, ignoring [ 1576.161772][T18114] usb 10-1: USB disconnect, device number 10 [ 1576.241919][T18116] usb 2-1: USB disconnect, device number 13 [ 1576.312379][T19146] netlink: 'syz.0.3042': attribute type 3 has an invalid length. [ 1577.186812][T11322] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1577.391194][T11322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1577.403249][T11322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1577.414205][T11322] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1577.423547][T11322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.435246][T11322] usb 2-1: config 0 descriptor?? [ 1577.539091][ T977] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1577.549965][T11610] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1577.714651][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1577.726056][T11610] usb 10-1: Using ep0 maxpacket: 32 [ 1577.731490][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1577.741508][ T977] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1577.756211][T11610] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1577.767633][ T977] usb 4-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 1577.777887][T11610] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1577.789069][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.798591][T11610] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1577.809772][ T977] usb 4-1: config 0 descriptor?? [ 1577.821441][T11610] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1577.834921][T11610] usb 10-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 1577.844386][T11610] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.867914][T11610] usb 10-1: config 0 descriptor?? [ 1577.893129][T11322] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 1577.900027][T11322] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 1577.906982][T11322] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 1577.914016][T11322] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 1577.920927][T11322] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 1577.928180][T11322] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 1577.935428][T11322] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 1577.953559][T11322] isku 0003:1E7D:319C.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 1578.100411][T19181] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1578.112570][T11322] isku 0003:1E7D:319C.0012: couldn't init struct isku_device [ 1578.122847][T11322] isku 0003:1E7D:319C.0012: couldn't install keyboard [ 1578.133721][T11610] usbhid 10-1:0.0: can't add hid device: -71 [ 1578.140621][T11610] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1578.150986][T11322] isku 0003:1E7D:319C.0012: probe with driver isku failed with error -71 [ 1578.172452][T11322] usb 2-1: USB disconnect, device number 14 [ 1578.190849][T11610] usb 10-1: USB disconnect, device number 11 [ 1578.261411][ T977] wacom 0003:056A:0314.0013: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 1578.278214][ T977] wacom 0003:056A:0314.0013: hidraw0: USB HID v0.00 Device [HID 056a:0314] on usb-dummy_hcd.3-1/input0 [ 1578.291368][ T977] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0314.0013/input/input28 [ 1578.470907][T11610] usb 4-1: USB disconnect, device number 40 [ 1579.100191][T18114] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1579.114302][T19204] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3070'. [ 1581.722585][T18114] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.733904][T18114] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1582.269936][T19218] usb usb8: usbfs: process 19218 (syz.3.3076) did not claim interface 0 before use [ 1582.316604][T18114] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1582.325973][T18114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.337212][T18114] usb 2-1: config 0 descriptor?? [ 1582.343440][T18114] usb 2-1: can't set config #0, error -71 [ 1582.356493][T18114] usb 2-1: USB disconnect, device number 15 [ 1582.549707][T19225] tun0: tun_chr_ioctl cmd 1074025677 [ 1582.578307][T19225] tun0: linktype set to 776 [ 1583.477456][T11322] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1584.092681][T11322] usb 4-1: Using ep0 maxpacket: 32 [ 1585.162215][T11322] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1585.170339][T11322] usb 4-1: config 0 has no interface number 0 [ 1585.179049][T11322] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1585.188265][T11322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.196443][T11322] usb 4-1: Product: syz [ 1585.200661][T11322] usb 4-1: Manufacturer: syz [ 1585.205596][T11322] usb 4-1: SerialNumber: syz [ 1585.283056][T11322] usb 4-1: config 0 descriptor?? [ 1585.291327][T11322] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1585.300213][T11322] usb 4-1: selecting invalid altsetting 1 [ 1585.332897][T11322] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1585.350353][T11322] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1585.386397][T11322] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1585.394802][T11322] usb 4-1: media controller created [ 1585.440827][T11322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1585.576834][T11322] usb 4-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 1585.610928][T11322] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 1585.730941][T11322] DVB: Unable to find symbol mxl5005s_attach() [ 1585.792752][T11322] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1585.951121][T11322] usb 4-1: USB disconnect, device number 41 [ 1586.227387][T19275] 9pnet: Unknown protocol version 9p200 [ 1586.249303][T19275] siw: device registration error -23 [ 1587.330553][T19285] tun0: tun_chr_ioctl cmd 1074025677 [ 1587.337834][T19285] tun0: linktype set to 776 [ 1591.544011][T18119] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1591.736549][T18119] usb 4-1: Using ep0 maxpacket: 16 [ 1591.751639][T18119] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1591.774560][T18119] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1591.786427][T18119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.955779][T18119] usb 4-1: config 0 descriptor?? [ 1593.024709][T18119] lenovo 0003:17EF:60EE.0014: unknown main item tag 0x0 [ 1593.032133][T18119] lenovo 0003:17EF:60EE.0014: unknown main item tag 0x0 [ 1593.039728][T18119] lenovo 0003:17EF:60EE.0014: unknown main item tag 0x0 [ 1593.047033][T18119] lenovo 0003:17EF:60EE.0014: unknown main item tag 0x0 [ 1593.054171][T18119] lenovo 0003:17EF:60EE.0014: unknown main item tag 0x0 [ 1593.190302][ T8] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1593.205641][T18119] lenovo 0003:17EF:60EE.0014: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0 [ 1593.242939][T18119] lenovo 0003:17EF:60EE.0014: Failed to switch F7/9/11 mode: -71 [ 1593.253006][T18119] lenovo 0003:17EF:60EE.0014: Failed to switch middle button: -71 [ 1593.271942][T18119] lenovo 0003:17EF:60EE.0014: Fn-lock setting failed: -71 [ 1593.286812][T18119] lenovo 0003:17EF:60EE.0014: Sensitivity setting failed: -71 [ 1593.332003][T18119] usb 4-1: USB disconnect, device number 42 [ 1593.356416][ T8] usb 10-1: Using ep0 maxpacket: 16 [ 1593.374077][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1593.411436][ T8] usb 10-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1593.421785][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.434632][ T8] usb 10-1: config 0 descriptor?? [ 1593.907694][ T8] aquacomputer_d5next 0003:0C70:F011.0015: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.9-1/input0 [ 1594.193029][ T8] usb 10-1: USB disconnect, device number 12 [ 1598.383144][T19427] sctp: [Deprecated]: syz.3.3152 (pid 19427) Use of int in max_burst socket option deprecated. [ 1598.383144][T19427] Use struct sctp_assoc_value instead [ 1598.648125][T19439] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3158'. [ 1599.755211][T19448] netpci0: tun_chr_ioctl cmd 1074025677 [ 1599.776343][T19448] netpci0: linktype set to 65534 [ 1599.819121][ T54] Bluetooth: hci3: adv larger than maximum supported [ 1599.819234][ T54] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1600.008370][T19457] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1600.018397][T19457] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1600.039106][T19456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1600.272358][T19465] KVM: debugfs: duplicate directory 19465-7 [ 1602.124173][T19482] netlink: 'syz.3.3175': attribute type 1 has an invalid length. [ 1602.908069][T19505] overlayfs: failed to clone upperpath [ 1603.112653][T19509] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3184'. [ 1603.353822][T19514] KVM: debugfs: duplicate directory 19514-7 [ 1607.321683][T19579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3211'. [ 1607.331257][T19579] bridge_: renamed from (while UP) [ 1608.740414][T19603] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3222'. [ 