last executing test programs: 22m53.872476841s ago: executing program 32 (id=56): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000008000000004b4be7ec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r5, 0x5452, 0x0) ppoll(&(0x7f0000000000)=[{r5}], 0x1, 0x0, 0x0, 0x0) close(r4) 21m49.224891279s ago: executing program 2 (id=230): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESDEC], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_int(r6, 0x1, 0x2e, 0x0, &(0x7f0000000780)) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x24}}, 0x4}}, 0x26) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pselect6(0x40, &(0x7f0000000000)={0x3, 0x4, 0x7, 0x4, 0x4, 0x2, 0x0, 0x4}, &(0x7f0000000040)={0x8, 0x3, 0xf9c5, 0xffff, 0x8, 0x5, 0x73a, 0x1}, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 21m44.581202529s ago: executing program 2 (id=241): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000180029020000000000000000020000f8efa5ab49"], 0x28}}, 0x0) 21m43.633291776s ago: executing program 2 (id=245): r0 = syz_usb_connect(0x2, 0x3d, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000393f6fe108c10590157db0102030109022b00018109300009041c1c03f278380209050c02100000fdda0705fda246483e090507040002080fd9"], &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0x0, 0x66, {0x66, 0x10, "2971f08f3566e2b9be81669fc6bca4c6e634910addf9731c8bc71e46037fd6bcf66240a1ba078ab1c3ef65ebe523ba1c83c254f224693b334cbce82386b47c1ab6d291adf07db38992bec45a4cbbccbc5faa7184c27491106e93eeb303c0c4358dcc5473"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}, &(0x7f00000000c0)={0x0, 0xf, 0xf8, {0x5, 0xf, 0xf8, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x1fbd, 0xf, 0xfff3, [0x3f30, 0xff0f, 0x30, 0xff0000, 0xff00cf, 0x140]}, @generic={0x8d, 0x10, 0x1, "c4665237e0dcea0c8a3ca1adeb32e55035920b5b58732ac61ae3d07b6e3aed5821fc370f7993cc0551be18062511527c99ca975161160344641d5f8154433f3bd6850ec080ba05c3c0df5eadb18b54ece3c0671217f49305ef1cfcf28aa5bdb778d090f6d9745e457f092165837e12b592008d637ac82c5f325df6815d7864841aa724e0e0c22f9115d7"}, @generic={0x42, 0x10, 0xb, "df59d0e86e05f77807a4f1e27cfa66f17702ec14cab856ead3536a15741c13e82df22a6fa340f46828f2278967021e986a33dee4b02ea2fdf77997371bd350"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x4, 0x1, "d7e61801", "adeee65c"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x19, 0x0, 0x8e, 0x9, 0x5b, 0x29d8, 0x3}}}, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x60, 0x2, [0xfff0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x3ff}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000500)={0x40, 0xb, 0x2, "aa7b"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000005c0)={0x40, 0x17, 0x6}, 0x0, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x2}, 0x0, &(0x7f0000000700)={0x40, 0x21, 0x1}}) syz_open_dev$hiddev(&(0x7f0000000800), 0x7, 0x101002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af24, &(0x7f0000000180)={0x0, 0x10001}) 21m40.071728541s ago: executing program 2 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0xe4}, 0x4000) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x4, 0x0, 0x3}}, 0x2e) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x0, 0x0, 0x1d0, 0xf0, 0x440, 0x440, 0x440, 0x440, 0x440, 0x440, 0xb, 0x0, {[{{@uncond, 0x74000000, 0xa8, 0xf0, 0x3006000, {0x0, 0xe004}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x28}, @ipv6=@empty, 0x3f}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x328}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @local, [], [0x0, 0xffffffff], 'veth0_to_bond\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_to_bond\x00', 'ip6_vti0\x00', {}, {}, 0xc}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 21m37.896810106s ago: executing program 2 (id=253): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) shutdown(r1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r4, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x48}], 0x1, 0x105ea, 0x0) socket$netlink(0x10, 0x3, 0x5) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @local}, 0x3ff, 0x0, 0x2}}, 0x2e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000100)}, 0x20) 21m36.428980257s ago: executing program 2 (id=259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 21m22.359021295s ago: executing program 33 (id=256): epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x458}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000530000/0x4000)=nil, &(0x7f00009ba000/0x4000)=nil, 0x4000, 0x2, 0x2}) 21m21.09667272s ago: executing program 34 (id=259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 20m51.693263986s ago: executing program 5 (id=362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 20m49.747828984s ago: executing program 5 (id=363): bpf$MAP_CREATE(0x0, 0x0, 0x10) r0 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = accept$inet(r0, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000240)={{0x2, 0x4e20, @private=0xa010102}, {0x0, @random="f81ccfaca759"}, 0x0, {0x2, 0x4e24, @multicast2}, 'caif0\x00'}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xd6374000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x2f) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r7) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 20m48.402801726s ago: executing program 5 (id=367): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="187e41670c041bc26e1ce19dafe3000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) 20m46.968819421s ago: executing program 5 (id=372): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@updpolicy={0xfc, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@private}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{0x0, 0x14}], 0x1}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, @ethernet={0x306, @remote}, @ethernet={0x1}, @in={0x2, 0x4e24, @private=0xa010100}, 0x7b03, 0x0, 0x0, 0x0, 0xfe00, &(0x7f0000000180)='team_slave_0\x00', 0x4, 0x5, 0x7}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ftruncate(r7, 0x4) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20m46.155849967s ago: executing program 5 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write(r3, &(0x7f0000000100)="03e457583d5cfbd0240537597e74ff70ae7fb3", 0x13) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004240)='/proc/cgroups\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) socket$packet(0x11, 0x2, 0x300) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) tkill(0x0, 0x0) mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) 20m43.653012899s ago: executing program 5 (id=377): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, 0x0) close(0xffffffffffffffff) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, 0x0) io_uring_setup(0x177f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002abd700096dbdf250900020073797a3000000000080041007278650014003300626f6e6430000000000000000000000004f6f2f5f045502013a92a9072de0413fa76f3121c0ae1a68622eae9ef17e972a202aa1be9b262fde78b0aab6f6ed76daa347ac5778d57097e30d59f8f82a88ad102521c73a52d545a6e6938436ead811365952bc5fecbce080da1b55a24afd7f8eaba407c21f424"], 0x85}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x9a, r5, 0x0, 0x0, 0x1}}, 0x20) 20m28.268827884s ago: executing program 35 (id=377): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, 0x0) close(0xffffffffffffffff) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, 0x0) io_uring_setup(0x177f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002abd700096dbdf250900020073797a3000000000080041007278650014003300626f6e6430000000000000000000000004f6f2f5f045502013a92a9072de0413fa76f3121c0ae1a68622eae9ef17e972a202aa1be9b262fde78b0aab6f6ed76daa347ac5778d57097e30d59f8f82a88ad102521c73a52d545a6e6938436ead811365952bc5fecbce080da1b55a24afd7f8eaba407c21f424"], 0x85}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x9a, r5, 0x0, 0x0, 0x1}}, 0x20) 17m59.334242087s ago: executing program 7 (id=774): gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102381, 0x18fee) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0x80000300, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) 17m58.581056646s ago: executing program 7 (id=775): syz_open_dev$video4linux(0x0, 0x7, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0/file1\x00', 0x3de0538865965fe1, 0x20) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x1c5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x903029, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xf, 0xffffffffffffff6e}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000440)=0x0) syz_clone3(&(0x7f0000000540)={0x100882a00, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000500), {0xf5}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4], 0x1, {r3}}, 0x58) r5 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102384, 0x18ff0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x17, &(0x7f00000000c0)=0xfffffffd, 0x4) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r9 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) connect$unix(r9, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x10c, &(0x7f00000002c0)=0x6, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00009c9000/0x2000)=nil, 0x2000}, 0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000017000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17m57.539545603s ago: executing program 7 (id=778): iopl(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x5a, &(0x7f0000000380)={@random="6a43747a3812", @random="d4c06de27ca4", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x1e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x20, 0x0, 0x0, 0x10, {[@mss={0x1e, 0x4, 0x2101}, @eol, @timestamp={0x8, 0xa, 0x6, 0xc0e7}]}}}}}}}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000003d0007010000000000000000047c0000040008800c00018006000600800a000028000280040014"], 0x4c}}, 0xc000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x20000400) 17m56.832273856s ago: executing program 7 (id=781): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000100)="50606279f98e8be0e2c698a86d2087439b67c1f28a2f59e3b3e308e0dddfe26ff845fa32a336f34281f7ad04d1f76348b08e0833d447a91fccfa8588ae4d710e4e2eda0942b7fbaf609e593e97986df06f1964958159b280d3cb23c13a4ba0276f05d87ae19a38586fb5d7730746b241d46d1b0ba64f1a8896aff8fc", 0x7c}, {&(0x7f00000001c0)="7160e25a2f915a6d2119e4c6552e40f545008a0e77a0cde5d3da07d58a30df83f094cc3d7c8b540c7930e7bc68a8e62ca3a081431fc828adaf0334f998413768d0bb25ef3796f0d5b2d28f32aa8a9442ecc5d1899e47193162b0b5066cd97d518e561c74f5c154", 0x67}, {&(0x7f0000000000)="ab93df7582bed5b703f70fa7d59981916395a298e012a9", 0x17}, {&(0x7f0000000040)="2dfe5abc142014a64fc0343c073af2353bfd5ed2a5", 0x15}, {&(0x7f0000000280)="756cf79854fe8bf532158cd155d6e366ba4af1bbeb1df0e06badb1b2aca022ed5cfb03be4581d6397fa77ecd84c728e81184ed56eceb5e9a435ebd227c64f2881d23e35e2ffe212c963b6d36cf6a6c96774fcd3d5f66b3d389ecf6049bc5809fd92b93ae9784dc9fa0d027eb8380d8df43854a9943e2f5d603829a2c0cd1c1261a0ec55ba4ac43b84cc5bdfdead5a563ba7df1797b3e5869c2162aa3cc1cc4fb57811a7cf88f50ef3fb70bd77cdbcff73645e0c283fa881308f188872f89ee62faae", 0xc2}, {&(0x7f0000000380)="c5bf90bd41952b98b1fb1122ff165ff7b4dd6d0bf496032935a85741b78126c63794d6e91e053eb085cc0f3409f0a1f1beda091433ee1e3b617ed68eca9a90a2bc1617654f8413a380879b1f83b1eca87246a11c8a762e77031ba221c505b76eb6ad839111a49774cb47a53d8aa0a3caacbd46c6a1c3d2a28910fff7ea7ffe2f6d3d6cf5def61d9cc5a69b2effc993107c37a875aa0a25336c472696f632a1b8bef1e8ddd77922a02adf9f8b5066acb94a5ad5c92265e66bcfbf17b760dd3b5601cb2e048ad8e759ce09dcc513835567ef768abbb2a629", 0xd7}], 0x6) 17m56.639097144s ago: executing program 7 (id=783): syz_init_net_socket$llc(0x1a, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount(&(0x7f00000004c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file1\x00', 0x0, 0x10001, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000140)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x6, @random="77009b00"}, 0x7e, {0x2, 0x0, @remote}, 'dummy0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="010028057000fcdb", @ANYBLOB="04008e00080057001b0a000004"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000017f00142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa21000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000f60090780000"], 0x0) 17m54.801126125s ago: executing program 7 (id=788): syz_open_dev$video4linux(0x0, 0x7, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0/file1\x00', 0x3de0538865965fe1, 0x20) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x1c5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x903029, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xf, 0xffffffffffffff6e}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000440)) syz_clone3(&(0x7f0000000540)={0x100882a00, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000500), {0xf5}, 0x0, 0x0, &(0x7f00000004c0)=""/20, 0x0, 0x0, {r3}}, 0x58) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102384, 0x18ff0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f00000000c0)=0xfffffffd, 0x4) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r8 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) connect$unix(r8, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x10c, &(0x7f00000002c0)=0x6, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00009c9000/0x2000)=nil, 0x2000}, 0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000017000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17m54.151566317s ago: executing program 36 (id=788): syz_open_dev$video4linux(0x0, 0x7, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0/file1\x00', 0x3de0538865965fe1, 0x20) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x1c5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x903029, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xf, 0xffffffffffffff6e}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000440)) syz_clone3(&(0x7f0000000540)={0x100882a00, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000500), {0xf5}, 0x0, 0x0, &(0x7f00000004c0)=""/20, 0x0, 0x0, {r3}}, 0x58) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102384, 0x18ff0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f00000000c0)=0xfffffffd, 0x4) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r8 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) connect$unix(r8, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x10c, &(0x7f00000002c0)=0x6, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00009c9000/0x2000)=nil, 0x2000}, 0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000017000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m45.601979347s ago: executing program 8 (id=1942): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x3e, 0x8}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10m44.26388652s ago: executing program 8 (id=1945): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x2f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mq_notify(r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f00000000c0)=0x80, 0x4) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000440)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "b9fe997a1675ec25"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x80) getpeername$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x0, 0x7, 0x17, @dev={0xfe, 0x80, '\x00', 0x7}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x8000, 0x4, 0x4}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x40004) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) kexec_load(0xf5, 0x0, &(0x7f0000000b80), 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f00000013c0), 0x0, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) 10m43.125268589s ago: executing program 8 (id=1949): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, 0x0) mount$9p_virtio(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x40c3, 0x0) (fail_nth: 9) 10m42.62516803s ago: executing program 8 (id=1950): syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x14, 0x0, 0x680822d7e3b5f37d}, 0x14}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000440)={@multicast1, @multicast1, @local}, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, 0x0}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffff7fffffff]}, 0x8) fcntl$lock(r7, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x100000000000, 0x0, 0xffffffffffffffff}) fcntl$lock(r7, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) syz_clone3(&(0x7f00000006c0)={0x380020100, &(0x7f0000000340), &(0x7f0000000380), 0x0, {0x13}, 0x0, 0x0, &(0x7f0000000400)=""/9, 0x0, 0x0, {r7}}, 0x58) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r5, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000080)={0x18, r5}) 10m41.261297992s ago: executing program 8 (id=1952): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x2633, &(0x7f00000006c0)={0x0, 0x4}, &(0x7f0000000740), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) r5 = eventfd2(0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r6, 0x0, 0x1) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) pivot_root(0x0, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}], 0x20, 0x80c1}}], 0x1, 0x4008010) 10m39.639535532s ago: executing program 8 (id=1956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x250942, 0x1cd) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e17, @remote}, 0x10) 10m23.495762616s ago: executing program 37 (id=1956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x250942, 0x1cd) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e17, @remote}, 0x10) 8m15.879732339s ago: executing program 0 (id=2279): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x268, 0xffffffff, 0x0, 0x130, 0x130, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0xff, 'ip6gre0\x00', 'pimreg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'ip6erspan0\x00', 'wlan1\x00', {}, {0xff}, 0x16}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0xfb}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x8000) 8m14.296566253s ago: executing program 0 (id=2284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x250942, 0x1cd) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e17, @remote}, 0x10) sendmmsg$sock(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}}], 0x1, 0x20000844) 8m11.683479693s ago: executing program 0 (id=2290): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0xee, 0x8, 0x4000000, 0x1b6176692dfde202, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, @mcast2, 0x80, 0x1, 0xfff, 0x8000}}) r0 = socket(0x1e, 0xa, 0xa6) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0010}]}) unshare(0x8000000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2c020180) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x207}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20008014, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) unshare(0x26030a00) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000002c0)={0x3, 0x3}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f00000003c0)}], 0x1) unshare(0x12010b80) setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f0000000080)=0x3, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x2, 0x3, &(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRES8=r2, @ANYRESOCT=r3], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) getsockopt(r6, 0x400000000000003a, 0x0, &(0x7f0000000a00)=""/180, &(0x7f00000001c0)=0xb4) flock(r5, 0x0) unshare(0x10030800) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000240)="7ffd00ab93d5987bd13f903481aa4c73e5534ea0ef3e8fb1e804bc0269d33cbc0db23fd851207ae3857c607f2282e199a0d101e4ab0454d1ad81cdcc2c2ea664ec7f66bcdefe645dc6c0d70dd74d913c0a98e7f291522cbe83004ae635676c550538dcf8c5b20880a593776bb52977fcc5ac8e23767587eb57d52fe38d6a84f5", 0x80) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0x4) unshare(0x20500) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x4000, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_loose}, {@cache_readahead}, {@fscache}, {@msize={'msize', 0x3d, 0xfff}}, {@debug={'debug', 0x3d, 0x1}}, {@version_u}, {@nodevmap}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@fowner_lt}, {@dont_measure}, {@fowner_lt}, {@subj_role={'subj_role', 0x3d, '@},'}}, {@smackfshat={'smackfshat', 0x3d, 'syztnl0\x00'}}, {@measure}]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffed, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=r6, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x63429fdf0015746c}, 0x0) keyctl$session_to_parent(0x12) 8m10.47285327s ago: executing program 0 (id=2294): ioperm(0x0, 0x7, 0x40000000000006) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0x408c5333, &(0x7f0000000280)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@local, 0x1}, 0x400, "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"}, 0x418}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x2000, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt(r5, 0x84, 0x80, &(0x7f00000003c0)="1a00000002000100", 0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}}}, 0x84) ioctl$KVM_HYPERV_EVENTFD(r2, 0xc048aec8, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0xfffffffe}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0xb, 0x7, 0x9, 0xa3, 0x7, 0x4}) 8m9.399480011s ago: executing program 0 (id=2299): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(0x0, 0x0, 0x401) rmdir(0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x8e4) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)="09bed67a8700080000aa10780073939a89193fb67334b917660ab400000000", 0x1f}, 0x1, 0x0, 0x0, 0x1000}, 0x20040890) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f0000005880)={0x8, {"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", 0x1000}}, 0x1006) pwrite64(r7, &(0x7f00000007c0)="97901504453c416551bdacf5fd7786d22b40d5d854b34da427a77549a5a3bd6d29c3d122bd6f65bcdbf26c5f9c2e474c69e7e8f4cd207dad6e158c3dd5556bb360c9f91d83e4433b956841ddb2a11d6291b5084406dab14972429dc98c83f02dea17ff2baf96d1cc34f12f91a55d80cb4f410ee4e7078031b0f9b644c306383affe55afe1d45b83d7cfce66468da4a0f46a76078dec55d491fe676e90b72a13288f6ae99bb", 0xa5, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0xfb, r0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10002, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x2) syz_emit_ethernet(0xba, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x1a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x2}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x3a, 0x0, [{0x0, 0x5, "4b6cef"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x8, "02a20948fd74"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x400, 0x2, 0x1, 0x0, 0x4}) 8m8.000826166s ago: executing program 0 (id=2304): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x10000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(r5, &(0x7f0000008480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000004f40)={0x158, 0x0, r6, [{{0x5, 0x1, 0x5, 0x9, 0x7, 0x6, {0x4, 0xc79, 0x0, 0x4, 0x100000002, 0xbbc2, 0x7, 0x3, 0x6, 0x8000, 0x1, 0x0, 0x0, 0x2, 0x7}}, {0x0, 0x2, 