last executing test programs: 2m44.324461761s ago: executing program 0 (id=86): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) write$binfmt_aout(r1, &(0x7f0000001640)=ANY=[], 0x5ea) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000d40)="2d4c1550763c72815ddc2dbd45ac03a07ca79d2f6d6558cc303fc4f3f6b32a73970e9e2ce85209ee7e181a4968d136ba24649cd436f1c3da49676f409cd3bb90c639abf1bb4f48b854651846835a079f040eb31d0eb83d3d9c99dc5fbd", 0x5d}, {0x0}], 0x2, 0xf1, 0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}}, 0x4, 0x8}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r3, @in={{0x2, 0x4e21, @multicast2}}, 0x5, 0x0, 0xffff0dec, 0x4, 0x20, 0x6}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r3, @in={{0x2, 0x4e21, @multicast2}}, 0x5, 0x0, 0xffff0dec, 0x4, 0x20, 0x6}, 0x9c) 2m43.485468578s ago: executing program 0 (id=89): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x38, r3, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x38}}, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) 2m43.324188889s ago: executing program 0 (id=90): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/clear_refs\x00', 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in=@broadcast, @in6=@private2}, {@in6=@rand_addr=' \x01\x00'}, @in6=@remote, {}, {}, {0x0, 0x2}, 0x0, 0x3503}, 0x6, 0x80000}}, 0xf8}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r6) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) ppoll(&(0x7f0000000000)=[{r7, 0x4047}], 0x1, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$802154_dgram(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)="4e01fdac64a15d994120a211ce70e0a46edb2db1ad7acc286280963adee1ed61e78c01ff309ad4f3fdf56bd3deffdf0eee55a445835b1c2ba034c76fd0b69c20a85904645054f4db948724bdf2535ebabdc50ee9daa3ef606782641d1cad67c0963a28ade8662057fb2c3b4eb63b17cd", 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4011) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x3f, &(0x7f0000000300), 0x4e}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000040), &(0x7f0000000280)) 2m42.106508748s ago: executing program 0 (id=93): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="151b2020", @ANYRES16=r6, @ANYBLOB="090800000000000000000100000008000100", @ANYRES32=r5, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r4, @ANYBLOB], 0x60}}, 0x0) 2m41.847963415s ago: executing program 0 (id=95): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000d7000000d70000000b0000000100000001000006040000000b000000000000000400000000000008030000000000000003000084ffffffff0500000003000000000000000800000000000600000005000000050000000f0000000000000a030000000200000000000009090000000f0000000200000f0300000003000000e60100000500000004000000fbffffff71a50000401ac00d00f5ff04000013090000000b0000000e000000060000000a000000070000000e0000000500000002000000020000000d00000001000000f626000040209c4c69662d878100000000005f612e305f715f003000"], &(0x7f0000000580)=""/143, 0xfb, 0x8f, 0x0, 0xa, 0x0, @void, @value}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000001b8641e814ed832d66e00956d00002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020642500000000002020207b1af83717e8b800bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80000, 0x0) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x0) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800000b01"]) syz_open_dev$usbfs(&(0x7f00000000c0), 0x9, 0x54280) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) 2m40.288265416s ago: executing program 0 (id=102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'ip6tnl0\x00', {0x1}, 0xd56}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1008000010000f0057520000cea2dde1099fb31900000000"], 0x10}], 0x1}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={'veth1\x00', {0x2, 0x0, @dev}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="03000000", @ANYRES16=r6, @ANYBLOB="110000000000000000002500000008000300", @ANYRES32=r7, @ANYBLOB="0a003400020202020202000008003500000000001800508008000700000000000500020005000000040006000a00060008021100000100000800260000000000"], 0x5c}}, 0x0) dup3(r1, r0, 0x80000) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f00000005c0)={'batadv0\x00', {0x2, 0x0, @dev}}) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0xd4002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000060000000060a010400000000000000000100000008000b4000000000380004800c000180080001006c6f67002800018007000100637400001c000280080004400000000a080002400000001105000300010000000900010073797a30"], 0xd4}}, 0x0) r11 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff2}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x44050) socket$netlink(0x10, 0x3, 0x0) 2m23.994030639s ago: executing program 