last executing test programs: 17m59.512308289s ago: executing program 0 (id=203): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x20, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x2], 0x1}}}) 17m59.341964525s ago: executing program 0 (id=205): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000795d6c08450c3b616dc4010203010902120001000000200904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0x7, &(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 17m54.08322256s ago: executing program 0 (id=224): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x41}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) (async) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000001c0)=@netrom={'nr', 0x0}, 0x10) unshare(0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004f005000000080001000200"], 0x7c}}, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x2}) (async) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x2}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000100)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r7 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x1ff, 0x4, 0x8fc3, 0xffffffff, 0x20000, 0x0, 0xfffffff9}}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) fcntl$getown(r2, 0x9) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x2) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendto$packet(r9, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000", 0x14, 0x4000, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x7, [@type_tag={0x3, 0x0, 0x0, 0x12, 0x3}, @typedef={0xc, 0x0, 0x0, 0x8, 0x5}, @struct={0xe, 0x4, 0x0, 0x4, 0x1, 0x0, [{0x4, 0x5, 0x40}, {0x7, 0x2, 0x400}, {0x4, 0x5, 0x9}, {0x6, 0x4, 0xe23}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x42, 0x0, 0x7e, 0x1}, @const={0x1, 0x0, 0x0, 0xa, 0x4}, @float={0xd, 0x0, 0x0, 0x10, 0x8}, @enum={0x8, 0x2, 0x0, 0x6, 0x4, [{0xd, 0x4}, {0xf, 0x8}]}]}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x30]}}, &(0x7f0000000300)=""/124, 0xb7, 0x7c, 0x1, 0x2, 0x0, @void, @value}, 0x28) (async) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x7, [@type_tag={0x3, 0x0, 0x0, 0x12, 0x3}, @typedef={0xc, 0x0, 0x0, 0x8, 0x5}, @struct={0xe, 0x4, 0x0, 0x4, 0x1, 0x0, [{0x4, 0x5, 0x40}, {0x7, 0x2, 0x400}, {0x4, 0x5, 0x9}, {0x6, 0x4, 0xe23}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x42, 0x0, 0x7e, 0x1}, @const={0x1, 0x0, 0x0, 0xa, 0x4}, @float={0xd, 0x0, 0x0, 0x10, 0x8}, @enum={0x8, 0x2, 0x0, 0x6, 0x4, [{0xd, 0x4}, {0xf, 0x8}]}]}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x30]}}, &(0x7f0000000300)=""/124, 0xb7, 0x7c, 0x1, 0x2, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x9, 0x4, 0x5, 0x41000, 0x1, 0x9, '\x00', r10, r11, 0x4, 0x0, 0x3, 0x8, @void, @value, @void, @value}, 0x50) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'dh\x00', 0x1, 0x4, 0x200072}, 0x2c) 17m53.704454961s ago: executing program 0 (id=227): socket$xdp(0x2c, 0x3, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, 0x1000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x4, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x6, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x10000, 0x2, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x1000007, 0x103, 0x2, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x5, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x80010002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea3, 0x6, 0x4, 0x6, 0x8000, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x2, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0xb, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xfc], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x10001, 0x8, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x1, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0x70469a0f, 0x8, 0x84, 0x6d01, 0x9, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x8004, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x475083cf, 0x400000, 0xfffffff9, 0x0, 0x1, 0x4, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x10000000, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x2, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xffffffff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x10000, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0x9]}, 0x45c) r0 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901) r1 = syz_io_uring_setup(0x234, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0xa0}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd=r0, 0x0, 0x0, 0x39}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 17m53.659935401s ago: executing program 0 (id=229): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x80007, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000280)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000240)={'some', 0x20, 0xd, 0x20, 0xffffa}, 0x2f) close(r2) syz_usb_disconnect(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400048008000640000000050900010073797a30"], 0x10c}}, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0xfa5, 0x0}) syz_usb_connect(0x4, 0x24, &(0x7f0000000140)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x5509, &(0x7f0000000280)=0x80000000) r6 = fcntl$getown(0xffffffffffffffff, 0x9) capset(&(0x7f0000000080)={0x20080522, r6}, &(0x7f00000000c0)={0x1fffff, 0xa8, 0x3, 0x1, 0x90000007, 0xca}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r7, 0x89e1, 0x0) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x300, 0x0, 0x6, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x8000}, 0x0) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) preadv(r8, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) 17m51.966295023s ago: executing program 0 (id=236): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000030c0)}}], 0x1, 0x4008004) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5) readv(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x88}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, r5, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000080601020000000000000000030000070500010007000000050001000700000005000100070000007f538970b98626869fcb25b2b223e327a2438b9b97174e"], 0x2c}, 0x1, 0x0, 0x0, 0x24000003}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r6, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) recvmmsg(r6, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r7, &(0x7f00000000c0)={0x2a, 0x1, 0x2}, 0x70) 17m51.715085515s ago: executing program 3 (id=238): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="df3d72db320fff172983e9205f9bb92da4144e83623c59a148ea1f97cc40b643627abc0963f173a11e759134057ab0c3de6742e245312150b3505d9cc5c7fd6047f8909b3a61e6596e0a9a9bdd692617fa6e05a1e21c17875969afcf3c94a5cfa0d6bea3dca2b4bb4ea3251327b5fbb2f8cd17", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008001100000108021100000050505050505000001402", @ANYRES8=r1], 0x3c}}, 0x0) 17m51.554285836s ago: executing program 3 (id=239): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x580, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x311180, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xfe) 17m51.138033442s ago: executing program 3 (id=240): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, &(0x7f0000000000)="50c88ca2d3c793f717c54c29ba2748e30aae7ec7634dee431a3114269d5c84b0f80ba01774", 0x25, 0x20008011, &(0x7f0000000040)={0xa, 0x4e20, 0xb, @mcast2, 0x6f}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioperm(0x0, 0x6, 0x2da3b9f3) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2, 0x1) fspick(r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xffffffe0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$tipc(0x1e, 0x2, 0x0) syz_io_uring_setup(0x5aaa, &(0x7f0000000100)={0x0, 0x7090, 0x20000, 0x2, 0x3c}, &(0x7f0000000180), &(0x7f00000001c0)) connect$tipc(r3, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 17m50.843348311s ago: executing program 3 (id=242): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x297880, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2aef01c, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x0) 17m50.590907683s ago: executing program 3 (id=244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioperm(0x0, 0x6, 0x8000000000004) setpgid(0x0, 0xffffffffffffffff) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x1403, 0x200, 0x70bd27, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0x8801) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="006b55787cf76994000000000000", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB='\x00'/27], 0x48) creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x8b) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 17m50.210468133s ago: executing program 3 (id=246): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x200801) unshare(0x20040600) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = syz_io_uring_setup(0x7b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000002600)=ANY=[], 0x8) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000280)=0xfc, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1a, 0x7, 0x9, 0x5, 0x20103, 0xffffffffffffffff, 0x7, '\x00', 0x0, r9, 0x0, 0x891, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r10 = socket$inet6(0xa, 0x2, 0x3a) r11 = dup(r10) bind$unix(r11, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000240)={'veth1_macvtap\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r2, &(0x7f0000000f40)=[{&(0x7f0000000340)="2e9b3d93dfb6c575963f88640000000000", 0x11}, {&(0x7f0000000180)="64c09f7c66ab", 0x6}], 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xd}) 17m49.316795509s ago: executing program 32 (id=246): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x200801) unshare(0x20040600) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = syz_io_uring_setup(0x7b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000002600)=ANY=[], 0x8) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000280)=0xfc, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1a, 0x7, 0x9, 0x5, 0x20103, 0xffffffffffffffff, 0x7, '\x00', 0x0, r9, 0x0, 0x891, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r10 = socket$inet6(0xa, 0x2, 0x3a) r11 = dup(r10) bind$unix(r11, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000240)={'veth1_macvtap\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r2, &(0x7f0000000f40)=[{&(0x7f0000000340)="2e9b3d93dfb6c575963f88640000000000", 0x11}, {&(0x7f0000000180)="64c09f7c66ab", 0x6}], 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xd}) 17m36.247372648s ago: executing program 33 (id=236): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000030c0)}}], 0x1, 0x4008004) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5) readv(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x88}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, r5, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000080601020000000000000000030000070500010007000000050001000700000005000100070000007f538970b98626869fcb25b2b223e327a2438b9b97174e"], 0x2c}, 0x1, 0x0, 0x0, 0x24000003}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r6, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) recvmmsg(r6, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r7, &(0x7f00000000c0)={0x2a, 0x1, 0x2}, 0x70) 16m35.757731883s ago: executing program 4 (id=502): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000280)={0x1d, r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001940)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "3395f9d846826ed12656e4f68327d4ee"}}}, 0x1a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004f40)="e911c90b6c5104ad51115c756c2eacd1ab6fec942dc7c2df545b7fbd4c5bea19399b48dc17b3c63003225a8adeebbf5ecdfa76a3fa8ea2169b58881537259572400ec371cac67a61c8682405eabd7fad877bfec4df9b201a173c3f216622b2680fab064b30844d166ab55633a968ab7fd24c0fa551c0a26f36fd2ad68bcd637fc810c19a59f7d192ea689ace6f0d6efd410a5d28cdc6ca117fe11d6988699c89fa9c05d39abfc3be44c71cbe450d1d236ea5d7eb7b6a29d9fe67cdeb0eaa46a2a184b3f233aac0ee2435f5d025f431e80d145baacfe7999f461a7f8823256d65edee905232b45994a7c1d6081181fe633b741a1cc68cfa65f746557c3e1e16edda682441a0224775134cc329a47c4ee5dc23de300200a5e06885fa2916f42b1dfc26ef3af08b18b2be978a2a4cc54a9321947d7c89a697d48b08a2700b2f577701747de382dfa2e07f92ccd96f7932517aa4442f25485451818b4e9df0608dba6dab28fa2c5aaed9522c839786c5c017673ba59c6d914dfbde6c4bee9855d72f62b02eb12fa591a76509462aa5ebc877f0b60042a0b6caf15dfb0e4f74c0662dfa23dbf2b013c0b95e98150c144cf63f13d20eaf9a3bff74567b6832c36cc6ac532ce8b563745bb7bc11afe15bb337a98fff20e03c4893383cf05d68caca8e3aff4a0da14caaa9597d3f22af1c0cda973d07bf54e97b5b38f5c5cbac41dca75a772e52bf459ba6fe1740ca6854fdd8ac2e002b46c8c61a6aab5de3afb0cf54b92956c13f34889e22714d6e3b6f9bfb72feb61e58b33e9cc0d6bdf3527be2cca1bc8e06bfe38200a685b9cafa038f2085d409cd6afed57714d486a563c5b1a81b6344afb18029f6a563dd00bacc9d323829593f56c2ee390234d2e9d0f271dff9b2b017bd5033c1501e39f729d957b3a52ad853283fd2bc2c00ee1f7e4f3b5e0985b327ca081b17935a8201f80cf36deea8f9e8ba8ed02ed8f59eba7c2fc6b405eb191e3e34e852692aacae129b6feb98f862d2397605e492b5e6e73aaebf3200ba50997ad80dda7ea0d7becc7639c8d0445d72da6817bb283a9aa9ab18b996d43342db5914ac3aa000118410b95fff15004f1ace296f75a465e42bd9139b9f7a30e2f35ff188b53e9fa12d09a4e2b762ce85009126cd28e53cf0d69161dd01e9618f08500c0dd24481adc604d37a460816d6abcc4cdee8f7ecda3608191a7dfaeef94b6d8c464b8b6197af49e01497843f4275b1b1250a5e2b5e0617aef8bb2e5f19942fe1daa1f89abefc36963d04008d2f2ca164e8074d58c1aa025831cfb519a8bcd607e2b23cbecdc78ef8828cd8adcae24c135c6d991ea81ff2589aadda99d1f314143daa810478364142f0dd1c4191b68bd081e331d5759b4768729f4d49271401df07ad4a9bfb108d26763622b6ba923930a2ff387aae26338ddc66c3f3205023ee29d01ac150a7bdf80ff9a9a741f275951321901b6844477c7f0b5342e8047d42852731b614c5878d4b442e7950c330a784c0f12efc09f8d3321cb7acdb274d3bcf26a5245fa0f29e3b753ef021e4f1cb6845c8094c5908e17ad4bd376895f168f2dcff37b7438b05f1c6abfa1a3f1334a7b0f7e84446601935cdc0db0081a93a50487bac999976b3aa6bbae47e71486e7e9a77b68e11771962dec08e94ef1023648e8d0722bbad9178b7a4bee612bbab7ff786c363308c40a09df01d5d7b62760a02d0761f63ec908bd3d734d827b5034e40df53ee4829b221e98fcc584e06bf91d1026acc9e749f1c17ca269c4f54d49c34ad38ba7a60c88480bbd6de859a55483559ba7ca73326facb0fbddbdbdff31c01c6b87cccd784ad15e4c3c680265ee77c4b3cca7be0b7681804b514227a832717dc189e4f7346bf4bff7e12ca9b3d820361c8edc97f319c0361151fb68f65f7f86140ce0bb9ac3510a880cb7bf89e050845da8d5d1367e190d40d5137bf60de9741e363915726a56cf78eed7a309beae54f98154dea42d0989c46dc92a8776235856c822bfa54b493cc49edcf7e5540c21c247c93e5f25f6bf5973a613cee0b5b7a683d2bd4c80f72a59d09549f01f70a581d72ad11a0d725dc32920e2d8880682d2e7c3712e44bb933f1c9080990a447db9e4f24df66b72177bff9fab3eec7df2ac314cef7a66ed13172e372573686d8f37aff4872e2555d2d85b92a98f7c2e15402da6e00cdd4d565e1b1f0ef1c9e9d053eefbe0fc761c95675795250a7421852c0d811e45256b5612bc91602823171b3d8292b76ea7ce201b9114cfb3d3dbb7d10ee20565c9860f6816542a4b83611bab1e78c03c9a5deb7ea7241100cbf9523ae1ed5d9937234d3bd11cf7a44880f4d56a9ea1ea26ad4e547511d22b55bdb144ca20e211d5e8845786d2acd779e085ae50d75ca36c9f284ed2edf9be69a09cc697e847460c61da35e2d2bca2eca0b9332abc830c68fba6dbfdd1d8946b2eef29d64d3c7476e9701dcb43c487dd0fc15c7c8f3eabc4f059eb1631176872a1cfd69afc73e424578b00baf091d177d54e64d7fc260705d139017859f1ed62e0d9b57ab8c891280457b8b011ca1a2fa92577465c7ff8ba0ac0a3e0867f43e5d7df1f387187030b0f196afc48011e27944831f5f4db0006a20dcfe7a1dea9eb6dea96d528af3fb6b38b9df3eaca143739675f9b722465128a71dd25d4536c0b9fcca377ebe10b1de8aa17e6a999ff8890ad2ee2afe8d41ab76eae8df8c52a15c6428eba61d31ddee6a53f812ec5ba4b8bda40216223fbe20c09d642efd8fc470ff4828f0c621ff4671734f68277da1eee0e359c691ec56f09b2af495ec8ca8c50ceef6c302efd63286485b3a0db8732c018708ea4f1598df0bdedd6e5cb3abb3566997f3c3479e501c4f8b81e166b74a46417afc94b99dad3a0fea6cebf72973f7bd2378548b6fe303b09a6c24a116e1862b0e04bd2c60385c780e992ea4210b28c1d4ab77ab4a44d39dd34612f79885381b4118677e285127b18faa776fd9c1a30798ee56f31fd19b93c071d2547176a959a9b6c46d495999be720ad7a36324c8995068b8ef1b278d88cec24c62d55ebf3bb9f58d86727b35ff1bd0bb40e111dbcbabff0e51e3f70da2b3fee10e83120f3d52161c07aec0f02364450d2a996035cd93226d7fd71e174203a7d3b6c6d52bb030b5f48fc6ddfe5ce69179333d37128f022f9f245e8bc4583cc40f3114b8136298e1e1a55aaa18cd9a785cc2144f414e29160c6d742024834b073cd451b30d3b760cbdf91091d40a7d6b1cc801c016afbfff71f480ba51983d153619c234062a68eca91a1a2a50c28eb7f56b5304d3238fe1cb049bf739392c4ae2ac751e20f089c89533fb50e38500e4bc9a21b582a2cb0856a9c3a002336099c78fec2ea7f1865a4ec6503261b3185f90a9827e120005353fd7ed8ed424bf8eac7a9ef67c3cfe17674390c731cb9135b68bbf524fb3c3d165bd366311e5c49be29dba2694fa2af8b00ebc04d30c1dd1e980c562bc7d90dc0a1872e679cf6210e6509e30d52e85b569bfa77f3bea9f48de9470c2a0622eefc6a56e507f7cc67f3171bc480a00b901bce0d0d575ac38c816b18e79e0fe09b513bf93c4fe11e086d4007bd1f343654b56ca8e34be89b24997014551fc362b3d2dbc4082052473a4e9bdb6e1a4707551ebc8e51be5452e29a1dfdfce23fded6bdb804da173abfc9b706998558bdc0edff764e4a6d616a888fe8d5fcb87b8e34d0f3484189f6f06e24b74e468f7fc9f60c2f456feb0eca04c91f002e4ebcb6adae6bea953e3fb1f3c01a68a08a92005c3629f0f4906e2bdee32cd86c6b751e775c3b28864640511a32c4f10f86e90cb2a508d0f5e15a18f3c0bbb5e5d2d2ce880ebd0e05898947eef255af66fbc6633544953710ba4ecda3ab44a7566c925973da584e634080aacecabb3f22ffe5957bc753820a3509b4c82c013829713b500c752a0d8de7729ab1ad79ac39db6331525bdc18083e76256edb16d60b09f8765d2ca2de9a676c13086ff5ed770012cec20ccf49a3edeecb6ecd826f4c970a6a015754a53aa74210a3d5bb697f231bbdfcf11352a666f0e24585e84b8d9a4b5f21a4d6b84082a211ee45d50416d06fdc5a04720c658221dda22aa4c34fb17b7fb115543aea896ed01d7665325090e54b713f500e9fa1671b315a854ab5d2c3902d1c8fd974983332ca09aa8eca6b641197da9be026ce965eace3d4e05939a399922d3142e1191753b57cbf7ea054fb48737473c03410bb0f40f98a7d8096fc29b732c37e2452f647a86b45240f2a3c73dfe81354b1800993f63776a0642e3c12bbd7aab9c328914372e1f7a3917923dadb1d60fa5abeb94fa959a9dfc801a470f1f3e2fa8fa534a733d3e509d36df243dcf9172ac2590150a0e1a6f2077d2301bb2c53a441abaa56ce75d946efeca2aa85cf6461fc957acea20eee92f78f13a70f28ea5f929774f94f959d956ac1c090148e5dc9f4292dd6ab6e5a2a13ea3323af35d87a3cb7c95c2c3e0612ed96c8d08e7d93b5f94eec417a3b645224806fcc0939342a15da6130d237e40a937393a19f935aca46d5f2bbc2b2dfa73735f9a8f29b12dd7a2dbf047354222b6fc8f3a9a5c162a12defe31c2cc48cddbd5d1b98f6ef6f190e63d2bedf5b622b082297585fd123c80e927ed52ad543a19f8448b3d00b00a9ab01d123d6bb3876374d2afec7b4b8a09b1d3195042ea7ed867447abe9881b6673d40698420f0910cb9e64e9b5972af3b4de62e842788b4b7665c7662e25378a6b42f3d01b5c20d9e1fd12aed90eae6de95b506272cfae02c82b3caf1fafcce2497f203c7c1bbb287e6ab06602db40e28e18bce3d4667ba8af53382dbcc76cf821604c2636a14bd12a36a905207e7f7c581b733819aead52a9f800ca27d312de5d3b5f80272594d385304e5cbd1c9bea9106bca6c6ba8371a4ded2c556664bab5cf8f7e10197b6f677971243ad64a7786f9bfb613f282771eceb38b4bef9fc5d2a9cbff0828206dd6ea2a89cd846edfeba758f14196496180ddbb2c474efbaa85041c548ded5541e1d03a5d08e7bfb277841507e17bbab91afeae6cd1bf90799c9b270e701b39d484281bccb206d584f872ed34781cc7c99a7c7b82c1c89055f46bb160b5387ac9a75a2e9975e4189f90a74e6ea17920c84f81e0fce7673c861868aaec3547a734f8bec0617bc809a17a0f2ced98615fb833a12dba259e5d5c087c2cfe0c7b9605f1691a71516d3e23f4132b0fd17ed93534e5d4864217422c117f27231adf2f59d3f4c9286899c451f63d809f18f15c88c5298d75d85976c3e7206000c4c645fee33657ee753b4304fd47adfa35f5bb1dad0babac17975ded43038f827af353b0518a5cbc73242afe59c06ee2a3bf6e43b6dde6ea1c60c7103c91ba6614c0d6f399ba17d4257cfba018e52fd87fbbe7c9b5406ac987ba15965552745d3d239e70b6aa3848c8e8eaa2589acde9dbb8e915aa55e1aa3aa8f7656b359edb292e3f784bc4f10180d404113e1c59040e0a7393c2ebe56c9925eeb250aeb98cda5500833d2231cc7832f14637ec81fa2e20c5809b3c397ffafd7e71dfba79b00d88f26b711aefc914984d99a9efabb02694304d6c4de07c53a5e5e5d823502dc5938b7854050fc1172cfe21c1c7864f5015c05bdb87bfbb236567e8e9e9404761d4a4e36f7030eea38c689fa573ef9d462b81cff417b832baeb0ac51a010a106449b3cec1189bfeb4ff8e236ffa36111c64c87d50d196fe3aa45110d20fb87055fc0ca796bbc3b1bbe61f7021a85c27d2bdf7f14186e66d3b8a37b070a7633ff2fb2a4f432665a5a0d1329b901409884fbf9bbc3e6936833868adbc4c239ad511fc26c0ffd4deae2fa988e20cc326df717390bf5506f0394f7c7e8a155a70e6f2634b5464fc49ed5359d8653766b59a07940e1b81eb8f028c08ac8ee15efbf11668f44aa8b709eb85cf8176e3cdeef1cdd5518de7ed9cb191a5ed41055b4f60e9a05ed7a89ae755606c45758c2792f2a6e65cdbf93502f72953b317896bb3bc97f84ab81a9be93b832d07e1f815d6d8a8c08cd7859c2b568c01e8711cd171fc19dd3172380e880aa0f80fffd84611dc8f3d7fe7b3959edd15f62ca0a3961e50f14bbe9c7219f9ff98fef6484d52aed162b185d2d124309b0b32aa079182a821ee17bbdb2798745ca87e8e34f81da19835ae18d85aeed37d3cfebe759e1f96837ba270ed469a26a9a76267077cba063d94803fdc9de6befb0ff6bac574c72a3b9f48662a7a6ddb15b64b1d966f4533f0a2d92c0095cec6d0a868ef2db8acc3f3bea605c4c5b93457ea76ab0428af48d7aa007d9f9f8a6143947c35ecac82a817200d4d9d51d9ee1c8596b62c5e5e605d6b5c3420c38d06817a4f1f952345b36d47a76999fd2a027a2a1b99eb040b66e2dc5d78e5f5541ae338029ee69c71c6e4619b2cfdf175653feed99a9260c78198914a2b9dc0198adcaf85dee7232974d6701ab5d4edc357b50a1418ed672ae66f66b1a7992432d51c64ffe6df318d9910a50695f4430112d32874d24f7a811fef4c6fe6b0f3e0cb2f48b243a836022e06e2e87cd9f0f5ed877ccb222e70d431b3e84420c0bedd99604ef9733916352b5c39a127d59761977ae22f67db6dd1eefcf89739a8b061da169fedfb8d3ed38425ebcc286f27fa7367a2da038042c23413b25a62432efc3d6cc09833f828c2855ad3d0c17d737e3991ed1c5f41b0d361198bb1cca3a441133e980420cc86ce4552c1b6b0981d0c7b5ada53b556fbd9e0bb0155c2eb848c2d8e83d6a97b4afffc7d4bd1a7219cfe3f9fb2ba7881b48a6394b9b32814ea8d26f7e5dc1b9fedb0286a38ef21d338a76eeb48f4fb6a0eb51b1bbcccf6af09efba8009bd2ba1591be67d67b06ac1350d6d58496ce1dff5086642d131dd1a906e579fd410e5ee20ec7d38cc7ee11fbe7ceb6b2857b21cef47debd4362d02f6f8ed3027ea96cc5c58f2522ffa6e193d9b8dd315e4441c08bc5078d0ebe73f8fac8fca2ac8c37f95d15f2dd13b473614025bd82942e21f4abe06cb9d304a4835efa77b0656050a2a0d945b0b62347a9de54a5e5cf27a0b0b22fff1ada12ac5e6332794987a7e1d309da0e0161f1db47107f57c989b59b9011babfe72beeb74566e3dc23c2ca806d02bfcc9e61061a88a5b9e418052edbd12a92d6a67ec87046abfe42d41ce8a624035ca284a107507aeed9aaac8e9c0979fe4d0e93c66c0fe5613f28e93a678a1eb0c22262c22665f3da0c69e49ca2a82fadc0fec2dbdf96601550f0a65ae7537d50bcecc7ddfd2fcf8ff6ae46786fa346b6a2840e83f81ba13849599af1063fd546631e4fd8f836bdf3c644de179697d3efabfe8cd4a74005c5afd542314524734e25d6ac94a3b2b7f90d9c25177fdcb27a7d043f4cfa6466410c540535d8d757f7d9e64fa250de95784b82f47b878ec077d18c2ef4d7e3068678b4f3de4261b7e5de8b38bb01e844c0faac5c78ef834ea5f8d707989a998ca8ea95f7b68543da6496e0aab4545ede40da4a7efec64ac32f36d37ff8c34a4885e225a5b138260394afecaa773f46e4c5e48f2ff17b2957f765752d356eabf4bc011843b0af689048439fd04a77042df1dc99023defbd86f8907d24b88512ea80089becba451ef32fa93e49938201325f55f0a360d3690707b350a67a06111a5db6ed9323940f91f7de0dbdfda4cb5348a734a18fec704e8a627edb1bcea83facad474d9b4238f0efd529653c3e69751233081fae1224197cb467a7de72bd422551ac7036fc6dfd9ef8b6d1bd2e1923e32c787c5de7f5c69fd69729b172804d234c4e009ee74c534f9cf38cd4d66abdbe64aa13382003ed7cec6c99f72ffae20cbd9d59e8afe8e16497d5eabb0bfbdab1656d2925d879eebad050b4af59d7bdd9b88ab0df4e68ea9c75e689a2406d299d2ac7f5cd51e8d93294c9c6bc249ea9163f2e17d7d24f32320666d71f11b5bb7313caa2f84c3f7a4a072bcbbe01bd6b10ce005bccbd5dc045c52fdf2bd20eb7a36520a01b951749850650bc1204c9ac31a22a0c8b07f86d63aa37f1adcb80fff407627c2f2c0d0dde0672d4290d8a2c9271906e091a0b2110adc5410280c2824c1691e3f04472e5b1ed980445d29f7fc603da6306018f74d6687c45a50d414d39d49725e0d943239f230639c9d9d0526c3cc769839dbc3b2abe256f22e72f7314672a669735bb3cff4d29c83315db306c93a6db585c9451125399003ca9e6f3f0a8e2b4d8c461635e69d721e520723de7066ba202fc3070c8a01ff2048dee50085cad06376e0fdfbc29a3db608646f4a2521ea6372e08ceb8becc85c8a4685ea4c39ba7065a21f52b090dff72b99d5da6090b80283c26a4112ab2e0201de0fd455b4dff2116808df6184527a2761b9399c90ad1d84299acf971b0c7fb58e88e91c0d11b88b55fefd3d9d86d5f58c03d010c4a132b98bc55517ed6bd4b2d3a7b092c73cd5ec7a004b18ed27dc6146b428ae7034c290e37a18fef372c874605fed5b6a73b3670089728260ff74cb7289e032668bab9ef6a3b02ade004de952d18f9a0dd5756f3eb479ea89