0x1, 0x80, '\x00'}}, {{0x3, 0x0, 0xf1b3, 0x4, 0x3, 0x2, {0x4, 0x5, 0x8, 0x9, 0xffffffffffffffff, 0x4, 0x4, 0x8, 0x7f, 0x1000, 0x9, r7, 0x0, 0x6f9, 0x79d2}}, {0x1, 0x3, 0xa, 0x1, '/dev/cuse\x00'}}]}, 0x158) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) getpid() stat(&(0x7f0000000480)='./file0/file0/file0\x00', &(0x7f00000004c0)) read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r14}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r14, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r14, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2046, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x4, 0x4008000, r15, r16, 0x2000, '\x00', 0x1, 0x4, 0xb4e7, 0x6, {0x100, 0x8}, {0x6}, {0x100000000, 0x9}, {0x8, 0xa00}, 0x8000, 0xb, 0x4, 0x3}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r17, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r17, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r4, &(0x7f00000041c0)=[{{&(0x7f0000003700)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004140)=[{&(0x7f0000003d80)="1d1b8374bbda86c07dbb156490a0622059dc127c759ab880b5fbc58a4dd2f71211f143e4926321f19779f6f0f071ef6b27f1413ca96bd34b97b58a676271344d65be424544a0ec62e5251a4562a9a78ce7a6616bd22b3312095a7b67bef14d3dd85ded12bdb1c151e3bdcfc7a398bd0a370b281f38e41dd80065aa20609d9f0f510872b2d0ed501b6f445aa6a0db0bd7c678d9ca99208920af008da8275515d3b49e95fe7aaf3f075b0b2fafecf1fdcded93fbea965e7316af1eda86b8cbcc44fdd002fba5cd9c9e4f2bd4d3f7e079016749744f94f37bd8f8da7cdc1bc02b0a1d5b12d6e5df35f8eef9f79361dcf558a29dade065", 0xf5}, {&(0x7f0000003e80)="74717f929248ee0b49e63109a96ef50af7d9352abe68d3af0237800f567a59166bfd514ced93219d79ae6965dba2300f129eb0d87fc348231176221d76c6d22819fa4088f865da4421367f4ae8ac79114afa94beb9b9f488afc9585a6fbee00162a35813720bf21dfb2f487977e05e831e5d21746f0225a4099865157516950ea950e93739749dcb89fcf052f8772d1e54688b9d3471b0425f1602ecdd15cd3e7eafc16296caaf485f1f7121348a5fbce20048b3c7961d10508a8947db4995995654d2cb7e0f237553", 0xc9}, {&(0x7f0000003f80)="f1188a374b33ac2d418e60b32a5cd1b6b39e6ceb00415952649cce6939466ae83c5cd8042f173e14b345712fa9c3ac00320615fd176a8cac51e1b6567b3804e86e4a0768063c68d2c15b58dd53adbb0a9113dfad1ea5c52de2083aa24161842076d30fa48478b2855838311c0a172f5ca9b84cdd02da2d5a1dbdd0aa31248ede9e687497a40313d2a8e669c1c94cf7bc932a8335bd7b685c02ceae12a4323e1334f57f5dbd7708e9b4d52b4cf90eabbe142f60147ee3e76e46661537964c7cf77997072d87a041d9a828dfc4bcca3899becbc2c4d3decfee0e", 0xd9}, {&(0x7f0000000180)="00a15b468dca77b26498f5230b3e5696eec18b434d67", 0x16}, {&(0x7f0000003780)="5e6807a414d4f56d3d9d46f89d9b7957251b76633c1a", 0x16}, {&(0x7f00000037c0)="ed03be0ef18b9df5540ccbe09eb1bb9d0fa2a303b9dc305ae8fa2d6f7395e112100409c57c8805bcc06569c81925cd3fc226af720e7009471a799d4eaea4e977229b47e161b687e0c3209d8da055ae55a861d72db22ed9f379bd0e5b0aa1ecb6b11813f2ac087e0055cd4583434e781ced153cdeb13bd6fa6d8e36", 0x7b}, {&(0x7f0000003c00)="47df05f435cb32e9092496a61a97f2b3a7fa55a02b89357b0ff2a627c4d57db0492542948d8e0ceb5a0ec3f57cd573a5fb63748760443f72b32ebb67328e8a27adb869f3bd4bbf2027c7283a3f826c01fb3b14204537dd0dbf689d89a703f26ee058fccb046dcbda56bcac682efe5b52c5363b", 0x73}, {&(0x7f0000004080)="ebbac637d2d809c9b8dd8dd253135d8dab44ca415d54ea0107a35671cee57aeb2d46f32992897e7c23fec8bd8aecb77041388cf1bc7ec4ddb7d3b45234458e68825f894d7087fb87d869b057869d70450c64c4dc129988c0c40172b45114b4d219acea330e04affd41cbb17f0b5bff4419b2703245dd5addc543e8579eed75ecf6db1fbc140813b7b2ed11241d201c52dcc9a662a6bf6fed6992ab4cc7733f3d34382572f657027275456063", 0xac}], 0x8, &(0x7f0000003700), 0x0, 0x60000045}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000003840)="b16ec8e22602714bbb91de09dd96fafe076d52d4ee1553e11c6de4716cfdba7474db8d37e199da71de46ff73bf0c87288f0231daddfc79e6", 0x38}], 0x1, &(0x7f00000038c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, r13}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x40, 0x20000000}}, {{&(0x7f0000003900)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003bc0)=[{&(0x7f00000000c0)="4faba6d4d2", 0x5}, {&(0x7f00000039c0)="227963f34dd19d9b1b746454a0dec9709fa4b8d10f3d0c77d73f0317475dc219726c9f6813560a479647a2374d41b89aa3dcc532e6b1fb45d715888cd5065e2f7144ced22c207a40671f9870d1303d17", 0x50}, {&(0x7f0000003a40)="ef8bdb53363fb9377713681ac2969afcd7a2f519b13fbd64c87a7ac54ec58f6aba0f09aeddf8faa652ce34d1539ad7059b2b50c9fba41098c901fca595bcd65e71b1c8f27f52151945fa84cf24581634b31b1801a72a8f5b3ddebcb6c865c8f210414139fda6114dd494d3dc30da2a75ff734066bf3560ea9f9340290cba75ecc05b", 0x82}, {&(0x7f0000003b00)="3f9b3cb4e555f46f668674e3c7f5cc3267bf28db43ca1ecfdb6125e1d8dd0e3543f17ff16485eb31cba62738306e01071ff3d5449286263b06183cb1e3234a17018e0cfd9dde1398ce0e86fac499ed347035d9b5caba6e1c5fd9b83aee58a88374e846f16d0c25d62cbaf9b89d19676a7cae0fd95f073f260c09df0e956948a968f2ca9e405787147e4471c76e0194c6f801d66f89529aca046f81f444fb5680958bff8b3c", 0xa5}], 0x4, &(0x7f00000083c0)=ANY=[@ANYBLOB="300000000900000001000000010000004b3b96085b32e364243b9ad121a944354ef2f7a84bc96d9a8928c49f57", @ANYRES32=r14, @ANYRES32=r17, @ANYRES32=r17, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32, @ANYRES32=r17, @ANYRES32=r17, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x40080}}], 0x3, 0x4000000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000100), 0x0) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 8m6.092907545s ago: executing program 38 (id=2304): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x10000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(r5, &(0x7f0000008480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000004f40)={0x158, 0x0, r6, [{{0x5, 0x1, 0x5, 0x9, 0x7, 0x6, {0x4, 0xc79, 0x0, 0x4, 0x100000002, 0xbbc2, 0x7, 0x3, 0x6, 0x8000, 0x1, 0x0, 0x0, 0x2, 0x7}}, {0x0, 0x2, 0x1, 0x80, '\x00'}}, {{0x3, 0x0, 0xf1b3, 0x4, 0x3, 0x2, {0x4, 0x5, 0x8, 0x9, 0xffffffffffffffff, 0x4, 0x4, 0x8, 0x7f, 0x1000, 0x9, r7, 0x0, 0x6f9, 0x79d2}}, {0x1, 0x3, 0xa, 0x1, '/dev/cuse\x00'}}]}, 0x158) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) getpid() stat(&(0x7f0000000480)='./file0/file0/file0\x00', &(0x7f00000004c0)) read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r14}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r14, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r14, &(0x7f0000004300)="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", 0x2046, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x4, 0x4008000, r15, r16, 0x2000, '\x00', 0x1, 0x4, 0xb4e7, 0x6, {0x100, 0x8}, {0x6}, {0x100000000, 0x9}, {0x8, 0xa00}, 0x8000, 0xb, 0x4, 0x3}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r17, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r17, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r4, &(0x7f00000041c0)=[{{&(0x7f0000003700)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004140)=[{&(0x7f0000003d80)="1d1b8374bbda86c07dbb156490a0622059dc127c759ab880b5fbc58a4dd2f71211f143e4926321f19779f6f0f071ef6b27f1413ca96bd34b97b58a676271344d65be424544a0ec62e5251a4562a9a78ce7a6616bd22b3312095a7b67bef14d3dd85ded12bdb1c151e3bdcfc7a398bd0a370b281f38e41dd80065aa20609d9f0f510872b2d0ed501b6f445aa6a0db0bd7c678d9ca99208920af008da8275515d3b49e95fe7aaf3f075b0b2fafecf1fdcded93fbea965e7316af1eda86b8cbcc44fdd002fba5cd9c9e4f2bd4d3f7e079016749744f94f37bd8f8da7cdc1bc02b0a1d5b12d6e5df35f8eef9f79361dcf558a29dade065", 0xf5}, {&(0x7f0000003e80)="74717f929248ee0b49e63109a96ef50af7d9352abe68d3af0237800f567a59166bfd514ced93219d79ae6965dba2300f129eb0d87fc348231176221d76c6d22819fa4088f865da4421367f4ae8ac79114afa94beb9b9f488afc9585a6fbee00162a35813720bf21dfb2f487977e05e831e5d21746f0225a4099865157516950ea950e93739749dcb89fcf052f8772d1e54688b9d3471b0425f1602ecdd15cd3e7eafc16296caaf485f1f7121348a5fbce20048b3c7961d10508a8947db4995995654d2cb7e0f237553", 0xc9}, {&(0x7f0000003f80)="f1188a374b33ac2d418e60b32a5cd1b6b39e6ceb00415952649cce6939466ae83c5cd8042f173e14b345712fa9c3ac00320615fd176a8cac51e1b6567b3804e86e4a0768063c68d2c15b58dd53adbb0a9113dfad1ea5c52de2083aa24161842076d30fa48478b2855838311c0a172f5ca9b84cdd02da2d5a1dbdd0aa31248ede9e687497a40313d2a8e669c1c94cf7bc932a8335bd7b685c02ceae12a4323e1334f57f5dbd7708e9b4d52b4cf90eabbe142f60147ee3e76e46661537964c7cf77997072d87a041d9a828dfc4bcca3899becbc2c4d3decfee0e", 0xd9}, {&(0x7f0000000180)="00a15b468dca77b26498f5230b3e5696eec18b434d67", 0x16}, {&(0x7f0000003780)="5e6807a414d4f56d3d9d46f89d9b7957251b76633c1a", 0x16}, {&(0x7f00000037c0)="ed03be0ef18b9df5540ccbe09eb1bb9d0fa2a303b9dc305ae8fa2d6f7395e112100409c57c8805bcc06569c81925cd3fc226af720e7009471a799d4eaea4e977229b47e161b687e0c3209d8da055ae55a861d72db22ed9f379bd0e5b0aa1ecb6b11813f2ac087e0055cd4583434e781ced153cdeb13bd6fa6d8e36", 0x7b}, {&(0x7f0000003c00)="47df05f435cb32e9092496a61a97f2b3a7fa55a02b89357b0ff2a627c4d57db0492542948d8e0ceb5a0ec3f57cd573a5fb63748760443f72b32ebb67328e8a27adb869f3bd4bbf2027c7283a3f826c01fb3b14204537dd0dbf689d89a703f26ee058fccb046dcbda56bcac682efe5b52c5363b", 0x73}, {&(0x7f0000004080)="ebbac637d2d809c9b8dd8dd253135d8dab44ca415d54ea0107a35671cee57aeb2d46f32992897e7c23fec8bd8aecb77041388cf1bc7ec4ddb7d3b45234458e68825f894d7087fb87d869b057869d70450c64c4dc129988c0c40172b45114b4d219acea330e04affd41cbb17f0b5bff4419b2703245dd5addc543e8579eed75ecf6db1fbc140813b7b2ed11241d201c52dcc9a662a6bf6fed6992ab4cc7733f3d34382572f657027275456063", 0xac}], 0x8, &(0x7f0000003700), 0x0, 0x60000045}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000003840)="b16ec8e22602714bbb91de09dd96fafe076d52d4ee1553e11c6de4716cfdba7474db8d37e199da71de46ff73bf0c87288f0231daddfc79e6", 0x38}], 0x1, &(0x7f00000038c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, r13}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x40, 0x20000000}}, {{&(0x7f0000003900)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003bc0)=[{&(0x7f00000000c0)="4faba6d4d2", 0x5}, {&(0x7f00000039c0)="227963f34dd19d9b1b746454a0dec9709fa4b8d10f3d0c77d73f0317475dc219726c9f6813560a479647a2374d41b89aa3dcc532e6b1fb45d715888cd5065e2f7144ced22c207a40671f9870d1303d17", 0x50}, {&(0x7f0000003a40)="ef8bdb53363fb9377713681ac2969afcd7a2f519b13fbd64c87a7ac54ec58f6aba0f09aeddf8faa652ce34d1539ad7059b2b50c9fba41098c901fca595bcd65e71b1c8f27f52151945fa84cf24581634b31b1801a72a8f5b3ddebcb6c865c8f210414139fda6114dd494d3dc30da2a75ff734066bf3560ea9f9340290cba75ecc05b", 0x82}, {&(0x7f0000003b00)="3f9b3cb4e555f46f668674e3c7f5cc3267bf28db43ca1ecfdb6125e1d8dd0e3543f17ff16485eb31cba62738306e01071ff3d5449286263b06183cb1e3234a17018e0cfd9dde1398ce0e86fac499ed347035d9b5caba6e1c5fd9b83aee58a88374e846f16d0c25d62cbaf9b89d19676a7cae0fd95f073f260c09df0e956948a968f2ca9e405787147e4471c76e0194c6f801d66f89529aca046f81f444fb5680958bff8b3c", 0xa5}], 0x4, &(0x7f00000083c0)=ANY=[@ANYBLOB="300000000900000001000000010000004b3b96085b32e364243b9ad121a944354ef2f7a84bc96d9a8928c49f57", @ANYRES32=r14, @ANYRES32=r17, @ANYRES32=r17, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32, @ANYRES32=r17, @ANYRES32=r17, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x40080}}], 0x3, 0x4000000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000100), 0x0) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 18.431169259s ago: executing program 6 (id=3539): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)="17", 0x1) r0 = socket$inet(0x2, 0x3, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, &(0x7f0000000100)=0xff00) 17.997001492s ago: executing program 6 (id=3541): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 10.482989367s ago: executing program 6 (id=3564): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000ff1000/0xe000)=nil, 0xe000, 0x7, 0x20010, r2, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387db3b8691d2c0e201", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.484830056s ago: executing program 6 (id=3567): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async) sendmmsg$alg(r1, &(0x7f0000002640)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000880)="fe86a4759131efcfc66b7f471408b77a43ebe64fc79e26db48884a302cf75aca370fd06e55ce048217716c11b818e07940d5397ced979af634f58174d739a1d2d1a2d210a1c0f304ddbf2333d5d890340252910eec351739e5bdfb05e679667c83b627a633f1080d74c89c34cb9a373d87a0f55de3c1b331bc367bad39e79986616d82", 0x83}, {&(0x7f0000000940)="9f407cb09857cc2942da9acc975e5ba7b4a70d39f97456939996882d70b0cf28fe14eedb3feac0de2f7ce931f33bc0b988b0247eef27d709d6687ce3993249faa8d52832d3ce955c9811a34e330b210fd0b21ee82f2a78b8ce12404818", 0x5d}, {&(0x7f00000009c0)="fc08dec4701d0d3ffeb36b2449ca7df7852569528bdb11b8b79961fe5062ece0cfdd316095bb12c250bf32035b28893fab30fb8cd87edf77dfba87a3d886e62500599d166a520616a4316aac36766153baf86621582bc4acf206d2cfe6c7fd6e78ca8d6bc4aa5fa468f6988743f52e55", 0x70}], 0x3, &(0x7f0000000a40)=[@op={0x18}, @iv={0xe0, 0x117, 0x2, 0xca, "6effa37a988604825f101f5e55d17aa3ece636cb6d6704d29c7869e9d0169102bce4898260ed031eddb9a687d568ad1d5f19b8f29e30dfc956fe9cf54ca2542bb3f94dca13626d39549c5ec49a8702c4054647e223cb98ac3f098766cc03c2c259c9bf9ee77ea92c1cf030759806e60a7be12f712e24c8cdd4912ffeac7fec7841e0bb17aeea1756aef73e23952cd6b9650a9125e0288e95317fee0c2f04cd93dee4fd64849c7f21a79a023a5c7612f8a7afad387cb07c7e237bdd4142d4f923b87fa21d7c84d42c98b5"}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x10000}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x2}], 0x170, 0x20000000}, {0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="7d3dfcd4271d246f0368b7cf71c5215773b1bdc741a174ce8dcd8f3d16b9200889735b3c05d0ef7e763fae3181c94957663c39d2201c5621f89f5191df28a83a50f06fba78e5a20d9eec89d3748680a5a6bdc1e583e24c482a345a82d82b160bb9ecab7a38eb", 0x66}, {&(0x7f0000000c40)="4873d5219d098b62b8b6ac8152193adfa7c92a180f1f67538cd7e18d116fa078662b5d5940871ab8109f3b62cc55f85150234dd2bc2bb5042a15d9b924f5176ad51b40cd3bacedfe871aa5b6ec34c0fd11cf710c10c4f3f692d9f8a7e052d9ae", 0x60}], 0x2, &(0x7f0000000d00)=[@iv={0x68, 0x117, 0x2, 0x54, "774857c4a0b1ee2ea2bc5bc32e922da6f801213d5c6575c12408f19bdbdf4937f5b562382636c445cec6de782d968587d1b6e80fecafdeefa288157f379b96445a6ad9668614d24e20fcdbe69747517fa8fa4b38"}], 0x68, 0x20000897}, {0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000d80)="e38dbd4ab035481f40c193e59e10217d8b7d5855967a870e4b13a6603c7e09e7cea73b53b8d8a9a5b9f79f2377e79ff003dcd9b25da5382f0b474741390c6f553718994e51ff81bc3cc66c45c97fbdf038f6760221a9fb94b3cdb25e6a4fc5398f4dedaee8e759bff0ba4b71f8fd85bda156735c820cd0fd6f46c847b98d359561ddee42440a12f7cf6fd7c14b26cba820ad3f81f0bdb9c6cdb82912db4e9c058551b39ae7c3bf03605d0bb2623d8d04565588e0a70be317cbd499609caad244667660e1b38a0c987f7866954768605a6dc604f3c07a70906813e97b830298a67ab8b1b4452bfe", 0xe7}, {&(0x7f0000000e80)="f640b15c33877b90b2986a19dd4c03f85eff29dcf4331bf2bcac39604d2c68c9261b1248b1c066a7b29690355daf9d7ebe680cbb349080f33528c75c9bdf82fcd16da2ddf3d8749c36786a71f8b22f2d52db2847d71e66438b0a3327ef8f95488119625563904ed7692a2d79a7bb0c2c3627bdaf22cb8e247f4a77a82aa03b708e97e24c9b0d64c3a7708713fe6478dc66c6aae32ec51deaca487e1f155c6027fd75c90ba6707508a7185a5329794a5c47b94e5d966b2186d99dda3044d37fde586575a7a49457d675016ca4ef75088a73e56b8732a56f2c", 0xd8}, {&(0x7f0000000f80)="e3b7d11552ef3f1689df93427745d2edc44e008e11525e3c28bb3908bfb8152c9acfe7d8bfd7892d71313b63d57cdf4772d1f60ba91552a5271d57906c2c8d78b450d30166318535ee21c3fafa6ae942bfe81ee350d813cbf03853497b27e9322779b81976e4447cdf09548d5bdacc6f18db43d9cd34765ae5d705bc6cbbcccc265c8367ef180f6ae80f2dbe34aefde8a7f70bb6e24cb75afb3c471e0c221a607599e87ca012d437df2dae49e7", 0xad}, {&(0x7f0000001040)="ffb675b4e1d1cb16ec336ab49f17604830b9b85b17ffddad4ad332a2f79c27eeb64e21a3a86937823861de880e57f817db106640b7a111390c4dce629889fa47d6c5f7a0313cc3b43ae133e144855de9c563df3053fc6ce2f044d4fce288f3d57ee12618de9aa8cc4c1f407130ba8addffbb1e6f66d39d8508d1dbe74841a8d3e6609ca002d2b3d7c977b78d166f64a306763154175b788f332b74ad184cd4985ccb1ba79bc6ce2f0833883a5bdc1d734f57679749e6207b2c4aa61a4d6ee764a2b7e2cb", 0xc4}, {&(0x7f0000001140)="471585840d3e1020f76d23641bcf0ee6d38d6c52956f0526e6a9725f7cc6ee41ec5f1c2b207ae1e85e35d45fd4ddfe5e000cbca3efd0a2b24fbe2536663b081f906c70aea17e0f427360de3872864e73a809c4a806eb1882d241e2e8e5aef2282485683a752d01d0", 0x68}, {&(0x7f00000011c0)="e46924c1cb8ce5c9afb5f2398472bf971d9377df5fc05bd7dcf3e2e300a3717701682fc91f0f504845f688b40c70e72adbbb9619a74f10b662bec62b0713eada414d165363", 0x45}, {&(0x7f0000001240)="9449184814de0679057ab61f22fa1b74f362c0e51bd918bae07bf867475b7c5dce8d0217db08927c7fbcc8fcc7ffc2d99aa11ee1fab7502ee16e96dadd570f9c75007f2ecae1c24fe679e9a8234936665366d2639b81338a90a1a38c1fd97951e9598a1e5892c9642f0e3122b30df1e4fcbfc2fc7dda377c73c6ad4b24300e2217268b6423a74654b7b0adf0ca4e395f051e16bad5dac9763ead4b7f85fe9ac1fd0a7c4b7f5b4fa3b806a6fda958800e8114c1b8e4a82ec54ad8fdbd", 0xbc}], 0x7, 0x0, 0x0, 0x40}, {0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001380)="fcc7b5dc1cc7c92ce7bbd80c9afa0ba814bea54c163eee0920c36df8a8ff59e72ce239fadf0b43bafce50ee9fd3d299f86f3bb73c7f1234259595bed19bd620c7ee9b74dd59b155144a3a01060f0ee6cbabd1bc7582e48e9d68bebbb2df19e105a11b7bc1b823caf3e12125f00a16c71acd3b934dfb84496d57d2a12b778987747c0083fa729774f0da5ba0a0bc99de0bf4c4d862d2b1b124d9ba77b3681e2d02a92745763e85131deffc8eec15f09fbb9466aaab2e7396691150b9695daa653240f8d7b7b2d64965c7203a8d873ffaeeb0196ce6cf699df7a538dfd1e7891ab42409fb3c79a841e", 0xe8}], 0x1, &(0x7f00000014c0)=[@iv={0x108, 0x117, 0x2, 0xed, "7eb3bf87148cd036c4d3a4f019e89e8e1a8e4110c73faabc2d60d3a0500c8a204ca5bcd9c514dd28836d1bb75e8a5c581f420f4fc6c4dd83ae9dab9ed3b06b08de9259b231aca3e9d0ebc1e8fe90bb3e1f128534e5e3974c595db8875b2b3cf6034675a3ab82daba64c50737dc258220870c00319c7a88b40524dcb96fec5e9e69a07889dad7cc6cca82a5c7c71fd0e8cc482d42ed6084f06ea6559ba83125a252dac55d136bf41ae60c9926eecfe81143a25a766c6f8149a00e740d81c2544e3cc24b23fabcb2e04620bfe017a4f753db89b8814331aa74c0d407b0f7054ee60888c1bbe96ad38acad997dca0"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x35}, @iv={0x1018, 0x117, 0x2, 0x1000, "b7297f5202224de5ccbf8d41eb6d78595a732f0c52adc1f1a9c89ac11bc19267ed97c2d50b8e55ee5ceb70b8df44865e0474b3d174045569ca8f621688898c3171336426ce5eef5acf4cc37744aca728ea520bbaab9699ffb0da0523f8510083a0e339e9046aea83f243f4cbff7fcddcb345a382dfff0e2b7fc749a4e74b81df4476208ec89bcaa57eb3b977be26e84ab117ebb8859582b184bae20f26c767b4b0c45cfa88523be9b5b452a732c8ffb089c2ee88aed0c47cabe9060a6c2aaf39364fbfd77efd5f763ec59ec933779a5fc8aeb4f35e96d403df163eef8f8433d23f184663c5875c71b622e9ee0b955131c3ae7ee75d4f48cafa90944adad87f52e6ab97277b8232745bd7e533b5aa88edc8edab62222cb4c13d30a7de73ca6d41471bd339080bf42b9b5cafd327acd69efd82726929309de26ad719d44f3cb68a06dce7b37f6005eb383686fbf602dc192f90abf6d2109f8f0d96e7479613e8c3c42d408a6e6a1eae8c8011caf69d421a6b3e715478457ab1c39c00212cd2201de83d65f0279cd9d33f5defcd110202df6aa1cf40d0d8ea916a5b3667146ac5bcfb1d1fca4bde48b45e27a4b2fbe7af66446b037c0c0e8721cd4d01ab05eb4f5adbc6b9f2ce24736ffe85a46bcf74628c5fb96f47e47e2efcf0c67aa3ed0f300a4b274d1d93d720afdaab820971354cfaf1100012acf2ca49d23a1358946031fa62e850d0c122ad5c35efab7a5673fe6e21cfbddacad6f89fe4dc20864229b80ab01c3ce7246d4fae7eef10edfe32aa84e53f6faec2c08d385d45d06fa72e5dcda34c697af1eaeb874d3d61e3aee61957579177aa99a734afa54fd9e3e83c4f9442aee2ae181ff66c4e9bd8d3b50e6d4236f43a9238305bc77627422c8b89042fb22e147de2cd34d69d3454df66b23025929c0edaf47c06a463a27377569d347413cfc79d9ebf32bade2dd37b14bc92af0e06d8ca60e4def88f634b9c04fc6b4f497e5507e6f7927a64c119012bd2c703a07f4898f1dc4ff33748298bb65053a6037f4738e3ae24acafa93e38cad65ae22137dfd3b31688a569bcbba8d0d9e9fcbf4d0a8965e7dc80fe24e145209310bbbc5071ffa1859e58453cf917a505ad34bde1a73cd82a4c366482a553fddd8981b864109b7df8712ec4bcdfa0723104ea9d2ba334361f32435b4733db04f95f207b2133c6ca3ab4e618e1873bbb2e390003efb9f32ccb1b8f868b838f8d70291781ed1005dacde1339cf6794b9d2250b45e0a2d429d2d5cf72325fa69d9612702b224973dad80b09eaeb609a41b1d3d3701794f8e3afa683edae99d6a7a33b76305bfc59aae3d4f4050c575698ffc7f57dc4f9147357e926b79a02e423a4616d68ebbd2ce4d60a8551664e345d34cf0af4006706f34cbb08f5026163b8eb930be47d2bf1810ce408f08e61153a38f92550040012ab2fbcbe6cc0e6fb790803f2e67c3c91697ec08a9cdffd0e73170eeec8175433f2315f59ddee9a8c88b07920cee2c288bbb06263dfdde2693632de7d5a80682a4729ea74bda46c651d5be2cf5fa9e3e4f270169047d6e9fc83c36f3c209ccf2f4e97896ead5c35bddafb99c5acfc1c984c9256a006ca612c5b9467ad934bed53573297b6023ade4787d48a735f4cdb8f0032b65b93cf494a298362ecb4e1b9f89289907fddb1099b88b347494c97924e8356fa90e8db4cd85a6c9c7fa11e86ddebaa5a99ddb29982a78fc3fb64b16e1c97791460892bbccb9cb3e75c804a338b49c8137458a6b4449f80471824c4fe065ec3a6f1331c49e6cd9c22e438d0f6f5dd843881ebcdb622610363ea15cd80b610e91f35a4a18ab73b3fbd088acbdcab00d29666d6ae700fbbaf8738e6cc90d341c72092ce607755e19dfad958c36640c39e0b3d6e73c17f069be10080c87d936bbfa43110895ef972abebaeb430527a336038167295fb4c05b4cf1b0137acb947a87d0dc27cedb01e35cee593b76fda2ae165ccf8211fa0fa242c7333e4459522ee458401d034e56a9823244619701ef0f366ec00070d0999bf857aaec82e169c4dd7f20de624c55e6c4347784836c50b451ff2f9a10445bf6d0e049e822ed48ab9cd946945575364cc8b19dc179587ff6d3886a2d8d24a61bf24027ed9ce0e6354c1fe6fc930f6066353c72fc9bdd1b5f55784afdcf2e189f9125340353a91e9b2784d9e43244f223908e1af0ed1f41e0a1fd6cfb795ae5bac9d25e437e8b1811b67f7dd14e2cd447aaa8b494dc394200cd025a53fc430318499df4674b4e74da7a6fbbbdf98fba7ffb1310490eb18b3186e11020774c80176aec22ae0d1bbf903fac4f67f946e5314939722556baeeaa6f25aec6cf9766087569dd856401b9a9d55459ada9a45e3d8a176f39c1e9cbf1d62f3387e3542315d6772de3a0e628f0783aec2ea0380ccf8fba6076df76cae15ac754e33a40fb0e821e04384e0735761f516bd6acd6fda170aa1407bd57607126fcfdf478cdf37ef4fea56a79695caa5c8dc55ec230bddc49bd8f428c25097f3d49faf6964b9a95dbca05ec2084138b096306ffcb55d5e1678b371c703163c444c560027c5cbdee6247da30d1b797d326a99028c83226232f92d6017c33279948fc09e9169824d9b82cf4047541267d70e1331ef1691cc6478d2b03d7a926b862982c971f20a0f1bd9c70e85570c01d25e12c28cbeb007ce8f399e079bd29e8f7ac173668f400dda5d8a53c338bd761b39b0cb63b2eb046b50af513ea713b995cab3c96c4990e1c4d9224f713f7a4c634e738c8767b7ee1d0c1bb320a441d2c72e0644be3619459c040cdda4174f152b237ee23be3b2458fddc5a7b36f0b54cd2eed47dd1bc794069a3e95960108545ca67190042cf7775b139603c6c697992191d8e352f5bccb534f4aa1124f6e9e6ff5d275d42eb325fca534e89587138648b38fe1743264ba6c2b074590ab8dcff9d8b59b577b3a986a00008538951ae6b5b91d71d4d6e4d1964577f72e2626873b82ff89df876ff5a152b298fe290a17bf5bbdf034d0a09adec7b907facf5444e3c3c7c5edb1143307fd88c5d089750611a92dca583b0a5c94e4636176c91cee068747e66623c3cab855a6c8276768ba4630dee08f93f46f9e4aa7141615f4bb608186835257f1909305ddc32a89f292ba74507af15f792e9cef370c84ecad45cd8c1475d92c892de9233652395301e617860fdbeba254399c1da62bf7cef998ba02c9b7d222ffa0358d8ddab422c015b74fdeefc5465e44eecdf1c00239559f2cd064b2e6e3b2b5c6f946a8a88efd744ae5340629d3efab47dce8c9c908ee757b6f60fabee41c7bc51d6b831b16a2a03fb9a7fd1836a329d85456b82bde5fc0af821ef9a4e0a4b97d7f49a0c98ebe2a5bdb3258ee8930bda241b174913f51caadffcbbaa5823ec7039249701b010ba89139c3ef9ba9900a57759085e15a06a770baabaa5d8aad3d55c2448b34a932a17dc715d94fe8715f5d8795ee1c49cf3fc86972ce07116068d8610ae49ea8817ae4f34af8855c571d6a6a04632a269bc4e0dd46ed39b15737bdc68d3e98578b3cb09f0f7af5293a638b6376f99ae6c91d1fc841739ec6a6bf9a4b7ed4c30b888f536dcc26016304c48957cd0f1a2e7f23643acc66577d347b50fa811264441c1cbd231522f8f0294eb9c3d6facfe7a428a7b9d77ff9dc296f791d849c28c46dab9458a74e167678131603b2f194136b0f56b149bc1a0fbe0e3d6e582d7eb3777162786571ff51ac07f8b8205be0281d2e103e511687a1bf2d52e73a470ba4c5aa7e3dd14fed0a4caae21ad7da1ba8d0f57146c52b6ad641fa0a67fad92afc30bc608e2c7071326c3382cdc972a16b307e346d50f560afee22b21010941726518e9b7659a7aeb7ac4f208178f5b3e2fd653eacc938b9a99f6f0ae32fd4fc9f3cad6e0e979f18341dfc2c1137f407b53581b4088565aeb8e3e2b9223b9e60f3a11f5dfeb8c117932644fa416f84fab7c6e910e9f12e8e02f3a7ca672af7990cb129a7b4b5cdc5d0abc16a8807060f1199d998d198ee4f722e0261e016004dc1ddbbaeb795b3124e15b58d1f398c6b225d17ae6e1089610626ad9093de67245439225f35911ef278549cdc2f2e5a66c4429441c73b4c55b20762f14f60d8eaedac680354447afa674d070a3ba1034fea1a4119ef388024098601b85d9de2f0ce5910bf2933ed621df02a5e611016b77acce03e7f87c15125fbe9b2cc6e82f16f859c5976c64f7ea16d90646394a1d378f10f7e5720ff29dd7ebfd16a018406bf8b9e9f029c54e259a3f6d4ab79113ef346ad5809b8f529c56163ce609c6cad4a56a358d9e1d55e2018417a5f0047d820336978c0bccfe277fc0eb60535fe3d7c22bbdc6be2868ae5106e01ceca551e24c1a1f6fe91ef8f1d085997e7c69f5d8a4e5a78984c8e1789d5a975e8e9b0f716eeed83e02b2479c90db000fbf3fc97e3a1b0857a8411fc75caa0056da2e89593879d5d2babf88c36e3a5975d4192ae72d10fb766ea344c7ef0c126d83a20b08f064421dac43e5713d6b6149ed7c9c7ad95be99b12d4f069c2c9c057b5f32065bcdafc1f8d55ded101c2d88a69e8eca2efc2f6893e177230d2de4a1d3185ebb1e9da5caaa8d4de12ddeb077aeaa904699136f3d4fa71e09668860cab9442d3cd7b50ce5542e073b2453be5edf84941d6fbfa72b848a3a378608f43187e34dc7edb89b10a9cf42753c42ca518ae3277e39aeceefd2685b878ec72c902efae9e13ad161689594ac201a441b5131a3c6e45ac23fb09e9dba139d19247acfebce44931bf252fe0dfb470b6c9ecba1874ab498363cec3cb132b7a01e08016070eeb45edcb2aa86991214f01d950720553bf556cd3f5212e961c938085e2d9e5340a4485c79d1405539a67a8162b14cd887f29e3ab4fbb78de68c7cd953d54e1b32fc24c5341caa4a9e452d39cd3fd3d273964f8e1ce56307d7c631bce85cb70105531cb34de6a3e037293a602f3402abf34c578690fa0f1587a52e24d8ec18a1fa8a60da2d4e65dfcb279f7840ce689c44eb85f86436293180252b4ea21f6ef63c1eda5fee26a355eb50236fbbb0901ad4bd4d7a0211d6e94df3e2ccb72de62cc6906f391d2610d19239063e989691b2f1a97cc9707404fa76f5d40128c6da52d2ca3af82a396993b77f8500d795172c9908ab4674cc34c35c1b5f4cd6eddbf96f7af801aefda90c93bab3bec40d376eae6ae70aa91e9d0d13f7255e2f53d1757350b6f8c42de3f2788ed1919035f43db0dae292d5122dce6cb38c14075bab0ddfaed18bbe9526ec07bf8a2cda4fc94aa3169de54abea0cc37041fdd3f2ad2cc78171deceb38916b941eb9e744459e59bf78342c6aa4d0d83cb629fb96f77e336c82429ba87bce3d6c9b7be44977c3e27998101f73ee7ba4d657443b7dbc1d9aa290b935ca5d1b772ea04158d748bdfdc05b0b09c882082a78e88e18018ec8fec5f34af334bcaf14da7bc2933455d886736fb3ce766ccd3eeb08b1670941eabeefd95e79aed4920c259b59825ff84b6e604279d223aec393cb3d7879326f7854e476c146571e9b8748886e299e61d0f3679919b6f1816604842271d04ef2f8114fe94c58734eb3393d2e4b40bf60f79869ce22e6a962bb9e1615a7f60c6021b27253f6e4e5d310191568201aefa8d2e5b267d50e67fb4659a3b7cd923e4ab0b80f01f3508fc147b2e12721a4d46f801eb1cee45d3efe21f324dc271814d298eefdf7d4ae0daafa0a8ea7479cbcd3dff62"}], 