32 (id=102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'ip6tnl0\x00', {0x1}, 0xd56}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1008000010000f0057520000cea2dde1099fb31900000000"], 0x10}], 0x1}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={'veth1\x00', {0x2, 0x0, @dev}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="03000000", @ANYRES16=r6, @ANYBLOB="110000000000000000002500000008000300", @ANYRES32=r7, @ANYBLOB="0a003400020202020202000008003500000000001800508008000700000000000500020005000000040006000a00060008021100000100000800260000000000"], 0x5c}}, 0x0) dup3(r1, r0, 0x80000) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f00000005c0)={'batadv0\x00', {0x2, 0x0, @dev}}) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0xd4002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000060000000060a010400000000000000000100000008000b4000000000380004800c000180080001006c6f67002800018007000100637400001c000280080004400000000a080002400000001105000300010000000900010073797a30"], 0xd4}}, 0x0) r11 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff2}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x44050) socket$netlink(0x10, 0x3, 0x0) 1m22.377859725s ago: executing program 4 (id=387): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x9}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000a00)=""/139, 0x8b, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f000033f000/0x2000)=nil, 0x3) 1m21.518597142s ago: executing program 4 (id=390): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000140)={0x8, {0x400, 0x2, 0x0, 0xc}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="18040000000000000000000000000000180100002020642500000000002020207b01f8ff00000000bfa102000008000000b70300000000000085000000b10000009500000003000000000000000000000000000000000000cf479b260da6814fe99249799efa306d9d5253a10e6fdba5919866927e7a08000000ea4ec3f7dee46172cc1dc1e0e40a2a8c5ce95cba3e0050950215554041e6e55cfb3e56ca84d235a206b5445e1ba0f08e3b86d6c6851ecd969ec4f549bcce0fed1c2faf6ce314121edccd"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="45f9e8e5af9f7e488a1619ea0cd4902570249f1e29b175dfa0d3ae9be1933b972b835f966d432045a33e064403006bdb8ef95b90e76baae34f74778049ff8fa4a59adf7623aaddb922b32dbbfda740b88a07e87eb2cd97c0393db1036a1ec8a376c919cdd0b40dbb899c07f1349c7a1113f57495c795bc7e38166a7bdef463457189549f4b13279fffd050bdfea3477a62d3edea8321a2e98c65330fe7199ca6bee7202aa5a5d56c4ed4c22dbb28cebcaec033c75eb78820ad1d8ceb6f90b5", 0xbf}, {&(0x7f0000000640)="c1c8a40034f2e641b62b4615ef30e1d8f253ab64e1889171265fae014ebfba6a9f6f4c0aad3ef3e1715fb4ead561a1eba0960796b212b55e48ab51408e89440fa105fc87976083a6320a3de4802e496032c306f80bd4363828012fb84222", 0x5e}, {&(0x7f0000000840)="739cf2e7f8db9aa08b619702ce9012e934e90fd67fc70eea0ee9f679c53400244018555f5f57d9b694aa912f885c028dffbd6db1735c29948cbd1f982713169aee8efbc34fad78ad2e7c75a02c11cb8bcad843b902dbb85b158c4ca5eb04eb050eee7bb913e755bbbafa7814d78c07941177724345cba268880d83a2c085f26ef454fe7a7e359267e4c03c6e737863d6a1c26ca33a494b229d35c425b73fe743293cb577e1c2fdb30def636609ef5ac57929f6d6e00f4acab3269bd1eae6c405efd6fa2dad5d46beafe087521e1ed9b3de51329796654d5e", 0xd8}], 0x3}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000001380)={'#! ', '', [], 0xa, "7749905d65b5692f2475666e4db6188c5d2340455c957241f0f2de9807d65c2e32a9048cb340ffc25381f7955b91ace7605b1fdea205cd80afbd8b6e6b"}, 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) 1m17.259561212s ago: executing program 4 (id=403): syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000e87000/0x4000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x1f, 0x2, [@datasec={0x0, 0x1, 0x0, 0x93, 0x2, [{0x2}], "b36e"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "ddc6"}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x28}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r3, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "edd0961fcbe3a714699b769277aa362003e40900661e12bcca7f88cd6d07f3648c21a4b612af05000000a25b96f8fffffffffffffffe700a13056afd600927"}, 0x60) recvmsg(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) 1m15.970803899s ago: executing program 4 (id=407): syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000e87000/0x4000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x1f, 0x2, [@datasec={0x0, 0x1, 0x0, 0x93, 0x2, [{0x2}], "b36e"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "ddc6"}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x28}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r2, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "edd0961fcbe3a714699b769277aa362003e40900661e12bcca7f88cd6d07f3648c21a4b612af05000000a25b96f8fffffffffffffffe700a13056afd600927"}, 