1612.819241][T19679] ptrace attach of "./syz-executor exec"[5831] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 1613.914844][T11610] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1614.284853][T11610] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1614.394333][T11610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.713747][T11610] usb 2-1: Product: syz [ 1614.822403][T11610] usb 2-1: Manufacturer: syz [ 1614.928991][T11610] usb 2-1: SerialNumber: syz [ 1614.978997][T11610] usb 2-1: config 0 descriptor?? [ 1615.149342][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1615.641356][T11322] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1616.174622][T11610] mos7840 2-1:0.0: required endpoints missing [ 1616.205503][T11610] usb 2-1: USB disconnect, device number 16 [ 1616.263570][T11322] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1616.328910][T11322] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1616.343814][T11322] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1616.353314][T11322] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.361571][T11322] usb 10-1: Product: syz [ 1616.365876][T11322] usb 10-1: Manufacturer: syz [ 1616.371452][T11322] usb 10-1: SerialNumber: syz [ 1616.380237][T11322] usb 10-1: config 0 descriptor?? [ 1616.389451][T19712] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1616.396800][T19712] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1616.449527][T19721] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3262'. [ 1616.847099][T19712] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1616.856157][T19712] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1618.100565][T11322] dm9601 10-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1618.114306][T11322] usb 10-1: USB disconnect, device number 13 [ 1618.142166][T19746] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1619.053132][T19760] loop9: detected capacity change from 0 to 7 [ 1619.086011][T15541] Dev loop9: unable to read RDB block 7 [ 1619.091703][T15541] loop9: unable to read partition table [ 1619.104502][T15541] loop9: partition table beyond EOD, truncated [ 1619.233682][T19760] Dev loop9: unable to read RDB block 7 [ 1619.239436][T19760] loop9: unable to read partition table [ 1619.247108][T19760] loop9: partition table beyond EOD, truncated [ 1619.254075][T19760] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1619.715687][T19767] ptrace attach of "./syz-executor exec"[5822] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 1619.995617][T19776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3284'. [ 1620.056011][T18116] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1620.163311][T19778] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3285'. [ 1620.269562][T18116] usb 10-1: Using ep0 maxpacket: 32 [ 1620.278373][T18116] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1620.302994][T18116] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1620.333946][T18116] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1620.343113][T18116] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1620.401364][T18116] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1620.430246][T18116] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1620.466007][T18116] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1620.488824][T18116] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.514872][T18116] usb 10-1: config 0 descriptor?? [ 1620.779285][T18116] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1621.661757][T18114] usb 10-1: USB disconnect, device number 14 [ 1621.674693][T18114] usblp0: removed [ 1622.097695][T11322] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1622.987329][T11322] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.997669][T11322] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1623.077168][T11322] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1623.103392][T11322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1623.111478][T11322] usb 2-1: SerialNumber: syz [ 1623.308808][T19816] lo speed is unknown, defaulting to 1000 [ 1623.367320][T11322] usb 2-1: 0:2 : does not exist [ 1623.426196][T11322] usb 2-1: USB disconnect, device number 17 [ 1623.665798][T18372] udevd[18372]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1623.763076][T19830] ptrace attach of "./syz-executor exec"[5822] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 1625.358433][T19850] batadv_slave_1: entered promiscuous mode [ 1625.657608][T19844] batadv_slave_1: left promiscuous mode [ 1627.094295][T19893] ptrace attach of "./syz-executor exec"[15541] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8 [ 1629.149554][T19921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3335'. [ 1631.125397][T11322] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1631.295879][T11322] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 1631.307212][T11322] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1631.334913][T11322] usb 2-1: config 0 has no interface number 0 [ 1631.356095][T11322] usb 2-1: config 0 interface 18 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1631.473898][T11322] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 1631.550375][T11322] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1631.598764][T11322] usb 2-1: Manufacturer: syz [ 1631.924189][T11322] usb 2-1: config 0 descriptor?? [ 1632.220453][T18114] usb 2-1: USB disconnect, device number 18 [ 1633.194129][T19959] ptrace attach of "./syz-executor exec"[11159] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8 [ 1633.555913][T19974] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3356'. [ 1636.910649][T20025] overlayfs: failed to clone upperpath [ 1637.539671][T20032] lo speed is unknown, defaulting to 1000 [ 1637.916514][T20016] ptrace attach of "./syz-executor exec"[17539] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8 [ 1638.593513][T20036] overlayfs: failed to decode file handle (len=10, type=78, flags=0, err=-22) [ 1638.684723][ C1] vkms_vblank_simulate: vblank timer overrun [ 1641.703399][T11610] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1644.184778][T18116] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 1644.294508][T15553] Bluetooth: hci4: sending frame failed (-49) [ 1644.303671][ T54] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 1644.368396][T18116] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1644.375937][T18116] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1644.397752][T18116] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1644.429684][T18116] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1644.451577][T18116] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1644.503534][T18116] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1644.514126][T18116] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1644.524619][T18116] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1644.534870][T18116] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1644.546364][T18116] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1644.603266][T18116] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1644.610874][T18116] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1644.621188][T18116] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1644.631583][T18116] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1644.643018][T18116] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1644.672856][T18116] usb 2-1: string descriptor 0 read error: -22 [ 1644.679896][T18116] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1644.756100][T18116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.932776][T20084] ptrace attach of "./syz-executor exec"[5831] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 1645.590843][T18116] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1645.681964][ C1] vkms_vblank_simulate: vblank timer overrun [ 1645.701265][T20090] tun0: tun_chr_ioctl cmd 1074025677 [ 1645.707382][T20090] tun0: linktype set to 776 [ 1645.879675][T18116] usb 2-1: USB disconnect, device number 19 [ 1646.082270][ T29] audit: type=1326 audit(1735342446.884:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20094 comm="syz.0.3396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e2ad85d29 code=0x0 [ 1646.408897][T18125] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1646.589760][T18125] usb 4-1: Using ep0 maxpacket: 32 [ 1646.597192][T18125] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1646.606068][T18125] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1646.628644][T18125] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1646.660603][T18125] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1646.676731][T18125] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1646.685184][T18125] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1646.695028][T18125] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1646.703665][T18125] usb 