0x1150, 0x1}], 0x4, 0x800c800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0, 0x0, 0xa002a0}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080)="15", &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r0}, 0x38) (async) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x600000, 0x80}, 0x18) (async) fcntl$getown(r2, 0x9) (async) r5 = syz_create_resource$binfmt(&(0x7f0000000240)='./file0\x00') execveat$binfmt(r4, r5, &(0x7f0000000640)={[&(0x7f0000000280)='+\xaf=$\xf5\xea\x9ef\x03\xd7\x8fR\xa3', &(0x7f00000002c0)='\xf2\\*\x00', &(0x7f00000003c0)='\x0f\x00', &(0x7f0000000400)='\x00', &(0x7f00000004c0)='\x02{\xd7\x00', &(0x7f00000007c0)='\x00:\xdaSun\x1b\x14M\x81m\xca&\xd60xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6.334124913s ago: executing program 3 (id=3577): setresuid(0x0, 0xee01, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x403d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) readv(r2, &(0x7f0000000540)=[{&(0x7f0000000080)=""/42, 0x2a}], 0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000040), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f00000000c0)=0x1, 0x0, 0x4) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000140)={0x7, 'vlan1\x00', {0xe}, 0x1b6}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="59e30780db52732ed9", @ANYRESDEC=0x0, @ANYRES16=r0], 0x50) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x6c) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) fcntl$notify(r3, 0x402, 0x5) mknod$loop(&(0x7f00000000c0)='./file1\x00', 0x6000, 0x1) preadv(r3, 0x0, 0x0, 0x0, 0x0) 6.201236602s ago: executing program 4 (id=3578): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000a00180001002dbd7000fb00"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB='\x00'/25], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r3], 0xd4}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r4}, 0x69) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000019580)={{{@in=@private=0xa010100, @in6=@private2, 0x4e23, 0x1, 0x4e24, 0x0, 0x2, 0x80, 0x80, 0x3c}, {0x5, 0xfffffffffffffffd, 0x8, 0x5, 0x6, 0xd, 0xf17, 0x4}, {0x0, 0xffff, 0x11, 0xff}, 0xc, 0x6e6bb9, 0x2, 0x0, 0x3, 0x3}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, 0x0, @in6=@mcast2, 0x3505, 0x3, 0x1, 0x3, 0x7ff, 0xb, 0x6}}, 0xe8) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102385, &(0x7f0000000000)=0x18ff1) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') preadv2(r7, 0x0, 0x0, 0xd0d, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) syz_open_dev$media(0x0, 0x1, 0x8000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 5.512655226s ago: executing program 4 (id=3581): getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x4, 0x0, &(0x7f0000000080)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000300)=0x10, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x3d, 0x180, 0x4, @mcast1, @local, 0x20, 0x80, 0x1, 0x2}}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000400)={@multicast2, @local, r1}, 0xc) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x180080, @loopback, 0x40}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x8000, 0x80, 0x2, 0x8000, {{0x3e, 0x4, 0x0, 0x5, 0xf8, 0x67, 0x0, 0x42, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2e}, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0xa1, 0x0, 0xf, [0x9, 0xfb, 0x0, 0xb, 0x8001, 0x4, 0x7]}, @cipso={0x86, 0x57, 0x3, [{0x7, 0xe, "83f3db7191572a3627cbaf07"}, {0x0, 0x4, "8450"}, {0x6, 0x2}, {0x0, 0x3, "ec"}, {0x2, 0xa, "0226dfbaa0081a9d"}, {0x6, 0x10, "726c8d66c0f9bafc627aa046e98e"}, {0xea16138539ccd343, 0x2}, {0x6, 0x12, "e1961c22645584d20442dc1c4b1ae5fa"}, {0x0, 0xc, "e77d234007ac2ac233ce"}]}, @ssrr={0x89, 0xb, 0xc8, [@multicast2, @empty]}, @timestamp_addr={0x44, 0x44, 0x87, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x9}, {@local, 0x400}, {@loopback}, {@loopback, 0x4}, {@multicast2, 0x9}, {@local, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@private=0xa010100, 0x1}]}, @ssrr={0x89, 0x17, 0xd5, [@multicast1, @loopback, @remote, @broadcast, @remote]}]}}}}}) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) 5.365231887s ago: executing program 9 (id=3582): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="080102016201000083030000070000004d0100001a0000000000000000000000d6503d020feecbf5ffbf1ea57bfe74c13d7dbccc62217083eaba65d3eb147e46a5fc67069a92d78b73b73d0fa6e6813b9b003229b9cde2a48034dd24fbd9f0fc863d02c0ebb25cd7720d246fbfb178fef99d2767bf3904579045a187a5009a025f1a00a2af47d264b8a40e8a14331e5a47da02e7cbbdb3b7741d7ec928e160e7e7c70afb276c722f9fd0a6479a4ecb393ed863c610d0e9f3f01b2e00ba0600"], 0xbf) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000000200), 0x0}, 0x20) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e20, 0xfff, @loopback, 0x52c6}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, r0, 0x3000) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x2000000089}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x20100000000003, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, @value=0x4}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) fsetxattr$smack_xattr_label(r5, &(0x7f0000000380)='security.SMACK64IPIN\x00', &(0x7f0000000280)=ANY=[@ANYBLOB], 0x7, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4004801}, 0x40810) 5.220364099s ago: executing program 3 (id=3583): socket$inet6(0xa, 0x80002, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 4.970912584s ago: executing program 4 (id=3584): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e) recvmsg$unix(r1, 0x0, 0x11000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x69) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258}) ioctl$TIOCNOTTY(r4, 0x5422) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e041e0b20"], 0x7) sched_getaffinity(r0, 0x8, &(0x7f0000000180)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, 0xffffffffffffffff, 0x4, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r5, 0xffffffffffffffff, 0x4, 0x0, 0x0, @void, @value}, 0x10) mlock(&(0x7f00007d9000/0x2000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.78131261s ago: executing program 3 (id=3585): r0 = msgget$private(0x0, 0x214) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000500)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x194, 0x1}, 0x0, 0x0, 0x6, 0x7, 0x8c, 0x8, 0x7, 0x0, 0x7, 0x3}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x32, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffff0180c200000308004600002400000000001190780000000000f6ffff43045e0000014e20000c907801"], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1c, 0x200, &(0x7f0000000040)="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"}) r4 = syz_usb_connect$hid(0x5, 0xfffffffffffffee1, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4f2, 0x1236, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.396392596s ago: executing program 9 (id=3587): open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) 3.255597917s ago: executing program 9 (id=3588): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket(0x1e, 0x2, 0x6) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r4, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c810}, 0x0) recvmmsg$unix(r4, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/193, 0xc1}], 0x1}}], 0x1, 0x12040, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x1, 0x5001) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000100), 0x2, 0x20000) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000480)='d', 0x1}], 0x1) preadv(r6, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0xc}, {0x0, 0x24}], 0x2, 0x0, 0x0) 2.935131939s ago: executing program 9 (id=3589): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_delete(0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000044040)=""/102384, 0x18ff0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48}) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x10000) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, 0x0) ppoll(&(0x7f0000000480)=[{r3, 0x2004}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000200), 0xf, 0x0) ioctl$HIDIOCAPPLICATION(r4, 0x4802, 0xffffffff80000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="a243e6e0", 0x4}], 0x1, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x200}}], 0x18}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@bridge_setlink={0x38, 0x13, 0xa2f, 0xfffffffd, 0x0, {0x7, 0x0, 0x68, r6, 0x900, 0x2952}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}]}}}]}, 0x38}}, 0x4050) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x440, 0x0) 2.922232223s ago: executing program 1 (id=3590): listen(0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd\x00') statx(r1, 0x0, 0x1000, 0x20, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001880)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@delchain={0x24, 0x65, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0x6}, {0x0, 0xf}, {0xffe0, 0xfff1}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.861809593s ago: executing program 6 (id=3591): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0xd1383000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x0, 0x13, 0x4, "f2c93326"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000580)={0x40, 0x1e, 0x4, "8d7c8d63"}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@local, 0x0, r4}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newsa={0x164, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty}, {@in=@empty, 0x0, 0x32}, @in=@broadcast, {}, {}, {0x0, 0x0, 0x40000000}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @etimer_thresh={0x8}, @lifetime_val={0x24}]}, 0x164}}, 0x4000000) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x600, 0x0, 0xa0022, r4}) 2.245270497s ago: executing program 1 (id=3592): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, r2, 0x301, 0x0, 0x25dfdbfc, {0x24}}, 0x14}}, 0x20000000) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xeb) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e17, @remote}, 0x10) setreuid(0x0, 0xee01) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x1, &(0x7f0000000000)=0x1bce5ac8, 0x4) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x29, 0x0, 0x0, &(0x7f0000000100)=[@timestamping={{0x14}}], 0x18}}], 0x0, 0x4) 2.148004483s ago: executing program 1 (id=3593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x140, r1, 0x1}, 0x14}}, 0x0) 2.034126731s ago: executing program 1 (id=3594): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, 0x0, &(0x7f0000000700)=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 1.979885152s ago: executing program 9 (id=3595): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x80) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) syz_open_dev$dmmidi(&(0x7f0000000000), 0xffffffffffffff08, 0x8200) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) (async) r0 = open(&(0x7f0000000140)='./bus\x00', 0x40140, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x40000) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x401) (async) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00') (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x10d, 0xb, &(0x7f0000000080)=0xa, 0x4) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000e801010000000000fda947adfa0000000000000004000b00"], 0x1c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x0, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x2c}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'wlan1\x00'}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@known='trusted.overlay.upper\x00') 1.94635537s ago: executing program 1 (id=3596): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x3, 0xd1, 0x4, 0x9, 0x5, 0xa3, 0x0, 0x88, 0x1, 0xfc, 0x3}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x7ff, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}, 0x31}], 0x414, 0x406, 0x0) 1.781440543s ago: executing program 9 (id=3597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r6 = io_uring_setup(0x6503, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="058400000000000000000e0000000a000300", @ANYRES32=r9], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(0x0, r3) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="000828bd7000fd00"/24], 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x40000) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000280)={0x28, 0x7, 0x0, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r11, 0x0, 0x10000, 0x0, 0x3, 0x2060e3, 0x1e6c81}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x1318) syz_usb_connect(0x2, 0x52, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 1.624962652s ago: executing program 3 (id=3598): open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) 1.595592355s ago: executing program 4 (id=3599): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket(0x1e, 0x2, 0x6) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r4, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c810}, 0x0) recvmmsg$unix(r4, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/193, 0xc1}], 0x1}}], 0x1, 0x12040, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x1, 0x5001) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000100), 0x2, 0x20000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) preadv(r6, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0xc}, {0x0, 0x24}], 0x2, 0x0, 0x0) 945.292382ms ago: executing program 1 (id=3600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff200100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0xffffffffffffffff) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f00000000c0)={0x1, 0x3eab}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r3, 0x0, 0x10000000000000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) creat(&(0x7f0000000180)='./file0\x00', 0x10) 628.072519ms ago: executing program 4 (id=3601): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(r6) r7 = socket$alg(0x26, 0x5, 0x0) accept4(r7, 0x0, 0x0, 0x0) memfd_secret(0x0) openat$snapshot(0xffffff9c, &(0x7f0000000180), 0x5141, 0x0) 94.03069ms ago: executing program 3 (id=3602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x181) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r4, 0x80) sendfile(r3, r4, 0x0, 0x7ffff000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001200)=ANY=[@ANYBLOB], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0xdeff, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 0s ago: executing program 4 (id=3603): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2a, 0xb, 0x0, 0x0, {0x8}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r2 = io_uring_setup(0x341a, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0x7fffc}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x22, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x7d, &(0x7f00000000c0)={0x0, @in6={{0x2, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000040)={0x23, 0x4, 0x3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) close(0xffffffffffffffff) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = creat(0x0, 0x8) read$FUSE(r5, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f000000a3c0)="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", 0x2000, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x8000) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000200)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x17}, @ioring_restriction_sqe_flags_allowed={0x2, 0x17}, @ioring_restriction_sqe_flags_required={0x3, 0x5}, @ioring_restriction_register_op={0x0, 0xa}, @ioring_restriction_sqe_flags_allowed={0x2, 0x7}, @ioring_restriction_register_op={0x0, 0x16}], 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): ine/Google Compute Engine, BIOS Google 12/27/2024 [ 1191.358660][T16239] Call Trace: [ 1191.358666][T16239] [ 1191.358674][T16239] dump_stack_lvl+0x241/0x360 [ 1191.358705][T16239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1191.358729][T16239] ? __pfx__printk+0x10/0x10 [ 1191.358763][T16239] should_fail_ex+0x40a/0x550 [ 1191.358787][T16239] _copy_to_user+0x31/0xb0 [ 1191.358806][T16239] simple_read_from_buffer+0xca/0x150 [ 1191.358829][T16239] proc_fail_nth_read+0x1e9/0x250 [ 1191.358851][T16239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1191.358873][T16239] ? rw_verify_area+0x243/0x630 [ 1191.358895][T16239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1191.358916][T16239] vfs_read+0x1f8/0xb40 [ 1191.358939][T16239] ? fdget_pos+0x254/0x320 [ 1191.358961][T16239] ? __pfx___mutex_lock+0x10/0x10 [ 1191.358982][T16239] ? __pfx_vfs_read+0x10/0x10 [ 1191.359008][T16239] ? __rcu_read_unlock+0xa1/0x110 [ 1191.359025][T16239] ? __fget_files+0x2a/0x410 [ 1191.359046][T16239] ? __fget_files+0x395/0x410 [ 1191.359065][T16239] ? __fget_files+0x2a/0x410 [ 1191.359093][T16239] ksys_read+0x18f/0x2b0 [ 1191.359111][T16239] ? __pfx_ksys_read+0x10/0x10 [ 1191.359138][T16239] do_syscall_64+0xf3/0x230 [ 1191.359159][T16239] ? clear_bhb_loop+0x35/0x90 [ 1191.359183][T16239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.359203][T16239] RIP: 0033:0x7f2bfd58b7fc [ 1191.359218][T16239] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1191.359233][T16239] RSP: 002b:00007f2bfe3c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1191.359251][T16239] RAX: ffffffffffffffda RBX: 00007f2bfd7a6080 RCX: 00007f2bfd58b7fc [ 1191.359263][T16239] RDX: 000000000000000f RSI: 00007f2bfe3c70a0 RDI: 0000000000000007 [ 1191.359274][T16239] RBP: 00007f2bfe3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.359285][T16239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1191.359294][T16239] R13: 0000000000000000 R14: 00007f2bfd7a6080 R15: 00007ffd49c4a368 [ 1191.359322][T16239] [ 1192.689693][T16256] vlan3: entered promiscuous mode [ 1194.271515][ T5873] usb 10-1: new full-speed USB device number 48 using dummy_hcd [ 1194.476220][ T5873] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1194.522892][ T5873] usb 10-1: not running at top speed; connect to a high speed hub [ 1194.532808][ T5873] usb 10-1: config 9 has an invalid interface number: 5 but max is 0 [ 1194.540892][ T5873] usb 10-1: config 9 has no interface number 0 [ 1194.568425][ T5873] usb 10-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1194.963343][ T5873] usb 10-1: config 9 interface 5 altsetting 9 endpoint 0x87 has invalid maxpacket 24929, setting to 64 [ 1195.041168][T16269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1196.749602][ T5873] usb 10-1: config 9 interface 5 has no altsetting 0 [ 1196.774264][ T5873] usb 10-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 1196.784777][ T5873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.890507][T16265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2799'. [ 1196.902588][ T5873] usb 10-1: Product: syz [ 1196.906883][ T5873] usb 10-1: Manufacturer: syz [ 1196.913489][ T5873] usb 10-1: SerialNumber: syz [ 1196.940019][T16248] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1197.452697][ T5873] usb 10-1: USB disconnect, device number 48 [ 1197.632370][T16278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2803'. [ 1198.066231][T16286] FAULT_INJECTION: forcing a failure. [ 1198.066231][T16286] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.078989][T16286] CPU: 1 UID: 0 PID: 16286 Comm: syz.9.2804 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 1198.079012][T16286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1198.079022][T16286] Call Trace: [ 1198.079030][T16286] [ 1198.079037][T16286] dump_stack_lvl+0x241/0x360 [ 1198.079068][T16286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1198.079093][T16286] ? __pfx__printk+0x10/0x10 [ 1198.079118][T16286] ? lock_acquire+0x264/0x550 [ 1198.079145][T16286] ? preempt_schedule_common+0x84/0xd0 [ 1198.079171][T16286] should_fail_ex+0x40a/0x550 [ 1198.079195][T16286] should_failslab+0xac/0x100 [ 1198.079218][T16286] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1198.079239][T16286] ? __alloc_skb+0x1c3/0x440 [ 1198.079266][T16286] __alloc_skb+0x1c3/0x440 [ 