0x60) 1m15.601692153s ago: executing program 4 (id=409): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000003780)=0x36, 0x6a79, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000023c0), 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r3, 0x100) listen(r2, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x1) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000180)='./file1\x00') r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r7, 0x400, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x1058c0, 0x0) 1m13.956417495s ago: executing program 4 (id=413): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000140)={0x8, {0x400, 0x2, 0x0, 0xc}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="18040000000000000000000000000000180100002020642500000000002020207b01f8ff00000000bfa102000008000000b70300000000000085000000b10000009500000003000000000000000000000000000000000000cf479b260da6814fe99249799efa306d9d5253a10e6fdba5919866927e7a08000000ea4ec3f7dee46172cc1dc1e0e40a2a8c5ce95cba3e0050950215554041e6e55cfb3e56ca84d235a206b5445e1ba0f08e3b86d6c6851ecd969ec4f549bcce0fed1c2faf6ce314121edccd"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="45f9e8e5af9f7e488a1619ea0cd4902570249f1e29b175dfa0d3ae9be1933b972b835f966d432045a33e064403006bdb8ef95b90e76baae34f74778049ff8fa4a59adf7623aaddb922b32dbbfda740b88a07e87eb2cd97c0393db1036a1ec8a376c919cdd0b40dbb899c07f1349c7a1113f57495c795bc7e38166a7bdef463457189549f4b13279fffd050bdfea3477a62d3edea8321a2e98c65330fe7199ca6bee7202aa5a5d56c4ed4c22dbb28cebcaec033c75eb78820ad1d8ceb6f90b5", 0xbf}, {&(0x7f0000000640)="c1c8a40034f2e641b62b4615ef30e1d8f253ab64e1889171265fae014ebfba6a9f6f4c0aad3ef3e1715fb4ead561a1eba0960796b212b55e48ab51408e89440fa105fc87976083a6320a3de4802e496032c306f80bd4363828012fb84222", 0x5e}, {&(0x7f0000000840)="739cf2e7f8db9aa08b619702ce9012e934e90fd67fc70eea0ee9f679c53400244018555f5f57d9b694aa912f885c028dffbd6db1735c29948cbd1f982713169aee8efbc34fad78ad2e7c75a02c11cb8bcad843b902dbb85b158c4ca5eb04eb050eee7bb913e755bbbafa7814d78c07941177724345cba268880d83a2c085f26ef454fe7a7e359267e4c03c6e737863d6a1c26ca33a494b229d35c425b73fe743293cb577e1c2fdb30def636609ef5ac57929f6d6e00f4acab3269bd1eae6c405efd6fa2dad5d46beafe087521e1ed9b3de51329796654d5e", 0xd8}], 0x3}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000001380)={'#! ', '', [], 0xa, "7749905d65b5692f2475666e4db6188c5d2340455c957241f0f2de9807d65c2e32a9048cb340ffc25381f7955b91ace7605b1fdea205cd80afbd8b6e6b"}, 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) 58.564708836s ago: executing program 33 (id=413): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000140)={0x8, {0x400, 0x2, 0x0, 0xc}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="18040000000000000000000000000000180100002020642500000000002020207b01f8ff00000000bfa102000008000000b70300000000000085000000b10000009500000003000000000000000000000000000000000000cf479b260da6814fe99249799efa306d9d5253a10e6fdba5919866927e7a08000000ea4ec3f7dee46172cc1dc1e0e40a2a8c5ce95cba3e0050950215554041e6e55cfb3e56ca84d235a206b5445e1ba0f08e3b86d6c6851ecd969ec4f549bcce0fed1c2faf6ce314121edccd"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="45f9e8e5af9f7e488a1619ea0cd4902570249f1e29b175dfa0d3ae9be1933b972b835f966d432045a33e064403006bdb8ef95b90e76baae34f74778049ff8fa4a59adf7623aaddb922b32dbbfda740b88a07e87eb2cd97c0393db1036a1ec8a376c919cdd0b40dbb899c07f1349c7a1113f57495c795bc7e38166a7bdef463457189549f4b13279fffd050bdfea3477a62d3edea8321a2e98c65330fe7199ca6bee7202aa5a5d56c4ed4c22dbb28cebcaec033c75eb78820ad1d8ceb6f90b5", 0xbf}, {&(0x7f0000000640)="c1c8a40034f2e641b62b4615ef30e1d8f253ab64e1889171265fae014ebfba6a9f6f4c0aad3ef3e1715fb4ead561a1eba0960796b212b55e48ab51408e89440fa105fc87976083a6320a3de4802e496032c306f80bd4363828012fb84222", 0x5e}, {&(0x7f0000000840)="739cf2e7f8db9aa08b619702ce9012e934e90fd67fc70eea0ee9f679c53400244018555f5f57d9b694aa912f885c028dffbd6db1735c29948cbd1f982713169aee8efbc34fad78ad2e7c75a02c11cb8bcad843b902dbb85b158c4ca5eb04eb050eee7bb913e755bbbafa7814d78c07941177724345cba268880d83a2c085f26ef454fe7a7e359267e4c03c6e737863d6a1c26ca33a494b229d35c425b73fe743293cb577e1c2fdb30def636609ef5ac57929f6d6e00f4acab3269bd1eae6c405efd6fa2dad5d46beafe087521e1ed9b3de51329796654d5e", 0xd8}], 0x3}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000001380)={'#! ', '', [], 0xa, "7749905d65b5692f2475666e4db6188c5d2340455c957241f0f2de9807d65c2e32a9048cb340ffc25381f7955b91ace7605b1fdea205cd80afbd8b6e6b"}, 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) 12.404842604s ago: executing program 6 (id=590): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x1a0}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r1 