a403dca27dc205bb5c6a8cf26ab1229b365069c8aee6374b254ee7d7610057afa7872faec0c449d1918b146c1005c143a944ffe43556a5f83c989f7c3cf465fc9d16584db129d575c4bee84c25e7cafb578b1cb4305584d6557c73b1b85ba2457c4b4c287751b421c8357ef3b868c00f4c90a6e944fc314333059a22ae07461de6139f8dabab5d00c2d4d89011d02dda2e86810a0b9be61bfd723c11ccc40c2386dec9901fecdbfd8a8eed8e892f639b0f77f15143450cbaf435f6b13065d7d4a95bf09994b490a873f8bbb87e6c9e06dfd50d5cb0fa8ab871ee24158bda8e0ab493050f336a0ffc333422ede6c425f18bcc2ccb71ca565a298e7c7fd494175810a1268c2bf8a8a0fe7716115fcf463ea9cc1004d73f2b13fa50b1bb5d799aa2ef938a51b51f23dd7b9557ef14c7982bfa085b44825e0dcc2faf1f56a6124624e046e1f51b09132c806664633ed8e6bcfecb995f7ef7ac7bdf480aac1c2aca577e98d8dfbb098fe29beb45b8c2ed85425946e9bb6771efdf6f548b85399ef6421d9ea7cab7b552fb6352d8912f2809454e3ef2849e31662d6449b5c69bd46a6b9036eae04420bdc08f6062c8fd48a0d48011154f7a6c16867df030fcd139b043823b11d72bb3d5c4cd77f860f25310f5d6bb29f06dea7970aa9560c487efe0e0810746c6865d9b37d60617bed512f58a8a7a118de85f7721a4be9a21eb1451acd7815820ab829f078ce31a31d4fc81832cd384ce4ccebfd586dae1265c68ac7e0b0b02c43d85af5fe69b443bd44c7d0d6b53f3ea4f10799780e2a5e15197388790b57ae524b4c48977cea5c306c0e05672c999b384b516f891ffa528dd19628ac0db7e071184b2f8e66c4a655d3eb600b7e86187b5f244b52173b2a6c92a8d3cc988f5aa7fb153716a83b0ab9afae2af971d82dd116dad8f8402df05959524a66ba67ca3be63a73aec5c85ebbe56dfc1e6aceb2b35c907034cf3121b14af9e2d1fdc499c913e8deecbece3e955a1490cd4391456c36cf708ca579aa668386107097638c5abcafb3c45832582a4a5ba1f77020152526c6988aa0217d482e1468c69440a317ab45cf1b0923d23414ebf6124c8d2ab65b83d833d83944aa7acd12adf1d6d1982dd6733de42835f82fa7f8c531867c3ceb83e214e0aa0c00652473190605337444f0cbcdbb3d09ca58798b453bd80fcaf8b1efe07e44e8a572e2900f79955c5bc2d66156fb810f4e823480c46d0d045464ca8bd49981797dee7e19594424a2696d9dfc05a8952d77e5146873524cd78088d8d731089da66bde12fc2e67912ade6348a3de5e8760dde7c521371f4f5fbab5aef8672e6f8a20688be5e6acf8ca624c5bb92fe82abe508a9f1e773f987a11e711ded4347722d785be356ab7c03cc0c26586a6ba2f8c9de718dbf35fc0ad6f701f85f760b49c1570f114a4651f25573003ce8f90cdb152d33b5c69d8e83849d914acae1e18f1e5d0192419c36900e5f4b7d0b0b35e4869dc892b7e6091ddb03fc5e01c93f171b3f73eaf08399deee1159e0042755c985d2fbecd1aba1fe3b86cb60b16b65e5bbb0f7246035bbee2c7f3e82abd112261376d8a145e47c6792847c02fce040de6d5d9491531759a50ddaf59c8f489dd3fbe45be54ce9882c8937107160b2f07ab47eb6d8d74cb009e23cdd16f541b64ce127ae37929c802ca752fd2d2c2d8b014317310712eeeffc17706e43d5e2bd4c45d0bc897636dc5732a8798aed06a129650f95e6bb6069a4076261f2787103f30d286afb7a743e592539a9b5dc7d3aa88e6ef327e965b2afb93aae3cd4ac0be7082826d107f7318d281e8a1379ec0b27efc4bb50c592d71b24c31b7006a7d5cae4bf961e668aa09d636b46544762a5dc5ccf0ecfac3e1edeb995ff389384feb1bbc0f983520294ec215a8ad29a164f3a4c6719784615b5d368ffe3cd2143a889270a60685929185753e4bcc1c02f756cddc0580380634185ea6febafd13f73a06167dd20e46b7f1d63c60916ea89f95dda4e3b8d75bd3ccf70d843cd4d24839d103c076b3c94ddbcb96d4bcb1ee98030a40f50af2f3be245d8d4c9028ce43e8ff9766f4d4df3bf354254191b9d7e0a552b2db2521db880f2fe1c7849d5666978a7c6461d2bd03de1bc84efe513025b6aa0fe482de1f386ec4f59b3e7abc4e348870ac10699de5bae5b042a24afbba4aded80d6753bc773e7a1fdda1d01fc97f03099b6a2d4cf2a8829a5d108c35e1a03434092fcb9e28e7c9989b3b0bfea5b7faade5cce059848f5c5bb8e5eae9edeb018cad243d9b3f4ea6f318773cba6e16457801ce015c4994a70fa4aaeaf02d2c6e6289cb1f48fc916a69f51b7dd0613fc0a96530fe989712c89e6cdfd7910569edfd542dda48e4a5d3ebda61d4e30537f30d63b0d3927ab78563c48f538b30a3f4e176077a0e8730a2bf7ffe7ac310f93b78cb096839ba374ca54d7b5f2cdc2abdd9e07b254a798bd0037f098642b41f64987130f3ba5d51a3a0e9de8fcd5e12de75eaf2d69dbea101e899bd526d95f4c925f25eaba72103e4f4c76e00536d6366fc801e3e589da731eb957f0176d07ea8eaa1a5cbc182eb6802b78b713a325fcffc67062134e7331ea9ba85979d741272bae3c1d70f84ba3a6434f902dfa82d9eeae063623b847f23073f862faaa75e6e83fabda3b0b312d08e945015fd6ded12902e0e282fcefce0d8c7a514684cdc7768c37034c951d2c81fce3992a82d270cb1965ff4e08583ab2791f518267d2125fd95894d0496a7bb7b98040339d7aafe64a5e8112ef0b047839f96a48e13c3149be7fb9a0c94fd6eee8b9b01711addd641f803109d5218de4b604a8f5766e2403babeec2dc3b4fc73195edb225d892c44850498cc786545e27ddbdb0d7062f169fec9dbb23788938d6a54babeb719f34be30e4526acc7f903085ef3c443b6cfaccf055fd794b", 0x2000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000080), &(0x7f00000001c0), 0x2, 0x1) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r7, 0x80086303, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x20, 0x2}, {0x5, 0x0, 0x6}, {0x6, 0x6c, 0x5, 0x44ac}]}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000300)={0x1}) mkdir(&(0x7f00000003c0)='./file1\x00', 0x20) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='qnx4\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120150021b505f089911aa687ef90102030109022d00010700c00809040708034535980209050c10ff034e0686090502002000fd9180090506020800000608c7d8153ce9dda24ac08a90a29d967d0ada"], &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) 16m32.521192035s ago: executing program 4 (id=509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) 16m32.271050887s ago: executing program 4 (id=511): keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$pppl2tp(r2, &(0x7f0000002080)=@pppol2tpin6={0x27, 0x1, {0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x32) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xffffffffffffffff) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_io_uring_setup(0x10d0, &(0x7f0000000480)={0x0, 0x7737, 0x10, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$setsig(0x4203, 0x0, 0x6b82, &(0x7f0000000340)={0x3b, 0xb, 0x20000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) get_mempolicy(&(0x7f0000000000), 0x0, 0x100, &(0x7f0000131000/0x3000)=nil, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000540)='cpu.pressure\x00', 0x2, 0x0) r7 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_labels_list(r7, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x2) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='..0:\x00', 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000580)="659f961d8ff3ffb1b212cce4a25ab13045cf2fd1ac8d2199a39b2583585816239bebe36f6c1a75272aeaffa8207725909ec61f710e7ac46f493ee3ee4ba044888365ccfb5d49fef7dbad20819bc7ef067982eeaeb7dda7f6c80150547d32115619be1f996697a0fba205d832555748ee00a433fffb48ba4811ef92883460f011", 0x80}, {&(0x7f0000000900)="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", 0xe00}], 0x2) 16m31.13985101s ago: executing program 4 (id=517): mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000)=0x80000001, 0x800000000, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60030000000000000000000000000ffff00000000fe8000000000000000000000000000aa29"], 0x0) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000080)=0x7, 0x4) unshare(0x8000000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x1) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@l2={0x1f, 0x0, @any, 0xf001}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)="ff", 0x1}], 0x1}, 0x480c0) 16m30.882866585s ago: executing program 4 (id=518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000001c0)={'pimreg1\x00', @local}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x1, 0xa}, {0x4}]}]}, {0x0, [0x61, 0x0, 0x0, 0x61]}}, &(0x7f00000000c0)=""/158, 0x3a, 0xa4, 0x1, 0x0, 0x0, @void, @value}, 0x19) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x0, 0xffffffffffffffff}}, './file0\x00'}) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x80) ioctl$CEC_DQEVENT(r4, 0xc0506107, &(0x7f0000000080)={0x0, 0x0, 0x0, @raw}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0045543, &(0x7f0000000d40)=0xfdfdffff) futex_waitv(&(0x7f0000001b80)=[{0x0, 0x0, 0x2}, {0x800, 0x0, 0x2}, {0x8, 0x0, 0x82}, {0x2, 0x0, 0x82}, {0x1afc, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0xc0, 0x0, 0x82}, {0x5, 0x0}, {0x7fffffff, 0x0, 0x2}, {0x100000001, 0x0, 0x82}, {0xb, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0xc18, 0x0}, {0x2000000000000, 0x0, 0x2}, {0x240730ae, 0x0, 0x82}, {0x1ff, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x100000001, 0x0, 0x2}, {0x401, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x40, 0x0, 0x2}, {0x3, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0xe9, 0x0, 0xc3}, {0x1, 0x0, 0x2}, {0xffff, 0x0, 0x2}, {0xeb, 0x0, 0x82}, {0x80000000, 0x0, 0x2}, {0xfff, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x3, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0xfffffffffffffff9, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x9, 0x0, 0x2}, {0x2c1782c6, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0x166, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0xff, 0x0, 0x2}, {0xfff000000000000, 0x0, 0x41}, {0x8, 0x0, 0x82}, {0x1825, 0x0, 0x2}, {0x3, 0x0}, {0x8000000000000000, 0x0, 0x2}, {0x100, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0xff, 0x0, 0x82}], 0x36, 0x0, &(0x7f0000002540), 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) 16m30.508820013s ago: executing program 4 (id=519): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r7, 0xc048aeca, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 16m30.32884561s ago: executing program 34 (id=519): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r7, 0xc048aeca, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12m1.899757498s ago: executing program 6 (id=1490): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x80000000, 0x0, 0x0, 0x3, 0x0, 0x10, 0x6, 0x0, 0x2, 0x0, 0x9}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0xff, 0x7, 0x0, 0x4, 0x0, 0xfffffffffffffff7}, {0x200000, 0xa, 0x21, 0x53, 0x0, 0x2, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x807c}], 0x3fb}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 12m0.881033499s ago: executing program 6 (id=1491): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000200)=0xf) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x200, 0x127e}}, 0x30) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = dup(r5) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40383d0c, &(0x7f0000000040)) read$FUSE(r2, &(0x7f0000000bc0)={0x2020, 0x0, 0x0}, 0x2020) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() write$FUSE_ATTR(r6, &(0x7f0000000300)={0x78, 0x0, r7, {0x16, 0x5, 0x0, {0x0, 0x9, 0x180000, 0x8, 0x6, 0x4, 0x7, 0x4, 0x0, 0x6000, 0x3, r8, r9, 0x30000000}}}, 0x78) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=']) 12m0.576632776s ago: executing program 6 (id=1494): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000000b000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001c000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000004000000632af8ff00000000b50900cfd5aaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc4020000080000001822000000000000", @ANYRES32=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 11m58.730382583s ago: executing program 6 (id=1499): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') 11m57.553773039s ago: executing program 6 (id=1507): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x800000000535, 0x82600) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/161) 11m57.431666308s ago: executing program 6 (id=1508): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f0000000000), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = gettid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000280)=r3) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x3e, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7, 0x0], 0x0, 0x0, 0x2}}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220efb0000ab426a9d84ab2a0d5954a714b83bc1"], 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000440)=@ethtool_sset_info={0x4b, 0x3, 0x7fff}}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4400046}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x100) connect$packet(r9, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) shutdown(r9, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) connect$vsock_stream(r4, &(0x7f0000000240)={0x28, 0x0, 0x2711, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r12}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x40}}, 0x0) 11m41.201934541s ago: executing program 35 (id=1508): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f0000000000), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = gettid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000280)=r3) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x3e, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7, 0x0], 0x0, 0x0, 0x2}}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220efb0000ab426a9d84ab2a0d5954a714b83bc1"], 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000440)=@ethtool_sset_info={0x4b, 0x3, 0x7fff}}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4400046}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x100) connect$packet(r9, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) shutdown(r9, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) connect$vsock_stream(r4, &(0x7f0000000240)={0x28, 0x0, 0x2711, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r12}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x40}}, 0x0) 7m17.272338115s ago: executing program 8 (id=2499): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/115, 0x73}], 0x1, 0x3, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) gettid() madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {0x0, 0x4108}}}, 0x1c}, 0x1, 0x0, 0x0, 0x101}, 0x24000040) shutdown(0xffffffffffffffff, 0x1) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x34000, 0x0) 7m15.718063307s ago: executing program 8 (id=2501): socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x101) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r5, 0x4bfa, &(0x7f0000000080)) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000a0000000000000000016000100100000000000", @ANYRES32=r4, @ANYBLOB="000000000100"/28]) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)) 7m14.841373416s ago: executing program 8 (id=2505): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0xf51) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='1\x00'/12, @ANYRES32, @ANYBLOB="c61d350a400274f900d67c5c65e92b9436e10da3f02e069f261f2e519de1cfa99c15ff773e76a2553ad6e07e30ab44518d4e189961f78d8b77b35f", @ANYRES64=0x0], 0x20) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$llc(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1}, 0x61) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000580)={{r3, r4/1000+10000}, {0x0, 0xea60}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='net_prio.prioidx\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x100000002) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) 7m12.372131567s ago: executing program 8 (id=2512): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_emit_ethernet(0x96, &(0x7f00000003c0)={@broadcast, @random="083c451a8fc6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x60, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}]}}}}}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100bd9100000000000006241a00001008241c0000000000090581030002000000090401"], 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001500010d0000000000126f58c06f3653"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000480)=0x19) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa8022, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f93b2938f8d2a9000070900be00830700000057a90da1f60b00000400"], 0x0}, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="59b55a810bc84041ce91a3c88ccdc485e09e3d4a584a6978d94bbf89eacb94", 0x1f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)}}], 0x2, 0xc8000) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000100)=""/95) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 7m9.414025699s ago: executing program 8 (id=2525): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x8000, 0x8, 0xe2, 0x4, {{0x2f, 0x4, 0x2, 0x3, 0xbc, 0x67, 0x0, 0x8, 0x29, 0x0, @remote, @empty, {[@cipso={0x86, 0x65, 0x3, [{0x2, 0x3, "ee"}, {0x6, 0x12, "3702f282dee2d2d7634cad8f71dd74cf"}, {0x0, 0x4, '\"9'}, {0x7, 0x9, "74044787bdfb7a"}, {0x5, 0xd, "f79e6d77971be2715f8ebe"}, {0x0, 0x12, "973f9f4bf99e345436b368f52e4571a6"}, {0x7, 0xd, "ceb7827bace1103c7351ac"}, {0x5, 0x11, "32d4e566210837cc1da73801104530"}]}, @timestamp_addr={0x44, 0x2c, 0x98, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x8001}, {@loopback, 0x2}, {@multicast1, 0x200}, {@local, 0x6}, {@private=0xa010101, 0x7fffffff}]}, @timestamp={0x44, 0x14, 0xd9, 0x0, 0x1, [0x800, 0x148, 0x1, 0x5]}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e00000003000000010400000004000010400200", @ANYRES32=r0, @ANYBLOB="080000ebffffffffffffff000000000000000000a9cdea30450ba89c41a3cdfb27a58f2ce4514c9b864dfa679463d146d57e37923324269fe1e993f64b684178c93851244ef00b30f4123116b89b6d41df7437ae764c5ce5fbe9baca869a212ab71506ad2586e163964c565e556aae8d3f23c6b0b34a6f4d9dd4cdf1e5a847151818725a0f9d1a35945f7335d4c5574857a2c2fd3550bb97", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500000002000000020000000100"/28], 0x50) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0xc8df, 0x4, [0x2]}) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @private, @empty, @loopback}}}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27050200d40f00000600002f8847", 0xe}], 0x1}, 0x0) 7m9.262959706s ago: executing program 8 (id=2526): bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='.\x00'/12, @ANYRES32, @ANYBLOB="ee787914dc014495758f515befc4f90defeb7122bf180f6f42f3a6eff6cdfb9195b4ce6258a6ea3ed352367bfdb219c1b250db03cbe90456e2b694777865b2d0131c803beac3c8b9064440c6b93406de0816ca536725fac03f750eb57402379f3207af0b7100"/112, @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xfffffffd, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000000, 0x20010, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socket(0x1d, 0x6, 0xbc) close_range(r3, 0xffffffffffffffff, 0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000001d40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @local, 0x4}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000180)='\ru', 0x2}], 0x1}}], 0x1, 0x24008040) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000000), 0x8) 7m9.086641556s ago: executing program 36 (id=2526): bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='.\x00'/12, @ANYRES32, @ANYBLOB="ee787914dc014495758f515befc4f90defeb7122bf180f6f42f3a6eff6cdfb9195b4ce6258a6ea3ed352367bfdb219c1b250db03cbe90456e2b694777865b2d0131c803beac3c8b9064440c6b93406de0816ca536725fac03f750eb57402379f3207af0b7100"/112, @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xfffffffd, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000000, 0x20010, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socket(0x1d, 0x6, 0xbc) close_range(r3, 0xffffffffffffffff, 0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000001d40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @local, 0x4}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000180)='\ru', 0x2}], 0x1}}], 0x1, 0x24008040) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000000), 0x8) 12.392827743s ago: executing program 7 (id=4020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="309e7bc0a57f9e03880000006b4945c2d762749b0a9aac987b4964f307ef7f713fdb9a71efd1017061951c07e3952fe5d04e9cc49e68e090d84aa901c296a582eb981c95de603079224f4fdc51c091e0503110914694b86a0000", @ANYRES16=r4, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32, @ANYBLOB="0a00060008021100000100000600be005c0b0000"], 0x30}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xe) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, 0x0) ioctl$PPPIOCGFLAGS1(r7, 0x4020744f, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x100) r8 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000080)={0x6000000a}) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000007564af21d048896000000000000000b"], 0x14}, 0x1, 0x0, 0x0, 0x44881}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) rt_tgsigqueueinfo(0x0, r0, 0x24, &(0x7f00000002c0)={0x17, 0xad, 0x7fffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r9, 0x0, 0x0) 11.255940759s ago: executing program 7 (id=4024): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x43, 0x2, @thr={&(0x7f00000003c0)="0d0331c6f925179d959aff467f53ac24bb7c2a563355c7d35c2751c7602f35ed8127bfd7ce9fd089344b678a8be6f274543c2cc4bae7c888e2393cb43bb17d23036d99c8718f1083ccce6007333290a0bd57dbfe56ad4d66e6087dc3a6ee788474eafec759a0aaafb80e58fde1a0541db9a8669916a1c3123ee2d8217e8725c7e6aa0260e7cf46867c780f28e5bd0e17c41a58259fab1881733010713aa81d967ff6f32202509f3299c270ce920370a124238c418fd3fb0af92b7df929a0f83278c119b958e0012a46413af42c9311815404df910956", &(0x7f0000000300)="3be1a089e28366fd940c426223c5ce0ef6331427b081f4b9fcae36fc8061706453eccc3e8a5d2cf828599e052a12df74c02607c5e5beb15268da0600dc518d4a925d90d42ca4ac842c6d2bc7edbc0f53f665220e4c24a08f2e056a1da57ae657a9b886bda37945db950fd8cba16502d95fa22a50c84a89b3dee33495ba2ab8d8"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, {0xa, 0x0, 0x4, @mcast2}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) r6 = socket$rxrpc(0x21, 0x2, 0xa) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) ioctl$int_in(r6, 0x5452, &(0x7f00000002c0)=0x8) 8.25670037s ago: executing program 2 (id=4039): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) gettid() 8.06556039s ago: executing program 9 (id=4041): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r3}, &(0x7f0000044000)=0x0) timer_settime(r4, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) timer_delete(r4) gettid() r5 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000800100000000000000000000006ac6acd41ff80000"], 0x48}}, 0x20000400) sendmsg$can_bcm(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000640)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="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"], 0x38}}, 0x0) r8 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r9 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r12}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x1, &(0x7f0000000100)=[r5, r1, r6, r8, r2, r1, 0xffffffffffffffff, r1, r2], 0x9, 0x0, 0x1, {0x0, r12}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r13, 0x0) pwritev(r0, &(0x7f0000000600)=[{0x0}], 0x1, 0x0, 0x0) 7.499122898s ago: executing program 2 (id=4043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x3, &(0x7f0000000180)=[{0x4d, 0x2f}, {0x4d, 0x2}, {0x6, 0x10}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x0, 0x30, 0x4, "9d800fca"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000300)={0x0, 0x0, 0x9, 0x0, 0x0, [], [0x9, 0x0, 0x0, 0x8], [0x3, 0x0, 0x100, 0xd], [0x1000000000000, 0x0, 0xfffffffffffffffd]}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2084) writev(r3, &(0x7f0000002100)=[{&(0x7f0000002200)="4bcf5415c0805385038e122100000000f47160ffb0a3776bce03f97a2bb3010000000000000002bdabbfc206671a7f90", 0x30}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x13, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) gettid() 7.074272739s ago: executing program 7 (id=4045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x7ce) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000009c0)={0x1d, r8, 0x2, {0x0, 0xff, 0x1}, 0x2}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r7) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newtfilter={0x3c0, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2, 0x5}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x390, 0x2, [@TCA_FLOW_EMATCHES={0x38c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x354, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xfe17, 0x7, 0x6}, {{0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1bb, 0x1, 0x96b}, {0x1, 0xc, 0x27, 0x4, 0xf, 0x1, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x60b, 0x8, 0x2}, {0x3, 