1198.079289][T16286] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1198.079311][T16286] ? __pfx___alloc_skb+0x10/0x10 [ 1198.079336][T16286] ? hci_sock_sendmsg+0x617/0x11c0 [ 1198.079360][T16286] ? __pfx___mutex_lock+0x10/0x10 [ 1198.079384][T16286] hci_mgmt_cmd+0x1c1/0x11d0 [ 1198.079420][T16286] hci_sock_sendmsg+0x7b8/0x11c0 [ 1198.079440][T16286] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1198.079466][T16286] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1198.079487][T16286] ? sock_write_iter+0x291/0x3f0 [ 1198.079504][T16286] ? __sock_sendmsg+0x20/0x270 [ 1198.079529][T16286] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1198.079548][T16286] __sock_sendmsg+0x221/0x270 [ 1198.079571][T16286] sock_write_iter+0x2d7/0x3f0 [ 1198.079593][T16286] ? __pfx_sock_write_iter+0x10/0x10 [ 1198.079623][T16286] ? bpf_lsm_file_permission+0x9/0x10 [ 1198.079649][T16286] vfs_write+0xacf/0xd10 [ 1198.079669][T16286] ? __pfx_sock_write_iter+0x10/0x10 [ 1198.079689][T16286] ? __pfx_vfs_write+0x10/0x10 [ 1198.079716][T16286] ? __fget_files+0x2a/0x410 [ 1198.079740][T16286] ? __fget_files+0x2a/0x410 [ 1198.079769][T16286] ksys_write+0x18f/0x2b0 [ 1198.079788][T16286] ? __pfx_ksys_write+0x10/0x10 [ 1198.079804][T16286] ? do_syscall_64+0x100/0x230 [ 1198.079828][T16286] ? do_syscall_64+0xb6/0x230 [ 1198.079852][T16286] do_syscall_64+0xf3/0x230 [ 1198.079872][T16286] ? clear_bhb_loop+0x35/0x90 [ 1198.079897][T16286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.079917][T16286] RIP: 0033:0x7f2bfd58cde9 [ 1198.079932][T16286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1198.079946][T16286] RSP: 002b:00007f2bfe3a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1198.079964][T16286] RAX: ffffffffffffffda RBX: 00007f2bfd7a6160 RCX: 00007f2bfd58cde9 [ 1198.079977][T16286] RDX: 0000000000000007 RSI: 0000400000000000 RDI: 0000000000000008 [ 1198.079987][T16286] RBP: 00007f2bfe3a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.079998][T16286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.080008][T16286] R13: 0000000000000000 R14: 00007f2bfd7a6160 R15: 00007ffd49c4a368 [ 1198.080035][T16286] [ 1198.080092][T16286] Bluetooth: MGMT ver 1.23 [ 1199.620457][T16305] vlan4: entered promiscuous mode [ 1204.061539][ T5875] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1204.215015][T16345] vlan2: entered promiscuous mode [ 1205.210333][ T5875] usb 10-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1205.242459][ T5875] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.252401][ T5875] usb 10-1: config 0 descriptor?? [ 1206.211543][ T5875] usb 10-1: string descriptor 0 read error: -71 [ 1206.230046][ T5875] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1206.291599][ T5875] gspca_sunplus: reg_w_riv err -71 [ 1206.305101][ T5875] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 1206.336801][ T5875] usb 10-1: USB disconnect, device number 49 [ 1206.486283][ T5825] syz_tun: left promiscuous mode [ 1207.100771][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1207.110834][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1207.120499][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1207.128900][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1207.136797][ T5829] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1207.145992][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1207.239936][T16364] wg1 speed is unknown, defaulting to 1000 [ 1209.118701][T16364] chnl_net:caif_netlink_parms(): no params data found [ 1209.261635][ T5822] Bluetooth: hci3: command tx timeout [ 1209.392165][ T5875] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1210.511807][ T5875] usb 10-1: Using ep0 maxpacket: 16 [ 1210.517838][T16398] vlan4: entered promiscuous mode [ 1210.518711][ T5875] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.618585][ T5875] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1210.959068][ T5875] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1210.969430][ T5875] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1211.193406][ T5875] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1211.301503][ T5875] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.309626][ T5875] usb 10-1: Product: syz [ 1211.315052][ T5822] Bluetooth: hci3: command tx timeout [ 1211.342639][ T5875] usb 10-1: Manufacturer: syz [ 1211.347367][ T5875] usb 10-1: SerialNumber: syz [ 1211.362185][T16364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.402941][T16364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.420425][T16364] bridge_slave_0: entered allmulticast mode [ 1211.427741][T16364] bridge_slave_0: entered promiscuous mode [ 1211.443489][T16364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.460985][T16364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.479726][T16401] 9pnet: Could not find request transport: fd0x00000000000000040xffffffffffffffff [ 1211.480839][T16364] bridge_slave_1: entered allmulticast mode [ 1211.507572][T16364] bridge_slave_1: entered promiscuous mode [ 1213.206522][T16364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.243204][ T5875] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1213.285562][T16364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.291928][ T5875] usb 10-1: USB disconnect, device number 50 [ 1213.329621][T16364] team0: Port device team_slave_0 added [ 1213.338478][T16364] team0: Port device team_slave_1 added [ 1213.387533][T16364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.394811][ T5822] Bluetooth: hci3: command tx timeout [ 1213.402432][T16364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.429642][T16364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.441853][T16399] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1213.442519][T16364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.456594][T16364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.482774][T16364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.528566][T16364] hsr_slave_0: entered promiscuous mode [ 1213.537130][T16364] hsr_slave_1: entered promiscuous mode [ 1213.543392][T16364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1213.551089][T16364] Cannot create hsr debugfs directory [ 1213.591641][T16399] usb 2-1: Using ep0 maxpacket: 16 [ 1213.600867][T16399] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.620592][T16399] usb 2-1: config 0 has no interfaces? [ 1213.632745][T16399] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1213.648356][T16399] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1213.661552][T16399] usb 2-1: Manufacturer: syz [ 1213.669479][T16399] usb 2-1: config 0 descriptor?? [ 1213.858656][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2842'. [ 1214.669163][T16364] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.731023][T16412] netlink: 'syz.1.2840': attribute type 10 has an invalid length. [ 1214.811006][T16422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.836077][T16422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.481668][ T5822] Bluetooth: hci3: command tx timeout [ 1217.106413][T16412] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1217.131228][ T5873] usb 2-1: USB disconnect, device number 12 [ 1217.157986][T16435] zonefs (nullb0) ERROR: Not a zoned block device [ 1217.202156][T16364] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.237402][T16433] vlan3: entered promiscuous mode [ 1217.331158][T16364] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.553741][T16364] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.410638][T16364] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1219.434570][T16364] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1219.691953][T16364] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1219.717214][T16364] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1221.041939][T16468] netlink: 'syz.3.2855': attribute type 3 has an invalid length. [ 1221.049754][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2855'. [ 1221.890378][T16364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1221.919583][T16364] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.974336][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.981524][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.011525][ T5873] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1222.024054][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.031229][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.111314][T16364] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1222.134309][T16364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1222.185025][ T5873] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1222.226369][ T5873] usb 4-1: not running at top speed; connect to a high speed hub [ 1222.255795][ T5873] usb 4-1: config 17 has an invalid interface number: 8 but max is 1 [ 1222.293709][ T5873] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1222.318685][ T5873] usb 4-1: config 17 has no interface number 0 [ 1222.348161][ T5873] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1222.428295][T16479] netlink: 'syz.1.2858': attribute type 49 has an invalid length. [ 1222.431457][ T5873] usb 4-1: config 17 interface 8 has no altsetting 0 [ 1222.439335][T16479] netlink: 'syz.1.2858': attribute type 49 has an invalid length. [ 1222.463170][ T5873] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1222.505064][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.918411][ T5873] usb 4-1: Product: syz [ 1222.980706][ T5873] usb 4-1: Manufacturer: syz [ 1223.131537][ T5873] usb 4-1: SerialNumber: syz [ 1223.142717][ T5873] usb 4-1: can't set config #17, error -71 [ 1223.154648][T16481] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1223.165122][T16481] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1223.191991][ T5873] usb 4-1: USB disconnect, device number 17 [ 1223.202261][T16481] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1223.208232][T16481] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1223.257531][T16364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.454279][T16481] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1223.460535][T16481] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1223.467444][T16481] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1223.535393][T16492] vlan0: entered promiscuous mode [ 1223.564644][T16481] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1224.454817][T16481] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1225.398993][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 1225.399009][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 1225.526304][T16364] veth0_vlan: entered promiscuous mode [ 1225.538280][T16364] veth1_vlan: entered promiscuous mode [ 1225.560842][T16364] veth0_macvtap: entered promiscuous mode [ 1225.570200][T16364] veth1_macvtap: entered promiscuous mode [ 1225.585504][T16364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.638976][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1225.638990][ T5822] Bluetooth: hci2: command 0x0405 tx timeout [ 1226.085222][T16364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.148506][T16364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.211715][T16364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.318773][T16364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.339593][T16364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.351979][T16364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.366544][T16364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.408093][T16364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1226.865795][T16364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1226.967080][T16364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.987344][T16364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.015351][T16364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.040067][T16364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.054752][T16364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.077872][T16364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.091041][T16364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.218067][T16364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.233484][T16364] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.249484][T16364] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.260003][T16364] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.311984][T16364] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.323428][T16527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1227.471908][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 1227.478113][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 1227.544111][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.578624][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.713024][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1227.720169][T16366] Bluetooth: hci2: command 0x0405 tx timeout [ 1228.138962][T16530] netlink: 'syz.3.2868': attribute type 3 has an invalid length. [ 1228.146838][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2868'. [ 1228.185101][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.202906][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.548212][T16540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1228.672777][ T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1229.352061][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1229.425782][T16543] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2871'. [ 1229.482649][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 1229.682010][ T9] usb 4-1: config 17 has an invalid interface number: 8 but max is 1 [ 1229.767959][ T9] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1229.777125][ T9] usb 4-1: config 17 has no interface number 0 [ 1229.784741][ T9] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1229.796883][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1229.811169][ T9] usb 4-1: config 17 interface 8 has no altsetting 0 [ 1229.816999][T16547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2824'. [ 1229.833772][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1229.851598][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.859802][ T9] usb 4-1: Product: syz [ 1229.864152][ T9] usb 4-1: Manufacturer: syz [ 1229.869995][ T9] usb 4-1: SerialNumber: syz [ 1229.932446][T16549] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 1229.942031][T16549] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 1231.303627][ T9] usb 4-1: selecting invalid altsetting 0 [ 1231.683543][ T9] usb 4-1: USB disconnect, device number 18 [ 1232.085753][T16565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2876'. [ 1235.811843][ T5873] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1235.972383][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 1235.998660][ T5873] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.112545][ T5873] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1236.136327][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.151578][ T5873] usb 4-1: Product: syz [ 1236.155809][ T5873] usb 4-1: Manufacturer: syz [ 1236.160429][ T5873] usb 4-1: SerialNumber: syz [ 1236.191035][ T5873] usb 4-1: config 0 descriptor?? [ 1236.204892][ T5873] asix 4-1:0.0: probe with driver asix failed with error -22 [ 1236.275095][T16599] netlink: 256 bytes leftover after parsing attributes in process `syz.9.2888'. [ 1236.519498][ T5875] usb 4-1: USB disconnect, device number 19 [ 1236.528330][T16620] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2891'. [ 1236.861617][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1237.009888][T16634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2895'. [ 1237.290330][ T9] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 1237.357691][ T9] usb 7-1: config 0 has no interface number 0 [ 1237.506139][ T9] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1237.520203][ T9] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1237.556331][ T9] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1237.573979][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.591495][ T9] usb 7-1: Product: syz [ 1238.023399][ T9] usb 7-1: Manufacturer: syz [ 1238.030375][ T9] usb 7-1: SerialNumber: syz [ 1238.051646][ T9] usb 7-1: config 0 descriptor?? [ 1238.067445][T16620] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1238.085329][ T9] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1238.110336][ T9] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1238.792916][ T9] usb 7-1: USB disconnect, device number 24 [ 1238.820175][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1238.872413][ T9] cyberjack 7-1:0.69: device disconnected [ 1238.995412][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.003096][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.510214][T16687] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2908'. [ 1243.391646][ T5875] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1243.864866][T16704] netlink: 288 bytes leftover after parsing attributes in process `syz.6.2911'. [ 1244.271723][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 1244.306846][ T5875] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1244.326526][ T5875] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 1244.335790][ T5875] usb 4-1: config 0 has no interface number 0 [ 1244.344078][ T5875] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1244.362796][ T5875] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1244.378188][ T5875] usb 4-1: config 0 interface 88 has no altsetting 0 [ 1244.390127][ T5875] usb 4-1: string descriptor 0 read error: -22 [ 1244.401575][ T5875] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1244.410643][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1244.433764][ T5875] usb 4-1: config 0 descriptor?? [ 1244.455344][ T5875] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input19 [ 1244.581865][T13518] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1244.592348][T16716] netlink: 'syz.4.2918': attribute type 30 has an invalid length. [ 1244.758251][T13518] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1244.774355][T13518] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1244.801544][T13518] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1244.814865][T13518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.824769][ T9] usb 4-1: USB disconnect, device number 20 [ 1244.848913][T16712] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1244.859352][T13518] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1245.209638][T16712] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2915'. [ 1245.828709][ T9] usb 2-1: USB disconnect, device number 13 [ 1246.904555][T16737] netlink: 'syz.3.2924': attribute type 29 has an invalid length. [ 1248.361601][ T5875] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1248.511622][ T5875] usb 7-1: Using ep0 maxpacket: 16 [ 1248.516338][ T5875] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1248.516368][ T5875] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1248.516392][ T5875] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1248.516413][ T5875] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1248.518164][ T5875] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1248.518190][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.518209][ T5875] usb 7-1: Product: syz [ 1248.518231][ T5875] usb 7-1: Manufacturer: syz [ 1248.518246][ T5875] usb 7-1: SerialNumber: syz [ 1248.520390][ T5875] usb 7-1: config 0 descriptor?? [ 1248.754822][ T5875] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input20 [ 1248.955047][T16751] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1248.957709][T12735] usb 7-1: USB disconnect, device number 25 [ 1249.181716][ T9] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1249.362456][ T9] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1249.362488][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.362508][ T9] usb 10-1: Product: syz [ 1249.362522][ T9] usb 10-1: Manufacturer: syz [ 1249.362537][ T9] usb 10-1: SerialNumber: syz [ 1249.367526][ T9] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1249.486254][T16399] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1249.728666][ T9] usb 10-1: USB disconnect, device number 51 [ 1250.075637][T16768] netlink: 288 bytes leftover after parsing attributes in process `syz.6.2931'. [ 1250.756419][ T5829] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1250.831502][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 1251.035616][T16399] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1251.036054][T16399] ath9k_htc: Failed to initialize the device [ 1251.041006][ T9] usb 10-1: ath9k_htc: USB layer deinitialized [ 1251.478807][T16781] vlan2: entered promiscuous mode [ 1255.969655][T16806] can0: slcan on ttyS3. [ 1256.249642][T16806] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2942'. [ 1257.021601][T16799] can0 (unregistered): slcan off ttyS3. [ 1257.319575][T16815] only policy match revision 0 supported [ 1257.319597][T16815] unable to load match [ 1259.062181][T16830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1261.510262][T16848] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2953'. [ 1261.741613][T16860] fuse: Bad value for 'fd' [ 1262.173643][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2959'. [ 1263.290555][T16878] tmpfs: Bad value for 'nr_blocks' [ 1264.371496][T16883] openvswitch: netlink: Actions may not be safe on all matching packets [ 1265.268937][T15523] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1265.351729][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1265.351748][ T29] audit: type=1326 audit(1739466211.525:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16888 comm="syz.6.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564358cde9 code=0x7ffc0000 [ 1265.419763][ T29] audit: type=1326 audit(1739466211.525:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16888 comm="syz.6.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f564358cde9 code=0x7ffc0000 [ 1265.455373][ T29] audit: type=1326 audit(1739466211.525:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16888 comm="syz.6.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564358cde9 code=0x7ffc0000 [ 1265.489506][ T29] audit: type=1326 audit(1739466211.525:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16888 comm="syz.6.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f564358cde9 code=0x7ffc0000 [ 1265.533045][T15523] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1265.551652][T15523] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.599672][T15523] usb 5-1: config 0 descriptor?? [ 1265.692717][ T29] audit: type=1326 audit(1739466211.525:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16888 comm="syz.6.