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(twofish-generic)\x00'}, 0x58) syz_emit_ethernet(0x6e, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffcaf6e222e6aa86dd6043e0c100383afffe800000000000000069000000000000ff0200000000000000000000000000013c0000000000000033000400026047b82c01000000000000c20400000df80502100000000000000086009078000014080000000000000000"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f00000003c0)=""/34, 0x22}, {&(0x7f00000016c0)=""/82, 0x52}, {&(0x7f0000001740)=""/180, 0xb4}, {&(0x7f0000001940)=""/59, 0x3b}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/221, 0xdd}, {&(0x7f0000002a80)=""/22, 0x16}, {&(0x7f0000002ac0)=""/214, 0xd6}], 0x8}, 0x1}, {{&(0x7f0000000280)=@nl=@proc, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/86, 0x56}, {&(0x7f0000000380)=""/27, 0x1b}, {&(0x7f0000000400)=""/112, 0x70}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000540)=""/221, 0xdd}], 0x6, &(0x7f0000000840)=""/192, 0xc0}, 0x2}], 0x3, 0x40000002, 0x0) recvmmsg(r2, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6e5}, {{0x0, 0x0, 0x0}, 0x3}], 0x4, 0x2000, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x0, 0x0}}, 0xfc36) landlock_create_ruleset(&(0x7f00000000c0)={0x2000, 0x3, 0x1}, 0x18, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x12060000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x200500, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) tkill(0x0, 0x7) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x3c, r4, 0x615, 0x0, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}]}, 0x3c}, 0x5, 0x0, 0x0, 0x2000c0c0}, 0x0) 12.173114981s ago: executing program 5 (id=591): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000e40)='fscache_access\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10, 0x80000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="44000000499cafa699ade70d11a2eb753f9cf07019ee233e65ef6b6aec8250a9f03ff385e1499c4a0e6e833fc3e9710ea685eb7be039e544f1ab1c885d05aa87d39ed7baf33a0d6f8d6431fff2d071fba4626d35fd57fe3923847897e63fc281d253940cf4a1e95490c9a9338200000000", @ANYRES16, @ANYRES32=r0, @ANYRES32=r4, @ANYRES16=r5], 0x44}}, 0x40) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r6, 0x89ef, &(0x7f0000004bc0)) socket$inet6(0xa, 0x1, 0x6) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000001e40)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x77eaf000) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r9, 0xca289435, &(0x7f0000000300)={0x2, 0x1, @start={0x0, 0x1, "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", "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"}, [0xce16, 0x80000000, 0x8001, 0xbd, 0x5, 0x9, 0x9, 0x0, 0x401, 0xfffffffffffffff8, 0x42a, 0x2, 0xfcb, 0x2, 0xc, 0x5, 0x10001, 0x401, 0x83, 0x1, 0x3, 0xffffffffffffc22c, 0x3c9d, 0xfffffffd, 0x2, 0xe, 0x9, 0x9, 0x8, 0x868c, 0x1, 0x20000005, 0x5835, 0x0, 0xfffffffffffffff7, 0xac4, 0x8, 0xfffffffffffff0ee, 0x74, 0x4, 0x2008, 0x3, 0xc, 0x2, 0xffffffffffffff7f, 0x800, 0x80000000, 0x100, 0x2, 0x3, 0x5, 0x2, 0x1ff, 0x8af5, 0xa713, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffff0000, 0x1ff, 0xb, 0x3, 0xffffffffffffffff, 0x0, 0x3]}) r10 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r10, 0x400, 0x1) unlinkat(r8, &(0x7f0000000d40)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xad) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r11, 0x89e7, 0x0) 11.223762783s ago: executing program 5 (id=595): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000300), &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@type_tag={0x2, 0x0, 0x0, 0x12, 0x1}, @func={0x6, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x30, 0x61, 0x30, 0x5f, 0x30, 0x61, 0x0, 0x0]}}, &(0x7f0000000240)=""/163, 0x3b, 0xa3, 0x0, 0x81, 0x10000, @value=r2}, 0x28) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x13, 0x0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.013411652s ago: executing program 2 (id=597): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@dev, @in=@local}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000000)="d8341bf5"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 9.988259168s ago: executing program 1 (id=598): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xb}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x9, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x9, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 9.561594156s ago: executing program 1 (id=599): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r4 = accept4(r3, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000040)="cb", 0xfffffdef) 9.42940257s ago: executing program 5 (id=600): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0xc3, r3}, 