0x2, 0xb12d585e4b96182d}}}, @TCF_EM_META={0xf0, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x0, 0x2}, {0xffff, 0x5, 0x5}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="425193ed66ba", @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="56e23a4ed2086e5dca", @TCF_META_TYPE_VAR='5z', @TCF_META_TYPE_VAR="0a87142db07d1e4f"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x26, 0x7}, {0x8000, 0x1, 0x2}}}, @TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR='\a$', @TCF_META_TYPE_VAR="a6cdef5e93", @TCF_META_TYPE_VAR="43105ab4fb", @TCF_META_TYPE_VAR="3f80dc2a1d6bd1"]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_VAR="5eb8480ade49", @TCF_META_TYPE_VAR="fab3ea7cf98c4446", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff, 0xbc, 0x2}, {0x7fff, 0x5}}}, @TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="763c30e96d8c5337f5", @TCF_META_TYPE_VAR="e7a4aa415e4fa617cc", @TCF_META_TYPE_VAR="bea76f", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR='x']}, @TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="803b657e46", @TCF_META_TYPE_VAR="83", @TCF_META_TYPE_VAR="66966c5ce6a60b", @TCF_META_TYPE_VAR="bc"]}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2ee, 0x1, 0x2}, {0x1ff, 0x6, 0x7, 0x4, 0xf, 0x0, 0xfbfd5c28275d6a1f}}}, @TCF_EM_CONTAINER={0x98, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x2}, "7cb1df13fc51c27baeea6f4250eb9a5c61cdf52549c900369f53d8a00ad7fef89942e16e90954faa38321dd8756517899cc18c1c7e6c7667fcda9b40fdc690c564f1da306ab4f3697a9bb2090b2ec8cf26c5a3fb6ec724d2dd3811d0e0375dfeaa6d591f102da71096dbf126e27912d6bedc081036c0a8275583503c572cee9a6e6fbac5b6354c53e9a4ef"}}, @TCF_EM_CONTAINER={0xd8, 0x2, 0x0, 0x0, {{0x2, 0x0, 0xe1}, "ea6ec8e6c64520d9eeacc79aa5a6a02b58f9a720c3834e677617b290315a5d09a4fd1e45372048ca050ad8b6a1dae8ac00aa854c2ba760eb46a28e9b3ef3be79e81286a61fa829a31d9c01168427d7706c5750b30a22fee88c7dd03ebb1385221ace33f352f8f444cad392a171279a76f78f6b0c7ef04d505fdd6dbc82f1b9cb3d2e761f2f02bd76a92560d4c1029db54a4a08f17a28b6be6318d873bb3f06fa6502ab4243d48b01d80f818180493bbb2cdace14752e9c01e8f00ec64446dd6471db394d3a913c728e"}}, @TCF_EM_CANID={0x14, 0x7, 0x0, 0x0, {{0xfff7, 0x7, 0x4f89}, {{0x4, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_META={0x74, 0x2, 0x0, 0x0, {{0xd, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="36069538e2", @TCF_META_TYPE_VAR='m', @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3bfe, 0x9, 0x2}, {0x5, 0x2}}}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="2e67ed9485"]}, @TCA_EM_META_RVALUE={0x33, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='6', @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="bc1ae98f55e05179", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="dd9083f6946a3aef", @TCF_META_TYPE_VAR="248d55c060947d9afe37", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x3, 0x1}, {0x8, 0x8, 0x2}}}]}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xd, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xa}]}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x4000804}, 0x20040054) 6.088582044s ago: executing program 7 (id=4046): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYBLOB="c70a23c2066f4334ccbc8171e5ff1d2b9d724d37ba4e", @ANYRES16=0x0], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="07000000010000", 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000140001060006000000ffffff11000000"], 0x14}}, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000400)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) syz_extract_tcp_res(&(0x7f0000000300), 0x5, 0x81) syz_emit_ethernet(0x268d, &(0x7f0000002c40)=ANY=[@ANYBLOB="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"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r5) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="b8", 0x1, 0x2000c850, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @mcast1, 0xffffffff}, 0x1c) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r10, @ANYRES32=r8, @ANYBLOB="1200000006"], 0x10) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000002030300000000000400000000000002080003400000000008000340fffffffe0800034000000000080001000100000008000540000000000800044000000006"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.452927083s ago: executing program 1 (id=4051): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x40, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0xc000) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, 0x0) socket(0x18, 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.766809062s ago: executing program 2 (id=4053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x483, 0x44000102, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x8f0, 0x6a0, 0x6a0, 0xffffffff, 0x250, 0x6a0, 0x820, 0x820, 0xffffffff, 0x820, 0x820, 0x5, &(0x7f0000000240), {[{{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x41, 0x4d}}, @common=@rt={{0x138}, {0x2, [0x2, 0x2], 0x9, 0x1, 0x3, [@local, @empty, @remote, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @dev={0xfe, 0x80, '\x00', 0x2c}, @mcast2, @empty, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @remote, @private1={0xfc, 0x1, '\x00', 0xf9}], 0x7}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @gre_key=0xb, @port=0x1}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xff000000, 0x0, 0xff, 0xff000000], [0x0, 0xffffffff, 0xffffff00, 0xffffff00], 'ip6_vti0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x33, 0xb9, 0x0, 0x4c}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x44c51b896e910e1b, @ipv4=@multicast1, @ipv6=@remote, @icmp_id=0x64, @gre_key=0x17d5}}}, {{@uncond, 0x0, 0x318, 0x360, 0x0, {}, [@common=@rt={{0x138}, {0x5, [0x7, 0x7], 0x1, 0x30, 0x4, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @empty}, @empty, @mcast1, @local, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @local]}}, @common=@rt={{0x138}, {0x7fff, [0x0, 0x5], 0x4, 0x1, 0x4, [@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @mcast1, @remote, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @remote, @local, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @private1], 0x2}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1a, @ipv6=@remote, @ipv6=@mcast2, @gre_key=0x3ff, @icmp_id=0x65}}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0x0, 0xff, 0xff000000, 0xffffff00], [0xff, 0xff000000, 0xff000000], 'syzkaller0\x00', 'ipvlan1\x00', {}, {}, 0x3b, 0x5, 0x5, 0x12}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x5e, 0x6, 0x7f, 0x4, 0xfffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @remote, [0xff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff, 0xff000000, 0xffffff00], [0xff, 0xff000000, 0xffffff00, 0xffffff00], 0x20, 0x43}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x12, @ipv6=@private1, @ipv4=@empty, @gre_key=0x9, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x950) rmdir(&(0x7f00000000c0)='./file0\x00') 4.207202946s ago: executing program 5 (id=4054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x6080, 0x60) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[], 0x6c}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x7e, @loopback, 0x6}, 0x1c) r4 = socket$inet(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000000)={0x2, 0x2e24, @empty}, 0x10) close(r4) syz_genetlink_get_family_id$devlink(0x0, r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x0) pread64(r3, &(0x7f00000002c0)=""/236, 0xec, 0x1) syz_emit_ethernet(0x3e, 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) recvmmsg$unix(r5, 0x0, 0x0, 0x34000, 0x0) 4.063106937s ago: executing program 5 (id=4055): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x43, 0x2, @thr={&(0x7f00000003c0)="0d0331c6f925179d959aff467f53ac24bb7c2a563355c7d35c2751c7602f35ed8127bfd7ce9fd089344b678a8be6f274543c2cc4bae7c888e2393cb43bb17d23036d99c8718f1083ccce6007333290a0bd57dbfe56ad4d66e6087dc3a6ee788474eafec759a0aaafb80e58fde1a0541db9a8669916a1c3123ee2d8217e8725c7e6aa0260e7cf46867c780f28e5bd0e17c41a58259fab1881733010713aa81d967ff6f32202509f3299c270ce920370a124238c418fd3fb0af92b7df929a0f83278c119b958e0012a46413af42c9311815404df910956", &(0x7f0000000300)="3be1a089e28366fd940c426223c5ce0ef6331427b081f4b9fcae36fc8061706453eccc3e8a5d2cf828599e052a12df74c02607c5e5beb15268da0600dc518d4a925d90d42ca4ac842c6d2bc7edbc0f53f665220e4c24a08f2e056a1da57ae657a9b886bda37945db950fd8cba16502d95fa22a50c84a89b3dee33495ba2ab8d8"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, {0xa, 0x0, 0x4, @mcast2}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) r5 = socket$rxrpc(0x21, 0x2, 0xa) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) ioctl$int_in(r5, 0x5452, &(0x7f00000002c0)=0x8) 4.062659969s ago: executing program 9 (id=4056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 4.009461128s ago: executing program 5 (id=4057): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, r0, 0x0) 3.892747275s ago: executing program 7 (id=4058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001640), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x4e}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x101}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x101}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x44, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x4}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x8}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x7f}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x2}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0xfc}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x45}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0xb9}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0xd23}]}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xe7}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001680)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x110, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffd}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x110}}, 0x10000080) 3.452271988s ago: executing program 7 (id=4059): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) 3.405363075s ago: executing program 2 (id=4060): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(0x0, &(0x7f0000000180)=[{}, {}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_udp(0x2, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x70bd2c, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001300050000000000fcffffff07000017", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c000880"], 0x34}}, 0x10) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) 3.404691713s ago: executing program 1 (id=4061): add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x3c}}, 0x0) 3.247460479s ago: executing program 1 (id=4062): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '-lR\x9fG\x85e\xc2jAu*x\x8c-\x91\xa4+\xb0\x1a\x82\xaa\xa66t\x95\x9d\xf2\'\xd3\x00aBL'}]}, 0x2e) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="00000c37d7ac"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400000, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000340)={{0x77359400}, {r5, r6/1000+60000}}, 0x0) getitimer(0x2, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, 0x0, 0x6, {0x0, 0x1}}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='jfs\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) 2.712883232s ago: executing program 5 (id=4063): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x144, r5, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x120, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x40) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = socket(0x23, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f00000005c0)={0x8212}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="b805000000b9fd7ef9640f01d9c74424001f000000c544240246000000c7442406000000000f011424c4c22da98c70a664e0a80f209274cc000000100166baa100b804000000ef3667f30f1ef8dbe10f01c4b8e27900000f23d80f21f8e0a576d5282823f8", 0x65}], 0x1, 0x23, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 2.610098189s ago: executing program 1 (id=4064): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1080, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.545006261s ago: executing program 9 (id=4065): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) readv(r0, &(0x7f00000014c0), 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000140)=0x2, 0x4) 2.406968531s ago: executing program 2 (id=4066): mmap(&(0x7f000013a000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007e8000/0x4000)=nil, 0x4000) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2.40627053s ago: executing program 1 (id=4067): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x43, 0x2, @thr={&(0x7f00000003c0)="0d0331c6f925179d959aff467f53ac24bb7c2a563355c7d35c2751c7602f35ed8127bfd7ce9fd089344b678a8be6f274543c2cc4bae7c888e2393cb43bb17d23036d99c8718f1083ccce6007333290a0bd57dbfe56ad4d66e6087dc3a6ee788474eafec759a0aaafb80e58fde1a0541db9a8669916a1c3123ee2d8217e8725c7e6aa0260e7cf46867c780f28e5bd0e17c41a58259fab1881733010713aa81d967ff6f32202509f3299c270ce920370a124238c418fd3fb0af92b7df929a0f83278c119b958e0012a46413af42c9311815404df910956", &(0x7f0000000300)="3be1a089e28366fd940c426223c5ce0ef6331427b081f4b9fcae36fc8061706453eccc3e8a5d2cf828599e052a12df74c02607c5e5beb15268da0600dc518d4a925d90d42ca4ac842c6d2bc7edbc0f53f665220e4c24a08f2e056a1da57ae657a9b886bda37945db950fd8cba16502d95fa22a50c84a89b3dee33495ba2ab8d8"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, {0xa, 0x0, 0x4, @mcast2}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) r5 = socket$rxrpc(0x21, 0x2, 0xa) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) ioctl$int_in(r5, 0x5452, &(0x7f00000002c0)=0x8) 1.746522362s ago: executing program 9 (id=4068): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002300000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.74611949s ago: executing program 2 (id=4069): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() write$P9_ROPEN(r5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902900003010000000904000000010100000a240100000002010211240600000500000000000000000000000b2407000000002e387cf009040100000102000009040101010102000009050109000000008007250100000000090402000001020000090402010101020000072401000003000e2402030e000000f5138d22419e0905820940"], 0x0) 1.198681475s ago: executing program 5 (id=4070): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x104, 0x2, 0x3f0, 0x1f8, 0x308, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00', {}, {0xff}}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @loopback, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) r6 = dup3(r3, r2, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r7 = fanotify_init(0x28, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r11 = dup(r10) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r11, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) r12 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r12, &(0x7f0000000080)=[{&(0x7f0000000340)="a1", 0x1}], 0x1, 0x200, 0x7, 0x4) fanotify_mark(r7, 0x41, 0x8000038, r8, 0x0) 1.197792087s ago: executing program 1 (id=4071): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() write$P9_ROPEN(r5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902900003010000000904000000010100000a240100000002010211240600000500000000000000000000000b2407000000002e387cf009040100000102000009040101010102000009050109000000008007250100000000090402000001020000090402010101020000072401000003000e2402030e000000f5138d22419e0905820940"], 0x0) 1.118639741s ago: executing program 9 (id=4072): socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x20, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgid(0x0) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2d, 0x0, @tid=r1}) r2 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0xfffd, @multicast1}, 0x10) mount$tmpfs(0x0, 0x0, 0x0, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='befs\x00', 0x1f00, &(0x7f0000000340)) 67.139354ms ago: executing program 9 (id=4073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a34000000030a010300000010aba647ba017d000100000000000000000108000540fffffffb0900010073797a3000000000140000001100010000000d00000000000200000a"], 0x5c}}, 0x0) r1 = timerfd_create(0x4, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0x0, 0x5}]}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040)) 0s ago: executing program 5 (id=4074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="309e7bc0a57f9e03880000006b4945c2d762749b0a9aac987b4964f307ef7f713fdb9a71efd1017061951c07e3952fe5d04e9cc49e68e090d84aa901c296a582eb981c95de603079224f4fdc51c091e0503110914694b86a0000", @ANYRES16=r4, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32, @ANYBLOB="0a00060008021100000100000600be005c0b0000"], 0x30}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xe) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r7, 0x4020744f, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) r8 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000080)={0x6000000a}) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000007564af21d048896000000000000000b"], 0x14}, 0x1, 0x0, 0x0, 0x44881}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) rt_tgsigqueueinfo(0x0, r0, 0x24, &(0x7f00000002c0)={0x17, 0xad, 0x7fffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r9, 0x0, 0x0) kernel console output (not intermixed with test programs): 1326 audit(1739339209.855:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16396 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fbac7d8cde9 code=0x7ffc0000 [ 968.670820][ T29] audit: type=1326 audit(1739339210.987:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16422 comm="syz.2.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804df8cde9 code=0x7ffc0000 [ 969.195587][ T29] audit: type=1326 audit(1739339210.997:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16422 comm="syz.2.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804df8cde9 code=0x7ffc0000 [ 969.358797][ T29] audit: type=1326 audit(1739339210.997:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16422 comm="syz.2.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f804df8cde9 code=0x7ffc0000 [ 970.505176][T10751] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 970.814994][T10751] usb 3-1: Using ep0 maxpacket: 16 [ 970.825099][T10751] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 970.836923][T10751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.845059][T10751] usb 3-1: Product: syz [ 970.849497][T10751] usb 3-1: Manufacturer: syz [ 970.865260][T10751] usb 3-1: SerialNumber: syz [ 972.042639][T10751] r8152-cfgselector 3-1: Unknown version 0x0000 [ 972.063109][T10751] r8152-cfgselector 3-1: config 0 descriptor?? [ 972.714801][T10738] r8152-cfgselector 3-1: USB disconnect, device number 99 [ 972.892293][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 974.024032][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3159'. [ 976.012757][T16525] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 976.025011][T16525] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 976.328517][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 976.328551][ T29] audit: type=1326 audit(1739339218.143:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.9.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 976.427685][ T29] audit: type=1326 audit(1739339218.180:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.9.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 976.524566][ T29] audit: type=1326 audit(1739339218.321:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.9.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 976.651533][ T29] audit: type=1326 audit(1739339218.321:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.9.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 976.677581][ T29] audit: type=1326 audit(1739339218.340:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.9.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 976.706113][ T29] audit: type=1326 audit(1739339218.340:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.9.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 977.091177][ T29] audit: type=1326 audit(1739339218.340:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.9.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 977.278609][ T29] audit: type=1326 audit(1739339218.349:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.9.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 977.316092][ T29] audit: type=1326 audit(1739339218.349:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.9.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 977.347192][ T29] audit: type=1326 audit(1739339218.368:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.9.