4-1: Product: syz [ 1646.709252][T18125] usb 4-1: Manufacturer: syz [ 1646.713896][T18125] usb 4-1: SerialNumber: syz [ 1646.729700][T18125] usb 4-1: config 0 descriptor?? [ 1646.737187][T18125] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1646.749711][T18125] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1646.886432][T20118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3404'. [ 1647.078624][T18125] usb 4-1: USB disconnect, device number 44 [ 1647.078687][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 1647.094597][T18125] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1647.440602][T20126] ptrace attach of "./syz-executor exec"[5822] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 1648.701549][T20118] team0 (unregistering): Port device team_slave_0 removed [ 1648.792747][ C1] vkms_vblank_simulate: vblank timer overrun [ 1649.486513][T20118] team0 (unregistering): Port device team_slave_1 removed [ 1649.864769][T20155] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3417'. [ 1649.914810][T20157] ptrace attach of "./syz-executor exec"[5822] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 1651.302909][T20171] ptrace attach of "./syz-executor exec"[15541] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8 [ 1652.644535][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1652.735793][ C1] vkms_vblank_simulate: vblank timer overrun [ 1652.767300][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1652.775300][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1652.783555][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.292573][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.517590][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.560238][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.589832][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.613484][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.621196][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.639438][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.654713][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.668309][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.686962][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.705498][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.715803][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.731076][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.738555][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.763148][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.771040][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.781881][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.789478][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.797033][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.804519][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.812097][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.819708][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.828243][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.835743][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.843252][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.850757][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.852892][T20197] netlink: 'syz.0.3429': attribute type 3 has an invalid length. [ 1653.858204][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.858274][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.858302][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.858330][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.858358][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.858387][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.858416][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.858445][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.858475][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.858504][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.858540][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.858569][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.858597][T18119] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1653.860304][T18119] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1654.634283][T20210] ptrace attach of "./syz-executor exec"[5831] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 1659.607445][T20264] tun0: tun_chr_ioctl cmd 1074025677 [ 1659.739318][T20264] tun0: linktype set to 776 [ 1659.795419][T20269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3452'. [ 1659.897509][T20266] lo speed is unknown, defaulting to 1000 [ 1660.364823][T20280] ptrace attach of "./syz-executor exec"[5831] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 1661.140785][T20287] netlink: 'syz.1.3456': attribute type 10 has an invalid length. [ 1661.378380][T20290] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3458'. [ 1665.893382][T20316] gtp0: entered promiscuous mode [ 1666.407506][T20330] ptrace attach of "./syz-executor exec"[15541] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8 [ 1670.434876][T20354] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3477'. [ 1670.526035][ C1] vkms_vblank_simulate: vblank timer overrun [ 1670.697842][T18125] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1670.814861][T18119] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1670.894112][T18125] usb 2-1: config index 0 descriptor too short (expected 31, got 27) [ 1670.908997][T18125] usb 2-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1670.976012][T18125] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1670.985966][T18119] usb 10-1: Using ep0 maxpacket: 8 [ 1671.004262][T18119] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1671.065450][T18125] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 1671.080904][T18119] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1671.116075][T18125] usb 2-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 1671.133057][T18119] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1671.144579][T18125] usb 2-1: Product: syz [ 1671.163031][T18125] usb 2-1: Manufacturer: syz [ 1671.175163][T18125] usb 2-1: SerialNumber: syz [ 1671.182967][T18119] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1671.302892][T18119] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1671.431802][T18119] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.761987][T18119] usb 10-1: GET_CAPABILITIES returned 0 [ 1671.767923][T18119] usbtmc 10-1:16.0: can't read capabilities [ 1672.003991][ T8] usb 10-1: USB disconnect, device number 15 [ 1672.114341][T20371] ptrace attach of "./syz-executor exec"[5831] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 1672.784669][T18125] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1672.875862][ C1] vkms_vblank_simulate: vblank timer overrun [ 1673.072026][T18125] usb 2-1: USB disconnect, device number 20 [ 1673.292472][T20355] usblp0: removed [ 1674.522770][T20411] ptrace attach of "./syz-executor exec"[5822] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 1675.505608][T20420] overlayfs: failed to clone upperpath [ 1677.689633][T20437] loop9: detected capacity change from 0 to 7 [ 1677.709458][T20437] loop9: [POWERTEC] p1 p2 [ 1677.714307][T20437] loop9: p1 size 139 extends beyond EOD, truncated [ 1677.766836][T20437] loop9: p2 size 18 extends beyond EOD, truncated [ 1677.810962][T18345] udevd[18345]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1677.826692][T18372] udevd[18372]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1679.031733][T20454] ptrace attach of "./syz-executor exec"[15541] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8 [ 1680.762251][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1681.639025][T20478] overlayfs: failed to clone upperpath [ 1683.633334][T20506] ptrace attach of "./syz-executor exec"[5822] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 1685.113046][T20510] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3524'. [ 1685.204324][ C1] vkms_vblank_simulate: vblank timer overrun [ 1687.219136][T20524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3529'. [ 1687.229920][T20522] kvm: pic: non byte write [ 1687.329538][T20524] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1687.378064][T20523] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1687.426530][T20523] vlan3: entered promiscuous mode [ 1687.455693][T20523] bond6: entered promiscuous mode [ 1687.465445][T20523] ip6gretap1: entered promiscuous mode [ 1687.479173][T20523] vlan3: entered allmulticast mode [ 1687.489427][T20523] bond6: entered allmulticast mode [ 1687.495323][T20523] ip6gretap1: entered allmulticast mode [ 1687.589487][T18125] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1687.596084][T20533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1687.793478][T20540] overlayfs: failed to clone upperpath [ 1687.813579][T18125] usb 10-1: Using ep0 maxpacket: 8 [ 