0x38) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0x8, {"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", 0x103f}}, 0x1006) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r6}, 0x10) mount$tmpfs(0x0, 0x0, 0x0, 0x1210020, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000000)=0x2950, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 8.555332898s ago: executing program 1 (id=601): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x13000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7.626270948s ago: executing program 5 (id=602): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = fanotify_init(0x200, 0x0) r3 = dup(r1) fanotify_mark(r2, 0x1, 0x8001028, r3, 0x0) r4 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1000}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000100003052dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0dc60300418004001c0012800b0001006d616373656300000c000280050008000500000008000500", @ANYRES32=r9, @ANYBLOB="ad47e0d0f543f7e717e2082485240a600e0092b8d3fbf1c073cc1ae03e12b374d25a97a4a10d9116b78e552e25fce6c67d244c92813129a31e53302981f740eceee0d79757a8af9b602de1ea99b49e0c0f5a8f7923a83f0ab59fc9296027160ab52306747fefa133fced78abe97dc46d664c2799c42d375d55535c89641c4fded907ea0b656e036b463c4913ef51d6ee3740dc8901a6546d9692bef5f174002f36b171"], 0x44}, 0x1, 0x0, 0x0, 0x44021}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a0000000000", @ANYBLOB="0b1d302dce1c601fac001db25dcf200e10aa4c1859686c7aa6b77a36111e9c"], 0x38}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x1, 'geneve1\x00', {}, 0x3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) r12 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r12, 0x47ba, 0x0, 0x0, 0x0, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x3ef, 0x0) io_uring_enter(r4, 0x11af, 0xdfd2, 0x1, 0x0, 0x0) 7.596145793s ago: executing program 6 (id=603): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x8}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x6a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'rose0\x00', 0x0}) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xfff1, 0xffff}, {0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x36767a45}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x8804}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000280)={@local, @private, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @private=0xa010102, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @private=0x401, @loopback}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x46, 0x1, 0x1, [{@local, 0x8}, {@multicast2, 0x7}, {@loopback, 0xdb}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x5}, {@multicast2, 0x2}]}, @end]}}}], 0xf8}, 0x5c040) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000180)=@framed={{0x46, 0xa, 0x0, 0x0, 0x20000000, 0x79, 0x10, 0x98}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6.473282701s ago: executing program 2 (id=604): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000c0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000240)=ANY=[], 0x58) r3 = open(&(0x7f0000000c00)='./bus\x00', 0x62000, 0x0) dup3(r3, r2, 0x0) finit_module(r3, 0x0, 0x4) ioctl$EVIOCGUNIQ(r3, 0x80404508, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = shmget(0xffffffffffffffff, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_INFO(r7, 0xe, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 5.634345728s ago: executing program 3 (id=605): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f00008f4000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x600, 0x0, 0x0, 0x0) 5.633635486s ago: executing program 6 (id=606): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000740)={0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0}) r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a20014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 5.541541752s ago: executing program 3 (id=607): ioperm(0x0, 0x6, 0x10000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioperm(0x1, 0x0, 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x80}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) 5.421384381s ago: executing program 3 (id=608): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0ca8) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="09000000f5e57aa04e", 0x9) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000980)}, 0x4890) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key(&(0x7f0000000280)='encrypted\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380), 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000e1"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000180)={0xa, 0xfffb, 0x3, @local, 0xb}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 