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 979.025066][T16563] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 979.037958][T16563] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 979.357610][T10738] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 979.517737][T10738] usb 6-1: device descriptor read/64, error -71 [ 979.808022][T10738] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 979.956232][T10738] usb 6-1: device descriptor read/64, error -71 [ 980.074270][T10738] usb usb6-port1: attempt power cycle [ 980.575940][T10738] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 980.650646][T10738] usb 6-1: device descriptor read/8, error -71 [ 980.928729][T10738] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 980.971325][T10738] usb 6-1: device descriptor read/8, error -71 [ 981.089286][T10738] usb usb6-port1: unable to enumerate USB device [ 983.301761][T16604] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 983.313981][T16604] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 984.229368][T16613] tipc: Started in network mode [ 984.245887][T16613] tipc: Node identity e28a3847dc91, cluster identity 4711 [ 984.271535][T16613] tipc: Enabled bearer , priority 0 [ 984.378285][T16616] 9pnet_fd: Insufficient options for proto=fd [ 984.492638][T16614] syzkaller0: entered promiscuous mode [ 984.627331][T16614] syzkaller0: entered allmulticast mode [ 984.647723][T16614] tipc: Resetting bearer [ 984.735915][T16612] tipc: Resetting bearer [ 985.332877][ T5842] tipc: Node number set to 1041971271 [ 985.489935][T16630] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3204'. [ 985.569330][T16632] /dev/sg0: Can't lookup blockdev [ 987.442297][T16649] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 987.453844][T16649] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 990.045432][ T5873] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 990.221425][ T5873] usb 2-1: config 0 has an invalid interface number: 61 but max is 0 [ 990.230210][ T5873] usb 2-1: config 0 has no interface number 0 [ 990.236457][ T5873] usb 2-1: New USB device found, idVendor=07ca, idProduct=1871, bcdDevice=ee.3a [ 990.245766][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.262135][ T5873] usb 2-1: config 0 descriptor?? [ 990.533245][T16664] program syz.1.3214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 990.555106][T10758] usb 2-1: USB disconnect, device number 35 [ 990.727936][T16612] tipc: Disabling bearer [ 993.447209][ T5842] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 993.652214][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.667636][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.680113][ T5842] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 993.699859][T16700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3226'. [ 993.840806][T16701] /dev/sg0: Can't lookup blockdev [ 993.864452][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.905004][ T5842] usb 3-1: config 0 descriptor?? [ 994.346755][ T5842] sony 0003:054C:024B.0034: unexpected long global item [ 994.378860][ T5842] sony 0003:054C:024B.0034: parse failed [ 994.384989][ T5842] sony 0003:054C:024B.0034: probe with driver sony failed with error -22 [ 994.611066][ T5842] usb 3-1: USB disconnect, device number 100 [ 995.708508][T16713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3229'. [ 999.199136][T10751] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 999.626276][T10751] usb 3-1: Using ep0 maxpacket: 8 [ 999.861450][T10751] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.882878][T10751] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 999.892029][T10751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.141096][T10751] usb 3-1: config 0 descriptor?? [ 1001.151537][T10751] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1001.209070][T14611] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1001.391705][T14611] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1001.405720][T14611] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1001.416108][T14611] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1001.425795][T14611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.445436][T16766] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1001.456375][T14611] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1002.529868][T16779] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-61) [ 1002.830017][T16784] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3250'. [ 1003.033239][T16792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3251'. [ 1003.138393][T16793] /dev/sg0: Can't lookup blockdev [ 1003.251643][T16747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.283997][T16747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.397939][ T5842] usb 3-1: USB disconnect, device number 101 [ 1004.085792][T10751] usb 2-1: USB disconnect, device number 36 [ 1006.798579][T10756] IPVS: starting estimator thread 0... [ 1006.917271][T16836] IPVS: using max 20 ests per chain, 48000 per kthread [ 1007.606199][T14611] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1007.793878][T14611] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1007.820907][T14611] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1007.867793][T14611] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1007.937951][T14611] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1008.734666][T14611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.742700][T14611] usb 2-1: Product: ,윻柵퓠îˆî³“⇵꾒â²âŸ‡é³‘íŒ£í•³íŸæ¯¥å• [ 1008.777673][T14611] usb 2-1: Manufacturer: 嗃䴴廪ᰟ炄䳆뤥簙⭬ᱬ䰰燎全륗陶䡞䦂è‘쌈崌ꎮáŸã·Šä™›ï¡¦ï¨¯è–°ã²Žê¨é¥å¨™ê«’í’¢î››ä–•ãŸæ›‚ [ 1008.835382][T14611] usb 2-1: SerialNumber: Ñ [ 1010.081948][T16829] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1010.339532][T14611] cdc_ncm 2-1:1.0: bind() failure [ 1010.621810][T14611] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1010.654154][T14611] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1010.704026][T14611] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1010.746906][T14611] usb 2-1: USB disconnect, device number 37 [ 1011.735513][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1011.735526][ T29] audit: type=1326 audit(1739339251.247:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16866 comm="syz.9.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1011.783415][T16870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3272'. [ 1012.082346][ T29] audit: type=1326 audit(1739339251.247:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16866 comm="syz.9.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1012.203512][ T29] audit: type=1326 audit(1739339251.256:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16866 comm="syz.9.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1012.285270][ T29] audit: type=1326 audit(1739339251.350:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16866 comm="syz.9.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1012.454070][ T29] audit: type=1326 audit(1739339251.350:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16866 comm="syz.9.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1012.476055][ T29] audit: type=1326 audit(1739339251.509:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.9.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f32463bf6a5 code=0x7ffc0000 [ 1012.725703][ T29] audit: type=1326 audit(1739339251.658:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.9.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1012.867413][ T29] audit: type=1326 audit(1739339252.304:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16866 comm="syz.9.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1012.989511][ T29] audit: type=1326 audit(1739339252.351:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16866 comm="syz.9.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1013.073193][ T29] audit: type=1326 audit(1739339252.351:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16866 comm="syz.9.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1014.283047][T15397] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1014.292746][T15397] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1014.301247][T15397] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1014.309701][T15397] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1014.318399][T15397] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1014.326439][T15397] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1014.340188][T16909] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3285'. [ 1014.377360][T16907] wlan0 speed is unknown, defaulting to 1000 [ 1014.394767][T16909] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3285'. [ 1014.430743][T16907] »»»»»» speed is unknown, defaulting to 1000 [ 1015.054348][T16907] chnl_net:caif_netlink_parms(): no params data found [ 1015.377434][T16907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.414478][T16907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.457603][T16907] bridge_slave_0: entered allmulticast mode [ 1015.498334][T16907] bridge_slave_0: entered promiscuous mode [ 1015.545277][T16907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.555562][T16907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.579236][T16907] bridge_slave_1: entered allmulticast mode [ 1015.597323][T16907] bridge_slave_1: entered promiscuous mode [ 1015.658769][T16907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.693595][T16907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.925823][T16907] team0: Port device team_slave_0 added [ 1015.954185][T16907] team0: Port device team_slave_1 added [ 1016.033018][T16907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.044119][T16907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.072172][T16907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.097288][T16907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.109285][T16907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.135191][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.152511][T16907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.207014][T16907] hsr_slave_0: entered promiscuous mode [ 1016.212694][ T5873] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1016.241798][T16907] hsr_slave_1: entered promiscuous mode [ 1016.248043][T16907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1016.268441][T16907] Cannot create hsr debugfs directory [ 1016.378992][ T5873] usb 10-1: Using ep0 maxpacket: 16 [ 1016.436270][ T5873] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1016.464727][ T5873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.503114][ T5873] usb 10-1: Product: syz [ 1016.507800][ T5873] usb 10-1: Manufacturer: syz [ 1016.512501][ T5873] usb 10-1: SerialNumber: syz [ 1016.517895][ T5136] Bluetooth: hci0: command tx timeout [ 1016.537259][ T5873] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1016.560285][ T5873] r8152-cfgselector 10-1: config 0 descriptor?? [ 1016.833192][ T5873] r8152-cfgselector 10-1: Needed 2 retries to read version [ 1016.855199][ T5873] r8152-cfgselector 10-1: Unknown version 0x5cf0 [ 1017.044364][T16907] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.081529][ T5873] r8152-cfgselector 10-1: bad CDC descriptors [ 1017.091420][ T5873] r8152-cfgselector 10-1: USB disconnect, device number 19 [ 1017.192682][T16907] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.290201][T16907] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.396713][T16907] netdevsim netdevsim2 ªªªªªª (unregistering): left allmulticast mode [ 1017.432540][T16907] netdevsim netdevsim2 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.598317][T16907] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1017.637225][T16907] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1017.654456][T16907] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1017.671664][T16907] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1018.330889][T16907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.371087][T16907] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.737410][ T5136] Bluetooth: hci0: command tx timeout [ 1018.835231][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.842360][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.962889][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.970069][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.062474][T16978] netlink: 'syz.1.3307': attribute type 1 has an invalid length. [ 1019.120973][T16978] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1019.497774][T16997] program syz.5.3313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1019.558192][T16907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.492601][T16907] veth0_vlan: entered promiscuous mode [ 1020.538626][T16907] veth1_vlan: entered promiscuous mode [ 1020.609332][T16907] veth0_macvtap: entered promiscuous mode [ 1020.626425][T16907] veth1_macvtap: entered promiscuous mode [ 1020.834746][T16907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.922231][T16907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.932077][T16907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.954001][ T5136] Bluetooth: hci0: command tx timeout [ 1020.979620][T16907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.368721][T16907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.510405][T16907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.527351][T16907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.609039][T17019] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1021.620611][T17019] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1022.284461][T16907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.294620][T16907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.305179][T16907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.328684][T16907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.386870][T16907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.419812][T16907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.429903][T16907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.451571][T16907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.502308][T16907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.524438][T16907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.547654][T16907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.558233][T16907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.568320][T16907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.579039][T16907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.606907][T16907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.624270][T16907] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.637111][T17024] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1022.643002][T16907] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.648502][T17024] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1022.690872][T16907] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.715605][T16907] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.152260][ T7345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.166309][ T7345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.177605][ T5136] Bluetooth: hci0: command tx timeout [ 1023.226266][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.234586][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.727061][T17058] Bluetooth: MGMT ver 1.23 [ 1025.337144][T10758] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1025.535732][T17077] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1025.547165][T17077] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1025.603471][T17072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3337'. [ 1025.641879][T10758] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1025.649785][T17072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3337'. [ 1025.668991][T10758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.687959][T10758] usb 6-1: Product: syz [ 1025.696313][T10758] usb 6-1: Manufacturer: syz [ 1025.710584][T10758] usb 6-1: SerialNumber: syz [ 1025.727297][T10758] usb 6-1: config 0 descriptor?? [ 1027.430945][ T5136] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1027.437749][T15397] Bluetooth: hci0: command 0x0c1a tx timeout [ 1027.715851][T10758] usb 6-1: Firmware version (0.0) predates our first public release. [ 1027.731785][T10758] usb 6-1: Please update to version 0.2 or newer [ 1028.934822][T14611] usb 6-1: USB disconnect, device number 96 [ 1034.257107][T17153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3363'. [ 1036.382076][T17191] 9pnet_fd: Insufficient options for proto=fd [ 1038.685432][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1038.907011][ T7110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.908096][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3379'. [ 1038.924503][ T7110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.010680][T10758] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1039.417751][T10758] usb 10-1: Using ep0 maxpacket: 32 [ 1039.458599][T10758] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.482625][T10758] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1039.522394][T10758] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1039.544437][T10758] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 72, changing to 7 [ 1039.566039][T10758] usb 10-1: config 1 interface 1 has no altsetting 0 [ 1039.577867][T10758] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1039.587024][T10758] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.607520][T10758] usb 10-1: Product: syz [ 1039.617941][T10758] usb 10-1: Manufacturer: syz [ 1039.626030][T10758] usb 10-1: SerialNumber: syz [ 1039.828904][T10758] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 1039.847527][T10758] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 1039.984036][T10758] usb 10-1: USB disconnect, device number 20 [ 1040.911214][T17223] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3382'. [ 1041.481917][T17252] netlink: 'syz.9.3394': attribute type 10 has an invalid length. [ 1041.490745][T17252] batadv0: left promiscuous mode [ 1041.509437][T17252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.530934][T17252] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1042.185082][T17253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3393'. [ 1045.545330][T17301] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3410'. [ 1045.849722][T17305] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 1046.187472][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 1046.187497][ T29] audit: type=1326 audit(1739339283.481:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17308 comm="syz.9.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1046.217471][ T29] audit: type=1326 audit(1739339283.481:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17308 comm="syz.9.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1046.241769][ T29] audit: type=1326 audit(1739339283.481:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17308 comm="syz.9.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1046.316417][ T29] audit: type=1326 audit(1739339283.602:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17308 comm="syz.9.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1046.479470][ T29] audit: type=1326 audit(1739339283.602:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17308 comm="syz.9.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1046.568996][ T29] audit: type=1326 audit(1739339283.602:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17316 comm="syz.9.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f32463bf6a5 code=0x7ffc0000 [ 1046.616783][ T29] audit: type=1326 audit(1739339283.602:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17308 comm="syz.9.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1046.631094][T17323] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3418'. [ 1046.657219][T17324] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3419'. [ 1046.681844][ T29] audit: type=1326 audit(1739339283.761:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17316 comm="syz.9.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1046.724683][T17326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3419'. [ 1046.793821][T10751] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1046.801719][ T29] audit: type=1326 audit(1739339283.761:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17308 comm="syz.9.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1046.801758][ T29] audit: type=1326 audit(1739339283.761:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17308 comm="syz.9.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1047.135519][T10751] usb 3-1: Using ep0 maxpacket: 8 [ 1047.144398][T10751] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.154650][T10751] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1047.165736][T10751] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1047.174935][T10751] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1047.183175][T10751] usb 3-1: Product: syz [ 1047.187632][T10751] usb 3-1: Manufacturer: syz [ 1047.192465][T10751] usb 3-1: SerialNumber: syz [ 1047.204229][T10751] usb 3-1: config 0 descriptor?? [ 1047.231718][T14611] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1047.381537][T14611] usb 2-1: device descriptor read/64, error -71 [ 1047.637910][T14611] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1047.776989][T14611] usb 2-1: device descriptor read/64, error -71 [ 1047.807859][T17339] fuseblk: Unknown parameter 'fd0x0000000000000005' [ 1047.895037][T14611] usb usb2-port1: attempt power cycle [ 1048.257845][T14611] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1048.400246][T14611] usb 2-1: device descriptor read/8, error -71 [ 1049.327250][T14611] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1049.361945][T14611] usb 2-1: device descriptor read/8, error -71 [ 1049.488658][T14611] usb usb2-port1: unable to enumerate USB device [ 1050.302940][T17364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.321646][T17364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.364839][T10751] usb 3-1: USB disconnect, device number 102 [ 1050.785981][T10758] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1050.920531][T10751] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1050.986477][T10758] usb 10-1: Using ep0 maxpacket: 32 [ 1051.046802][T10758] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.160488][T10758] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.197844][T10751] usb 3-1: Using ep0 maxpacket: 16 [ 1051.251120][T10751] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1051.336965][T10758] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1051.358940][T10751] usb 3-1: config 0 interface 0 has no altsetting 1 [ 1051.365659][T10758] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.377243][T10751] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1051.388267][T10758] hub 10-1:4.0: USB hub found [ 1051.392999][T10751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.411637][T10751] usb 3-1: Product: syz [ 1051.415884][T10751] usb 3-1: Manufacturer: syz [ 1051.432943][T10751] usb 3-1: SerialNumber: syz [ 1051.439801][T10751] usb 3-1: config 0 descriptor?? [ 1051.463557][T10751] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1051.496460][T10751] gspca_stv06xx: st6422 sensor detected [ 1051.498551][T17379] bridge_slave_0: left allmulticast mode [ 1051.523563][T17379] bridge_slave_0: left promiscuous mode [ 1051.531547][T17379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.549987][T17379] bridge_slave_1: left allmulticast mode [ 1051.557326][T17379] bridge_slave_1: left promiscuous mode [ 1051.589220][T17379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.604548][T10758] hub 10-1:4.0: 8 ports detected [ 1051.609916][T10758] hub 10-1:4.0: insufficient power available to use all downstream ports [ 1051.623675][T17379] bond0: (slave bond_slave_0): Releasing backup interface [ 1051.646228][T17379] bond0: (slave bond_slave_1): Releasing backup interface [ 1051.704904][T17379] team0: Port device team_slave_0 removed [ 1051.726223][T17379] team0: Port device team_slave_1 removed [ 1051.733703][T17379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1051.752195][T17379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.765356][T17379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1051.783179][T17379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.898545][T10758] hub 10-1:4.0: hub_hub_status failed (err = -71) [ 1051.905202][T10751] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 1051.913962][T10758] hub 10-1:4.0: config failed, can't get hub status (err -71) [ 1051.925839][T10751] usb 3-1: USB disconnect, device number 103 [ 1051.946773][T10758] usb 10-1: USB disconnect, device number 21 [ 1052.117293][ T29] audit: type=1326 audit(1739339289.037:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17385 comm="syz.1.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac7d8cde9 code=0x7ffc0000 [ 1052.139753][ T29] audit: type=1326 audit(1739339289.046:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17385 comm="syz.1.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac7d8cde9 code=0x7ffc0000 [ 1052.169016][ T29] audit: type=1326 audit(1739339289.046:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17385 comm="syz.1.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fbac7d8cde9 code=0x7ffc0000 [ 1052.191980][ T29] audit: type=1326 audit(1739339289.084:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17385 comm="syz.1.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac7d8cde9 code=0x7ffc0000 [ 1052.301313][ T29] audit: type=1326 audit(1739339289.084:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17385 comm="syz.1.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac7d8cde9 code=0x7ffc0000 [ 1052.435857][ T29] audit: type=1326 audit(1739339289.084:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17389 comm="syz.1.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbac7dbf6a5 code=0x7ffc0000 [ 1052.481247][ T29] audit: type=1326 audit(1739339289.121:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17385 comm="syz.1.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fbac7d8cde9 code=0x7ffc0000 [ 1052.506268][ T29] audit: type=1326 audit(1739339289.121:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17385 comm="syz.1.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac7d8cde9 code=0x7ffc0000 [ 1052.715745][ T29] audit: type=1326 audit(1739339289.121:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17385 comm="syz.1.