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564358cde9 code=0x7ffc0000 [ 1265.715015][ T29] audit: type=1326 audit(1739466211.525:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16888 comm="syz.6.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f564358cde9 code=0x7ffc0000 [ 1265.739417][ T29] audit: type=1326 audit(1739466211.525:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16888 comm="syz.6.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564358cde9 code=0x7ffc0000 [ 1266.591564][ T29] audit: type=1326 audit(1739466211.525:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16888 comm="syz.6.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f564358c9eb code=0x7ffc0000 [ 1266.691566][T16898] pimreg: entered allmulticast mode [ 1266.703474][T16902] pimreg: left allmulticast mode [ 1267.238287][ T29] audit: type=1326 audit(1739466211.525:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16888 comm="syz.6.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564358cde9 code=0x7ffc0000 [ 1267.425328][T16908] fuse: Bad value for 'fd' [ 1267.463065][ T29] audit: type=1326 audit(1739466211.525:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16888 comm="syz.6.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f564358cde9 code=0x7ffc0000 [ 1269.493964][T16929] netlink: 'syz.3.2978': attribute type 1 has an invalid length. [ 1270.244801][T13518] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1270.615368][T13518] usb 10-1: Using ep0 maxpacket: 8 [ 1270.647238][T13518] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.695977][T13518] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1270.711216][T13518] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.728133][T13518] usb 10-1: Product: syz [ 1270.803305][T13518] usb 10-1: Manufacturer: syz [ 1270.813459][T13518] usb 10-1: SerialNumber: syz [ 1270.970279][T16938] openvswitch: netlink: Actions may not be safe on all matching packets [ 1270.979943][T13518] cdc_ether 10-1:1.0: skipping garbage [ 1270.995817][T13518] usb 10-1: bad CDC descriptors [ 1271.313954][T16931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.332795][T16931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.353951][T16905] usb 10-1: USB disconnect, device number 52 [ 1271.635744][T15523] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -110 [ 1271.669882][T15523] asix 5-1:0.0: probe with driver asix failed with error -110 [ 1271.797771][T15523] usb 5-1: USB disconnect, device number 44 [ 1272.209857][T16957] fuse: Bad value for 'fd' [ 1273.828438][T16979] openvswitch: netlink: Actions may not be safe on all matching packets [ 1274.097203][T16988] netlink: 288 bytes leftover after parsing attributes in process `syz.9.2988'. [ 1274.937682][T16999] fuse: Bad value for 'fd' [ 1275.500297][T17005] netlink: 1672 bytes leftover after parsing attributes in process `syz.9.3001'. [ 1275.598553][T17005] netlink: 1672 bytes leftover after parsing attributes in process `syz.9.3001'. [ 1275.619400][T17009] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1276.306447][T17017] openvswitch: netlink: Actions may not be safe on all matching packets [ 1277.540685][ T5872] IPVS: starting estimator thread 0... [ 1277.567377][T17032] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3010'. [ 1277.612253][T17032] bridge_slave_1: left allmulticast mode [ 1277.634877][T17032] bridge_slave_1: left promiscuous mode [ 1277.641783][T17033] IPVS: using max 24 ests per chain, 57600 per kthread [ 1277.654665][T17032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.666344][T17041] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3010'. [ 1277.736732][T17043] vivid-003: disconnect [ 1278.007938][T17032] bridge2: port 1(bridge_slave_1) entered blocking state [ 1278.251245][T17032] bridge2: port 1(bridge_slave_1) entered disabled state [ 1278.251583][T17034] vivid-003: reconnect [ 1278.263871][T17032] bridge_slave_1: entered allmulticast mode [ 1278.270937][T17032] bridge_slave_1: entered promiscuous mode [ 1278.327122][T17032] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3010'. [ 1278.327185][T17032] bridge_slave_0: left allmulticast mode [ 1278.327373][T17032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.396591][T17049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3014'. [ 1278.667517][T17062] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3011'. [ 1279.062717][T17061] Mount JFS Failure: -22 [ 1279.062822][T17061] jfs_mount failed w/return code = -22 [ 1279.079667][T17063] Mount JFS Failure: -22 [ 1279.079707][T17063] jfs_mount failed w/return code = -22 [ 1279.649977][T17070] openvswitch: netlink: Actions may not be safe on all matching packets [ 1280.547566][T17056] Bluetooth: hci3: command 0x0c1a tx timeout [ 1280.549964][T17056] Bluetooth: hci0: command 0x0406 tx timeout [ 1280.668183][T16366] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1281.240021][T15523] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1281.387662][T17090] vlan0: entered promiscuous mode [ 1282.322133][T15523] usb 2-1: device descriptor read/64, error -71 [ 1283.323214][T15523] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1283.461839][T15523] usb 2-1: device descriptor read/64, error -71 [ 1283.480685][T17094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3026'. [ 1283.572672][T15523] usb usb2-port1: attempt power cycle [ 1283.868640][T17098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3028'. [ 1283.918652][T15523] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1284.123280][T17107] usb usb1: usbfs: process 17107 (syz.1.3029) did not claim interface 8 before use [ 1284.131582][T15523] usb 2-1: device not accepting address 16, error -71 [ 1284.266254][T17105] openvswitch: netlink: Actions may not be safe on all matching packets [ 1284.301180][T17110] FAULT_INJECTION: forcing a failure. [ 1284.301180][T17110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1284.301212][T17110] CPU: 1 UID: 0 PID: 17110 Comm: syz.4.3032 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 1284.301236][T17110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1284.301246][T17110] Call Trace: [ 1284.301252][T17110] [ 1284.301259][T17110] dump_stack_lvl+0x241/0x360 [ 1284.301290][T17110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1284.301313][T17110] ? __pfx__printk+0x10/0x10 [ 1284.301336][T17110] ? __pfx_lock_release+0x10/0x10 [ 1284.301364][T17110] should_fail_ex+0x40a/0x550 [ 1284.301386][T17110] _copy_from_user+0x2d/0xb0 [ 1284.301404][T17110] do_sock_getsockopt+0x1d1/0x7e0 [ 1284.301424][T17110] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1284.301444][T17110] ? __fget_files+0x2a/0x410 [ 1284.301464][T17110] ? __fget_files+0x395/0x410 [ 1284.301480][T17110] ? __fget_files+0x2a/0x410 [ 1284.301504][T17110] __x64_sys_getsockopt+0x2a1/0x370 [ 1284.301524][T17110] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 1284.301541][T17110] ? do_syscall_64+0x100/0x230 [ 1284.301563][T17110] ? do_syscall_64+0xb6/0x230 [ 1284.301585][T17110] do_syscall_64+0xf3/0x230 [ 1284.301604][T17110] ? clear_bhb_loop+0x35/0x90 [ 1284.301626][T17110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.301645][T17110] RIP: 0033:0x7f638eb8cde9 [ 1284.301658][T17110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1284.301671][T17110] RSP: 002b:00007f638fa39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1284.301694][T17110] RAX: ffffffffffffffda RBX: 00007f638eda5fa0 RCX: 00007f638eb8cde9 [ 1284.301706][T17110] RDX: 000000000000001a RSI: 0000000000000084 RDI: 0000000000000003 [ 1284.301716][T17110] RBP: 00007f638fa39090 R08: 0000400000000200 R09: 0000000000000000 [ 1284.301726][T17110] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1284.301736][T17110] R13: 0000000000000000 R14: 00007f638eda5fa0 R15: 00007ffd8a6f2dc8 [ 1284.301759][T17110] [ 1285.872710][T16366] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1285.884157][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 1285.943920][T17126] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3037'. [ 1286.770335][T17138] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3033'. [ 1286.942568][T17139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3040'. [ 1287.524431][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1287.524449][ T29] audit: type=1400 audit(1739466233.725:418): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=17148 comm="syz.9.3044" name="434" dev="tmpfs" ino=2292 [ 1289.242190][T16366] Bluetooth: hci0: command 0x0406 tx timeout [ 1289.248352][ T5822] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1289.931749][T17181] sctp: [Deprecated]: syz.6.3052 (pid 17181) Use of int in max_burst socket option. [ 1289.931749][T17181] Use struct sctp_assoc_value instead [ 1290.174605][T17187] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3054'. [ 1290.371694][T16905] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1290.561879][T16905] usb 4-1: Using ep0 maxpacket: 16 [ 1290.585456][T16905] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1290.695653][T16905] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1290.721572][T17191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3055'. [ 1291.139621][T16905] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1291.181628][T16905] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1291.191689][T16905] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1291.231611][T16905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.244080][T16905] usb 4-1: Product: syz [ 1291.258645][T16905] usb 4-1: Manufacturer: syz [ 1291.271694][T16905] usb 4-1: SerialNumber: syz [ 1291.280615][T16905] usb 4-1: config 0 descriptor?? [ 1291.453260][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3056'. [ 1291.970107][T16905] usb 4-1: Can not set alternate setting to 1, error: -71 [ 1291.991678][T16905] synaptics_usb 4-1:0.0: probe with driver synaptics_usb failed with error -71 [ 1292.057004][T16905] usb 4-1: USB disconnect, device number 21 [ 1295.122373][T17223] netlink: 'syz.4.3064': attribute type 29 has an invalid length. [ 1295.274419][T17226] netlink: 'syz.4.3064': attribute type 29 has an invalid length. [ 1295.331934][ T5872] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1295.375210][T17228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3066'. [ 1295.607333][ T5872] usb 10-1: Using ep0 maxpacket: 16 [ 1295.607897][T17236] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3067'. [ 1295.825848][ T5872] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1296.016505][ T5872] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1296.035561][ T5872] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1296.531532][ T5872] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1296.544681][ T5872] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1296.584772][ T5872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.595968][ T5872] usb 10-1: Product: syz [ 1296.601089][ T5872] usb 10-1: Manufacturer: syz [ 1296.606606][ T5872] usb 10-1: SerialNumber: syz [ 1296.614443][ T5872] usb 10-1: config 0 descriptor?? [ 1296.931971][ T5872] usb 10-1: Can not set alternate setting to 1, error: -71 [ 1296.939414][ T5872] synaptics_usb 10-1:0.0: probe with driver synaptics_usb failed with error -71 [ 1296.952559][ T5872] usb 10-1: USB disconnect, device number 53 [ 1297.001577][T12735] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1297.751541][T12735] usb 2-1: Using ep0 maxpacket: 32 [ 1297.758226][T12735] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1297.771930][T12735] usb 2-1: config 0 has no interface number 0 [ 1297.782987][T12735] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1297.792819][T12735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.800847][T12735] usb 2-1: Product: syz [ 1297.818471][T12735] usb 2-1: Manufacturer: syz [ 1297.831678][T12735] usb 2-1: SerialNumber: syz [ 1297.848321][T12735] usb 2-1: config 0 descriptor?? [ 1297.863853][T12735] smsc95xx v2.0.0 [ 1298.062790][T13518] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1298.295402][T17254] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1298.304056][T17254] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1298.313972][T17254] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1298.321836][T17254] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 1298.348660][T17254] netlink: 'syz.4.3072': attribute type 1 has an invalid length. [ 1298.356726][T17254] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3072'. [ 1299.001674][T16366] Bluetooth: hci0: command 0x0406 tx timeout [ 1299.029345][ T5822] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1299.051582][T13518] usb 10-1: Using ep0 maxpacket: 16 [ 1299.058558][T13518] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1299.068871][T13518] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1299.079984][T13518] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1299.089856][T13518] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1299.100453][T13518] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1299.109923][T13518] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.119203][T13518] usb 10-1: Product: syz [ 1299.123595][T13518] usb 10-1: Manufacturer: syz [ 1299.128286][T13518] usb 10-1: SerialNumber: syz [ 1299.139645][T13518] usb 10-1: config 0 descriptor?? [ 1299.188502][T12735] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1299.230217][T12735] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1299.266021][T12735] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1299.301779][T12735] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1299.350652][T13518] usb 10-1: Can not set alternate setting to 1, error: -71 [ 1299.358257][T12735] usb 2-1: USB disconnect, device number 18 [ 1299.381835][T13518] synaptics_usb 10-1:0.0: probe with driver synaptics_usb failed with error -71 [ 1299.469707][T13518] usb 10-1: USB disconnect, device number 54 [ 1300.417764][T17273] wg1 speed is unknown, defaulting to 1000 [ 1300.441814][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.451603][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.833136][T17283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3081'. [ 1300.850105][T17276] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3080'. [ 1300.902149][T17292] FAULT_INJECTION: forcing a failure. [ 1300.902149][T17292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1301.042330][T17292] CPU: 1 UID: 0 PID: 17292 Comm: syz.1.3082 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 1301.042350][T17292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1301.042357][T17292] Call Trace: [ 1301.042361][T17292] [ 1301.042366][T17292] dump_stack_lvl+0x241/0x360 [ 1301.042387][T17292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1301.042402][T17292] ? __pfx__printk+0x10/0x10 [ 1301.042423][T17292] ? __pfx_lock_release+0x10/0x10 [ 1301.042439][T17292] should_fail_ex+0x40a/0x550 [ 1301.042453][T17292] _copy_from_user+0x2d/0xb0 [ 1301.042464][T17292] copy_msghdr_from_user+0xae/0x680 [ 1301.042480][T17292] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1301.042490][T17292] ? __fget_files+0x2a/0x410 [ 1301.042504][T17292] ? __fget_files+0x2a/0x410 [ 1301.042519][T17292] __sys_sendmsg+0x209/0x350 [ 1301.042531][T17292] ? __pfx___sys_sendmsg+0x10/0x10 [ 1301.042546][T17292] ? do_sys_openat2+0x17a/0x1d0 [ 1301.042576][T17292] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1301.042588][T17292] ? do_syscall_64+0x100/0x230 [ 1301.042603][T17292] ? do_syscall_64+0xb6/0x230 [ 1301.042616][T17292] do_syscall_64+0xf3/0x230 [ 1301.042629][T17292] ? clear_bhb_loop+0x35/0x90 [ 1301.042643][T17292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.042655][T17292] RIP: 0033:0x7f0b7db8cde9 [ 1301.042666][T17292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1301.042674][T17292] RSP: 002b:00007f0b7b9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1301.042686][T17292] RAX: ffffffffffffffda RBX: 00007f0b7dda6080 RCX: 00007f0b7db8cde9 [ 1301.042693][T17292] RDX: 0000000000000000 RSI: 0000400000000400 RDI: 0000000000000003 [ 1301.042699][T17292] RBP: 00007f0b7b9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1301.042704][T17292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1301.042710][T17292] R13: 0000000000000000 R14: 00007f0b7dda6080 R15: 00007fff441a9ce8 [ 1301.042724][T17292] [ 1302.451806][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1302.704968][T17313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1303.541559][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1303.552554][ T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1303.569619][ T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1303.836340][ T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1303.846171][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1303.854970][ T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1303.864241][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.883319][ T9] usb 5-1: Product: syz [ 1303.939015][ T9] usb 5-1: Manufacturer: syz [ 1303.943822][ T9] usb 5-1: SerialNumber: syz [ 1303.960175][ T9] usb 5-1: config 0 descriptor?? [ 1304.043308][T17324] zonefs (nullb0) ERROR: Not a zoned block device [ 1304.183504][ T9] usb 5-1: Can not set alternate setting to 1, error: -71 [ 1304.190691][ T9] synaptics_usb 5-1:0.0: probe with driver synaptics_usb failed with error -71 [ 1304.214986][ T9] usb 5-1: USB disconnect, device number 45 [ 1306.341200][T17349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1307.094309][T17356] ntfs3(nbd4): try to read out of volume at offset 0x0 [ 1308.739349][T17374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3107'. [ 1308.741607][ T5872] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1308.748954][T17374] openvswitch: netlink: EtherType 0 is less than min 600 [ 1308.921520][ T9] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1309.063914][ T5872] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1309.129801][ T5872] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1309.277808][ T5872] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1309.290882][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.292403][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1309.326868][T17366] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1309.354088][ T5872] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1309.356963][ T9] usb 10-1: config 2 has an invalid interface number: 169 but max is 0 [ 1309.376547][ T9] usb 10-1: config 2 has no interface number 0 [ 1309.383848][ T9] usb 10-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 1309.405363][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.426827][ T9] cypress_m8 10-1:2.169: DeLorme Earthmate USB converter detected [ 1309.459183][ T9] earthmate ttyUSB0: required endpoint is missing [ 1309.563196][T17385] syz.3.3112: attempt to access beyond end of device [ 1309.563196][T17385] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1309.585387][T17385] gfs2: error -5 reading superblock [ 1309.746431][ T5872] usb 5-1: USB disconnect, device number 46 [ 1310.193082][T17396] netlink: 'syz.3.3115': attribute type 3 has an invalid length. [ 1310.231188][T17396] netlink: 'syz.3.3115': attribute type 3 has an invalid length. [ 1310.327679][T17398] overlayfs: missing 'lowerdir' [ 1311.525497][ T29] audit: type=1326 audit(1739466257.725:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17409 comm="syz.4.3119" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f638eb8cde9 code=0x0 [ 1311.642136][ T5872] usb 10-1: USB disconnect, device number 55 [ 1311.649221][ T5872] cypress_m8 10-1:2.169: device disconnected [ 1311.660829][T17412] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3113'. [ 1312.091549][T13517] kernel write not supported for file /cpu/0/msr (pid: 13517 comm: kworker/0:0) [ 1313.221541][T16905] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1313.563923][T17432] program syz.4.3127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1313.579796][T16905] usb 7-1: Using ep0 maxpacket: 8 [ 1313.601189][T16905] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1313.610162][T16905] usb 7-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 1313.641215][T16905] usb 7-1: config 8 interface 0 has no altsetting 0 [ 1313.662980][T16905] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1313.672657][T16905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.757276][T17437] netlink: 'syz.9.3126': attribute type 3 has an invalid length. [ 1313.765541][T17437] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3126'. [ 1314.031759][T13517] usb 10-1: new full-speed USB device number 56 using dummy_hcd [ 1314.552921][T16905] usb 7-1: Product: syz [ 1314.557135][T16905] usb 7-1: Manufacturer: syz [ 1314.565577][T16905] usb 7-1: SerialNumber: syz [ 1314.589092][T17421] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1314.658621][T13517] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1314.672998][T13517] usb 10-1: not running at top speed; connect to a high speed hub [ 1315.064064][T13517] usb 10-1: config 17 has an invalid interface number: 8 but max is 1 [ 1315.221814][T13517] usb 10-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1315.244770][T16905] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1315.259935][T13517] usb 10-1: config 17 has no interface number 0 [ 1315.261527][T16905] usb 7-1: selecting invalid altsetting 0 [ 1315.276722][T13517] usb 10-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1315.298123][T13517] usb 10-1: config 17 interface 8 has no altsetting 0 [ 1315.317278][T13517] usb 10-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1315.329179][T13517] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.345760][T13517] usb 10-1: Product: syz [ 1315.347156][T16905] usb 7-1: USB disconnect, device number 26 [ 1315.350166][T13517] usb 10-1: Manufacturer: syz [ 1315.372201][T13517] usb 10-1: SerialNumber: syz [ 1316.882515][T13517] usb 10-1: selecting invalid altsetting 0 [ 1317.391805][T13517] usb 10-1: USB disconnect, device number 56 [ 1317.408893][T17454] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3131'. [ 1317.570219][T17462] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3134'. [ 1317.615440][ T29] audit: type=1326 audit(1739466263.815:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17459 comm="syz.6.3134" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f564358cde9 code=0x0 [ 1317.771741][T16905] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1317.891854][T13518] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1317.957499][T16905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.969025][T12735] usb 10-1: new full-speed USB device number 57 using dummy_hcd [ 1317.977401][T16905] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1317.989240][T16905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 