5.376921092s ago: executing program 6 (id=609): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x29}, 0x4) r3 = accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x7}, 0x4) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0x4000}) 4.645661886s ago: executing program 1 (id=610): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000300), &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@type_tag={0x2, 0x0, 0x0, 0x12, 0x1}, @func={0x6, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x30, 0x61, 0x30, 0x5f, 0x30, 0x61, 0x0, 0x0]}}, &(0x7f0000000240)=""/163, 0x3b, 0xa3, 0x0, 0x81, 0x10000, @value}, 0x28) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x13, 0x0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_RUN(r1, 0xae80, 0x0) 4.157485223s ago: executing program 2 (id=611): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r4 = accept4(r3, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000040)="cb", 0xfffffdef) 3.677801018s ago: executing program 6 (id=612): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x40000c0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.579071088s ago: executing program 3 (id=613): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0xc3, r3}, 0x38) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0x8, {"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", 0x103f}}, 0x1006) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r6}, 0x10) mount$tmpfs(0x0, 0x0, 0x0, 0x1210020, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000000)=0x2950, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 2.693140854s ago: executing program 2 (id=614): write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000380)={0x7, 0x21, 0x2}, 0x7) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x82241, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000090400"/20, @ANYRES32=r4, @ANYBLOB="000000000000000034001280110000006272696467655f736c617665000000001c000580050020000100000005000c000000000008000300"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x1410, 0x20, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x804) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x20}, 0x1}}, [0x10, 0xd7, 0x0, 0x8, 0x10000, 0x4, 0x3, 0x8, 0x503, 0xbc, 0x6, 0xf, 0x0, 0x4, 0x8]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e20, @empty}}, 0x0, 0xfffa}, &(0x7f0000000280)=0x90) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000f80)=0x19) dup(r0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000900000009"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r8 = socket$inet_icmp(0x2, 0x2, 0x1) bind(r8, &(0x7f00000002c0)=@qipcrtr={0x2a, 0x1}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r9, 0x0) ioperm(0x0, 0x81, 0x7) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x7b, 0x200000}, 0x20) preadv2(r7, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x3, 0x2b, 0x0, 0x0) r10 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r10, 0xc020662a, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r10, 0xd0009411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, 0x0) 2.549435531s ago: executing program 5 (id=615): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001400), 0xffffffffffffffff) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgrp(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020732500000000000020207b1a00bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000940000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x2, 0x8, &(0x7f00000002c0)='\x00\x00', &(0x7f0000000300)=""/8, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100100086dd6000000000142f00ff010000000000000000000000000001fc010000000000ddc90e00000000000000000001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780002"], 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="8a8b5bf25aa6c164348680280d5d8ce72c5bbbee16393d9788dbf7c833ee62e8eb8a6eb3aec59c9e7b44b333ac26b8dca4adf68f8a8637dcd36243fef0e646b577812d613124e4953bd2abcd5988b76944a4cab1515c6e75501e491dae30896304c8eb13ff0b5d2d49a9c6e5dbbeac08771912718ea2fd202960f8c665372025195eef947a2c9191ce611cf14d36ca70adeab3b738b21e3127469b", @ANYRES8=r2, @ANYRES16=r2], 0xd) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5111) sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) quotactl_fd$Q_SYNC(r5, 0xffffffff80000100, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.554846119s ago: executing program 2 (id=616): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f00008f4000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 1.547473169s ago: executing program 3 (id=617): syz_emit_ethernet(0x3b6, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0x401c5820, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x12f, 