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac7d8cde9 code=0x7ffc0000 [ 1052.756173][ T29] audit: type=1326 audit(1739339289.233:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17389 comm="syz.1.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fbac7d8cde9 code=0x7ffc0000 [ 1054.362776][T17411] netlink: zone id is out of range [ 1054.623130][T17414] syzkaller0: entered promiscuous mode [ 1054.645538][T17414] syzkaller0: entered allmulticast mode [ 1054.928002][T15397] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1054.940353][T15397] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1054.962727][T15397] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1054.975258][T15397] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1054.983110][T15397] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1054.990498][T15397] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1055.038281][T17420] wlan0 speed is unknown, defaulting to 1000 [ 1055.045370][T17420] »»»»»» speed is unknown, defaulting to 1000 [ 1055.195774][T17420] chnl_net:caif_netlink_parms(): no params data found [ 1057.126723][T17442] hub 6-0:1.0: USB hub found [ 1057.133066][T17442] hub 6-0:1.0: 1 port detected [ 1057.218101][T15397] Bluetooth: hci2: command tx timeout [ 1059.387570][ T5873] usb 10-1: new low-speed USB device number 22 using dummy_hcd [ 1059.444381][T15397] Bluetooth: hci2: command tx timeout [ 1059.600783][ T5873] usb 10-1: config 0 has an invalid interface number: 61 but max is 0 [ 1059.620668][ T5873] usb 10-1: config 0 has no interface number 0 [ 1059.628128][ T5873] usb 10-1: New USB device found, idVendor=07ca, idProduct=1871, bcdDevice=ee.3a [ 1059.648510][ T5873] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.663990][ T5873] usb 10-1: config 0 descriptor?? [ 1059.908026][T17458] program syz.9.3453 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1059.931332][T14611] usb 10-1: USB disconnect, device number 22 [ 1061.362022][T17473] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1061.669969][T15397] Bluetooth: hci2: command tx timeout [ 1063.480637][T17420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.490601][T17420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.497885][T17420] bridge_slave_0: entered allmulticast mode [ 1063.505221][T17420] bridge_slave_0: entered promiscuous mode [ 1063.515340][T17420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.522429][T17420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.530001][T17420] bridge_slave_1: entered allmulticast mode [ 1063.537148][T17420] bridge_slave_1: entered promiscuous mode [ 1063.576733][T17420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.371414][T17420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.411367][T15397] Bluetooth: hci2: command tx timeout [ 1064.568675][T17420] team0: Port device team_slave_0 added [ 1064.611506][T17420] team0: Port device team_slave_1 added [ 1064.732287][T17420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1064.743980][T17420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.808796][T17420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.840321][T17420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.847351][T17420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.879182][T17420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.953407][T17420] hsr_slave_0: entered promiscuous mode [ 1064.960608][T17420] hsr_slave_1: entered promiscuous mode [ 1064.970933][T17420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1064.985960][T17420] Cannot create hsr debugfs directory [ 1065.490876][T17420] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.572562][T17420] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.663465][T17420] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.750821][T17420] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.973006][T17420] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1065.982477][T17420] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1066.008680][T17420] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1066.019416][T17420] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1066.112992][T17516] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1066.124241][T17516] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1066.213117][T17420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.242877][T17420] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.261785][ T6836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.268966][ T6836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.287833][ T6836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.294987][ T6836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.356207][T17420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1066.795030][T17420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.026616][T17420] veth0_vlan: entered promiscuous mode [ 1068.052623][T17420] veth1_vlan: entered promiscuous mode [ 1068.168965][T17420] veth0_macvtap: entered promiscuous mode [ 1069.045415][T17420] veth1_macvtap: entered promiscuous mode [ 1069.538764][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.590576][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.612327][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.770535][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.788189][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.803960][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.814173][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.824961][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.834832][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.869737][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.891063][T17420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.045364][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.056192][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.066516][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.077489][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.087600][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.101356][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.111383][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.122464][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.132697][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.143455][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.156492][T17420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.187406][T17420] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.215064][T17420] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.236465][T17420] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.255209][T17420] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.405628][T17481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.435135][T17481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.476048][ T6836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.495407][ T6836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.942493][T14611] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1073.092155][T17598] lo: entered allmulticast mode [ 1073.120509][T14611] usb 6-1: Using ep0 maxpacket: 8 [ 1073.135045][T14611] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1073.164834][T14611] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1073.363448][T14611] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1073.796721][T17610] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3497'. [ 1073.947123][T17596] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1073.954033][T17596] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1074.180471][T14611] usb 6-1: Product: syz [ 1074.184769][T14611] usb 6-1: Manufacturer: syz [ 1074.189817][T14611] usb 6-1: SerialNumber: syz [ 1074.202499][T14611] usb 6-1: config 0 descriptor?? [ 1074.211967][T17598] lo: left allmulticast mode [ 1074.239968][T17596] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1074.245985][T17596] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1074.259830][T17596] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1074.267574][T17596] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1074.275895][T17596] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1074.284386][T17596] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1074.291389][T17596] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1074.297383][T17596] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1074.304775][T17596] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1074.513994][T17614] syzkaller1: entered promiscuous mode [ 1074.521684][T17614] syzkaller1: entered allmulticast mode [ 1075.819643][T17623] fuseblk: Unknown parameter 'fd0x0000000000000005' [ 1076.117640][ T5136] Bluetooth: hci1: command 0x0406 tx timeout [ 1076.459883][ T5136] Bluetooth: hci2: command 0x0c1a tx timeout [ 1076.466975][ T5136] Bluetooth: hci0: command 0x0c1a tx timeout [ 1076.476738][T17596] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1076.538064][T15397] Bluetooth: hci5: command 0x0c1a tx timeout [ 1078.271590][T10738] usb 6-1: USB disconnect, device number 97 [ 1078.341503][ T5136] Bluetooth: hci1: command 0x0406 tx timeout [ 1078.683706][T11172] Bluetooth: hci2: command 0x0c1a tx timeout [ 1078.689842][ T5136] Bluetooth: hci5: command 0x0c1a tx timeout [ 1078.873056][ T5136] Bluetooth: hci0: command 0x0c1a tx timeout [ 1079.677578][T10738] usb 10-1: new low-speed USB device number 23 using dummy_hcd [ 1079.882486][T10738] usb 10-1: config 0 has an invalid interface number: 61 but max is 0 [ 1079.969871][T17660] syzkaller1: entered promiscuous mode [ 1079.975382][T17660] syzkaller1: entered allmulticast mode [ 1080.091513][T10738] usb 10-1: config 0 has no interface number 0 [ 1080.115790][T10738] usb 10-1: New USB device found, idVendor=07ca, idProduct=1871, bcdDevice=ee.3a [ 1080.124995][T10738] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.149891][T10738] usb 10-1: config 0 descriptor?? [ 1080.284001][T17670] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1080.296950][T17670] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1080.469053][T17653] program syz.9.3509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1080.484456][T10738] usb 10-1: USB disconnect, device number 23 [ 1080.494105][T17663] syz.1.3512: attempt to access beyond end of device [ 1080.494105][T17663] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1080.514651][T17663] XFS (nbd1): SB validate failed with error -5. [ 1080.906954][ T5136] Bluetooth: hci5: command 0x0c1a tx timeout [ 1080.913188][ T5136] Bluetooth: hci2: command 0x0c1a tx timeout [ 1081.465690][T11172] Bluetooth: hci0: command 0x0c1a tx timeout [ 1082.874101][T17697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3524'. [ 1082.897758][T17697] /dev/sg0: Can't lookup blockdev [ 1082.903701][T17701] syz.9.3523 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1083.224509][T17710] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3529'. [ 1083.234148][T17710] netlink: 'syz.7.3529': attribute type 5 has an invalid length. [ 1083.266814][T17708] syzkaller1: entered promiscuous mode [ 1083.297435][T17708] syzkaller1: entered allmulticast mode [ 1083.797805][T11172] Bluetooth: hci0: command 0x0c1a tx timeout [ 1084.038174][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3530'. [ 1084.050850][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3530'. [ 1085.076622][T10756] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1085.247637][T10756] usb 3-1: device descriptor read/64, error -71 [ 1085.479114][T17746] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3539'. [ 1085.912411][T10756] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1086.081398][T10756] usb 3-1: device descriptor read/64, error -71 [ 1086.234090][T10756] usb usb3-port1: attempt power cycle [ 1087.020275][T17756] syzkaller1: entered promiscuous mode [ 1087.036915][T17756] syzkaller1: entered allmulticast mode [ 1087.246453][T10756] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1087.287469][T17759] cgroup: name respecified [ 1087.296314][T10756] usb 3-1: device descriptor read/8, error -71 [ 1087.570606][T10756] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1087.622405][T10756] usb 3-1: device descriptor read/8, error -71 [ 1087.761474][T10756] usb usb3-port1: unable to enumerate USB device [ 1087.816070][T17481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.023047][T17481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.697659][T10756] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1089.521698][T17789] syzkaller1: entered promiscuous mode [ 1089.534295][T10756] usb 10-1: Using ep0 maxpacket: 32 [ 1089.541067][T17789] syzkaller1: entered allmulticast mode [ 1089.541309][T10756] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1089.584312][T10756] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1089.641081][T10756] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1089.650352][T10756] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1089.660354][T10756] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1089.670267][T10756] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1089.737406][T10756] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1089.746563][T10756] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.856613][T10756] usb 10-1: config 0 descriptor?? [ 1090.092619][T17803] sctp: [Deprecated]: syz.7.3559 (pid 17803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1090.092619][T17803] Use struct sctp_sack_info instead [ 1090.207862][T10756] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1090.698560][T10758] usb 10-1: USB disconnect, device number 24 [ 1090.723888][T10758] usblp0: removed [ 1091.439605][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.507270][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.102299][T17847] overlayfs: failed to resolve './file0': -2 [ 1092.220458][T17852] netlink: 'syz.5.3577': attribute type 1 has an invalid length. [ 1092.479024][T17857] block nbd1: NBD_DISCONNECT [ 1092.497314][T17857] block nbd1: Disconnected due to user request. [ 1092.507678][T17857] block nbd1: shutting down sockets [ 1094.943774][T14611] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1095.873817][T14611] usb 10-1: Using ep0 maxpacket: 8 [ 1095.897050][T14611] usb 10-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1095.915894][T14611] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1095.925398][T14611] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1095.946052][T14611] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.981113][T14611] usb 10-1: Product: syz [ 1095.991860][T14611] usb 10-1: Manufacturer: syz [ 1095.996567][T14611] usb 10-1: SerialNumber: syz [ 1096.034471][T17907] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1096.263471][T17907] netlink: 'syz.9.3596': attribute type 1 has an invalid length. [ 1096.320729][T17907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1096.360541][T17932] bond1: (slave gretap1): making interface the new active one [ 1096.364767][T17934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3607'. [ 1096.370971][T17932] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1096.414066][T14611] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 8 proto 1 vid 0x0525 pid 0xA4A8 [ 1096.436460][T14611] usb 10-1: USB disconnect, device number 25 [ 1096.458194][T14611] usblp0: removed [ 1096.470328][T17934] bond3 (unregistering): Released all slaves [ 1096.667668][T17944] kAFS: Can only specify source 'none' with -o dyn [ 1096.986451][T10739] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1097.171255][T10739] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1097.195257][T10739] usb 3-1: not running at top speed; connect to a high speed hub [ 1097.280028][T10739] usb 3-1: config 2 has an invalid interface number: 212 but max is 1 [ 1097.305891][T10739] usb 3-1: config 2 has an invalid interface number: 226 but max is 1 [ 1097.327355][T10739] usb 3-1: config 2 has no interface number 0 [ 1097.344421][T10739] usb 3-1: config 2 has no interface number 1 [ 1097.355843][T10739] usb 3-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1097.384447][T10739] usb 3-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1097.402073][T10739] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1097.452538][T10739] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1097.490721][T10739] usb 3-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1097.557191][T10739] usb 3-1: config 2 interface 212 has no altsetting 0 [ 1097.592041][T10739] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1097.614030][T10739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.649064][T10739] usb 3-1: Product: syz [ 1097.654665][T17957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3615'. [ 1097.685619][T10739] usb 3-1: Manufacturer: syz [ 1097.694266][T10739] usb 3-1: SerialNumber: syz [ 1097.951010][T17948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.001469][T17948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.087524][T10739] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.226/input/input57 [ 1098.115679][T10739] usb 3-1: USB disconnect, device number 108 [ 1098.683644][T10758] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1098.932534][T10758] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1099.051514][T10758] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1099.292038][T10758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.303453][T10758] usb 2-1: config 0 descriptor?? [ 1099.469520][T10739] IPVS: starting estimator thread 0... [ 1099.583409][T17987] IPVS: using max 26 ests per chain, 62400 per kthread [ 1099.863647][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3627'. [ 1099.925470][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 1099.925488][ T29] audit: type=1326 audit(1739339333.740:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17985 comm="syz.9.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1099.999797][ T29] audit: type=1326 audit(1739339333.740:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17985 comm="syz.9.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1100.187452][ T29] audit: type=1326 audit(1739339333.740:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17985 comm="syz.9.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1100.222733][ T29] audit: type=1326 audit(1739339333.824:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17985 comm="syz.9.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1100.244797][ T29] audit: type=1326 audit(1739339333.843:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17985 comm="syz.9.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1100.284534][ T29] audit: type=1326 audit(1739339333.918:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18000 comm="syz.9.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f32463bf6a5 code=0x7ffc0000 [ 1100.376046][ T29] audit: type=1326 audit(1739339334.123:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18000 comm="syz.9.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1100.741603][T10758] video4linux radio48: keene_cmd_set failed (-71) [ 1100.759644][T10758] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 1100.780489][T10758] usb 2-1: USB disconnect, device number 42 [ 1101.069642][T15390] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1101.264717][T15390] usb 3-1: Using ep0 maxpacket: 16 [ 1101.287158][T15390] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1101.323852][T15390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.346782][T15390] usb 3-1: Product: syz [ 1101.360372][T15390] usb 3-1: Manufacturer: syz [ 1101.364993][T15390] usb 3-1: SerialNumber: syz [ 1101.382831][T15390] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1101.389106][T15390] r8152-cfgselector 3-1: config 0 descriptor?? [ 1102.055661][T15390] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1102.078733][T15390] r8152-cfgselector 3-1: bad CDC descriptors [ 1102.155137][T15390] r8152-cfgselector 3-1: USB disconnect, device number 109 [ 1104.264728][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1105.651248][T18055] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1105.662743][T18055] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1106.526333][T18064] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1106.538928][T18064] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1106.759981][T10739] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1107.123501][T10739] usb 3-1: config 54 has an invalid interface number: 154 but max is 0 [ 1107.170253][T10739] usb 3-1: config 54 has no interface number 0 [ 1107.181407][T10739] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 1107.207505][T10739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.258810][T10739] usb 3-1: Product: syz [ 1107.274876][T10739] usb 3-1: Manufacturer: syz [ 1107.320246][T17481] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1107.337959][T10739] usb 3-1: SerialNumber: syz [ 1108.115574][T10739] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1108.117607][ T3577] usb 3-1: Failed to submit usb control message: -71 [ 1108.143628][T10739] usb 3-1: USB disconnect, device number 110 [ 1108.149880][ T3577] usb 3-1: unable to send the bmi data to the device: -71 [ 1108.149903][ T3577] usb 3-1: unable to get target info from device [ 1108.149919][ T3577] usb 3-1: could not get target info (-71) [ 1108.149936][ T3577] usb 3-1: could not probe fw (-71) [ 1108.489030][T10738] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1108.542504][T14611] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1108.605385][ T29] audit: type=1326 audit(1739339341.868:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18083 comm="syz.7.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab38cde9 code=0x7ffc0000 [ 1108.630643][ T29] audit: type=1326 audit(1739339341.868:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18083 comm="syz.7.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab38cde9 code=0x7ffc0000 [ 1108.657043][ T29] audit: type=1326 audit(1739339341.868:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18083 comm="syz.7.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7faaab38cde9 code=0x7ffc0000 [ 1108.681766][ T29] audit: type=1326 audit(1739339341.868:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18083 comm="syz.7.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab38cde9 code=0x7ffc0000 [ 1108.705030][T10738] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1108.714459][T10738] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.725663][T10738] usb 2-1: config 0 has no interface number 0 [ 1108.731982][T10738] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1108.750776][T14611] usb 10-1: Using ep0 maxpacket: 8 [ 1108.770490][T10738] usb 2-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1108.785535][ T29] audit: type=1326 audit(1739339341.868:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18083 comm="syz.7.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab38cde9 code=0x7ffc0000 [ 1108.814306][T10738] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 1108.825883][T14611] usb 10-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1108.835689][T14611] usb 10-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1108.844357][T10738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.852926][ T29] audit: type=1326 audit(1739339341.868:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18083 comm="syz.7.