1687.826005][T18125] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1687.853765][T18125] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1687.877566][T18125] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1687.887036][T18125] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.895329][T18125] usb 10-1: Product: syz [ 1687.902722][T18125] usb 10-1: Manufacturer: syz [ 1687.912431][T18125] usb 10-1: SerialNumber: syz [ 1687.942963][T18125] usb 10-1: config 0 descriptor?? [ 1687.969081][T18125] streamzap 10-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1688.208791][T11322] usb 10-1: USB disconnect, device number 16 [ 1688.346962][T20549] ptrace attach of "./syz-executor exec"[11159] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8 [ 1690.322902][T20561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1690.497085][T20561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1690.706392][T20561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1691.679981][T20575] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1691.692418][T20575] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1691.739602][T20575] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1691.819144][T20575] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1691.828852][T20575] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1691.839924][T20575] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1691.974889][T20573] lo speed is unknown, defaulting to 1000 [ 1693.479921][T20597] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3549'. [ 1694.089213][T20575] Bluetooth: hci4: command tx timeout [ 1694.321174][T20617] ptrace attach of "./syz-executor exec"[15541] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8 [ 1694.896091][T20621] overlayfs: failed to clone upperpath [ 1695.474030][ T7921] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.821598][T20628] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3556'. [ 1695.901208][ T7921] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.165080][T20573] chnl_net:caif_netlink_parms(): no params data found [ 1696.325563][T20575] Bluetooth: hci4: command tx timeout [ 1696.468078][ T7921] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.849026][ T7921] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.543961][T20573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.567626][T20573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.584381][T20573] bridge_slave_0: entered allmulticast mode [ 1697.600441][T20573] bridge_slave_0: entered promiscuous mode [ 1697.615266][T20573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.646479][T20573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.660129][T20573] bridge_slave_1: entered allmulticast mode [ 1697.667492][T20573] bridge_slave_1: entered promiscuous mode [ 1697.801491][T20573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1698.061916][T20573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1698.855208][T20575] Bluetooth: hci4: command tx timeout [ 1699.099520][T20573] team0: Port device team_slave_0 added [ 1699.189095][T20573] team0: Port device team_slave_1 added [ 1700.632108][ T7921] bridge_slave_1: left allmulticast mode [ 1700.641545][ T7921] bridge_slave_1: left promiscuous mode [ 1700.672876][ T7921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.742885][ T7921] bridge_slave_0: left allmulticast mode [ 1700.748842][ T7921] bridge_slave_0: left promiscuous mode [ 1700.754653][ T7921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.015771][T20575] Bluetooth: hci4: command tx timeout [ 1701.093437][T20693] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1705.015679][ T7921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1705.315891][ T7921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1705.357699][ T7921] bond0 (unregistering): Released all slaves [ 1705.697618][T20573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1705.720182][T20573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1705.847208][T20573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1705.931548][T20573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1705.965559][T20573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1706.083358][T20573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1706.317473][T20573] hsr_slave_0: entered promiscuous mode [ 1706.338757][T20573] hsr_slave_1: entered promiscuous mode [ 1706.362978][T20573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1706.387606][T20573] Cannot create hsr debugfs directory [ 1707.327396][ T7921] hsr_slave_0: left promiscuous mode [ 1707.464968][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1707.483596][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1707.492959][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1707.501272][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1707.602696][ T7921] hsr_slave_1: left promiscuous mode [ 1707.607429][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1707.617874][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1707.846488][ T7921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1707.894299][ T7921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1708.046653][ T7921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1708.114254][ T7921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1708.429774][ T7921] veth1_macvtap: left promiscuous mode [ 1708.443908][ T7921] veth0_macvtap: left promiscuous mode [ 1708.454809][ T7921] veth1_vlan: left promiscuous mode [ 1708.468092][ T7921] veth0_vlan: left promiscuous mode [ 1709.835120][ T54] Bluetooth: hci3: command tx timeout [ 1711.830787][T20772] netlink: 'syz.0.3591': attribute type 10 has an invalid length. [ 1711.838851][T20772] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.3591'. [ 1711.848285][T20772] openvswitch: netlink: Message has 7 unknown bytes. [ 1712.059786][ T54] Bluetooth: hci3: command tx timeout [ 1713.330775][T20738] lo speed is unknown, defaulting to 1000 [ 1713.919856][T20783] tun0: tun_chr_ioctl cmd 1074025677 [ 1713.925738][T20783] tun0: linktype set to 776 [ 1714.273496][ T54] Bluetooth: hci3: command tx timeout [ 1714.496490][T18116] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1714.559260][T20573] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1714.582147][T20573] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.754616][T18116] usb 10-1: Using ep0 maxpacket: 8 [ 1714.838003][T18116] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 1714.848960][T18116] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1714.881294][T18116] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1714.902110][T18116] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1714.923073][T18116] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1714.924638][T20573] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1714.943961][T18116] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.949585][T20573] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.978377][T18116] usb 10-1: config 0 descriptor?? [ 1714.987008][T20738] chnl_net:caif_netlink_parms(): no params data found [ 1714.992516][ T7921] IPVS: stop unused estimator thread 0... [ 1715.010061][T20788] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1715.219115][T20573] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1715.242407][T20573] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.281761][T18116] usb 10-1: USB disconnect, device number 17 [ 1715.285055][ T54] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1715.451980][T20573] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1715.489579][T20573] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.564532][T20738] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.576287][T20738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.590645][T20738] bridge_slave_0: entered allmulticast mode [ 1715.598108][T20738] bridge_slave_0: entered promiscuous mode [ 1715.606152][T20738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.613544][T20738] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.620950][T20738] bridge_slave_1: entered allmulticast mode [ 1715.628182][T20738] bridge_slave_1: entered promiscuous mode [ 1715.744340][T20738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1715.788046][T20738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1716.053248][T20838] overlayfs: failed to clone upperpath [ 1716.183670][T20738] team0: Port device team_slave_0 added [ 1716.237363][T20738] team0: Port device team_slave_1 added [ 1716.495990][T20575] Bluetooth: hci3: command tx timeout [ 1718.462888][T20738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1718.470086][T20738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1719.016293][T20738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1719.488708][T20573] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1719.652136][T20738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1719.669789][T20738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1719.698106][T20738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1719.729615][T20573] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1719.799360][T20573] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1719.853856][T20573] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1719.946871][T20738] hsr_slave_0: entered promiscuous mode [ 1719.971703][T20738] hsr_slave_1: entered promiscuous mode [ 1719.993578][T20738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1720.001224][T20738] Cannot create hsr debugfs directory [ 1720.270203][T11610] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1720.494326][T11610] usb 10-1: Using ep0 maxpacket: 16 [ 1720.511884][T11610] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1720.579717][T11610] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1720.632977][T11610] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1720.691974][T11610] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1720.724259][T11610] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.769848][T11610] usb 10-1: config 0 descriptor?? [ 1721.292288][T11610] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 1721.311210][T11610] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 1721.328478][T11610] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 1721.343896][T11610] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 1721.358768][T11610] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 1721.388258][T11610] input: HID 0955:7214 Haptics as /devices/virtual/input/input33 [ 1721.537118][T11610] shield 0003:0955:7214.0017: Registered Thunderstrike controller [ 1721.580670][T11610] shield 0003:0955:7214.0017: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 1721.687210][ T8] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1721.729371][T11610] usb 10-1: USB disconnect, device number 18 [ 1721.750394][T20573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1721.774303][T20573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1721.781361][ T8] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1721.929858][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.937195][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1722.213074][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.220448][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1722.604678][ T8] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1722.617283][ T8] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1725.112520][ T8] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1725.315807][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1725.374799][ T8] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1725.440424][ T8] usb 4-1: config 0 has no interface number 0 [ 1725.971070][T20738] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1726.049933][T20738] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1726.070505][ T8] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1726.104146][T20738] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1726.114505][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.138729][ T8] usb 4-1: Product: syz [ 1726.142976][ T8] usb 4-1: Manufacturer: syz [ 1726.147612][ T8] usb 4-1: SerialNumber: syz [ 1726.191001][ T8] usb 4-1: config 0 descriptor?? [ 1726.198914][ T8] smsc95xx v2.0.0 [ 1726.203760][T20738] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1726.273451][T20573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1726.467107][T20573] veth0_vlan: entered promiscuous mode [ 1726.667423][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1726.698585][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1727.156817][T20573] veth1_vlan: entered promiscuous mode [ 1727.228256][T20738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1727.256349][T20573] veth0_macvtap: entered promiscuous mode [ 1727.276651][T20573] veth1_macvtap: entered promiscuous mode [ 1727.344782][T20738] 8021q: adding VLAN 0 to HW filter on device team0 [ 1727.367396][T20573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.389012][T20573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.439247][T20573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.496888][T20573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.528889][T20573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.584716][T20573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.637766][T20573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.648572][T20573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.660726][T20573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1727.678195][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1727.685383][ T5950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1727.968604][T20573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.206227][T20573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.571031][T20573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.614101][T20573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.645258][T20573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.676030][T20573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.686127][T20573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.696902][T20573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.706956][T20573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.717671][T20573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.734935][T20573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1728.781344][T20573] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.791044][T20573] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.799838][T20573] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.808815][T20573] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.980837][T14396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.988151][T14396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1730.318362][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 1730.379628][ T8] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1730.926849][T20738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1731.122443][ T8] usb 4-1: USB disconnect, device number 45 [ 1731.463740][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1731.489352][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1732.024301][T18119] hid-generic 0000:0003:0000.0018: item fetching failed at offset 0/2 [ 1732.090360][T18119] hid-generic 0000:0003:0000.0018: probe with driver hid-generic failed with error -22 [ 1733.311604][ T7810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1733.337619][ T7810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1733.694727][T20738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1734.160533][T20738] veth0_vlan: entered promiscuous mode [ 1734.226455][T20738] veth1_vlan: entered promiscuous mode [ 1734.400767][T20738] veth0_macvtap: entered promiscuous mode [ 1734.418875][T20738] veth1_macvtap: entered promiscuous mode [ 1734.464075][T20738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1734.541670][T20738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.551585][T20738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1734.734188][T20738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.744103][T20738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1734.756216][T20738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.777994][T20738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1734.788884][T20738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.810198][T20738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1734.967595][T20738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.030572][T20738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1735.115544][T20738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1735.127872][T20738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.138293][T20738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1735.149026][T20738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.161180][T20738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1735.173327][T20738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.184445][T20738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1735.274969][T20738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.452983][T20738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1735.464549][T20738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.475583][T20738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1735.587423][T20738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.608569][T20738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1735.836410][T20738] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.845266][T20738] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.854504][T20738] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.863545][T20738] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.124676][T21036] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 