1318.001219][T16905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 1318.015774][T16905] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1318.038307][T16905] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1318.041560][T13518] usb 4-1: Using ep0 maxpacket: 32 [ 1318.047648][T16905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.060750][T16905] usb 2-1: Product: syz [ 1318.063324][T13518] usb 4-1: config 0 has an invalid interface number: 108 but max is 0 [ 1318.066389][T16905] usb 2-1: Manufacturer: syz [ 1318.077843][T16905] usb 2-1: SerialNumber: syz [ 1318.080768][T13518] usb 4-1: config 0 has no interface number 0 [ 1318.084652][T16905] usb 2-1: config 0 descriptor?? [ 1318.105541][T17461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1318.161907][T12735] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1318.203029][T12735] usb 10-1: not running at top speed; connect to a high speed hub [ 1318.216973][T12735] usb 10-1: config 9 has an invalid interface number: 5 but max is 0 [ 1318.221313][T13518] usb 4-1: config 0 interface 108 has no altsetting 0 [ 1318.225672][T12735] usb 10-1: config 9 has no interface number 0 [ 1318.239512][T12735] usb 10-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1318.252476][T12735] usb 10-1: config 9 interface 5 altsetting 9 endpoint 0x87 has invalid maxpacket 24929, setting to 64 [ 1318.351148][T12735] usb 10-1: config 9 interface 5 has no altsetting 0 [ 1318.353244][T13518] usb 4-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=10.c5 [ 1318.441778][T12735] usb 10-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 1318.450465][T13518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.464668][T13518] usb 4-1: Product: syz [ 1318.471887][T12735] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.482664][T16905] rc_core: IR keymap rc-xbox-dvd not found [ 1318.488604][T16905] Registered IR keymap rc-empty [ 1318.556366][T12735] usb 10-1: Product: syz [ 1318.566963][T16905] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1318.576005][T13518] usb 4-1: Manufacturer: syz [ 1318.576081][T13518] usb 4-1: SerialNumber: syz [ 1318.585495][T12735] usb 10-1: Manufacturer: syz [ 1318.585515][T12735] usb 10-1: SerialNumber: syz [ 1318.592143][T17468] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1318.642194][T16905] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21 [ 1318.759106][T13518] usb 4-1: config 0 descriptor?? [ 1318.823672][ C1] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 1318.840034][T16905] usb 2-1: USB disconnect, device number 19 [ 1319.101967][T13518] usb 4-1: bad CDC descriptors [ 1319.112444][T13518] usb 4-1: USB disconnect, device number 22 [ 1320.499237][T17486] trusted_key: encrypted_key: insufficient parameters specified [ 1320.527742][T17481] kvm: kvm [17480]: vcpu0, guest rIP: 0x227 Unhandled WRMSR(0xc2) = 0x1 [ 1320.562342][T17486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.603560][T17486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.656598][T17491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3144'. [ 1320.783106][T17493] netlink: 'syz.3.3145': attribute type 3 has an invalid length. [ 1320.791697][T17493] netlink: 'syz.3.3145': attribute type 3 has an invalid length. [ 1320.801682][ T9] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1321.057973][ T9] usb 7-1: config 0 has an invalid interface number: 122 but max is 0 [ 1321.235524][T17498] can0: slcan on ttyS3. [ 1321.504281][T17498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3146'. [ 1322.364773][ T9] usb 7-1: config 0 has no interface number 0 [ 1322.377103][ T9] usb 7-1: config 0 interface 122 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1322.429294][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1020, bcdDevice=90.16 [ 1322.439304][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.447706][ T9] usb 7-1: Product: syz [ 1322.452114][ T9] usb 7-1: Manufacturer: syz [ 1322.456740][ T9] usb 7-1: SerialNumber: syz [ 1322.464272][ T9] usb 7-1: config 0 descriptor?? [ 1322.470158][T12735] usb 10-1: USB disconnect, device number 57 [ 1322.471256][T17487] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1322.516667][ T9] ldusb 7-1:0.122: Interrupt in endpoint not found [ 1322.572163][T17494] can0 (unregistered): slcan off ttyS3. [ 1322.724474][T17506] ntfs3(nbd3): try to read out of volume at offset 0x0 [ 1324.512686][T12735] usb 7-1: USB disconnect, device number 27 [ 1324.609861][T17523] openvswitch: netlink: Actions may not be safe on all matching packets [ 1325.220882][T17527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3156'. [ 1325.391813][T16366] Bluetooth: hci3: command 0x0c1a tx timeout [ 1326.571611][T17557] netlink: 'syz.9.3162': attribute type 3 has an invalid length. [ 1326.579427][T17557] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3162'. [ 1326.882712][T15887] usb 10-1: new full-speed USB device number 58 using dummy_hcd [ 1328.103728][T15887] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1328.116469][T15887] usb 10-1: not running at top speed; connect to a high speed hub [ 1328.130520][T15887] usb 10-1: config 17 has an invalid interface number: 8 but max is 1 [ 1328.149309][T15887] usb 10-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1328.161564][T15887] usb 10-1: config 17 has no interface number 0 [ 1328.168560][T15887] usb 10-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1328.180950][T15887] usb 10-1: config 17 interface 8 has no altsetting 0 [ 1328.235796][T15887] usb 10-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1328.701666][T15887] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.710447][T15887] usb 10-1: Product: syz [ 1328.764901][T15887] usb 10-1: Manufacturer: syz [ 1328.769638][T15887] usb 10-1: SerialNumber: syz [ 1328.786151][T17565] zonefs (nullb0) ERROR: Not a zoned block device [ 1330.592526][T15887] usb 10-1: selecting invalid altsetting 0 [ 1330.617564][T15887] usb 10-1: USB disconnect, device number 58 [ 1331.632294][T12735] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1331.997202][T12735] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1332.011282][T12735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.400363][T12735] usb 2-1: config 0 descriptor?? [ 1333.220726][T12735] usb 2-1: string descriptor 0 read error: -71 [ 1333.464732][T12735] usb 2-1: USB disconnect, device number 20 [ 1334.212985][T17616] netlink: 'syz.6.3181': attribute type 3 has an invalid length. [ 1334.220789][T17616] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3181'. [ 1334.481899][ T9] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1334.647921][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1335.053504][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 1335.095923][ T9] usb 7-1: config 17 has an invalid interface number: 8 but max is 1 [ 1335.114153][T17621] zonefs (nullb0) ERROR: Not a zoned block device [ 1335.120760][ T9] usb 7-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1335.643106][ T9] usb 7-1: config 17 has no interface number 0 [ 1335.649339][ T9] usb 7-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1335.660438][ T9] usb 7-1: config 17 interface 8 has no altsetting 0 [ 1335.670107][ T9] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1335.693666][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.710431][ T9] usb 7-1: Product: syz [ 1335.714776][ T9] usb 7-1: Manufacturer: syz [ 1335.719443][ T9] usb 7-1: SerialNumber: syz [ 1337.304364][ T9] usb 7-1: selecting invalid altsetting 0 [ 1337.355761][ T9] usb 7-1: USB disconnect, device number 28 [ 1340.221058][T17674] CUSE: DEVNAME unspecified [ 1340.223254][T17674] No such timeout policy "syz0" [ 1340.566166][T17679] erofs (device nullb0): cannot find valid erofs superblock [ 1340.904474][ T29] audit: type=1326 audit(1739466287.105:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.6.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564358cde9 code=0x7fc00000 [ 1345.091546][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1345.294082][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1345.342016][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1345.384854][T17722] netlink: 'syz.6.3214': attribute type 39 has an invalid length. [ 1345.394506][ T9] usb 4-1: can't read configurations, error -61 [ 1346.561685][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1347.086280][T17726] vlan2: entered promiscuous mode [ 1347.324357][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1347.331740][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1347.339344][ T9] usb 4-1: can't read configurations, error -61 [ 1347.360041][ T9] usb usb4-port1: attempt power cycle [ 1348.155904][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1348.284243][ T9] usb 4-1: device descriptor read/8, error -71 [ 1348.457621][T17748] syz.4.3218: attempt to access beyond end of device [ 1348.457621][T17748] nbd4: rw=0, sector=1, nr_sectors = 1 limit=0 [ 1348.486975][T17748] VFS: could not find a valid V7 on nbd4. [ 1348.696693][T17754] can0: slcan on ttyS3. [ 1348.805594][T17754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3220'. [ 1350.597738][T17760] overlay: Unknown parameter 'fsname' [ 1350.619228][T17760] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3223'. [ 1350.658594][T17742] can0 (unregistered): slcan off ttyS3. [ 1352.241644][T13517] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1352.507384][T17777] vlan2: entered promiscuous mode [ 1353.931524][T13517] usb 7-1: Using ep0 maxpacket: 32 [ 1353.944978][T13517] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1353.954291][T13517] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.971619][T13518] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1353.979392][T13517] usb 7-1: Product: syz [ 1353.987391][T13517] usb 7-1: Manufacturer: syz [ 1353.999415][T13517] usb 7-1: SerialNumber: syz [ 1354.010593][T13517] usb 7-1: config 0 descriptor?? [ 1354.143766][T13518] usb 4-1: Using ep0 maxpacket: 32 [ 1354.151963][T13518] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1354.161353][T13518] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1354.170550][T13518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.188281][T13518] usb 4-1: Product: syz [ 1354.192640][T13518] usb 4-1: Manufacturer: syz [ 1354.200616][T13518] usb 4-1: SerialNumber: syz [ 1354.232848][T13518] usb 4-1: config 0 descriptor?? [ 1354.529322][T13517] airspy 7-1:0.0: usb_control_msg() failed -32 request 09 [ 1354.546361][T13517] airspy 7-1:0.0: Could not detect board [ 1354.552480][T13517] airspy 7-1:0.0: probe with driver airspy failed with error -32 [ 1354.563009][T13517] usb 7-1: USB disconnect, device number 29 [ 1354.716227][T13518] gs_usb 4-1:0.0: Configuring for 96 interfaces [ 1354.716265][T13518] gs_usb 4-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 1354.716291][T13518] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 1354.796976][ T5822] Bluetooth: hci1: unexpected event for opcode 0x200b [ 1355.863644][T17795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3228'. [ 1357.241961][T16905] usb 4-1: USB disconnect, device number 27 [ 1357.432279][T13518] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1357.692523][T13518] usb 7-1: Using ep0 maxpacket: 32 [ 1357.841878][T13518] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1357.853219][T13518] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1357.877042][T13518] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1358.073248][T17823] netlink: 'syz.4.3241': attribute type 8 has an invalid length. [ 1358.199470][T13518] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.210197][T13518] usb 7-1: config 0 descriptor?? [ 1358.380713][T13518] hub 7-1:0.0: USB hub found [ 1358.584292][T17810] x_tables: duplicate underflow at hook 1 [ 1358.712879][T17826] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 1358.816274][T13518] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1359.525540][T13518] usbhid 7-1:0.0: can't add hid device: -71 [ 1359.543074][T13518] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1359.573091][T13518] usb 7-1: USB disconnect, device number 30 [ 1361.428319][T17845] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3247'. [ 1361.459022][T17845] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3247'. [ 1361.499169][T17851] FAULT_INJECTION: forcing a failure. [ 1361.499169][T17851] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.964190][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.970606][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.987128][T17851] CPU: 0 UID: 0 PID: 17851 Comm: syz.3.3251 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 1361.987158][T17851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1361.987168][T17851] Call Trace: [ 1361.987175][T17851] [ 1361.987182][T17851] dump_stack_lvl+0x241/0x360 [ 1361.987214][T17851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1361.987237][T17851] ? __pfx__printk+0x10/0x10 [ 1361.987262][T17851] ? fs_reclaim_acquire+0x93/0x130 [ 1361.987279][T17851] ? __pfx___might_resched+0x10/0x10 [ 1361.987301][T17851] should_fail_ex+0x40a/0x550 [ 1361.987324][T17851] should_failslab+0xac/0x100 [ 1361.987346][T17851] __kmalloc_noprof+0xdd/0x4c0 [ 1361.987365][T17851] ? tomoyo_encode+0x26f/0x540 [ 1361.987385][T17851] tomoyo_encode+0x26f/0x540 [ 1361.987406][T17851] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1361.987434][T17851] tomoyo_path_number_perm+0x236/0x860 [ 1361.987455][T17851] ? __lock_acquire+0x1397/0x2100 [ 1361.987476][T17851] ? tomoyo_path_number_perm+0x206/0x860 [ 1361.987499][T17851] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1361.987559][T17851] ? __fget_files+0x2a/0x410 [ 1361.987581][T17851] ? __fget_files+0x2a/0x410 [ 1361.987606][T17851] security_file_ioctl+0xc6/0x2a0 [ 1361.987630][T17851] __se_sys_ioctl+0x46/0x170 [ 1361.987648][T17851] do_syscall_64+0xf3/0x230 [ 1361.987670][T17851] ? clear_bhb_loop+0x35/0x90 [ 1361.987694][T17851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.987714][T17851] RIP: 0033:0x7ffaf498cde9 [ 1361.987729][T17851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1361.987742][T17851] RSP: 002b:00007ffaf5801038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1361.987761][T17851] RAX: ffffffffffffffda RBX: 00007ffaf4ba5fa0 RCX: 00007ffaf498cde9 [ 1361.987773][T17851] RDX: 0000400000000000 RSI: 00000000c2604110 RDI: 0000000000000003 [ 1361.987784][T17851] RBP: 00007ffaf5801090 R08: 0000000000000000 R09: 0000000000000000 [ 1361.987795][T17851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1361.987804][T17851] R13: 0000000000000000 R14: 00007ffaf4ba5fa0 R15: 00007ffd45bf59e8 [ 1361.987831][T17851] [ 1361.988374][T17851] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1362.513977][T17872] program syz.3.3258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1362.550081][T17873] ntfs3(nbd9): try to read out of volume at offset 0x0 [ 1363.524204][T17886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1366.582474][T17909] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3267'. [ 1366.881611][T13517] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1366.953428][T17928] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 1366.992847][ T9] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1367.033132][T13517] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1367.042568][T13517] usb 4-1: New USB device found, idVendor=5543, idProduct=004c, bcdDevice= 0.00 [ 1367.053322][T13517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.069072][T13517] usb 4-1: config 0 descriptor?? [ 1367.172674][ T9] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 1367.192945][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1367.200547][ T9] usb 5-1: can't read configurations, error -61 [ 1367.348687][ T9] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1367.512942][ T9] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 1367.540938][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1367.560260][ T9] usb 5-1: can't read configurations, error -61 [ 1367.568991][ T9] usb usb5-port1: attempt power cycle [ 1368.571652][ T9] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1368.602829][ T9] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 1368.629458][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1368.643856][ T9] usb 5-1: can't read configurations, error -61 [ 1368.681585][T16366] Bluetooth: hci0: command 0x0406 tx timeout [ 1368.763625][ T5822] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1368.841674][ T9] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1368.863093][ T9] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 1368.878252][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1368.886286][ T9] usb 5-1: can't read configurations, error -61 [ 1369.144686][ T9] usb usb5-port1: unable to enumerate USB device [ 1369.846582][ T9] usb 4-1: USB disconnect, device number 28 [ 1370.843205][T16366] Bluetooth: hci0: command 0x0406 tx timeout [ 1370.849359][ T5822] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1371.152461][T17983] wg1 speed is unknown, defaulting to 1000 [ 1372.047009][T17994] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1372.336260][T18000] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3298'. [ 1372.701567][ T5872] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1373.151646][T16366] Bluetooth: hci0: command 0x0406 tx timeout [ 1373.158586][ T5822] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1373.265232][ T5872] usb 10-1: config 0 has an invalid interface number: 3 but max is 0 [ 1373.299030][ T5872] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.340210][ T5872] usb 10-1: config 0 has no interface number 0 [ 1373.370682][ T5872] usb 10-1: config 0 interface 3 altsetting 174 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 1373.434140][ T5872] usb 10-1: config 0 interface 3 has no altsetting 0 [ 1373.454767][T18012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3300'. [ 1373.471583][ T5872] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1373.501132][ T5872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.546432][ T5872] usb 10-1: config 0 descriptor?? [ 1373.861581][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1373.952101][T13517] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1373.993592][ T5872] usb 10-1: string descriptor 0 read error: -71 [ 1374.010291][ T5872] usb 10-1: USB disconnect, device number 59 [ 1374.031640][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1374.051705][ T9] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1374.059840][ T9] usb 2-1: config 0 has no interface number 0 [ 1374.075529][ T9] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1374.089735][ T9] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1374.114055][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.129585][ T9] usb 2-1: Product: syz [ 1374.134688][T13517] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 1374.150944][T13517] usb 5-1: config 0 has no interface number 0 [ 1374.157316][ T9] usb 2-1: Manufacturer: syz [ 1374.162257][T13517] usb 5-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 1374.181508][ T9] usb 2-1: SerialNumber: syz [ 1374.190280][ T9] usb 2-1: config 0 descriptor?? [ 1374.201574][T13517] usb 5-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1374.222128][T13517] usb 5-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1374.242638][ T9] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 1374.263437][T13517] usb 5-1: config 0 interface 230 has no altsetting 0 [ 1374.270265][T13517] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1374.280752][T13517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.291444][T13517] usb 5-1: config 0 descriptor?? [ 1374.447593][ T9] usb 2-1: USB disconnect, device number 21 [ 1374.750114][T18024] 9pnet_fd: Insufficient options for proto=fd [ 1375.105837][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1375.119809][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1375.128923][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1375.137105][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1375.147546][ T5829] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1375.366556][ T5872] wg1 speed is unknown, defaulting to 1000 [ 1375.911151][T13517] usbhid 5-1:0.230: can't add hid device: -71 [ 1375.918262][T13517] usbhid 5-1:0.230: probe with driver usbhid failed with error -71 [ 1375.928404][T13517] usb 5-1: USB disconnect, device number 51 [ 1375.944997][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1376.108131][T16613] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1376.128199][T16613] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.569827][T18056] Invalid ELF header magic: != ELF [ 1376.623471][T16613] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1376.873090][T16613] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.987178][T18029] wg1 speed is unknown, defaulting to 1000 [ 1376.993143][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 1377.002678][ T5822] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1377.163973][T18065] 9pnet_fd: Insufficient options for proto=fd [ 1377.213433][T16613] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1377.249499][T16613] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.326896][T18071] syz.4.3319: attempt to access beyond end of device [ 1377.326896][T18071] nbd4: rw=0, sector=1, nr_sectors = 1 limit=0 [ 1377.393768][T18071] VFS: could not find a valid V7 on nbd4. [ 1377.430858][T18077] CUSE: info not properly terminated [ 1377.483275][T16613] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1377.495302][T16613] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.769566][T18084] netlink: 'syz.3.3323': attribute type 21 has an invalid length. [ 1377.778055][T18084] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3323'. [ 1377.787365][T18084] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3323'. [ 1378.061496][T16366] Bluetooth: hci4: command tx timeout [ 1378.706503][T18029] chnl_net:caif_netlink_parms(): no params data found [ 1378.741712][ T5875] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1378.819993][T18100] overlayfs: failed to resolve './file0': -2 [ 1378.924069][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 1378.936597][T16613] bridge_slave_1: left allmulticast mode [ 1378.970936][T16613] bridge_slave_1: left promiscuous mode [ 1378.977742][ T5875] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 1379.002185][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.012683][T16613] bridge2: port 1(bridge_slave_1) entered disabled state [ 1379.052725][ T5875] usb 5-1: config 0 has no interface number 0 [ 1379.080115][ T5875] usb 5-1: config 0 interface 244 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1379.136461][T16613] ip6gretap0: left