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7faaab38cde9 code=0x7ffc0000 [ 1108.877329][T14611] usb 10-1: Product: syz [ 1108.881882][T10738] usb 2-1: Product: syz [ 1108.886701][T14611] usb 10-1: Manufacturer: syz [ 1108.891869][T10738] usb 2-1: Manufacturer: syz [ 1108.896920][T14611] usb 10-1: SerialNumber: syz [ 1108.901818][T10738] usb 2-1: SerialNumber: syz [ 1108.909829][T14611] usb 10-1: config 0 descriptor?? [ 1108.916904][ T29] audit: type=1326 audit(1739339341.868:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18083 comm="syz.7.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab38cde9 code=0x7ffc0000 [ 1108.918928][T18090] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3656'. [ 1108.940429][T10738] usb 2-1: config 0 descriptor?? [ 1108.954362][T18080] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1108.966448][T14611] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1108.978705][ T29] audit: type=1326 audit(1739339341.868:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18083 comm="syz.7.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab38cde9 code=0x7ffc0000 [ 1109.001160][ T29] audit: type=1326 audit(1739339341.868:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18083 comm="syz.7.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faaab38cde9 code=0x7ffc0000 [ 1109.025765][T18090] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3656'. [ 1109.043779][T18090] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3656'. [ 1109.060260][ T29] audit: type=1326 audit(1739339341.868:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18083 comm="syz.7.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab38cde9 code=0x7ffc0000 [ 1109.097430][T18090] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3656'. [ 1109.196037][T18078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.207852][T18078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.362230][T18102] Bluetooth: MGMT ver 1.23 [ 1109.412696][T18104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3662'. [ 1109.457044][T18104] /dev/sg0: Can't lookup blockdev [ 1109.463104][T14611] gspca_zc3xx: reg_r err -71 [ 1109.467893][T14611] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1109.500632][T14611] usb 10-1: USB disconnect, device number 26 [ 1109.555258][T18106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3663'. [ 1109.681384][T18112] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3666'. [ 1110.007129][T15390] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1110.189653][T15390] usb 3-1: Using ep0 maxpacket: 16 [ 1110.489861][T15390] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1110.542098][T15390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.550351][T15390] usb 3-1: Product: syz [ 1110.637951][T10739] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1110.665345][T15390] usb 3-1: Manufacturer: syz [ 1110.668960][ T5114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.679218][T15390] usb 3-1: SerialNumber: syz [ 1110.695169][ T5114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.905961][T10739] usb 10-1: Using ep0 maxpacket: 32 [ 1110.906897][T15390] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1110.942140][T10739] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.993661][T10739] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1111.000112][T15390] r8152-cfgselector 3-1: config 0 descriptor?? [ 1111.037488][T10739] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1111.087546][T10739] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 72, changing to 7 [ 1111.134087][T10739] usb 10-1: config 1 interface 1 has no altsetting 0 [ 1111.175113][T10739] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1111.215528][T10739] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.235066][T10739] usb 10-1: Product: syz [ 1111.246001][T10739] usb 10-1: Manufacturer: syz [ 1111.265741][T10739] usb 10-1: SerialNumber: syz [ 1111.385913][T10738] usb 2-1: probing VID:PID(0424:012C) [ 1111.394179][T10738] usb 2-1: vub300 testing BULK OUT EndPoint(0) 0B [ 1111.439452][ T5136] Bluetooth: hci2: command 0x0c1a tx timeout [ 1111.439589][T10738] usb 2-1: vub300 testing BULK OUT EndPoint(1) 0F [ 1111.479831][T10738] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 1111.531665][T10739] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 1111.551517][T10738] vub300 2-1:0.133: probe with driver vub300 failed with error -22 [ 1111.559727][T10739] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 1111.586978][T10738] usb 2-1: USB disconnect, device number 43 [ 1111.630380][T10739] usb 10-1: USB disconnect, device number 27 [ 1111.722837][T18127] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3671'. [ 1111.819466][T15390] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1111.835577][T15390] r8152-cfgselector 3-1: bad CDC descriptors [ 1111.845700][T15390] r8152-cfgselector 3-1: USB disconnect, device number 111 [ 1112.096524][T18136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.108953][T18136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.136688][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3676'. [ 1112.156388][T18139] /dev/sg0: Can't lookup blockdev [ 1112.207846][T18141] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3677'. [ 1112.296914][T18143] syzkaller0: entered promiscuous mode [ 1112.302409][T18143] syzkaller0: entered allmulticast mode [ 1112.348624][T10739] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1112.482532][T18145] FAULT_INJECTION: forcing a failure. [ 1112.482532][T18145] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.495564][T18145] CPU: 0 UID: 0 PID: 18145 Comm: syz.2.3679 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 1112.495587][T18145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1112.495598][T18145] Call Trace: [ 1112.495604][T18145] [ 1112.495612][T18145] dump_stack_lvl+0x241/0x360 [ 1112.495644][T18145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1112.495668][T18145] ? __pfx__printk+0x10/0x10 [ 1112.495700][T18145] ? fs_reclaim_acquire+0x93/0x130 [ 1112.495718][T18145] ? __pfx___might_resched+0x10/0x10 [ 1112.495740][T18145] should_fail_ex+0x40a/0x550 [ 1112.495764][T18145] should_failslab+0xac/0x100 [ 1112.495786][T18145] __kmalloc_noprof+0xdd/0x4c0 [ 1112.495806][T18145] ? tomoyo_encode+0x26f/0x540 [ 1112.495826][T18145] tomoyo_encode+0x26f/0x540 [ 1112.495848][T18145] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1112.495876][T18145] tomoyo_path_number_perm+0x236/0x860 [ 1112.495897][T18145] ? __lock_acquire+0x1397/0x2100 [ 1112.495919][T18145] ? tomoyo_path_number_perm+0x206/0x860 [ 1112.495943][T18145] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1112.496003][T18145] ? __fget_files+0x2a/0x410 [ 1112.496027][T18145] ? __fget_files+0x2a/0x410 [ 1112.496052][T18145] security_file_ioctl+0xc6/0x2a0 [ 1112.496077][T18145] __se_sys_ioctl+0x46/0x170 [ 1112.496096][T18145] do_syscall_64+0xf3/0x230 [ 1112.496118][T18145] ? clear_bhb_loop+0x35/0x90 [ 1112.496142][T18145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.496162][T18145] RIP: 0033:0x7f9a15b8cde9 [ 1112.496177][T18145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1112.496191][T18145] RSP: 002b:00007f9a16a48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1112.496210][T18145] RAX: ffffffffffffffda RBX: 00007f9a15da5fa0 RCX: 00007f9a15b8cde9 [ 1112.496223][T18145] RDX: 00004000000001c0 RSI: 0000000000000707 RDI: 0000000000000003 [ 1112.496234][T18145] RBP: 00007f9a16a48090 R08: 0000000000000000 R09: 0000000000000000 [ 1112.496244][T18145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1112.496254][T18145] R13: 0000000000000000 R14: 00007f9a15da5fa0 R15: 00007ffffbfea958 [ 1112.496282][T18145] [ 1112.709881][ C0] vkms_vblank_simulate: vblank timer overrun [ 1112.720531][T18145] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1112.750389][T10739] usb 2-1: Using ep0 maxpacket: 16 [ 1112.821352][T10739] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.832626][T10739] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1112.839290][T10739] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1112.848638][T10739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.859886][T10739] usb 2-1: config 0 descriptor?? [ 1112.884251][T10739] usbhid 2-1:0.0: can't add hid device: -22 [ 1112.890278][T10739] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 1113.121012][T10739] usb 2-1: USB disconnect, device number 44 [ 1113.271455][T18167] netlink: 'syz.7.3686': attribute type 5 has an invalid length. [ 1113.339104][T15390] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1113.957182][T15390] usb 3-1: Using ep0 maxpacket: 8 [ 1113.965160][T15390] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 64 [ 1113.977382][T15390] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1113.986022][T15390] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1113.995239][T15390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.003238][T15390] usb 3-1: Product: syz [ 1114.007542][T15390] usb 3-1: Manufacturer: â ‰ [ 1114.012659][T15390] usb 3-1: SerialNumber: syz [ 1114.039147][T18162] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1115.132000][T15390] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1115.179714][T15390] usb 3-1: USB disconnect, device number 112 [ 1116.953077][T18203] __nla_validate_parse: 1 callbacks suppressed [ 1116.953096][T18203] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3697'. [ 1116.973986][T18203] netlink: 'syz.2.3697': attribute type 5 has an invalid length. [ 1117.060194][T18205] fuse: Unknown parameter 'grou00000000000000000000' [ 1117.933456][T18216] Mount JFS Failure: -22 [ 1117.946853][T18216] jfs_mount failed w/return code = -22 [ 1118.691745][T18183] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3691'. [ 1118.959909][T18219] can: request_module (can-proto-0) failed. [ 1119.120819][ T52] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1119.393425][T11172] Bluetooth: hci0: command 0x0c1a tx timeout [ 1119.394400][T10739] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1119.504427][T18236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3707'. [ 1119.813157][T10739] usb 10-1: Using ep0 maxpacket: 32 [ 1119.947969][T10739] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.053322][T10739] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1120.075762][T10739] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1120.102707][T10739] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 72, changing to 7 [ 1120.129182][T10739] usb 10-1: config 1 interface 1 has no altsetting 0 [ 1120.146414][T10739] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1120.155734][T10739] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.181310][T10739] usb 10-1: Product: syz [ 1120.190588][T10739] usb 10-1: Manufacturer: syz [ 1120.211383][T10739] usb 10-1: SerialNumber: syz [ 1120.505888][T10739] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 1120.514419][T10739] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 1120.563902][T10739] usb 10-1: USB disconnect, device number 28 [ 1120.636960][T18254] qnx4: no qnx4 filesystem (no root dir). [ 1120.900483][T10756] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1121.274776][T10756] usb 3-1: Using ep0 maxpacket: 8 [ 1121.314006][T10756] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1121.360966][T10756] usb 3-1: config 7 has an invalid interface number: 7 but max is 0 [ 1121.369000][T10756] usb 3-1: config 7 has no interface number 0 [ 1121.398673][T18256] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3718'. [ 1121.471841][T10756] usb 3-1: config 7 interface 7 altsetting 8 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1121.635818][T10756] usb 3-1: config 7 interface 7 altsetting 8 bulk endpoint 0x6 has invalid maxpacket 8 [ 1121.711985][T10756] usb 3-1: config 7 interface 7 has no altsetting 0 [ 1121.825053][T10756] usb 3-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=f9.7e [ 1121.922732][T10756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.978547][T10756] usb 3-1: Product: syz [ 1121.998929][T10756] usb 3-1: Manufacturer: syz [ 1122.035106][T10756] usb 3-1: SerialNumber: syz [ 1122.098964][T18254] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1122.695581][T10738] IPVS: starting estimator thread 0... [ 1123.166836][ C1] hrtimer: interrupt took 42221 ns [ 1123.265637][T18284] IPVS: using max 22 ests per chain, 52800 per kthread [ 1124.332373][T10756] usb 3-1: Error in usbnet_get_endpoints (-22) [ 1124.343954][T10756] usb 3-1: USB disconnect, device number 113 [ 1124.460233][T18185] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1124.631816][T10751] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1124.674393][T18297] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3732'. [ 1124.683392][T18297] netlink: 'syz.2.3732': attribute type 5 has an invalid length. [ 1124.813452][T10751] usb 10-1: Using ep0 maxpacket: 32 [ 1124.833872][T10751] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.082573][T10751] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1125.094037][T10751] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1125.106590][T10751] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 72, changing to 7 [ 1125.117982][T10751] usb 10-1: config 1 interface 1 has no altsetting 0 [ 1125.135813][T10751] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1125.153141][T10751] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.166628][T10751] usb 10-1: Product: syz [ 1125.172097][T10751] usb 10-1: Manufacturer: syz [ 1125.177009][T10751] usb 10-1: SerialNumber: syz [ 1125.959266][T10751] usb 10-1: can't set config #1, error -71 [ 1125.969775][T10751] usb 10-1: USB disconnect, device number 29 [ 1126.082208][T18320] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3742'. [ 1126.104414][T18322] FAULT_INJECTION: forcing a failure. [ 1126.104414][T18322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1126.160774][T18322] CPU: 0 UID: 0 PID: 18322 Comm: syz.1.3743 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 1126.160800][T18322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1126.160810][T18322] Call Trace: [ 1126.160816][T18322] [ 1126.160823][T18322] dump_stack_lvl+0x241/0x360 [ 1126.160850][T18322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1126.160865][T18322] ? __pfx__printk+0x10/0x10 [ 1126.160880][T18322] ? __pfx_lock_release+0x10/0x10 [ 1126.160897][T18322] should_fail_ex+0x40a/0x550 [ 1126.160911][T18322] _copy_from_user+0x2d/0xb0 [ 1126.160922][T18322] xt_copy_counters+0x225/0x520 [ 1126.160934][T18322] ? __pfx_xt_copy_counters+0x10/0x10 [ 1126.160943][T18322] ? cap_capable+0x139/0x450 [ 1126.160957][T18322] ? safesetid_security_capable+0xb2/0x1d0 [ 1126.160972][T18322] ? bpf_lsm_capable+0x9/0x10 [ 1126.160983][T18322] ? security_capable+0x7e/0x2d0 [ 1126.160996][T18322] do_ipt_set_ctl+0x188/0x1250 [ 1126.161010][T18322] ? nf_setsockopt+0x240/0x2c0 [ 1126.161020][T18322] ? do_ip_setsockopt+0x1f44/0x3cd0 [ 1126.161031][T18322] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1126.161044][T18322] ? trace_contention_end+0x3c/0x120 [ 1126.161059][T18322] ? __mutex_lock+0x397/0x1010 [ 1126.161072][T18322] ? do_ip_setsockopt+0x1f5f/0x3cd0 [ 1126.161085][T18322] ? __mutex_unlock_slowpath+0x227/0x800 [ 1126.161102][T18322] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1126.161117][T18322] ? __pfx___mutex_lock+0x10/0x10 [ 1126.161134][T18322] nf_setsockopt+0x295/0x2c0 [ 1126.161145][T18322] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1126.161159][T18322] smc_setsockopt+0x275/0xe50 [ 1126.161175][T18322] ? __pfx_smc_setsockopt+0x10/0x10 [ 1126.161189][T18322] ? __pfx_vfs_write+0x10/0x10 [ 1126.161203][T18322] ? do_sys_openat2+0x17a/0x1d0 [ 1126.161216][T18322] ? __pfx_smc_setsockopt+0x10/0x10 [ 1126.161228][T18322] do_sock_setsockopt+0x3af/0x720 [ 1126.161246][T18322] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1126.161263][T18322] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1126.161279][T18322] __x64_sys_setsockopt+0x1ee/0x280 [ 1126.161296][T18322] do_syscall_64+0xf3/0x230 [ 1126.161310][T18322] ? clear_bhb_loop+0x35/0x90 [ 1126.161324][T18322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.161337][T18322] RIP: 0033:0x7fbac7d8cde9 [ 1126.161346][T18322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1126.161355][T18322] RSP: 002b:00007fbac8c78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1126.161376][T18322] RAX: ffffffffffffffda RBX: 00007fbac7fa5fa0 RCX: 00007fbac7d8cde9 [ 1126.161383][T18322] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 1126.161389][T18322] RBP: 00007fbac8c78090 R08: 0000000000000048 R09: 0000000000000000 [ 1126.161395][T18322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.161401][T18322] R13: 0000000000000000 R14: 00007fbac7fa5fa0 R15: 00007ffefc4dd818 [ 1126.161416][T18322] [ 1126.654584][T18334] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1126.665778][T18334] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1127.052636][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1127.052688][ T29] audit: type=1326 audit(1739339359.080:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18337 comm="syz.1.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac7d8cde9 code=0x7ffc0000 [ 1127.496824][T10739] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1127.523272][ T29] audit: type=1326 audit(1739339359.080:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18337 comm="syz.1.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac7d8cde9 code=0x7ffc0000 [ 1127.564372][T18351] netlink: 'syz.5.3754': attribute type 1 has an invalid length. [ 1127.676829][ T29] audit: type=1326 audit(1739339359.080:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18337 comm="syz.1.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fbac7d8cde9 code=0x7ffc0000 [ 1127.700699][ T29] audit: type=1326 audit(1739339359.117:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18337 comm="syz.1.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac7d8cde9 code=0x7ffc0000 [ 1127.723558][ T29] audit: type=1326 audit(1739339359.127:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18337 comm="syz.1.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac7d8cde9 code=0x7ffc0000 [ 1127.747646][ T29] audit: type=1326 audit(1739339359.155:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18347 comm="syz.1.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbac7dbf6a5 code=0x7ffc0000 [ 1127.782046][T18351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1127.804651][ T29] audit: type=1326 audit(1739339359.155:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18337 comm="syz.1.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fbac7d8cde9 code=0x7ffc0000 [ 1127.924977][ T29] audit: type=1326 audit(1739339359.192:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18337 comm="syz.1.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac7d8cde9 code=0x7ffc0000 [ 1127.977397][T18357] bond1: (slave gretap1): making interface the new active one [ 1128.069302][T18357] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1128.214207][ T29] audit: type=1326 audit(1739339359.192:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18337 comm="syz.1.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac7d8cde9 code=0x7ffc0000 [ 1128.393951][ T5842] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1128.425317][ T29] audit: type=1326 audit(1739339359.304:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18347 comm="syz.1.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fbac7d8cde9 code=0x7ffc0000 [ 1128.558558][ T5842] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1128.576646][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.595576][ T5842] usb 2-1: Product: syz [ 1128.606360][ T5842] usb 2-1: Manufacturer: syz [ 1128.619413][ T5842] usb 2-1: SerialNumber: syz [ 1128.639613][ T5842] usb 2-1: config 0 descriptor?? [ 1128.869574][ T5842] hso 2-1:0.0: Failed to find BULK IN ep [ 1128.886191][ T5842] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1129.112810][T10739] usb 2-1: USB disconnect, device number 45 [ 1129.189740][T18379] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3761'. [ 1129.219701][T18380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1129.317080][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3758'. [ 1129.598891][T18386] fuse: Unknown parameter 'grou00000000000000000000' [ 1130.078894][T18395] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1130.090913][T18395] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1130.565334][T18399] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3768'. [ 1130.717994][T18402] syz.1.3765: attempt to access beyond end of device [ 1130.717994][T18402] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1130.994417][T18409] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3772'. [ 1131.460723][T18427] kAFS: unparsable volume name [ 1132.441245][T18438] overlayfs: failed to clone upperpath [ 1132.488523][T18438] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3778'. [ 1133.494163][T18452] Mount JFS Failure: -22 [ 1133.498897][T18452] jfs_mount failed w/return code = -22 [ 1133.520218][T10751] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1133.680385][T18453] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1133.692401][T18453] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1134.233773][T18457] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3786'. [ 1134.731399][T18464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3789'. [ 1134.745040][T10751] usb 10-1: Using ep0 maxpacket: 32 [ 1134.758311][T10751] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.785848][T10751] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1134.795161][T10751] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.808982][T10751] usb 10-1: Product: syz [ 1134.824603][T10751] usb 10-1: Manufacturer: syz [ 1134.829315][T10751] usb 10-1: SerialNumber: syz [ 1134.854316][T10751] usb 10-1: config 0 descriptor?? [ 1134.993040][T18474] overlayfs: failed to clone lowerpath [ 1135.574252][T18483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.586951][T18485] overlayfs: failed to clone upperpath [ 1135.756119][T18483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.944930][T18488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3796'. [ 1136.351451][T18442] netlink: 'syz.9.3782': attribute type 12 has an invalid length. [ 1136.359561][T18442] netlink: 'syz.9.3782': attribute type 29 has an invalid length. [ 1136.367357][T18442] netlink: 148 bytes leftover after parsing attributes in process `syz.9.3782'. [ 1136.376446][T18442] netlink: 59 bytes leftover after parsing attributes in process `syz.9.3782'. [ 1136.388599][T18442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.397110][T18442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.421050][ T5842] usb 10-1: USB disconnect, device number 31 [ 1136.721759][T18497] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3799'. [ 1137.068518][T18497] /dev/sg0: Can't lookup blockdev [ 1137.334353][T18503] input: syz0 as /devices/virtual/input/input58 [ 1137.391330][T18505] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1137.402868][T18505] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1137.982108][T18516] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3806'. [ 1137.993471][T18516] netlink: 'syz.1.3806': attribute type 5 has an invalid length. [ 1138.176360][T18522] tipc: Enabling of bearer rejected, failed to enable media [ 1138.491293][T18527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3809'. [ 1140.726096][T18547] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 1140.780582][T18547] overlayfs: failed to clone upperpath [ 1140.831701][T18547] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3815'. [ 1142.130052][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.149097][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.465481][T18578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3823'. [ 1144.695593][ T29] audit: type=1326 audit(1739339375.590:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18579 comm="syz.9.