1737.251616][T21038] sctp: [Deprecated]: syz.9.3645 (pid 21038) Use of int in maxseg socket option. [ 1737.251616][T21038] Use struct sctp_assoc_value instead [ 1738.822038][ T6595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1738.846104][ T6595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1738.989321][ T54] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1739.640771][T21051] mkiss: ax0: crc mode is auto. [ 1739.655918][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.683818][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.901517][T18119] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1743.083596][T18119] usb 4-1: Using ep0 maxpacket: 8 [ 1743.213381][T18119] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 1743.260435][T18119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.349767][T18119] usb 4-1: Product: syz [ 1743.397815][T18119] usb 4-1: Manufacturer: syz [ 1743.458440][T18119] usb 4-1: SerialNumber: syz [ 1743.636034][T18119] usb 4-1: config 0 descriptor?? [ 1743.659283][T18119] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 1743.893709][T18119] gspca_sn9c2028: read1 error -32 [ 1744.505269][T18119] gspca_sn9c2028: read1 error -110 [ 1744.538776][T21129] overlayfs: failed to clone upperpath [ 1744.546641][T18119] gspca_sn9c2028: read1 error -32 [ 1744.558190][T18119] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1746.434107][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1747.598765][T18119] usb 4-1: USB disconnect, device number 46 [ 1749.072986][T21172] kvm: kvm [21168]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x700009e3b [ 1749.238140][T21173] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3671'. [ 1749.383099][T11610] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1749.716298][T11610] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.726982][T11610] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1749.737062][T11610] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.748236][T11610] usb 6-1: config 0 descriptor?? [ 1749.783699][T11610] pwc: Askey VC010 type 2 USB webcam detected. [ 1751.037193][T11610] pwc: send_video_command error -71 [ 1751.042490][T11610] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1751.050312][T11610] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1751.088960][T11610] usb 6-1: USB disconnect, device number 6 [ 1752.088689][T21210] VFS: could not find a valid V7 on nullb0. [ 1752.096588][T21210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3675'. [ 1752.694054][T11610] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1757.644695][T21252] random: crng reseeded on system resumption [ 1757.954144][T21258] syz.3.3687 (21258): drop_caches: 2 [ 1758.320999][T21258] syz.3.3687 (21258): drop_caches: 2 [ 1758.946693][T21265] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20000 [ 1764.766815][T21324] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3701'. [ 1764.780420][T21324] netlink: 'syz.9.3701': attribute type 1 has an invalid length. [ 1764.852765][T21324] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3701'. [ 1765.101629][T21330] syz_tun: entered allmulticast mode [ 1765.119955][T21330] lo: entered allmulticast mode [ 1765.131229][T21330] lo: left allmulticast mode [ 1765.136669][T21330] syz_tun: left allmulticast mode [ 1768.758939][T21355] batadv_slave_1: entered promiscuous mode [ 1768.781691][T21355] bridge0: entered promiscuous mode [ 1768.862454][T21355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3708'. [ 1768.884167][T21356] team_slave_0: entered promiscuous mode [ 1768.889941][T21356] team_slave_1: entered promiscuous mode [ 1768.934472][T21355] batadv0: left allmulticast mode [ 1768.968263][T21355] batadv0: left promiscuous mode [ 1769.025386][T21355] bridge0: port 1(batadv0) entered disabled state [ 1769.093119][T21355] vlan2: left allmulticast mode [ 1769.108008][T21355] bond0: left allmulticast mode [ 1769.155899][T21355] bond_slave_0: left allmulticast mode [ 1769.192364][T21355] bond_slave_1: left allmulticast mode [ 1769.443667][T21355] dummy0: left allmulticast mode [ 1769.475629][T21355] syz_tun: left allmulticast mode [ 1769.513233][T21355] netdevsim netdevsim0 : left allmulticast mode [ 1769.669727][T21355] vlan2: left promiscuous mode [ 1769.710784][T21355] bond0: left promiscuous mode [ 1769.744678][T21355] bond_slave_0: left promiscuous mode [ 1769.768124][T21355] bond_slave_1: left promiscuous mode [ 1769.800090][T21355] dummy0: left promiscuous mode [ 1769.808539][T21355] netdevsim netdevsim0 : left promiscuous mode [ 1769.836225][T21355] bridge0: port 3(vlan2) entered disabled state [ 1769.886545][T21355] bridge_slave_1: left allmulticast mode [ 1769.906085][T21355] bridge_slave_1: left promiscuous mode [ 1769.911955][T21355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.173179][T21350] batadv_slave_1: left promiscuous mode [ 1771.352559][T21397] overlayfs: failed to clone upperpath [ 1772.550922][T21408] overlayfs: failed to clone upperpath [ 1774.474432][T21434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3721'. [ 1774.483737][T21434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3721'. [ 1774.526764][T21434] team0: entered promiscuous mode [ 1774.533186][T21437] sctp: [Deprecated]: syz.5.3718 (pid 21437) Use of int in max_burst socket option deprecated. [ 1774.533186][T21437] Use struct sctp_assoc_value instead [ 1774.549451][T21434] team_slave_0: entered promiscuous mode [ 1774.555564][T21434] team_slave_1: entered promiscuous mode [ 1774.571862][T21434] batadv_slave_1: entered promiscuous mode [ 1774.579199][T21434] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1774.587039][T21434] Cannot create hsr debugfs directory [ 1778.647445][T21474] netlink: 'syz.9.3727': attribute type 1 has an invalid length. [ 1778.659275][T21474] netlink: 'syz.9.3727': attribute type 3 has an invalid length. [ 1778.667956][T21474] netlink: 216 bytes leftover after parsing attributes in process `syz.9.3727'. [ 1781.219779][T15453] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1781.420075][T15453] usb 6-1: Using ep0 maxpacket: 16 [ 1781.442500][T15453] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1781.468455][T15453] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1781.508880][T15453] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.297755][T15453] usb 6-1: Product: syz [ 1782.302012][T15453] usb 6-1: Manufacturer: syz [ 1782.306761][T15453] usb 6-1: SerialNumber: syz [ 1782.435939][T15453] usb 6-1: config 0 descriptor?? [ 1782.443531][T15453] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 1783.283169][T21495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1783.377357][T21495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1783.399133][T15453] usb 6-1: clie_3_5_startup: get interface number failed: -71 [ 1783.406812][T15453] visor 6-1:0.0: probe with driver visor failed with error -71 [ 1783.428799][T15453] usb 6-1: USB disconnect, device number 8 [ 1786.766916][T21556] overlayfs: failed to clone upperpath [ 1789.772456][T21587] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1794.700584][T21597] rose0: entered allmulticast mode [ 1794.717379][T21597] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1795.489518][T11322] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1795.639461][T11322] usb 6-1: device descriptor read/64, error -71 [ 1796.987133][T11322] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1798.047696][T11322] usb 6-1: device descriptor read/64, error -71 [ 1798.177885][T11322] usb usb6-port1: attempt power cycle [ 1798.662824][T21652] nbd: must specify a device to reconfigure [ 1803.322873][T11322] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 1806.312637][T11322] usb 6-1: device not accepting address 12, error -71 [ 1807.746872][T21698] netlink: 'syz.5.3769': attribute type 10 has an invalid length. [ 1807.755354][T21698] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3769'. [ 1807.766523][T21698] ipvlan1: entered promiscuous mode [ 1807.771879][T21698] ipvlan1: entered allmulticast mode [ 1807.777715][T21698] veth0_vlan: entered allmulticast mode [ 1807.804355][T21698] bridge0: port 3(ipvlan1) entered blocking state [ 1807.811614][T21698] bridge0: port 3(ipvlan1) entered disabled state [ 1807.845716][T21698] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1809.525378][T21706] ptrace attach of "./syz-executor exec"[5831] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 1810.342436][T21709] hub 9-0:1.0: USB hub found [ 1810.470287][T21709] hub 9-0:1.0: 1 port detected [ 1812.283575][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1817.295703][T21757] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3783'. [ 1818.733544][T21790] tun0: tun_chr_ioctl cmd 1074025677 [ 1818.739161][T21790] tun0: linktype set to 776 [ 1820.238029][T21784] batadv0: entered promiscuous mode [ 1820.378122][T21802] openvswitch: netlink: Message has 8 unknown bytes. [ 