0x12) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x540, 0x350, 0x0, 0xffffffff, 0x0, 0x0, 0x470, 0x470, 0xffffffff, 0x470, 0x470, 0x5, &(0x7f0000000000), {[{{@ipv6={@local, @loopback, [0xffffff00, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000], 'xfrm0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x89, 0x6, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@local, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e23, @port=0x4e23}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x8, 0x0, [0xff, 0x3, 0x8, 0x5, 0x100, 0x49b, 0x5, 0x0, 0x5, 0x2, 0xd0a, 0x0, 0x8, 0x5, 0x100, 0xffff], 0x3}}, @common=@ipv6header={{0x28}, {0x28, 0x78}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x17, @ipv6=@private0, @ipv4=@local, @gre_key=0xbe1, @port=0x4e24}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0x0, 0xff, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0xffffffff], 'ip6tnl0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x54, 0x5, 0x4, 0x1}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1, 0x0, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0x7f000000, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000, 0x0, 0xff], 'pim6reg1\x00', 'ip6gretap0\x00', {0xff}, {}, 0x2c, 0x9, 0x0, 0x4}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x3ff}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d1a91a9c48e897c40c22541c6f2d935742bcda60434bcc9060bb2539f507"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 1.546924142s ago: executing program 6 (id=618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0)=0x7f, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f00000002c0)={0x1, 0x0, @ioapic={0xffff1000, 0x28000, 0x8, 0x4, 0x0, [{0x4, 0x2, 0x1, '\x00', 0x5}, {0x7, 0x7, 0x47, '\x00', 0x60}, {0x0, 0x3, 0x0, '\x00', 0x3}, {0x9, 0x0, 0x7, '\x00', 0x9}, {0xa, 0xc, 0x3, '\x00', 0x40}, {0x3, 0x3, 0x81, '\x00', 0xf8}, {0xb, 0xa, 0x3, '\x00', 0x80}, {0x69, 0x8, 0x5, '\x00', 0xfa}, {0x1, 0x35, 0x5, '\x00', 0x3}, {0x2, 0x11, 0x2, '\x00', 0x1}, {0xa7, 0x81, 0x40, '\x00', 0x1}, {0x5, 0x1, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x0, '\x00', 0x2}, {0x9, 0x1, 0x9, '\x00', 0x5}, {0x2, 0xe, 0xa, '\x00', 0x2}, {0x88, 0x6, 0x5}, {0x68, 0x3, 0x1a, '\x00', 0xe0}, {0x0, 0x80, 0x7f, '\x00', 0xa}, {0x5, 0x0, 0x8, '\x00', 0xb5}, {0x1, 0x2, 0x7, '\x00', 0xa}, {0xc9, 0xc9, 0xe6, '\x00', 0x2e}, {0x2, 0xff, 0x0, '\x00', 0xfe}, {0xd, 0x6, 0x20, '\x00', 0x81}, {0xff, 0xb0, 0x1, '\x00', 0xff}]}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44], 0x0, 0xc0f12}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) ppoll(&(0x7f0000000080)=[{r5}], 0x1, 0x0, 0x0, 0x0) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRESHEX=r4, @ANYRESHEX=r7, @ANYRES64=0x0], &(0x7f0000000100)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='vnet_skip_tx_trigger\x00', r9, 0x0, 0x81}, 0x18) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) accept4$alg(r10, 0x0, 0x0, 0x0) 1.489373096s ago: executing program 1 (id=619): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0100000001010400000000000000000a0000003c0001802c"], 0x13c}}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000001c0), 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r5, &(0x7f00000001c0)='westwood\x00', 0x9) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000020003c0000003c0000000500000000000000000000030600000003000000020000000100000004000000020000850600000003000000010000000100000010000000040000007f0000b86d000000fd"], &(0x7f0000000480)=""/69, 0x59, 0x45, 0x0, 0x1, 0x0, @void, @value}, 0x28) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r6, &(0x7f00000008c0)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b000000000091d3000000001400000000000000290000003e0000000100000000000000140000000000000029000000340000000000000000000000500000000000000029000000040000000106"], 0x98}}], 0x1, 0xfbffff7f) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, 0x0, 0x0) 197.417885ms ago: executing program 5 (id=620): r0 = syz_usb_connect(0x3, 0x4a, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x7, 0x0, 0x2, 0x59, 0x61, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x890, 0x0, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x11}}]}}, {{0x9, 0x4, 0x1, 0xff, 0x0, 0x6e, 0xb8, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x55, @string={0x55, 0x3, "5771cc2e1670eb34afcc42e68d01cf166990b5ffdd60ee39020b20931940eb271c352d483bf565a99b0c2daa23fe3685d6b9b63f562a8e9d39571611c6eea5befd9f6401dba70195c09677e20767b9b1c11847"}}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000d40), 0x0, 0x101200) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f00000011c0)={0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 