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1145.020961][ T29] audit: type=1326 audit(1739339375.636:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18579 comm="syz.9.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1145.134958][ T29] audit: type=1326 audit(1739339376.039:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18579 comm="syz.9.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1145.253802][ T29] audit: type=1326 audit(1739339376.141:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18579 comm="syz.9.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1145.385539][T18596] fuse: Bad value for 'fd' [ 1145.901826][T18618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3833'. [ 1145.956321][T18621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3831'. [ 1146.078362][T10751] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1146.273295][T10751] usb 2-1: Using ep0 maxpacket: 8 [ 1146.348266][T10751] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1146.462233][T10751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.579191][T10751] usb 2-1: Product: syz [ 1146.660474][T10751] usb 2-1: Manufacturer: syz [ 1146.857366][T10751] usb 2-1: SerialNumber: syz [ 1146.867940][T10751] usb 2-1: config 0 descriptor?? [ 1146.880673][T10751] gspca_main: se401-2.14.0 probing 047d:5003 [ 1148.300668][T10751] gspca_se401: ExtraFeatures: 110 [ 1148.335064][T10751] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input59 [ 1148.691071][T18634] mkiss: ax0: crc mode is auto. [ 1149.081239][T10756] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 1149.082558][ T29] audit: type=1326 audit(1739339379.724:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18642 comm="syz.9.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1149.150725][ T29] audit: type=1326 audit(1739339379.724:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18642 comm="syz.9.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1149.211577][T18650] fuse: Bad value for 'fd' [ 1149.296634][T10756] usb 3-1: config index 0 descriptor too short (expected 9318, got 36) [ 1149.320057][T10756] usb 3-1: config 82 has too many interfaces: 201, using maximum allowed: 32 [ 1149.535300][ T29] audit: type=1326 audit(1739339379.733:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18642 comm="syz.9.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1149.550228][T10756] usb 3-1: config 82 has 1 interface, different from the descriptor's value: 201 [ 1149.843667][ T5842] usb 2-1: USB disconnect, device number 46 [ 1149.855356][ T29] audit: type=1326 audit(1739339379.967:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18642 comm="syz.9.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1149.911138][T10756] usb 3-1: config 82 has no interface number 0 [ 1149.935668][ T29] audit: type=1326 audit(1739339379.967:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18642 comm="syz.9.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1149.964502][T10756] usb 3-1: config 82 interface 113 has no altsetting 0 [ 1149.993542][T10756] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1150.039363][ T29] audit: type=1326 audit(1739339379.967:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18652 comm="syz.9.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f32463bf6a5 code=0x7ffc0000 [ 1150.055384][T10756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.277825][T10756] usb 3-1: Product: syz [ 1150.291379][T10756] usb 3-1: Manufacturer: syz [ 1150.299810][ T29] audit: type=1326 audit(1739339380.117:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18652 comm="syz.9.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1150.304623][T10756] usb 3-1: SerialNumber: syz [ 1150.373366][T10756] usb 3-1: can't set config #82, error -71 [ 1150.397873][ T29] audit: type=1326 audit(1739339380.500:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18642 comm="syz.9.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1150.417658][T10756] usb 3-1: USB disconnect, device number 114 [ 1150.524295][ T29] audit: type=1326 audit(1739339380.566:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18642 comm="syz.9.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1150.548374][ T29] audit: type=1326 audit(1739339380.566:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18642 comm="syz.9.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1151.834932][T18664] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3844'. [ 1151.872526][T18672] overlayfs: overlapping lowerdir path [ 1152.040240][T18675] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1154.063546][T18695] fuse: Bad value for 'fd' [ 1154.603708][T18699] overlayfs: overlapping lowerdir path [ 1154.769709][T18703] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1155.814690][T18711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3859'. [ 1155.898720][T18713] tipc: Enabled bearer , priority 0 [ 1155.931777][T18712] tipc: Disabling bearer [ 1156.202221][T10739] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1156.501683][T10739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.521841][T10739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1156.542551][T10739] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1156.561692][T10739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.577469][T18722] tipc: Enabling of bearer rejected, failed to enable media [ 1156.603374][T10739] usb 3-1: config 0 descriptor?? [ 1157.477475][T18737] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3865'. [ 1157.672886][T10739] uclogic 0003:5543:0042.0035: No inputs registered, leaving [ 1157.672989][T18734] /dev/nullb0: Can't lookup blockdev [ 1157.693968][T10739] uclogic 0003:5543:0042.0035: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 1157.919411][T10739] usb 3-1: USB disconnect, device number 115 [ 1158.254143][T18746] FAULT_INJECTION: forcing a failure. [ 1158.254143][T18746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1158.425868][T18746] CPU: 1 UID: 0 PID: 18746 Comm: syz.9.3870 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 1158.425898][T18746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1158.425909][T18746] Call Trace: [ 1158.425917][T18746] [ 1158.425925][T18746] dump_stack_lvl+0x241/0x360 [ 1158.425952][T18746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1158.425967][T18746] ? __pfx__printk+0x10/0x10 [ 1158.425982][T18746] ? __pfx_lock_release+0x10/0x10 [ 1158.425999][T18746] should_fail_ex+0x40a/0x550 [ 1158.426013][T18746] _copy_from_user+0x2d/0xb0 [ 1158.426023][T18746] vmemdup_user+0x149/0x1c0 [ 1158.426039][T18746] path_setxattrat+0x354/0x510 [ 1158.426055][T18746] ? __pfx_path_setxattrat+0x10/0x10 [ 1158.426068][T18746] ? vfs_write+0x7fa/0xd10 [ 1158.426092][T18746] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1158.426105][T18746] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1158.426120][T18746] __x64_sys_fsetxattr+0xbc/0xe0 [ 1158.426134][T18746] do_syscall_64+0xf3/0x230 [ 1158.426154][T18746] ? clear_bhb_loop+0x35/0x90 [ 1158.426169][T18746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.426181][T18746] RIP: 0033:0x7f324638cde9 [ 1158.426191][T18746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1158.426199][T18746] RSP: 002b:00007f324721f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 1158.426210][T18746] RAX: ffffffffffffffda RBX: 00007f32465a6080 RCX: 00007f324638cde9 [ 1158.426217][T18746] RDX: 0000400000000280 RSI: 0000400000000240 RDI: 0000000000000003 [ 1158.426224][T18746] RBP: 00007f324721f090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.426230][T18746] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 1158.426236][T18746] R13: 0000000000000000 R14: 00007f32465a6080 R15: 00007ffd990fd278 [ 1158.426249][T18746] [ 1159.367650][T18753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3872'. [ 1159.493721][T18753] /dev/sg0: Can't lookup blockdev [ 1160.312553][T18767] syzkaller0: entered promiscuous mode [ 1160.331519][T18767] syzkaller0: entered allmulticast mode [ 1161.750431][ T5842] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1161.937488][ T5842] usb 3-1: Using ep0 maxpacket: 8 [ 1161.956352][ T5842] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1161.979245][ T5842] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1161.994344][ T5842] usb 3-1: Product: syz [ 1162.000396][ T5842] usb 3-1: Manufacturer: syz [ 1162.005132][ T5842] usb 3-1: SerialNumber: syz [ 1162.016249][ T5842] usb 3-1: config 0 descriptor?? [ 1162.025440][ T5842] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1162.504037][ T5842] gspca_zc3xx: reg_r err -71 [ 1162.522187][ T5842] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1162.535012][ T5842] usb 3-1: USB disconnect, device number 116 [ 1163.539370][T18805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3889'. [ 1164.678864][ T5842] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1164.858384][ T5842] usb 2-1: Using ep0 maxpacket: 32 [ 1164.876089][ T5842] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.897902][ T5842] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1164.934977][ T5842] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1164.979011][ T5842] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 72, changing to 7 [ 1164.991306][ T5842] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1165.000957][ T5842] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1165.010635][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.019025][ T5842] usb 2-1: Product: syz [ 1165.023836][ T5842] usb 2-1: Manufacturer: syz [ 1165.030601][ T5842] usb 2-1: SerialNumber: syz [ 1165.293796][T18792] 8021q: VLANs not supported on lo [ 1165.379809][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.453783][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.556558][ T5842] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1165.564479][ T5842] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1165.867611][ T29] audit: type=1326 audit(1739339395.177:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18817 comm="syz.9.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1166.043290][ T29] audit: type=1326 audit(1739339395.177:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18817 comm="syz.9.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1166.110085][ T5842] usb 2-1: USB disconnect, device number 47 [ 1166.134819][ T29] audit: type=1326 audit(1739339395.177:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18817 comm="syz.9.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1166.225181][T18829] /dev/sg0: Can't lookup blockdev [ 1166.671899][T18826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3894'. [ 1166.681093][ T29] audit: type=1326 audit(1739339395.186:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18817 comm="syz.9.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1166.793249][ T29] audit: type=1326 audit(1739339395.186:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18817 comm="syz.9.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1166.851355][ T29] audit: type=1326 audit(1739339395.196:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18820 comm="syz.9.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f32463bf6a5 code=0x7ffc0000 [ 1166.874371][ T29] audit: type=1326 audit(1739339395.345:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18817 comm="syz.9.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1166.897494][ T29] audit: type=1326 audit(1739339395.392:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18817 comm="syz.9.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1166.919413][ T29] audit: type=1326 audit(1739339395.392:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18817 comm="syz.9.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1166.941391][ T29] audit: type=1326 audit(1739339395.486:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18817 comm="syz.9.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f324638cde9 code=0x7ffc0000 [ 1166.950944][ T5842] libceph: connect (1)[c::]:6789 error -101 [ 1167.094827][T10756] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1167.565119][ T5842] libceph: mon0 (1)[c::]:6789 connect error [ 1167.574357][T18833] ceph: No mds server is up or the cluster is laggy [ 1167.736871][T18846] syzkaller0: entered promiscuous mode [ 1167.742515][T18846] syzkaller0: entered allmulticast mode [ 1167.768193][T10756] usb 2-1: Using ep0 maxpacket: 8 [ 1167.783833][T10756] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1167.800247][T10756] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 1167.813844][T10756] usb 2-1: config 0 has no interface number 0 [ 1167.839384][T10756] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1167.864338][T10756] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1167.877388][T10756] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1167.897933][T10756] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1167.917802][T10756] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1167.926008][T10756] usb 2-1: Product: syz [ 1167.930255][T10756] usb 2-1: Manufacturer: syz [ 1167.936821][T10756] usb 2-1: config 0 descriptor?? [ 1167.942526][T18836] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1168.119257][T18858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3904'. [ 1168.196501][T18860] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3903'. [ 1168.757950][T10756] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input61 [ 1169.947188][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1170.187435][ T5842] usb 2-1: USB disconnect, device number 48 [ 1170.187579][ C1] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1171.238594][T18887] /dev/sg0: Can't lookup blockdev [ 1171.660740][T18889] netlink: 'syz.2.3913': attribute type 29 has an invalid length. [ 1171.686797][T18889] netlink: 'syz.2.3913': attribute type 29 has an invalid length. [ 1171.833785][T18894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1172.410543][T18903] overlayfs: failed to resolve './file0': -2 [ 1173.313979][T18908] syzkaller0: entered promiscuous mode [ 1173.324927][T18908] syzkaller0: entered allmulticast mode [ 1174.463057][T18928] /dev/sg0: Can't lookup blockdev [ 1174.640754][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3927'. [ 1175.545697][T18934] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1177.863256][T18958] dlm: non-version read from control device 0 [ 1180.566032][T18980] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1180.579291][T18980] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1181.376464][T18989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3948'. [ 1182.065219][T18995] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3945'. [ 1182.218617][T19003] /dev/sg0: Can't lookup blockdev [ 1182.953575][T19019] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1184.206636][T19034] netlink: 'syz.2.3960': attribute type 3 has an invalid length. [ 1184.215003][T19034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3960'. [ 1184.224292][T19034] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1185.575374][T19046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3964'. [ 1185.868085][T19054] 0: reclassify loop, rule prio 0, protocol 800 [ 1185.901901][T19059] FAULT_INJECTION: forcing a failure. [ 1185.901901][T19059] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.932763][T19054] 0: reclassify loop, rule prio 0, protocol 800 [ 1185.974603][T19059] CPU: 0 UID: 0 PID: 19059 Comm: syz.1.3971 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 1185.974626][T19059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1185.974637][T19059] Call Trace: [ 1185.974643][T19059] [ 1185.974650][T19059] dump_stack_lvl+0x241/0x360 [ 1185.974681][T19059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1185.974705][T19059] ? __pfx__printk+0x10/0x10 [ 1185.974730][T19059] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1185.974761][T19059] ? __pfx___might_resched+0x10/0x10 [ 1185.974785][T19059] should_fail_ex+0x40a/0x550 [ 1185.974809][T19059] should_failslab+0xac/0x100 [ 1185.974830][T19059] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1185.974850][T19059] ? __alloc_skb+0x1c3/0x440 [ 1185.974877][T19059] __alloc_skb+0x1c3/0x440 [ 1185.974905][T19059] ? __pfx___alloc_skb+0x10/0x10 [ 1185.974931][T19059] ? netlink_ack_tlv_len+0x6e/0x200 [ 1185.974958][T19059] netlink_ack+0x145/0xa50 [ 1185.974979][T19059] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1185.974999][T19059] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1185.975020][T19059] ? __pfx___might_resched+0x10/0x10 [ 1185.975047][T19059] netlink_rcv_skb+0x262/0x430 [ 1185.975072][T19059] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1185.975094][T19059] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1185.975130][T19059] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 1185.975161][T19059] genl_rcv+0x28/0x40 [ 1185.975179][T19059] netlink_unicast+0x7f6/0x990 [ 1185.975210][T19059] ? __pfx_netlink_unicast+0x10/0x10 [ 1185.975230][T19059] ? __virt_addr_valid+0x45f/0x530 [ 1185.975253][T19059] ? __phys_addr_symbol+0x2f/0x70 [ 1185.975273][T19059] ? __check_object_size+0x47a/0x730 [ 1185.975299][T19059] netlink_sendmsg+0x8e4/0xcb0 [ 1185.975326][T19059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1185.975355][T19059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1185.975369][T19059] __sock_sendmsg+0x221/0x270 [ 1185.975392][T19059] ____sys_sendmsg+0x52a/0x7e0 [ 1185.975418][T19059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1185.975433][T19059] ? __fget_files+0x2a/0x410 [ 1185.975456][T19059] ? __fget_files+0x2a/0x410 [ 1185.975484][T19059] __sys_sendmsg+0x269/0x350 [ 1185.975506][T19059] ? __pfx___sys_sendmsg+0x10/0x10 [ 1185.975534][T19059] ? do_sys_openat2+0x17a/0x1d0 [ 1185.975580][T19059] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1185.975614][T19059] ? do_syscall_64+0x100/0x230 [ 1185.975639][T19059] ? do_syscall_64+0xb6/0x230 [ 1185.975663][T19059] do_syscall_64+0xf3/0x230 [ 1185.975684][T19059] ? clear_bhb_loop+0x35/0x90 [ 1185.975708][T19059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.975729][T19059] RIP: 0033:0x7fbac7d8cde9 [ 1185.975750][T19059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1185.975764][T19059] RSP: 002b:00007fbac8c78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1185.975782][T19059] RAX: ffffffffffffffda RBX: 00007fbac7fa5fa0 RCX: 00007fbac7d8cde9 [ 1185.975794][T19059] RDX: 0000000000000000 RSI: 0000400000000400 RDI: 0000000000000003 [ 1185.975805][T19059] RBP: 00007fbac8c78090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.975816][T19059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.975826][T19059] R13: 0000000000000000 R14: 00007fbac7fa5fa0 R15: 00007ffefc4dd818 [ 1185.975854][T19059] [ 1186.331409][T19054] 0: reclassify loop, rule prio 0, protocol 800 [ 1186.367416][ T5842] 0: reclassify loop, rule prio 0, protocol 800 [ 1186.573129][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1186.621826][T19068] wlan0 speed is unknown, defaulting to 1000 [ 1186.650436][T19068] »»»»»» speed is unknown, defaulting to 1000 [ 1186.904371][ T5842] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1187.032626][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1187.099303][ T5842] usb 2-1: device descriptor read/64, error -71 [ 1187.760252][ T5842] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1187.910310][ T5842] usb 2-1: device descriptor read/64, error -71 [ 1187.984097][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1188.227155][ T5842] usb usb2-port1: attempt power cycle [ 1188.404784][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1188.404799][ T29] audit: type=1326 audit(1739339416.523:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19088 comm="syz.5.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370a18cde9 code=0x7ffc0000 [ 1188.505241][ T29] audit: type=1326 audit(1739339416.523:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19088 comm="syz.5.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370a18cde9 code=0x7ffc0000 [ 1188.582316][ T29] audit: type=1326 audit(1739339416.551:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19088 comm="syz.5.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f370a18cde9 code=0x7ffc0000 [ 1188.689723][ T5842] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1188.735072][ T29] audit: type=1326 audit(1739339416.551:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19088 comm="syz.5.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370a18cde9 code=0x7ffc0000 [ 1188.777015][ T5842] usb 2-1: device descriptor read/8, error -71 [ 1188.799416][ T29] audit: type=1326 audit(1739339416.551:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19088 comm="syz.5.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370a18cde9 code=0x7ffc0000 [ 1188.848495][ T29] audit: type=1326 audit(1739339416.551:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19090 comm="syz.5.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f370a1bf6a5 code=0x7ffc0000 [ 1188.880956][ T29] audit: type=1326 audit(1739339416.569:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19088 comm="syz.5.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f370a18cde9 code=0x7ffc0000 [ 1188.905887][T19095] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3982'. [ 1188.914990][T19095] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3982'. [ 1188.993550][ T29] audit: type=1326 audit(1739339416.579:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19088 comm="syz.5.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370a18cde9 code=0x7ffc0000 [ 1189.053573][ T5842] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1189.061571][ T29] audit: type=1326 audit(1739339416.579:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19088 comm="syz.5.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370a18cde9 code=0x7ffc0000 [ 1189.086396][ T5842] usb 2-1: device descriptor read/8, error -71 [ 1189.092629][ T29] audit: type=1326 audit(1739339416.579:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19088 comm="syz.5.