1821.229071][T21784] batadv0: left promiscuous mode [ 1821.302132][T21808] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:21 [ 1821.467581][T21814] Invalid source name [ 1821.499247][T21813] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1821.563294][T21808] JFS: charset not found [ 1824.428180][T21829] Cannot find add_set index 0 as target [ 1826.370317][T20575] Bluetooth: hci4: command 0x0406 tx timeout [ 1828.983350][T21875] tun0: tun_chr_ioctl cmd 1074025677 [ 1828.997503][T21875] tun0: linktype set to 776 [ 1829.277355][T21877] 9pnet_fd: Insufficient options for proto=fd [ 1831.923202][T18116] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1832.137493][T18116] usb 3-1: device descriptor read/64, error -71 [ 1832.392605][T18116] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1832.681163][T18116] usb 3-1: device descriptor read/64, error -71 [ 1832.818057][T18116] usb usb3-port1: attempt power cycle [ 1834.511148][T18116] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1834.575258][T18116] usb 3-1: device descriptor read/8, error -71 [ 1842.003524][T21978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3822'. [ 1842.610998][T20575] Bluetooth: hci3: command 0x0406 tx timeout [ 1843.052367][T21989] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 1844.589460][T22002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3828'. [ 1846.930707][T22030] overlayfs: failed to resolve './file1': -2 [ 1848.498435][T22050] overlayfs: missing 'lowerdir' [ 1850.323604][T22062] ptrace attach of "./syz-executor exec"[20738] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8 [ 1851.241720][T22071] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 1852.213146][T22083] loop9: detected capacity change from 0 to 6 [ 1852.240533][T22083] Dev loop9: unable to read RDB block 6 [ 1852.246510][T22083] loop9: unable to read partition table [ 1852.252488][T22083] loop9: partition table beyond EOD, truncated [ 1852.259071][T22083] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 1852.259071][T22083] ) failed (rc=-5) [ 1852.515672][ T8] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1853.142084][ T8] usb 6-1: config 0 has an invalid interface number: 189 but max is 0 [ 1853.153362][ T8] usb 6-1: config 0 has no interface number 0 [ 1853.159756][ T8] usb 6-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1853.171013][ T8] usb 6-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1853.182902][ T8] usb 6-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 1853.194281][ T8] usb 6-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1853.204793][ T8] usb 6-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1853.336119][ T8] usb 6-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 1853.345390][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.357946][ T8] usb 6-1: Product: syz [ 1853.365310][ T8] usb 6-1: Manufacturer: syz [ 1853.390659][ T8] usb 6-1: SerialNumber: syz [ 1853.455464][ T8] usb 6-1: config 0 descriptor?? [ 1853.496692][T22076] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1853.516674][ T8] ums-alauda 6-1:0.189: USB Mass Storage device detected [ 1853.895558][T22106] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3845'. [ 1854.574983][T22106] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1854.661235][ T8] scsi host1: usb-storage 6-1:0.189 [ 1855.594942][T22119] tipc: Can't bind to reserved service type 0 [ 1856.279711][T18114] usb 6-1: USB disconnect, device number 14 [ 1856.601213][T22122] ptrace attach of "./syz-executor exec"[20738] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8 [ 1857.042254][ T6595] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 1857.133415][ C0] vkms_vblank_simulate: vblank timer overrun [ 1859.989803][T22135] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3851'. [ 1860.002248][T22131] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3851'. [ 1862.179469][T15680] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 1862.464346][ T6595] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 1862.905326][T15680] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 1862.931616][T15680] sd 1:0:0:0: [sdb] Sense not available. [ 1863.877705][T15680] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 1863.896050][T15680] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 1863.909187][T15680] sd 1:0:0:0: [sdb] Write Protect is off [ 1863.915143][T15680] sd 1:0:0:0: [sdb] Asking for cache data failed [ 1863.946630][T15680] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 1864.679881][T15680] [ 1864.682290][T15680] ====================================================== [ 1864.689347][T15680] WARNING: possible circular locking dependency detected [ 1864.696399][T15680] 6.13.0-rc4-syzkaller-00069-g8379578b11d5 #0 Not tainted [ 1864.703521][T15680] ------------------------------------------------------ [ 1864.710549][T15680] kworker/u8:15/15680 is trying to acquire lock: [ 1864.716913][T15680] ffff8880285d12e0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_mq_init_sched+0x3fa/0x830 [ 1864.726627][T15680] [ 1864.726627][T15680] but task is already holding lock: [ 1864.734000][T15680] ffff8880285d0aa8 (&q->q_usage_counter(queue)#52){++++}-{0:0}, at: add_disk_fwnode+0x10d/0xf80 [ 1864.744479][T15680] [ 1864.744479][T15680] which lock already depends on the new lock. [ 1864.744479][T15680] [ 1864.754893][T15680] [ 1864.754893][T15680] the existing dependency chain (in reverse order) is: [ 1864.763915][T15680] [ 1864.763915][T15680] -> #5 (&q->q_usage_counter(queue)#52){++++}-{0:0}: [ 1864.772814][T15680] lock_acquire+0x1ed/0x550 [ 1864.777862][T15680] blk_queue_enter+0xe1/0x600 [ 1864.783221][T15680] blk_mq_alloc_request+0x4fa/0xaa0 [ 1864.789008][T15680] scsi_execute_cmd+0x177/0x1090 [ 1864.794539][T15680] read_capacity_10+0x256/0x9c0 [ 1864.800008][T15680] sd_revalidate_disk+0x1066/0xbce0 [ 1864.805750][T15680] sd_probe+0x9fa/0x1100 [ 1864.810537][T15680] really_probe+0x2b8/0xad0 [ 1864.815659][T15680] __driver_probe_device+0x1a2/0x390 [ 1864.821490][T15680] driver_probe_device+0x50/0x430 [ 1864.827060][T15680] __device_attach_driver+0x2d6/0x530 [ 1864.833004][T15680] bus_for_each_drv+0x24e/0x2e0 [ 1864.838406][T15680] __device_attach_async_helper+0x22d/0x300 [ 1864.844844][T15680] async_run_entry_fn+0xa8/0x420 [ 1864.850328][T15680] process_scheduled_works+0xa66/0x1840 [ 1864.856453][T15680] worker_thread+0x870/0xd30 [ 1864.861581][T15680] kthread+0x2f0/0x390 [ 1864.866205][T15680] ret_from_fork+0x4b/0x80 [ 1864.871191][T15680] ret_from_fork_asm+0x1a/0x30 [ 1864.876506][T15680] [ 1864.876506][T15680] -> #4 (&q->limits_lock){+.+.}-{4:4}: [ 1864.884275][T15680] lock_acquire+0x1ed/0x550 [ 1864.889495][T15680] __mutex_lock+0x1ac/0xee0 [ 1864.894611][T15680] loop_reconfigure_limits+0x43f/0x900 [ 1864.900663][T15680] lo_ioctl+0x1351/0x1f50 [ 1864.905527][T15680] blkdev_ioctl+0x57d/0x6a0 [ 1864.910568][T15680] __se_sys_ioctl+0xf5/0x170 [ 1864.915700][T15680] do_syscall_64+0xf3/0x230 [ 1864.920754][T15680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1864.927202][T15680] [ 1864.927202][T15680] -> #3 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 1864.935840][T15680] lock_acquire+0x1ed/0x550 [ 1864.940892][T15680] blk_mq_submit_bio+0x1536/0x2390 [ 1864.946543][T15680] __submit_bio+0x2c6/0x560 [ 1864.951585][T15680] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 1864.957756][T15680] mpage_readahead+0x630/0x780 [ 1864.963091][T15680] read_pages+0x176/0x750 [ 1864.967967][T15680] page_cache_ra_unbounded+0x606/0x720 [ 1864.973977][T15680] filemap_get_pages+0x605/0x2080 [ 1864.979551][T15680] filemap_splice_read+0x68e/0xef0 [ 1864.985232][T15680] splice_direct_to_actor+0x4af/0xc80 [ 1864.991150][T15680] do_splice_direct+0x289/0x3e0 [ 1864.996552][T15680] do_sendfile+0x564/0x8a0 [ 1865.001500][T15680] __se_sys_sendfile64+0x17c/0x1e0 [ 1865.007167][T15680] do_syscall_64+0xf3/0x230 [ 1865.012218][T15680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1865.018662][T15680] [ 1865.018662][T15680] -> #2 (mapping.invalidate_lock#2){++++}-{4:4}: [ 1865.027217][T15680] lock_acquire+0x1ed/0x550 [ 1865.032276][T15680] down_read+0xb1/0xa40 [ 1865.036978][T15680] page_cache_ra_unbounded+0x142/0x720 [ 1865.042979][T15680] do_sync_mmap_readahead+0x499/0x970 [ 1865.048892][T15680] filemap_fault+0x8a9/0x1490 [ 1865.054122][T15680] __do_fault+0x135/0x390 [ 1865.059000][T15680] handle_pte_fault+0x39eb/0x5ed0 [ 1865.064564][T15680] handle_mm_fault+0x1053/0x1ad0 [ 1865.070044][T15680] __get_user_pages+0x1c82/0x49e0 [ 1865.075606][T15680] get_user_pages_unlocked+0x2a8/0x9d0 [ 1865.081605][T15680] hva_to_pfn+0x445/0xfe0 [ 1865.086512][T15680] __kvm_faultin_pfn+0x497/0x580 [ 1865.091991][T15680] kvm_mmu_faultin_pfn+0x6c3/0x1580 [ 1865.097751][T15680] kvm_tdp_page_fault+0x215/0x300 [ 1865.103323][T15680] kvm_mmu_do_page_fault+0x583/0xca0 [ 1865.109168][T15680] kvm_mmu_page_fault+0x2db/0xc30 [ 1865.114753][T15680] vmx_handle_exit+0x10e4/0x1e90 [ 1865.120237][T15680] vcpu_run+0x586a/0x8a90 [ 1865.125149][T15680] kvm_arch_vcpu_ioctl_run+0xa76/0x19d0 [ 1865.131266][T15680] kvm_vcpu_ioctl+0x920/0xea0 [ 1865.136494][T15680] __se_sys_ioctl+0xf5/0x170 [ 1865.141642][T15680] do_syscall_64+0xf3/0x230 [ 1865.146696][T15680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1865.153230][T15680] [ 1865.153230][T15680] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 1865.160816][T15680] lock_acquire+0x1ed/0x550 [ 1865.165858][T15680] __might_fault+0xc6/0x120 [ 1865.170900][T15680] _copy_from_user+0x2a/0xc0 [ 1865.176132][T15680] blk_trace_ioctl+0x1ad/0x9a0 [ 1865.181446][T15680] blkdev_ioctl+0x40c/0x6a0 [ 1865.186482][T15680] __se_sys_ioctl+0xf5/0x170 [ 1865.191611][T15680] do_syscall_64+0xf3/0x230 [ 1865.196658][T15680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1865.203106][T15680] [ 1865.203106][T15680] -> #0 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1865.210962][T15680] validate_chain+0x18ef/0x5920 [ 1865.216356][T15680] __lock_acquire+0x1397/0x2100 [ 1865.221744][T15680] lock_acquire+0x1ed/0x550 [ 1865.226782][T15680] __mutex_lock+0x1ac/0xee0 [ 1865.231828][T15680] blk_mq_init_sched+0x3fa/0x830 [ 1865.237297][T15680] elevator_init_mq+0x20e/0x320 [ 1865.242685][T15680] add_disk_fwnode+0x10d/0xf80 [ 1865.248001][T15680] sd_probe+0xba6/0x1100 [ 1865.252821][T15680] really_probe+0x2b8/0xad0 [ 1865.257866][T15680] __driver_probe_device+0x1a2/0x390 [ 1865.263695][T15680] driver_probe_device+0x50/0x430 [ 1865.269262][T15680] __device_attach_driver+0x2d6/0x530 [ 1865.275204][T15680] bus_for_each_drv+0x24e/0x2e0 [ 1865.280600][T15680] __device_attach_async_helper+0x22d/0x300 [ 1865.287034][T15680] async_run_entry_fn+0xa8/0x420 [ 1865.292514][T15680] process_scheduled_works+0xa66/0x1840 [ 1865.298605][T15680] worker_thread+0x870/0xd30 [ 1865.303730][T15680] kthread+0x2f0/0x390 [ 1865.308376][T15680] ret_from_fork+0x4b/0x80 [ 1865.313332][T15680] ret_from_fork_asm+0x1a/0x30 [ 1865.318647][T15680] [ 1865.318647][T15680] other info that might help us debug this: [ 1865.318647][T15680] [ 1865.328892][T15680] Chain exists of: [ 1865.328892][T15680] &q->debugfs_mutex --> &q->limits_lock --> &q->q_usage_counter(queue)#52 [ 1865.328892][T15680] [ 1865.343365][T15680] Possible unsafe locking scenario: [ 1865.343365][T15680] [ 1865.350824][T15680] CPU0 CPU1 [ 1865.356202][T15680] ---- ---- [ 1865.361612][T15680] lock(&q->q_usage_counter(queue)#52); [ 1865.367278][T15680] lock(&q->limits_lock); [ 1865.374250][T15680] lock(&q->q_usage_counter(queue)#52); [ 1865.382429][T15680] lock(&q->debugfs_mutex); [ 1865.387037][T15680] [ 1865.387037][T15680] *** DEADLOCK *** [ 1865.387037][T15680] [ 1865.395210][T15680] 4 locks held by kworker/u8:15/15680: [ 1865.400709][T15680] #0: ffff88801baef148 ((wq_completion)async){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1865.411664][T15680] #1: ffffc9000396fd00 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1865.423628][T15680] #2: ffff88805ac9c378 (&dev->mutex){....}-{4:4}, at: __device_attach_async_helper+0xfc/0x300 [ 1865.434024][T15680] #3: ffff8880285d0aa8 (&q->q_usage_counter(queue)#52){++++}-{0:0}, at: add_disk_fwnode+0x10d/0xf80 [ 1865.444971][T15680] [ 1865.444971][T15680] stack backtrace: [ 1865.450874][T15680] CPU: 1 UID: 0 PID: 15680 Comm: kworker/u8:15 Not tainted 6.13.0-rc4-syzkaller-00069-g8379578b11d5 #0 [ 1865.461941][T15680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1865.472076][T15680] Workqueue: async async_run_entry_fn [ 1865.477489][T15680] Call Trace: [ 1865.480776][T15680] [ 1865.483721][T15680] dump_stack_lvl+0x241/0x360 [ 1865.488467][T15680] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1865.493689][T15680] ? __pfx__printk+0x10/0x10 [ 1865.498306][T15680] print_circular_bug+0x13a/0x1b0 [ 1865.503358][T15680] check_noncircular+0x36a/0x4a0 [ 1865.508327][T15680] ? check_path+0x21/0x40 [ 1865.512685][T15680] ? __pfx_check_noncircular+0x10/0x10 [ 1865.518170][T15680] ? lockdep_lock+0x123/0x2b0 [ 1865.522867][T15680] ? lockdep_unlock+0x16a/0x300 [ 1865.527742][T15680] ? __pfx_lockdep_unlock+0x10/0x10 [ 1865.532967][T15680] validate_chain+0x18ef/0x5920 [ 1865.537851][T15680] ? __pfx_validate_chain+0x10/0x10 [ 1865.543082][T15680] ? stack_trace_save+0x118/0x1d0 [ 1865.548138][T15680] ? unwind_next_frame+0x18e6/0x22d0 [ 1865.553470][T15680] ? deref_stack_reg+0x17c/0x210 [ 1865.558432][T15680] ? preempt_count_add+0x93/0x190 [ 1865.563485][T15680] ? unwind_next_frame+0x193b/0x22d0 [ 1865.568791][T15680] ? ret_from_fork_asm+0x1a/0x30 [ 1865.573756][T15680] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1865.579940][T15680] ? arch_stack_walk+0x11c/0x150 [ 1865.584906][T15680] ? mark_lock+0x9a/0x360 [ 1865.589259][T15680] __lock_acquire+0x1397/0x2100 [ 1865.594141][T15680] lock_acquire+0x1ed/0x550 [ 1865.598693][T15680] ? blk_mq_init_sched+0x3fa/0x830 [ 1865.603827][T15680] ? __pfx_lock_acquire+0x10/0x10 [ 1865.608876][T15680] ? __device_attach_driver+0x2d6/0x530 [ 1865.614444][T15680] ? bus_for_each_drv+0x24e/0x2e0 [ 1865.619494][T15680] ? __pfx___might_resched+0x10/0x10 [ 1865.624807][T15680] ? kthread+0x2f0/0x390 [ 1865.629066][T15680] ? ret_from_fork+0x4b/0x80 [ 1865.633671][T15680] ? ret_from_fork_asm+0x1a/0x30 [ 1865.638642][T15680] __mutex_lock+0x1ac/0xee0 [ 1865.643176][T15680] ? blk_mq_init_sched+0x3fa/0x830 [ 1865.648329][T15680] ? __asan_memset+0x23/0x50 [ 1865.652947][T15680] ? lockdep_init_map_type+0xa1/0x910 [ 1865.658344][T15680] ? blk_mq_init_sched+0x3fa/0x830 [ 1865.663474][T15680] ? __pfx___mutex_lock+0x10/0x10 [ 1865.668617][T15680] ? blk_queue_flag_set+0x24/0x40 [ 1865.673669][T15680] blk_mq_init_sched+0x3fa/0x830 [ 1865.678647][T15680] ? percpu_ref_is_zero+0xe9/0x100 [ 1865.684489][T15680] ? __pfx_blk_mq_init_sched+0x10/0x10 [ 1865.689966][T15680] ? blk_mq_cancel_work_sync+0xf3/0x140 [ 1865.695563][T15680] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 1865.701565][T15680] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 1865.707487][T15680] ? add_disk_fwnode+0x10d/0xf80 [ 1865.712446][T15680] elevator_init_mq+0x20e/0x320 [ 1865.717319][T15680] add_disk_fwnode+0x10d/0xf80 [ 1865.722106][T15680] ? sd_probe+0xb37/0x1100 [ 1865.726544][T15680] ? device_add_disk+0x17/0x30 [ 1865.731332][T15680] sd_probe+0xba6/0x1100 [ 1865.735602][T15680] ? __pfx_sd_probe+0x10/0x10 [ 1865.740309][T15680] really_probe+0x2b8/0xad0 [ 1865.744841][T15680] __driver_probe_device+0x1a2/0x390 [ 1865.750159][T15680] driver_probe_device+0x50/0x430 [ 1865.755295][T15680] __device_attach_driver+0x2d6/0x530 [ 1865.760692][T15680] bus_for_each_drv+0x24e/0x2e0 [ 1865.765603][T15680] ? __pfx___device_attach_driver+0x10/0x10 [ 1865.771520][T15680] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1865.776932][T15680] ? ktime_get+0x3e/0x1f0 [ 1865.781288][T15680] ? lockdep_hardirqs_on+0x99/0x150 [ 1865.786519][T15680] __device_attach_async_helper+0x22d/0x300 [ 1865.792442][T15680] ? __pfx___device_attach_async_helper+0x10/0x10 [ 1865.798891][T15680] ? process_scheduled_works+0x976/0x1840 [ 1865.804646][T15680] ? read_tsc+0x9/0x20 [ 1865.808742][T15680] ? ktime_get+0x1c5/0x1f0 [ 1865.813187][T15680] ? __pfx___device_attach_async_helper+0x10/0x10 [ 1865.819628][T15680] async_run_entry_fn+0xa8/0x420 [ 1865.824597][T15680] ? process_scheduled_works+0x976/0x1840 [ 1865.830344][T15680] process_scheduled_works+0xa66/0x1840 [ 1865.835939][T15680] ? __pfx_process_scheduled_works+0x10/0x10 [ 1865.841952][T15680] ? assign_work+0x364/0x3d0 [ 1865.846572][T15680] worker_thread+0x870/0xd30 [ 1865.851185][T15680] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1865.857116][T15680] ? __kthread_parkme+0x169/0x1d0 [ 1865.862163][T15680] ? __pfx_worker_thread+0x10/0x10 [ 1865.867295][T15680] kthread+0x2f0/0x390 [ 1865.871387][T15680] ? __pfx_worker_thread+0x10/0x10 [ 1865.876518][T15680] ? __pfx_kthread+0x10/0x10 [ 1865.881131][T15680] ret_from_fork+0x4b/0x80 [ 1865.885568][T15680] ? __pfx_kthread+0x10/0x10 [ 1865.890181][T15680] ret_from_fork_asm+0x1a/0x30 [ 1865.894979][T15680] [ 1866.211644][T15680] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 1866.688471][T18116] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1866.846073][T22085] udevd[22085]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1866.883845][T18116] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1866.905326][T18116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.911854][T22080] udevd[22080]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1866.923485][T18116] usb 4-1: Product: syz [ 1866.928070][T18116] usb 4-1: Manufacturer: syz [ 1866.934729][T18116] usb 4-1: SerialNumber: syz [ 1866.943011][T18116] usb 4-1: config 0 descriptor?? [ 1868.549956][T18116] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 1868.558326][T18116] usb 4-1: USB disconnect, device number 47 [ 1868.566751][T18116] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 1868.616535][T18116] usb 4-1: f81604_read: reg: 200f failed: -ENODEV