promiscuous mode [ 1379.325537][ T5875] usb 5-1: config 0 interface 244 has no altsetting 0 [ 1379.371708][ T5822] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1379.378146][T16366] Bluetooth: hci0: command 0x0406 tx timeout [ 1379.391506][T16366] Bluetooth: hci2: command 0x0405 tx timeout [ 1379.405545][ T5875] usb 5-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1379.415180][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.436657][ T5875] usb 5-1: Product: syz [ 1379.445241][ T5875] usb 5-1: Manufacturer: syz [ 1379.455386][ T5875] usb 5-1: SerialNumber: syz [ 1379.468554][ T5875] usb 5-1: config 0 descriptor?? [ 1379.487162][ T5875] snd_usb_toneport 5-1:0.244: Line 6 GuitarPort found [ 1380.115381][T16366] Bluetooth: hci4: command tx timeout [ 1380.182349][ T5875] snd_usb_toneport 5-1:0.244: cannot get proper max packet size [ 1380.192416][ T5875] snd_usb_toneport 5-1:0.244: Line 6 GuitarPort now disconnected [ 1380.225486][ T5875] snd_usb_toneport 5-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 1380.329204][T18117] xt_CT: No such helper "pptp" [ 1380.403738][T18123] dlm: plock device version mismatch: kernel (1.2.0), user (832.16384.100) [ 1380.743808][ T5875] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1381.821534][ T5875] usb 10-1: Using ep0 maxpacket: 8 [ 1381.829295][ T5875] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1381.837105][ T5875] usb 10-1: can't read configurations, error -61 [ 1381.971585][ T5875] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1382.094735][T16613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1382.131497][ T5875] usb 10-1: Using ep0 maxpacket: 8 [ 1382.133661][T16613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1382.154023][ T5875] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1382.175305][T16613] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 1382.191807][T16366] Bluetooth: hci4: command tx timeout [ 1382.271945][T16613] mac80211_hwsim hwsim15 wlan1: left promiscuous mode [ 1382.285013][T16613] bond0 (unregistering): Released all slaves [ 1382.313391][T16613] bond1 (unregistering): Released all slaves [ 1382.483438][T18029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.490577][T18029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.509203][T18029] bridge_slave_0: entered allmulticast mode [ 1382.540714][T18029] bridge_slave_0: entered promiscuous mode [ 1382.562552][T18029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.569668][T18029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.600677][T18029] bridge_slave_1: entered allmulticast mode [ 1382.647003][T18029] bridge_slave_1: entered promiscuous mode [ 1382.810537][T18029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1382.839181][T18029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1382.926157][T18029] team0: Port device team_slave_0 added [ 1382.950400][T18029] team0: Port device team_slave_1 added [ 1383.093774][T18029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1383.105047][T18029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1383.121540][ T5875] usb 10-1: can't read configurations, error -61 [ 1383.141345][ T5875] usb usb10-port1: attempt power cycle [ 1383.145543][T18029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1383.199317][T18131] vlan4: entered promiscuous mode [ 1383.211218][T16613] : left promiscuous mode [ 1383.279774][ T5872] usb 5-1: USB disconnect, device number 52 [ 1383.293523][T18029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1383.300495][T18029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1383.400957][T18029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1384.343475][T16366] Bluetooth: hci4: command tx timeout [ 1384.699028][T16613] tipc: Left network mode [ 1386.367657][T18142] vlan2: entered promiscuous mode [ 1386.425171][ T5872] IPVS: starting estimator thread 0... [ 1386.661001][T18151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3337'. [ 1386.682844][T18029] hsr_slave_0: entered promiscuous mode [ 1386.699492][T18029] hsr_slave_1: entered promiscuous mode [ 1386.705345][T18148] IPVS: using max 19 ests per chain, 45600 per kthread [ 1386.722807][T18029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1386.740733][T18029] Cannot create hsr debugfs directory [ 1386.748077][T18153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1386.788455][T18155] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3337'. [ 1386.921889][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3337'. [ 1387.008102][T16366] Bluetooth: hci3: unexpected event for opcode 0x0c0d [ 1387.039473][T18152] bridge_slave_1: left allmulticast mode [ 1387.046545][T18152] bridge_slave_1: left promiscuous mode [ 1387.059094][T18152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.078811][T18152] bridge6: port 1(bridge_slave_1) entered blocking state [ 1387.091158][T18152] bridge6: port 1(bridge_slave_1) entered disabled state [ 1387.110201][T18152] bridge_slave_1: entered allmulticast mode [ 1387.131355][T18152] bridge_slave_1: entered promiscuous mode [ 1387.181102][T18157] vlan0: entered promiscuous mode [ 1387.196153][T18157] bridge0: entered promiscuous mode [ 1387.210698][T18157] vlan0: entered allmulticast mode [ 1387.220227][T18157] bridge0: entered allmulticast mode [ 1387.240317][T18144] bridge_slave_0: left allmulticast mode [ 1387.347368][ T5875] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1387.382071][T18144] bridge_slave_0: left promiscuous mode [ 1387.398445][T18144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.521594][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 1387.634226][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1387.639409][T18144] bridge0: left allmulticast mode [ 1387.652077][T18144] bridge0: left promiscuous mode [ 1387.675889][ T5875] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1387.794876][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.975436][ T5875] usb 5-1: config 0 descriptor?? [ 1388.144900][ T5875] usb 5-1: Found UVC 0.00 device (10c4:ea90) [ 1388.196379][ T5875] usb 5-1: No valid video chain found. [ 1388.328896][ T5875] usb 5-1: USB disconnect, device number 53 [ 1388.394521][T13518] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1388.418711][T16613] hsr_slave_0: left promiscuous mode [ 1388.561650][T13518] usb 10-1: Using ep0 maxpacket: 32 [ 1388.572658][T16613] hsr_slave_1: left promiscuous mode [ 1388.612794][T13518] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1388.629399][T16613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1388.643143][T13518] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1388.645808][T16613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1388.655640][T13518] usb 10-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1388.780766][ T5822] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1388.876884][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 1388.911914][T16613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1388.983985][T16613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1389.346043][T13518] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.354267][T13518] usb 10-1: Product: syz [ 1389.358541][T13518] usb 10-1: Manufacturer: syz [ 1389.363330][T13518] usb 10-1: SerialNumber: syz [ 1389.369978][T13518] usb 10-1: config 0 descriptor?? [ 1389.385404][T13518] usb 10-1: no audio or video endpoints found [ 1389.430677][T16613] veth1_macvtap: left promiscuous mode [ 1389.444890][T16613] veth0_macvtap: left promiscuous mode [ 1389.469357][T16613] veth1_vlan: left promiscuous mode [ 1389.476371][T16613] veth0_vlan: left promiscuous mode [ 1389.631263][T13518] usb 10-1: USB disconnect, device number 63 [ 1389.692911][T16613] pim6reg527 (unregistering): left allmulticast mode [ 1389.891500][ T5872] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1390.053812][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.071457][ T5872] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1390.090140][ T5872] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1390.109580][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.133132][ T5872] usb 5-1: config 0 descriptor?? [ 1392.289753][T16613] team0 (unregistering): Port device team_slave_1 removed [ 1392.373739][T16613] team0 (unregistering): Port device team_slave_0 removed [ 1392.621703][ T5875] usb 10-1: new full-speed USB device number 64 using dummy_hcd [ 1392.783690][ T5875] usb 10-1: config 0 has an invalid interface number: 93 but max is 0 [ 1392.796828][ T5875] usb 10-1: config 0 has no interface number 0 [ 1392.811160][ T5875] usb 10-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 1392.823043][ T5875] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.842788][ T5875] usb 10-1: Product: syz [ 1392.851779][ T5875] usb 10-1: Manufacturer: syz [ 1392.861611][ T5875] usb 10-1: SerialNumber: syz [ 1392.891288][ T5875] usb 10-1: config 0 descriptor?? [ 1393.106091][ T5875] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 1393.116633][ T5875] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1393.127585][ T5875] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 1393.141117][ T5875] usb 10-1: media controller created [ 1393.145940][T18186] vlan4: entered promiscuous mode [ 1393.158458][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1393.231043][ T5872] Bluetooth: Can't get version to change to load ram patch err [ 1393.270936][ T5872] Bluetooth: Loading patch file failed [ 1393.288655][ T5872] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 1393.298027][ T5875] DVB: Unable to find symbol dib7000p_attach() [ 1393.307759][ T5875] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 1393.316669][ T5875] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1393.327179][ T5875] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 1393.336134][ T5875] usb 10-1: media controller created [ 1393.363355][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1393.398139][ T5875] dib0700: the master dib7090 has to be initialized first [ 1393.423508][ T5872] usb 5-1: USB disconnect, device number 54 [ 1393.424920][ T5875] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 1393.542275][ T5875] rc_core: IR keymap rc-dib0700-rc5 not found [ 1393.554786][ T5875] Registered IR keymap rc-empty [ 1393.560242][ T5875] dvb-usb: could not initialize remote control. [ 1393.567357][ T5875] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 1393.588120][T18201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3350'. [ 1393.817706][T16613] IPVS: stop unused estimator thread 0... [ 1393.894246][T18029] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1394.021373][T13518] usb 10-1: USB disconnect, device number 64 [ 1394.050195][T18029] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1394.775564][T13518] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 1394.802582][T18206] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3352'. [ 1394.880612][T18029] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1394.928773][T18029] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1395.346129][T18029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.472080][ T5822] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1395.514915][T18029] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.551878][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 1395.559648][T16605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.566849][T16605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.588216][T16611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.595354][T16611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1396.246096][T18029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1396.997363][T18029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1397.241085][T18235] vlan2: entered promiscuous mode [ 1397.358939][ T5822] Bluetooth: hci1: unexpected event for opcode 0x200b [ 1400.098108][T18029] veth0_vlan: entered promiscuous mode [ 1400.130771][T18029] veth1_vlan: entered promiscuous mode [ 1400.142816][T18250] x_tables: duplicate underflow at hook 1 [ 1400.174657][T18029] veth0_macvtap: entered promiscuous mode [ 1400.184058][T18029] veth1_macvtap: entered promiscuous mode [ 1400.320606][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1400.338628][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.362598][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1400.379674][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.400034][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1400.420163][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.443711][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1400.453453][T18258] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input23 [ 1400.466631][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.484833][T18029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.578392][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.612031][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.622239][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.634325][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.644509][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.655195][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.665156][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.675950][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.696281][T18029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.738572][T18029] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.766613][T18029] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.791674][T18029] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.809827][T18029] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.390827][ T6036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.419563][ T6036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.481279][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.506080][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.214517][T18304] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3378'. [ 1403.281730][T18304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3378'. [ 1403.304729][T18304] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3378'. [ 1403.319071][T18304] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3378'. [ 1404.400613][T13518] kernel write not supported for file /cpu/0/msr (pid: 13518 comm: kworker/0:4) [ 1405.837413][T18338] ntfs3(nbd6): try to read out of volume at offset 0x0 [ 1405.890926][T18341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3392'. [ 1405.920391][T18341] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3392'. [ 1406.143922][ T5822] Bluetooth: hci1: unexpected event for opcode 0x200b [ 1406.290520][T18347] vlan4: entered promiscuous mode [ 1408.462701][T18354] vlan2: entered promiscuous mode [ 1408.995351][T18355] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3395'. [ 1409.809632][T18363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3397'. [ 1410.486192][T18370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3400'. [ 1410.898890][T18379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3404'. [ 1411.331536][ T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1411.461563][ T9] usb 7-1: device descriptor read/64, error -71 [ 1412.443747][ T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1412.585062][ T9] usb 7-1: device descriptor read/64, error -71 [ 1412.835075][ T5822] Bluetooth: hci1: unexpected event for opcode 0x200b [ 1412.846831][ T9] usb usb7-port1: attempt power cycle [ 1413.461504][ T29] audit: type=1326 audit(1739466359.165:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18391 comm="syz.3.3407" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffaf498cde9 code=0x0 [ 1413.744207][T18401] fuse: Unknown parameter 'fd0x0000000000000006' [ 1414.853254][T18409] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3412'. [ 1415.026944][T18412] fuse: Unknown parameter 'grou00000000000000000000' [ 1417.489286][T18432] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3418'. [ 1418.863277][T18437] fuse: Unknown parameter 'fd0x0000000000000006' [ 1419.813145][T18448] netlink: 168 bytes leftover after parsing attributes in process `syz.9.3423'. [ 1420.354012][T18459] fuse: Unknown parameter 'grou00000000000000000000' [ 1421.155095][T18462] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3428'. [ 1422.019639][T18467] serio: Serial port ptm0 [ 1423.212103][ T5822] Bluetooth: hci0: unexpected event for opcode 0x200b [ 1423.316230][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.316281][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.631529][T16399] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1423.793713][T16399] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1423.801684][T16399] usb 10-1: can't read configurations, error -61 [ 1424.249405][T16399] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1424.494360][T18492] vlan2: entered promiscuous mode [ 1425.853729][T16399] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1425.866945][T16399] usb 10-1: can't read configurations, error -61 [ 1425.877167][T16399] usb usb10-port1: attempt power cycle [ 1426.311676][T16399] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1426.624728][T16399] usb 10-1: device descriptor read/8, error -71 [ 1426.644990][T13518] kernel write not supported for file /cpu/0/msr (pid: 13518 comm: kworker/0:4) [ 1426.788686][T18503] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3441'. [ 1427.461037][T18513] netlink: 'syz.1.3443': attribute type 3 has an invalid length. [ 1427.468950][T18513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3443'. [ 1428.831897][T12735] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1429.305005][T12735] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1429.315902][T18517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1429.330689][T12735] usb 2-1: not running at top speed; connect to a high speed hub [ 1429.353237][T12735] usb 2-1: config 17 has an invalid interface number: 8 but max is 1 [ 1429.372809][T12735] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1429.387910][T12735] usb 2-1: config 17 has no interface number 0 [ 1429.421670][T12735] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1429.461610][T12735] usb 2-1: config 17 interface 8 has no altsetting 0 [ 1429.477302][T12735] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1429.921591][T12735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.943421][T12735] usb 2-1: Product: syz [ 1429.956077][T12735] usb 2-1: Manufacturer: syz [ 1430.021555][T16399] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1430.079464][T12735] usb 2-1: SerialNumber: syz [ 1430.191284][T18531] vlan2: entered promiscuous mode [ 1430.231544][T12735] usb 2-1: selecting invalid altsetting 0 [ 1431.593543][T16399] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1431.611540][T16399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.630794][T16399] usb 4-1: config 0 descriptor?? [ 1431.632160][T12735] usb 2-1: USB disconnect, device number 22 [ 1431.656834][T16399] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1431.716092][T18535] netlink: 'syz.9.3450': attribute type 1 has an invalid length. [ 1431.741637][T18535] netlink: 'syz.9.3450': attribute type 3 has an invalid length. [ 1431.759171][T18535] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3450'. [ 1431.948515][T18543] FAULT_INJECTION: forcing a failure. [ 1431.948515][T18543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1431.961843][T18543] CPU: 1 UID: 0 PID: 18543 Comm: syz.1.3453 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 1431.961868][T18543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1431.961879][T18543] Call Trace: [ 1431.961886][T18543] [ 1431.961893][T18543] dump_stack_lvl+0x241/0x360 [ 1431.961925][T18543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1431.961956][T18543] ? __pfx__printk+0x10/0x10 [ 1431.961981][T18543] ? __pfx_lock_release+0x10/0x10 [ 1431.962008][T18543] should_fail_ex+0x40a/0x550 [ 1431.962032][T18543] _copy_from_iter+0x1e9/0x1c20 [ 1431.962055][T18543] ? __virt_addr_valid+0x183/0x530 [ 1431.962086][T18543] ? __alloc_skb+0x28f/0x440 [ 1431.962109][T18543] ? __pfx__copy_from_iter+0x10/0x10 [ 1431.962133][T18543] ? __virt_addr_valid+0x183/0x530 [ 1431.962154][T18543] ? __virt_addr_valid+0x183/0x530 [ 1431.962173][T18543] ? __virt_addr_valid+0x45f/0x530 [ 1431.962194][T18543] ? __phys_addr_symbol+0x2f/0x70 [ 1431.962214][T18543] ? __check_object_size+0x47a/0x730 [ 1431.962239][T18543] netlink_sendmsg+0x73d/0xcb0 [ 1431.962267][T18543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1431.962295][T18543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1431.962310][T18543] __sock_sendmsg+0x221/0x270 [ 1431.962333][T18543] ____sys_sendmsg+0x52a/0x7e0 [ 1431.962358][T18543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1431.962373][T18543] ? __fget_files+0x2a/0x410 [ 1431.962397][T18543] ? __fget_files+0x2a/0x410 [ 1431.962424][T18543] __sys_sendmsg+0x269/0x350 [ 1431.962446][T18543] ? __pfx___sys_sendmsg+0x10/0x10 [ 1431.962461][T18543] ? vfs_write+0x825/0xd10 [ 1431.962501][T18543] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1431.962546][T18543] do_syscall_64+0xf3/0x230 [ 1431.962568][T18543] ? clear_bhb_loop+0x35/0x90 [ 1431.962592][T18543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.962612][T18543] RIP: 0033:0x7f0b7db8cde9 [ 1431.962627][T18543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1431.962642][T18543] RSP: 002b:00007f0b7b9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1431.962661][T18543] RAX: ffffffffffffffda RBX: 00007f0b7dda6080 RCX: 00007f0b7db8cde9 [ 1431.962674][T18543] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000006 [ 1431.962686][T18543] RBP: 00007f0b7b9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1431.962697][T18543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1431.962707][T18543] R13: 0000000000000000 R14: 00007f0b7dda6080 R15: 00007fff441a9ce8 [ 1431.962733][T18543] [ 1431.974575][ T9] kernel write not supported for file /cpu/0/msr (pid: 9 comm: kworker/0:1) [ 1432.595664][T16399] usb 4-1: USB disconnect, device number 29 [ 1432.789530][T18556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1432.912032][ T29] audit: type=1326 audit(1739466379.105:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18552 comm="syz.9.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfd58cde9 code=0x7ffc0000 [ 1433.804687][T18562] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3458'. [ 1433.854686][ T29] audit: type=1326 audit(1739466379.115:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18552 comm="syz.9.