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f370a18cde9 code=0x7ffc0000 [ 1189.203241][ T5842] usb usb2-port1: unable to enumerate USB device [ 1189.282935][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.294152][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.626215][T19115] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1189.865693][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1190.246796][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 1192.138205][ T5842] 0: reclassify loop, rule prio 0, protocol 800 [ 1192.431432][T15390] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1192.439549][T11172] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1192.442357][ T5136] Bluetooth: hci4: command 0x1003 tx timeout [ 1192.581520][T15390] usb 10-1: device descriptor read/64, error -71 [ 1192.837803][T15390] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1192.998494][T15390] usb 10-1: device descriptor read/64, error -71 [ 1193.543363][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1194.386735][T15390] usb usb10-port1: attempt power cycle [ 1194.489393][T19169] netlink: 'syz.2.4008': attribute type 1 has an invalid length. [ 1194.506565][T19169] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1194.518532][T19169] bond0: (slave lo): Error: Device can not be enslaved while up [ 1195.821713][ T5842] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1196.018069][ T5842] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1196.056461][ T5842] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1196.097581][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.154279][ T5842] usb 3-1: config 0 descriptor?? [ 1196.699418][T19200] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1196.711280][T19200] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1197.346266][ T5842] video4linux radio48: keene_cmd_set failed (-110) [ 1197.363673][ T5842] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 1197.781408][T19209] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4021'. [ 1198.097723][T15390] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1198.432173][T15390] usb 2-1: Using ep0 maxpacket: 16 [ 1198.538108][T15390] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1198.574436][T15390] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.602432][T15390] usb 2-1: Product: syz [ 1198.623942][T15390] usb 2-1: Manufacturer: syz [ 1198.664187][T15390] usb 2-1: SerialNumber: syz [ 1198.686688][T15390] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1198.705141][T15390] r8152-cfgselector 2-1: config 0 descriptor?? [ 1198.858778][T10738] usb 3-1: USB disconnect, device number 117 [ 1199.293178][T10738] r8152-cfgselector 2-1: USB disconnect, device number 53 [ 1200.101085][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 1200.101133][ T29] audit: type=1326 audit(1739339427.467:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19244 comm="syz.5.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370a18cde9 code=0x7ffc0000 [ 1200.139601][ T29] audit: type=1326 audit(1739339427.467:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19244 comm="syz.5.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370a18cde9 code=0x7ffc0000 [ 1200.193052][T10739] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1200.221762][ T29] audit: type=1326 audit(1739339427.504:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19244 comm="syz.5.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f370a18cde9 code=0x7ffc0000 [ 1200.280043][ T29] audit: type=1326 audit(1739339427.523:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19244 comm="syz.5.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370a18cde9 code=0x7ffc0000 [ 1200.318590][ T29] audit: type=1326 audit(1739339427.523:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19244 comm="syz.5.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370a18cde9 code=0x7ffc0000 [ 1200.446266][T10739] usb 2-1: Using ep0 maxpacket: 8 [ 1200.488172][ T29] audit: type=1326 audit(1739339427.523:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19246 comm="syz.5.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f370a1bf6a5 code=0x7ffc0000 [ 1201.196201][T11172] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1201.202479][ T5136] Bluetooth: hci0: command 0x0c1a tx timeout [ 1201.219400][T10739] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1201.240821][T10739] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 1201.249150][T10739] usb 2-1: config 0 has no interface number 0 [ 1201.261999][T10739] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x65, changing to 0x5 [ 1201.275293][T10739] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x5 has invalid maxpacket 46747, setting to 1024 [ 1201.281261][ T29] audit: type=1326 audit(1739339427.551:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19244 comm="syz.5.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f370a18cde9 code=0x7ffc0000 [ 1201.286647][T10739] usb 2-1: config 0 interface 21 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1201.307995][ C0] vkms_vblank_simulate: vblank timer overrun [ 1201.384442][T10739] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1201.394031][T10739] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1201.402622][T10739] usb 2-1: Product: syz [ 1201.406983][T10739] usb 2-1: Manufacturer: syz [ 1201.411849][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1201.420182][ T29] audit: type=1326 audit(1739339427.560:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19244 comm="syz.5.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370a18cde9 code=0x7ffc0000 [ 1201.457157][T10739] usb 2-1: config 0 descriptor?? [ 1201.474484][T19243] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1201.494990][ T29] audit: type=1326 audit(1739339427.560:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19244 comm="syz.5.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370a18cde9 code=0x7ffc0000 [ 1201.555780][ T29] audit: type=1326 audit(1739339427.560:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19244 comm="syz.5.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f370a18cde9 code=0x7ffc0000 [ 1201.580361][T19256] /dev/nullb0: Can't lookup blockdev [ 1201.645056][T19259] sctp: [Deprecated]: syz.9.4036 (pid 19259) Use of int in max_burst socket option. [ 1201.645056][T19259] Use struct sctp_assoc_value instead [ 1201.884585][T19243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.096001][T10738] 0: reclassify loop, rule prio 0, protocol 800 [ 1202.368484][T19243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.747850][T10756] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1202.783021][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 1202.817406][T19274] netlink: 'syz.1.4032': attribute type 1 has an invalid length. [ 1202.929981][T19274] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1202.983136][T10756] usb 3-1: Using ep0 maxpacket: 16 [ 1203.002668][T10756] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1203.062364][T10756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.113926][T10756] usb 3-1: Product: syz [ 1203.140370][T10756] usb 3-1: Manufacturer: syz [ 1203.210230][T10756] usb 3-1: SerialNumber: syz [ 1203.556066][T10756] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1203.566705][T10756] r8152-cfgselector 3-1: config 0 descriptor?? [ 1204.139244][ T5842] r8152-cfgselector 3-1: USB disconnect, device number 118 [ 1204.188922][T10756] usb 2-1: USB disconnect, device number 54 [ 1205.382511][T19304] x_tables: duplicate underflow at hook 1 [ 1206.000886][T19310] overlayfs: failed to clone lowerpath [ 1206.135971][ T5136] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1206.138679][T19314] overlayfs: failed to clone upperpath [ 1206.169140][T11172] Bluetooth: hci0: command 0x0c1a tx timeout [ 1206.901672][T19330] Mount JFS Failure: -22 [ 1206.906236][T19330] jfs_mount failed w/return code = -22 [ 1207.526950][T19339] syz.2.4066 (19339): attempted to duplicate a private mapping with mremap. This is not supported. [ 1208.738113][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.757565][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.868991][ T5842] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1209.410759][ T5842] usb 3-1: Using ep0 maxpacket: 32 [ 1209.731784][T15300] 0: reclassify loop, rule prio 0, protocol 800 [ 1209.751552][ T5842] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.772360][ T5842] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1209.783858][ T5842] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1209.814738][ T5842] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 72, changing to 7 [ 1209.860007][ T5842] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1209.899705][ T5842] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1209.946382][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.138213][ T5842] usb 3-1: Product: syz [ 1210.142470][ T5842] usb 3-1: Manufacturer: syz [ 1210.149692][ T5842] usb 3-1: SerialNumber: syz [ 1210.166164][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1210.246113][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.269046][T19362] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4073'. [ 1210.618200][ T5842] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1210.626158][ T5842] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1212.717602][T10738] 0: reclassify loop, rule prio 0, protocol 800 [ 1212.737566][ T7345] 0: reclassify loop, rule prio 0, protocol 800 [ 1216.463978][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1245.884554][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1325.005602][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1325.012598][ C0] rcu: 1-...!: (1 GPs behind) idle=1154/1/0x4000000000000000 softirq=75236/75237 fqs=1 [ 1325.024279][ C0] rcu: (detected by 0, t=10502 jiffies, g=96481, q=352 ncpus=2) [ 1325.032016][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1325.032054][ C1] NMI backtrace for cpu 1 [ 1325.032068][ C1] CPU: 1 UID: 0 PID: 19320 Comm: syz.7.4059 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 1325.032086][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1325.032097][ C1] RIP: 0010:lock_release+0x643/0xa30 [ 1325.032124][ C1] Code: c7 84 24 90 00 00 00 00 00 00 00 9c 8f 84 24 90 00 00 00 42 80 3c 3b 00 74 08 4c 89 f7 e8 65 8a 88 00 f6 84 24 91 00 00 00 02 <75> 77 41 f7 c5 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 4b [ 1325.032137][ C1] RSP: 0018:ffffc90000a18b20 EFLAGS: 00000046 [ 1325.032153][ C1] RAX: 0000000000000001 RBX: 1ffff92000143176 RCX: ffffc90000a18b03 [ 1325.032164][ C1] RDX: 0000000000000000 RSI: ffffffff8c0ab8e0 RDI: ffffffff8c5fb900 [ 1325.032176][ C1] RBP: ffffc90000a18c50 R08: ffffffff901a3677 R09: 1ffffffff20346ce [ 1325.032188][ C1] R10: dffffc0000000000 R11: fffffbfff20346cf R12: 1ffff92000143170 [ 1325.032200][ C1] R13: 0000000000000046 R14: ffffc90000a18bb0 R15: dffffc0000000000 [ 1325.032212][ C1] FS: 00007faaa91f66c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1325.032226][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1325.032237][ C1] CR2: 000040000004a000 CR3: 0000000034a2c000 CR4: 00000000003526f0 [ 1325.032251][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1325.032261][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1325.032271][ C1] Call Trace: [ 1325.032278][ C1] [ 1325.032286][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1325.032307][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1325.032328][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1325.032344][ C1] ? nmi_handle+0x2a/0x5a0 [ 1325.032378][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1325.032395][ C1] ? nmi_handle+0x14f/0x5a0 [ 1325.032415][ C1] ? nmi_handle+0x2a/0x5a0 [ 1325.032436][ C1] ? lock_release+0x643/0xa30 [ 1325.032454][ C1] ? default_do_nmi+0x63/0x160 [ 1325.032471][ C1] ? exc_nmi+0x123/0x1f0 [ 1325.032486][ C1] ? end_repeat_nmi+0xf/0x53 [ 1325.032512][ C1] ? lock_release+0x643/0xa30 [ 1325.032531][ C1] ? lock_release+0x643/0xa30 [ 1325.032550][ C1] ? lock_release+0x643/0xa30 [ 1325.032569][ C1] [ 1325.032575][ C1] [ 1325.032584][ C1] ? advance_sched+0x9b4/0xca0 [ 1325.032600][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 1325.032616][ C1] ? __pfx_lock_release+0x10/0x10 [ 1325.032638][ C1] ? taprio_set_budgets+0x333/0x370 [ 1325.032658][ C1] _raw_spin_unlock+0x16/0x50 [ 1325.032675][ C1] advance_sched+0x9b4/0xca0 [ 1325.032692][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1325.032711][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1325.032733][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1325.032750][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 1325.032781][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1325.032802][ C1] ? sched_clock+0x4a/0x70 [ 1325.032819][ C1] ? read_tsc+0x9/0x20 [ 1325.032834][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1325.032856][ C1] hrtimer_interrupt+0x403/0xa40 [ 1325.032888][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1325.032911][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1325.032930][ C1] [ 1325.032936][ C1] [ 1325.032942][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1325.032964][ C1] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 1325.032986][ C1] Code: c9 50 e8 49 0a 0c 00 48 83 c4 08 4c 89 f7 e8 fd 39 00 00 e9 de 04 00 00 4c 89 f7 e8 90 2d 62 0a e8 8b 75 38 00 fb 48 8b 5d c0 <48> 8d bb 08 16 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 1325.032999][ C1] RSP: 0018:ffffc90003baf588 EFLAGS: 00000282 [ 1325.033012][ C1] RAX: 083a5bfbb42e2700 RBX: ffff8880206c9e00 RCX: ffffffff9a3cd903 [ 1325.033024][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0aa680 RDI: ffffffff8c5fb900 [ 1325.033035][ C1] RBP: ffffc90003baf5d0 R08: ffffffff901a3677 R09: 1ffffffff20346ce [ 1325.033047][ C1] R10: dffffc0000000000 R11: fffffbfff20346cf R12: 1ffff110170e7ebe [ 1325.033059][ C1] R13: dffffc0000000000 R14: ffff8880b863e7c0 R15: ffff8880b873f5f0 [ 1325.033079][ C1] ? finish_task_switch+0x1e5/0x870 [ 1325.033103][ C1] __schedule+0x18c4/0x4c40 [ 1325.033131][ C1] ? __pfx___schedule+0x10/0x10 [ 1325.033150][ C1] ? __pfx_lock_release+0x10/0x10 [ 1325.033177][ C1] ? schedule+0x90/0x320 [ 1325.033193][ C1] schedule+0x14b/0x320 [ 1325.033212][ C1] schedule_timeout+0xb0/0x290 [ 1325.033228][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1325.033243][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1325.033267][ C1] ? wait_for_completion+0x2fe/0x620 [ 1325.033286][ C1] ? wait_for_completion+0x2fe/0x620 [ 1325.033304][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1325.033321][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1325.033340][ C1] ? wait_for_completion+0x2fe/0x620 [ 1325.033360][ C1] wait_for_completion+0x355/0x620 [ 1325.033384][ C1] ? __smp_call_single_queue+0x11a/0x3a0 [ 1325.033413][ C1] ? __pfx_wait_for_completion+0x10/0x10 [ 1325.033436][ C1] ? smp_call_function_single_async+0xb4/0x110 [ 1325.033460][ C1] rdmsr_safe_on_cpu+0x16c/0x310 [ 1325.033486][ C1] ? __pfx_rdmsr_safe_on_cpu+0x10/0x10 [ 1325.033509][ C1] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 1325.033533][ C1] ? __pfx_lock_release+0x10/0x10 [ 1325.033557][ C1] ? __might_fault+0xaa/0x120 [ 1325.033579][ C1] ? __might_fault+0xc6/0x120 [ 1325.033605][ C1] msr_read+0x15d/0x260 [ 1325.033628][ C1] ? __pfx_msr_read+0x10/0x10 [ 1325.033649][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 1325.033665][ C1] ? rw_verify_area+0x243/0x630 [ 1325.033689][ C1] ? __pfx_msr_read+0x10/0x10 [ 1325.033711][ C1] vfs_read+0x1f8/0xb40 [ 1325.033738][ C1] ? __pfx_vfs_read+0x10/0x10 [ 1325.033762][ C1] ? __fget_files+0x2a/0x410 [ 1325.033782][ C1] ? __fget_files+0x395/0x410 [ 1325.033800][ C1] ? __fget_files+0x2a/0x410 [ 1325.033823][ C1] ksys_read+0x18f/0x2b0 [ 1325.033839][ C1] ? __pfx_ksys_read+0x10/0x10 [ 1325.033853][ C1] ? do_syscall_64+0x100/0x230 [ 1325.033874][ C1] ? do_syscall_64+0xb6/0x230 [ 1325.033896][ C1] do_syscall_64+0xf3/0x230 [ 1325.033916][ C1] ? clear_bhb_loop+0x35/0x90 [ 1325.033939][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.033960][ C1] RIP: 0033:0x7faaab38cde9 [ 1325.033975][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1325.033987][ C1] RSP: 002b:00007faaa91f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1325.034002][ C1] RAX: ffffffffffffffda RBX: 00007faaab5a5fa0 RCX: 00007faaab38cde9 [ 1325.034014][ C1] RDX: 0000000000018ff8 RSI: 0000400000019680 RDI: 0000000000000005 [ 1325.034025][ C1] RBP: 00007faaab40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1325.034035][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1325.034044][ C1] R13: 0000000000000000 R14: 00007faaab5a5fa0 R15: 00007ffdbf943fd8 [ 1325.034063][ C1] [ 1325.035047][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g96481 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1325.713648][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1325.723626][ C0] rcu: RCU grace-period kthread stack dump: [ 1325.729514][ C0] task:rcu_preempt state:R running task stack:25328 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1325.743018][ C0] Call Trace: [ 1325.746299][ C0] [ 1325.749239][ C0] __schedule+0x18bc/0x4c40 [ 1325.753759][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1325.759804][ C0] ? __pfx___schedule+0x10/0x10 [ 1325.764679][ C0] ? __pfx_lock_release+0x10/0x10 [ 1325.769727][ C0] ? __pfx___mod_timer+0x10/0x10 [ 1325.774674][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1325.781020][ C0] ? schedule+0x90/0x320 [ 1325.785366][ C0] schedule+0x14b/0x320 [ 1325.789547][ C0] schedule_timeout+0x15a/0x290 [ 1325.794405][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1325.799785][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1325.805092][ C0] ? prepare_to_swait_event+0x330/0x350 [ 1325.810650][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 1325.815510][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1325.820730][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1325.826634][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1325.831939][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1325.837145][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 1325.841747][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1325.846956][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1325.852861][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1325.857894][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1325.863101][ C0] kthread+0x7a9/0x920 [ 1325.867176][ C0] ? __pfx_kthread+0x10/0x10 [ 1325.871784][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1325.876992][ C0] ? __pfx_kthread+0x10/0x10 [ 1325.881591][ C0] ? __pfx_kthread+0x10/0x10 [ 1325.886191][ C0] ? __pfx_kthread+0x10/0x10 [ 1325.890795][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1325.896000][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1325.901210][ C0] ? __pfx_kthread+0x10/0x10 [ 1325.905813][ C0] ret_from_fork+0x4b/0x80 [ 1325.910240][ C0] ? __pfx_kthread+0x10/0x10 [ 1325.914840][ C0] ret_from_fork_asm+0x1a/0x30 [ 1325.919626][ C0] [ 1325.922649][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1325.928976][ C0] CPU: 0 UID: 0 PID: 15965 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 1325.939907][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1325.949970][ C0] RIP: 0010:smp_call_function_many_cond+0x1ba4/0x2d30 [ 1325.956746][ C0] Code: 03 84 c0 75 7e 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 b0 e8 0b 00 41 83 e4 01 4c 8b 64 24 68 75 07 e8 60 e4 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 [ 1325.976353][ C0] RSP: 0000:ffffc9000c8df460 EFLAGS: 00000293 [ 1325.982427][ C0] RAX: ffffffff81b36b05 RBX: 1ffff110170e88c9 RCX: ffff88801c280000 [ 1325.990404][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1325.998374][ C0] RBP: ffffc9000c8df660 R08: ffffffff81b36ad0 R09: 1ffffffff2858d08 [ 1326.006348][ C0] R10: dffffc0000000000 R11: fffffbfff2858d09 R12: ffff8880b863f9c8 [ 1326.014323][ C0] R13: ffff8880b8744648 R14: ffff8880b863f9c0 R15: 0000000000000001 [ 1326.022297][ C0] FS: 0000555571145500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1326.031241][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1326.037827][ C0] CR2: 00005555711605c8 CR3: 000000004d0ee000 CR4: 00000000003526f0 [ 1326.045804][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1326.053776][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1326.061747][ C0] Call Trace: [ 1326.065031][ C0] [ 1326.067882][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1326.074229][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 1326.079884][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1326.085700][ C0] ? cgroup_rstat_updated+0x13b/0xc30 [ 1326.091096][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1326.097354][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 1326.102747][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1326.108400][ C0] ? update_process_times+0x242/0x2f0 [ 1326.113779][ C0] ? tick_nohz_handler+0x37c/0x500 [ 1326.118897][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1326.124365][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 1326.129767][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1326.135497][ C0] ? sched_clock+0x4a/0x70 [ 1326.139923][ C0] ? read_tsc+0x9/0x20 [ 1326.143995][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1326.150076][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 1326.155228][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 1326.161397][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1326.167214][ C0] [ 1326.170146][ C0] [ 1326.173082][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1326.179250][ C0] ? smp_call_function_many_cond+0x1b90/0x2d30 [ 1326.185414][ C0] ? smp_call_function_many_cond+0x1bc5/0x2d30 [ 1326.191579][ C0] ? smp_call_function_many_cond+0x1ba4/0x2d30 [ 1326.197742][ C0] ? mark_lock+0x9a/0x360 [ 1326.202085][ C0] ? __lock_acquire+0x1397/0x2100 [ 1326.207115][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 1326.212516][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1326.218862][ C0] ? rcu_is_watching+0x15/0xb0 [ 1326.223638][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1326.228848][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 1326.234233][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1326.239361][ C0] flush_tlb_mm_range+0x42d/0x710 [ 1326.244406][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1326.249964][ C0] ? page_ext_get+0x1d6/0x2a0 [ 1326.254653][ C0] ptep_clear_flush+0x11a/0x170 [ 1326.259520][ C0] do_wp_page+0x1c64/0x49b0 [ 1326.264035][ C0] ? do_wp_page+0x163e/0x49b0 [ 1326.268735][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 1326.273600][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1326.278632][ C0] ? rcu_is_watching+0x15/0xb0 [ 1326.283415][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 1326.288444][ C0] ? __pfx____pte_offset_map+0x10/0x10 [ 1326.293930][ C0] __handle_mm_fault+0x24d5/0x70f0 [ 1326.299079][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1326.304563][ C0] ? __pfx_reacquire_held_locks+0x10/0x10 [ 1326.310308][ C0] ? mtree_range_walk+0x6fd/0x8e0 [ 1326.315339][ C0] ? lock_vma_under_rcu+0x1dd/0x790 [ 1326.320552][ C0] ? __pfx_lock_release+0x10/0x10 [ 1326.325585][ C0] ? lock_vma_under_rcu+0x34b/0x790 [ 1326.330814][ C0] ? lock_vma_under_rcu+0x1dd/0x790 [ 1326.336024][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1326.341577][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1326.347568][ C0] handle_mm_fault+0x2c1/0x7e0 [ 1326.352353][ C0] exc_page_fault+0x459/0x8b0 [ 1326.357046][ C0] asm_exc_page_fault+0x26/0x30 [ 1326.361905][ C0] RIP: 0033:0x7faaab34b23f [ 1326.366324][ C0] Code: 8d 34 19 48 39 d5 48 89 75 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 eb 80 48 8d 0d 01 c0 0e 00 48 8d 15 05 d2 0e 00 bf 01 [ 1326.385934][ C0] RSP: 002b:00007ffdbf944200 EFLAGS: 00010206 [ 1326.392007][ C0] RAX: 0000000000018a41 RBX: 0000000000008040 RCX: 0000555571158590 [ 1326.399980][ C0] RDX: 0000000000008041 RSI: 00005555711605c0 RDI: 0000000000000004 [ 1326.407952][ C0] RBP: 00007faaab57cca0 R08: 0000000000000000 R09: 0000000000000000 [ 1326.415926][ C0] R10: 0000000000001000 R11: 0000000000000802 R12: 0000000000008030 [ 1326.423901][ C0] R13: 0000000000000076 R14: 00007faaab57cd00 R15: 0000000000000000 [ 1326.431892][ C0]