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfd58cde9 code=0x7ffc0000 [ 1433.878767][ T29] audit: type=1326 audit(1739466379.115:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18552 comm="syz.9.3456" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bfd58cde9 code=0x0 [ 1433.899971][ T29] audit: type=1326 audit(1739466379.915:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18552 comm="syz.9.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bfd58cde9 code=0x7ffc0000 [ 1433.939616][ T29] audit: type=1326 audit(1739466379.915:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18552 comm="syz.9.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfd58cde9 code=0x7ffc0000 [ 1434.081557][ T29] audit: type=1326 audit(1739466379.915:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18552 comm="syz.9.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfd58cde9 code=0x7ffc0000 [ 1434.185700][ T29] audit: type=1326 audit(1739466379.915:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18552 comm="syz.9.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bfd58cde9 code=0x7ffc0000 [ 1434.260545][T18567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3459'. [ 1434.609244][ T29] audit: type=1326 audit(1739466379.915:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18552 comm="syz.9.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfd58cde9 code=0x7ffc0000 [ 1434.665250][ T29] audit: type=1326 audit(1739466379.915:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18552 comm="syz.9.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfd58cde9 code=0x7ffc0000 [ 1434.715893][ T29] audit: type=1326 audit(1739466379.915:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18552 comm="syz.9.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f2bfd58cde9 code=0x7ffc0000 [ 1435.163244][T18578] vlan4: entered promiscuous mode [ 1438.563325][T18632] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3466'. [ 1439.912048][T18650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1441.640029][T18674] ntfs3(nbd9): try to read out of volume at offset 0x0 [ 1443.107923][T18694] xt_recent: Unsupported userspace flags (000000da) [ 1444.162587][T18704] netlink: 'syz.1.3484': attribute type 3 has an invalid length. [ 1444.187779][T18704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3484'. [ 1444.549883][T18711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3485'. [ 1445.967517][T16399] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1445.979587][T18721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1446.131591][T16399] usb 2-1: Using ep0 maxpacket: 16 [ 1446.153189][T16399] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.201636][T16399] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1446.213176][T18728] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1446.219063][T16399] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1446.234389][T18728] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1446.264216][T16399] usb 2-1: Manufacturer: syz [ 1446.272519][T16399] usb 2-1: config 0 descriptor?? [ 1446.804489][T18736] nfs: Unknown parameter 'smacfstransmute' [ 1447.284512][T18738] netlink: 'syz.1.3486': attribute type 10 has an invalid length. [ 1447.304716][T18738] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1447.959746][T18714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1447.968541][T18714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1447.979557][T16399] usb 2-1: USB disconnect, device number 23 [ 1448.062284][T18750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1448.450801][ T9] IPVS: starting estimator thread 0... [ 1448.460330][T18761] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3499'. [ 1448.500248][T18761] bridge_slave_1: left allmulticast mode [ 1448.526321][T18761] bridge_slave_1: left promiscuous mode [ 1448.535904][T18761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.551578][T18763] IPVS: using max 39 ests per chain, 93600 per kthread [ 1448.568646][T18761] bridge4: port 1(bridge_slave_1) entered blocking state [ 1448.582956][T18761] bridge4: port 1(bridge_slave_1) entered disabled state [ 1448.606777][T18761] bridge_slave_1: entered allmulticast mode [ 1448.629863][T18761] bridge_slave_1: entered promiscuous mode [ 1449.492279][T18775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1449.676994][T18775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.711583][T12735] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1451.642868][T18802] netlink: 288 bytes leftover after parsing attributes in process `syz.6.3507'. [ 1452.351868][ T9] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1452.576012][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1452.606405][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 1452.647473][ T9] usb 5-1: config 9 has an invalid interface number: 5 but max is 0 [ 1452.681440][ T9] usb 5-1: config 9 has no interface number 0 [ 1452.743636][ T9] usb 5-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1452.767204][ T9] usb 5-1: config 9 interface 5 altsetting 9 endpoint 0x87 has invalid maxpacket 24929, setting to 64 [ 1452.784503][ T9] usb 5-1: config 9 interface 5 has no altsetting 0 [ 1452.800772][ T9] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 1452.812574][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.915929][ T9] usb 5-1: Product: syz [ 1452.928759][ T9] usb 5-1: Manufacturer: syz [ 1452.936471][ T9] usb 5-1: SerialNumber: syz [ 1452.943793][T18798] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1454.110805][T18823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3516'. [ 1455.071246][T18830] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3517'. [ 1455.481674][ T9] usb 5-1: USB disconnect, device number 55 [ 1456.097276][T18841] serio: Serial port ptm0 [ 1456.532566][T18849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1456.648352][T18850] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3521'. [ 1458.438551][T18863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3526'. [ 1458.903770][T18865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3528'. [ 1459.275930][T18865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3528'. [ 1459.754721][T18885] FAULT_INJECTION: forcing a failure. [ 1459.754721][T18885] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.767731][T18885] CPU: 0 UID: 0 PID: 18885 Comm: syz.6.3531 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 1459.767755][T18885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1459.767765][T18885] Call Trace: [ 1459.767772][T18885] [ 1459.767779][T18885] dump_stack_lvl+0x241/0x360 [ 1459.767811][T18885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1459.767836][T18885] ? __pfx__printk+0x10/0x10 [ 1459.767860][T18885] ? kmem_cache_alloc_noprof+0x48/0x380 [ 1459.767883][T18885] ? __pfx___might_resched+0x10/0x10 [ 1459.767906][T18885] should_fail_ex+0x40a/0x550 [ 1459.767930][T18885] should_failslab+0xac/0x100 [ 1459.767951][T18885] ? getname_flags+0xb7/0x540 [ 1459.767970][T18885] kmem_cache_alloc_noprof+0x70/0x380 [ 1459.767996][T18885] getname_flags+0xb7/0x540 [ 1459.768020][T18885] user_path_at+0x24/0x60 [ 1459.768043][T18885] __se_sys_mount+0x297/0x3c0 [ 1459.768069][T18885] ? __pfx___se_sys_mount+0x10/0x10 [ 1459.768091][T18885] ? do_syscall_64+0x100/0x230 [ 1459.768122][T18885] ? __x64_sys_mount+0x20/0xc0 [ 1459.768145][T18885] do_syscall_64+0xf3/0x230 [ 1459.768166][T18885] ? clear_bhb_loop+0x35/0x90 [ 1459.768191][T18885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.768212][T18885] RIP: 0033:0x7f621838cde9 [ 1459.768227][T18885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1459.768242][T18885] RSP: 002b:00007f6219178038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1459.768261][T18885] RAX: ffffffffffffffda RBX: 00007f62185a6160 RCX: 00007f621838cde9 [ 1459.768274][T18885] RDX: 00004000000000c0 RSI: 0000400000001340 RDI: 0000000000000000 [ 1459.768286][T18885] RBP: 00007f6219178090 R08: 00004000000003c0 R09: 0000000000000000 [ 1459.768298][T18885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1459.768308][T18885] R13: 0000000000000000 R14: 00007f62185a6160 R15: 00007ffdef95e708 [ 1459.768335][T18885] [ 1460.721980][T18895] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3535'. [ 1461.534784][T18898] ntfs3(nbd6): try to read out of volume at offset 0x0 [ 1462.931452][T18916] openvswitch: netlink: Message has 4 unknown bytes. [ 1462.971842][T18916] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1462.979615][T18916] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1463.985529][T18923] overlayfs: failed to resolve 'context=system_u': -2 [ 1464.825039][T18932] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3547'. [ 1465.633182][T18935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.718112][T18935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.138663][T18938] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 1466.689082][ T9] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1466.861765][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1466.912541][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1466.947375][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1467.711819][ T9] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1467.721044][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.731207][ T9] usb 10-1: config 0 descriptor?? [ 1467.942318][ T9] usbhid 10-1:0.0: can't add hid device: -71 [ 1467.980215][ T9] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1468.021743][ T9] usb 10-1: USB disconnect, device number 70 [ 1468.380442][T18958] Smack: duplicate mount options [ 1468.561675][T18961] FAULT_INJECTION: forcing a failure. [ 1468.561675][T18961] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.605832][T18961] CPU: 0 UID: 0 PID: 18961 Comm: syz.4.3558 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 1468.605859][T18961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1468.605868][T18961] Call Trace: [ 1468.605872][T18961] [ 1468.605877][T18961] dump_stack_lvl+0x241/0x360 [ 1468.605898][T18961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1468.605912][T18961] ? __pfx__printk+0x10/0x10 [ 1468.605927][T18961] ? __kmalloc_noprof+0xb5/0x4c0 [ 1468.605940][T18961] ? __pfx___might_resched+0x10/0x10 [ 1468.605952][T18961] should_fail_ex+0x40a/0x550 [ 1468.605966][T18961] should_failslab+0xac/0x100 [ 1468.605979][T18961] __kmalloc_noprof+0xdd/0x4c0 [ 1468.605990][T18961] ? __kmalloc_cache_noprof+0x243/0x390 [ 1468.606001][T18961] ? mpi_alloc+0x7a/0x140 [ 1468.606016][T18961] mpi_alloc+0x7a/0x140 [ 1468.606028][T18961] mpi_read_raw_data+0x169/0x970 [ 1468.606040][T18961] ? crypto_dh_decode_key+0x362/0x690 [ 1468.606056][T18961] dh_set_secret+0x1e6/0x460 [ 1468.606067][T18961] ? crypto_create_tfm_node+0x88/0x3d0 [ 1468.606079][T18961] ? __pfx_dh_set_secret+0x10/0x10 [ 1468.606089][T18961] ? crypto_create_tfm_node+0x1fb/0x3d0 [ 1468.606101][T18961] ? crypto_alloc_tfm_node+0x332/0x360 [ 1468.606115][T18961] __keyctl_dh_compute+0x64c/0xf50 [ 1468.606134][T18961] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1468.606151][T18961] ? __pfx___might_resched+0x10/0x10 [ 1468.606168][T18961] ? __might_fault+0xaa/0x120 [ 1468.606186][T18961] keyctl_dh_compute+0x107/0x160 [ 1468.606199][T18961] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 1468.606213][T18961] ? sb_end_write+0xe9/0x1c0 [ 1468.606226][T18961] ? vfs_write+0x7fa/0xd10 [ 1468.606238][T18961] __se_sys_keyctl+0x3f3/0x910 [ 1468.606254][T18961] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1468.606267][T18961] ? do_sys_openat2+0x17a/0x1d0 [ 1468.606281][T18961] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1468.606294][T18961] ? __fget_files+0x2a/0x410 [ 1468.606308][T18961] ? __fget_files+0x2a/0x410 [ 1468.606324][T18961] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1468.606338][T18961] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1468.606350][T18961] ? do_syscall_64+0x100/0x230 [ 1468.606365][T18961] ? __x64_sys_keyctl+0x20/0xc0 [ 1468.606380][T18961] do_syscall_64+0xf3/0x230 [ 1468.606392][T18961] ? clear_bhb_loop+0x35/0x90 [ 1468.606406][T18961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.606419][T18961] RIP: 0033:0x7f638eb8cde9 [ 1468.606428][T18961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1468.606436][T18961] RSP: 002b:00007f638fa39038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1468.606448][T18961] RAX: ffffffffffffffda RBX: 00007f638eda5fa0 RCX: 00007f638eb8cde9 [ 1468.606455][T18961] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000017 [ 1468.606461][T18961] RBP: 00007f638fa39090 R08: 0000400000000180 R09: 0000000000000000 [ 1468.606468][T18961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1468.606474][T18961] R13: 0000000000000000 R14: 00007f638eda5fa0 R15: 00007ffd8a6f2dc8 [ 1468.606494][T18961] [ 1469.517004][ T5822] Bluetooth: hci0: unexpected event for opcode 0x200b [ 1469.910372][T18982] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3560'. [ 1471.391971][ T5872] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1471.632044][ T5872] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1471.908775][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.972818][ T5872] usb 7-1: config 0 descriptor?? [ 1472.249628][ T5872] creative-sb0540 0003:041E:3100.0009: No inputs registered, leaving [ 1472.259477][T19006] zonefs (nullb0) ERROR: Not a zoned block device [ 1472.262810][ T5872] creative-sb0540 0003:041E:3100.0009: hidraw0: USB HID v1.01 Device [HID 041e:3100] on usb-dummy_hcd.6-1/input0 [ 1473.161768][ T5872] usb 7-1: USB disconnect, device number 34 [ 1473.470198][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 1473.470214][ T29] audit: type=1326 audit(1739466419.665:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19018 comm="syz.9.3575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bfd58cde9 code=0x0 [ 1474.821292][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3580'. [ 1474.830925][T19037] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3580'. [ 1474.842537][T19037] netlink: 'syz.9.3580': attribute type 11 has an invalid length. [ 1475.060635][T19041] /dev/nullb0: Can't open blockdev [ 1475.861983][T16905] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1476.053527][T16905] usb 4-1: Using ep0 maxpacket: 8 [ 1476.104719][T16905] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1476.150922][T16905] usb 4-1: can't read configurations, error -22 [ 1476.364634][T16905] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1476.641611][T16905] usb 4-1: Using ep0 maxpacket: 8 [ 1476.991536][T16905] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1477.009822][T16905] usb 4-1: can't read configurations, error -22 [ 1477.016985][ T5822] Bluetooth: hci3: unexpected event for opcode 0x200b [ 1477.021924][T16905] usb usb4-port1: attempt power cycle [ 1477.301154][T19062] netlink: 830 bytes leftover after parsing attributes in process `syz.9.3588'. [ 1477.312137][T19062] dlm: non-version read from control device 36 [ 1477.421532][T16905] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1477.457465][T16905] usb 4-1: Using ep0 maxpacket: 8 [ 1477.512140][T16905] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1477.550996][T16905] usb 4-1: can't read configurations, error -22 [ 1478.001656][T16905] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1478.032850][T16905] usb 4-1: Using ep0 maxpacket: 8 [ 1478.040696][T16905] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1478.055838][T16905] usb 4-1: can't read configurations, error -22 [ 1478.068360][T16905] usb usb4-port1: unable to enumerate USB device [ 1478.211510][T16905] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1478.401686][T19079] overlayfs: missing 'lowerdir' [ 1478.406676][T16905] usb 7-1: Using ep0 maxpacket: 32 [ 1478.426416][T16905] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1478.437351][T16905] usb 7-1: config 0 has no interface number 0 [ 1478.493775][T16905] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1478.504755][T16905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.521600][T16905] usb 7-1: Product: syz [ 1478.535900][T16905] usb 7-1: Manufacturer: syz [ 1478.541322][T16905] usb 7-1: SerialNumber: syz [ 1478.664888][T16905] usb 7-1: config 0 descriptor?? [ 1478.678958][T16905] smsc95xx v2.0.0 [ 1478.788452][T19089] netlink: 'syz.9.3597': attribute type 3 has an invalid length. [ 1478.796441][T19089] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3597'. [ 1479.061819][ T5873] usb 10-1: new full-speed USB device number 71 using dummy_hcd [ 1479.232981][ T5873] usb 10-1: device descriptor read/64, error -71 [ 1479.591889][T19093] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3599'. [ 1479.621865][T19093] dlm: non-version read from control device 36 [ 1479.669623][T16905] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1479.741939][ T5873] usb 10-1: new full-speed USB device number 72 using dummy_hcd [ 1479.892391][ T5873] usb 10-1: device descriptor read/64, error -71 [ 1480.006068][ T5873] usb usb10-port1: attempt power cycle [ 1480.296221][T16905] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1480.329587][T16905] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 1480.356216][T16905] usb 7-1: USB disconnect, device number 35 [ 1480.356705][T19106] netlink: 'syz.4.3603': attribute type 1 has an invalid length. [ 1480.401234][T19107] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 1480.401572][T19106] netlink: 'syz.4.3603': attribute type 1 has an invalid length. [ 1480.413848][T19107] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 1480.413870][T19107] CPU: 1 UID: 0 PID: 19107 Comm: syz.3.3602 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 1480.413889][T19107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1480.413900][T19107] RIP: 0010:iter_file_splice_write+0xe07/0x1510 [ 1480.413926][T19107] Code: 00 00 fc ff df 41 80 3c 06 00 49 89 c6 74 08 4c 89 e7 e8 5c 19 df ff 49 c7 04 24 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 4a 18 df ff 48 8b 44 24 20 48 8b [ 1480.413939][T19107] RSP: 0018:ffffc9000b9ef780 EFLAGS: 00010202 [ 1480.413957][T19107] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000000000005 [ 1480.413968][T19107] RDX: ffffc90004999000 RSI: 0000000000000000 RDI: 7fffffffffffff7f [ 1480.413981][T19107] RBP: ffffc9000b9efa30 R08: ffffffff82444844 R09: 1ffff1100f0c30e9 [ 1480.413993][T19107] R10: dffffc0000000000 R11: ffffffff82013770 R12: ffff888053252038 [ 1480.515283][T19107] R13: 0000000000000000 R14: dffffc0000000000 R15: 7fffffffffffff7f [ 1480.523248][T19107] FS: 00007ffaf58016c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1480.532167][T19107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1480.538740][T19107] CR2: 0000400000000100 CR3: 0000000031862000 CR4: 00000000003526f0 [ 1480.546710][T19107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1480.554671][T19107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1480.562638][T19107] Call Trace: [ 1480.565910][T19107] [ 1480.568832][T19107] ? __die_body+0x5f/0xb0 [ 1480.573163][T19107] ? die_addr+0xb0/0xe0 [ 1480.577313][T19107] ? exc_general_protection+0x3dd/0x5d0 [ 1480.582861][T19107] ? asm_exc_general_protection+0x26/0x30 [ 1480.588571][T19107] ? __pfx_zero_pipe_buf_release+0x10/0x10 [ 1480.594365][T19107] ? iter_file_splice_write+0xd84/0x1510 [ 1480.599989][T19107] ? iter_file_splice_write+0xe07/0x1510 [ 1480.605621][T19107] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1480.611511][T19107] ? rcu_read_lock_any_held+0xb7/0x160 [ 1480.616959][T19107] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1480.622840][T19107] direct_splice_actor+0x11b/0x220 [ 1480.627943][T19107] splice_direct_to_actor+0x586/0xc80 [ 1480.633309][T19107] ? __pfx_direct_splice_actor+0x10/0x10 [ 1480.638929][T19107] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1480.644811][T19107] ? __fget_files+0x2a/0x410 [ 1480.649392][T19107] ? __pfx_lock_release+0x10/0x10 [ 1480.654410][T19107] do_splice_direct+0x289/0x3e0 [ 1480.659251][T19107] ? __pfx_do_splice_direct+0x10/0x10 [ 1480.664615][T19107] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1480.670512][T19107] ? rw_verify_area+0x243/0x630 [ 1480.675359][T19107] do_sendfile+0x564/0x8a0 [ 1480.679768][T19107] ? __pfx_do_sendfile+0x10/0x10 [ 1480.684706][T19107] __se_sys_sendfile64+0x17c/0x1e0 [ 1480.689811][T19107] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1480.695439][T19107] ? do_syscall_64+0x100/0x230 [ 1480.700197][T19107] ? do_syscall_64+0xb6/0x230 [ 1480.704867][T19107] do_syscall_64+0xf3/0x230 [ 1480.709361][T19107] ? clear_bhb_loop+0x35/0x90 [ 1480.714031][T19107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.719912][T19107] RIP: 0033:0x7ffaf498cde9 [ 1480.724314][T19107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1480.743914][T19107] RSP: 002b:00007ffaf5801038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1480.752324][T19107] RAX: ffffffffffffffda RBX: 00007ffaf4ba5fa0 RCX: 00007ffaf498cde9 [ 1480.760286][T19107] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 1480.768246][T19107] RBP: 00007ffaf4a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1480.776208][T19107] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.784169][T19107] R13: 0000000000000000 R14: 00007ffaf4ba5fa0 R15: 00007ffd45bf59e8 [ 1480.792140][T19107] [ 1480.795147][T19107] Modules linked in: [ 1480.800164][T19107] ---[ end trace 0000000000000000 ]--- [ 1480.810580][ T5873] usb 10-1: new full-speed USB device number 73 using dummy_hcd [ 1480.859773][ T5873] usb 10-1: device descriptor read/8, error -71 [ 1481.104952][T19107] RIP: 0010:iter_file_splice_write+0xe07/0x1510 [ 1481.121474][ T5873] usb 10-1: new full-speed USB device number 74 using dummy_hcd [ 1481.189890][ T5873] usb 10-1: device descriptor read/8, error -71 [ 1481.208197][T19107] Code: 00 00 fc ff df 41 80 3c 06 00 49 89 c6 74 08 4c 89 e7 e8 5c 19 df ff 49 c7 04 24 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 4a 18 df ff 48 8b 44 24 20 48 8b [ 1481.229081][T19107] RSP: 0018:ffffc9000b9ef780 EFLAGS: 00010202 [ 1481.239535][T19107] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000000000005 [ 1481.258616][T19107] RDX: ffffc90004999000 RSI: 0000000000000000 RDI: 7fffffffffffff7f [ 1481.266782][T19107] RBP: ffffc9000b9efa30 R08: ffffffff82444844 R09: 1ffff1100f0c30e9 [ 1481.276202][T19107] R10: dffffc0000000000 R11: ffffffff82013770 R12: ffff888053252038 [ 1481.284917][T19107] R13: 0000000000000000 R14: dffffc0000000000 R15: 7fffffffffffff7f [ 1481.294555][T19107] FS: 00007ffaf58016c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1481.307062][T19107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1481.307157][ T5873] usb usb10-port1: unable to enumerate USB device [ 1481.321940][T19107] CR2: 000000110c46a2a7 CR3: 0000000031862000 CR4: 00000000003526f0 [ 1481.330057][T19107] Kernel panic - not syncing: Fatal exception [ 1481.336346][T19107] Kernel Offset: disabled [ 1481.340661][T19107] Rebooting in 86400 seconds..