196.739469ms ago: executing program 1 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000480)=0x114e64e6) prctl$PR_MCE_KILL(0x23, 0x9, 0x7fffffffeffe) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioperm(0x0, 0x40000, 0x702) ioperm(0x0, 0x9b4, 0x36f) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x238, 0x0, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'vxcan1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r3, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) recvmmsg(r3, &(0x7f0000000480), 0x0, 0x12141, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000004c0)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x3, 0x0, 0x2, 0x0, 0x1, 0x2, 0x0, 0x0, 0xfefd}) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f00000044c0)='./file0\x00', r5, 0xffffffffffffffff) 93.339408ms ago: executing program 2 (id=622): mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="140100002b0001000000000000000000040100800c00000000000000000000001400010001"], 0x114}], 0x1}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}, {@workdir={'workdir', 0x3d, './file0'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) (async) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240000000032c000000030a01030000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = dup(r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="000000000000000024001a80200005801c000480080002000000000008000100000000000800030000000000"], 0x44}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000050a010100000000000030000000000900030073797a32000000002c000000030a00000000000000000000000000000900030073797a32000000000900010073797a30000000000000000000000a00"/115], 0x80}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000240)={@empty}, &(0x7f0000000280)=0x14) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000480)={@private, @private}, &(0x7f00000004c0)=0xc) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): work is pending, handler #200!!! [ 70.102518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.133397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 70.192935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.682597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.842477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 71.310903][ T5992] process 'syz.0.17' launched './file0' with NULL argv: empty string added [ 71.773574][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.780029][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.992538][ T5877] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.496854][ T5997] syz.1.18 uses obsolete (PF_INET,SOCK_PACKET) [ 73.912377][ T5877] usb 5-1: device not accepting address 2, error -71 [ 74.430214][ T6008] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.951010][ T6010] netlink: 96 bytes leftover after parsing attributes in process `syz.4.22'. [ 75.057975][ T6011] nfs: Bad value for 'source' [ 76.049568][ T6030] netlink: 132 bytes leftover after parsing attributes in process `syz.1.26'. [ 76.682690][ T1199] cfg80211: failed to load regulatory.db [ 76.787081][ T6026] netlink: 100 bytes leftover after parsing attributes in process `syz.1.26'. [ 77.071678][ T6041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.29'. [ 77.772320][ T6037] ALSA: mixer_oss: invalid OSS volume '—ˆ†' [ 78.467794][ T6045] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 78.788798][ T6049] netlink: 'syz.4.31': attribute type 4 has an invalid length. [ 80.056860][ T6062] netlink: 80 bytes leftover after parsing attributes in process `syz.2.34'. [ 80.111375][ T6062] netlink: 80 bytes leftover after parsing attributes in process `syz.2.34'. [ 80.522331][ T1199] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.852337][ T1199] usb 1-1: Using ep0 maxpacket: 8 [ 80.865048][ T1199] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.878836][ T1199] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 80.899264][ T1199] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 80.912310][ T1199] usb 1-1: config 1 interface 2 altsetting 36 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 81.415706][ T1199] usb 1-1: config 1 interface 2 has no altsetting 1 [ 81.427129][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 81.453939][ T1199] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.463375][ T1199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.471575][ T6084] nbd: must specify a size in bytes for the device [ 81.481633][ T1199] usb 1-1: Product: syz [ 81.496809][ T1199] usb 1-1: Manufacturer: syz [ 81.514984][ T1199] usb 1-1: SerialNumber: syz [ 81.920698][ T1199] usb 1-1: USB disconnect, device number 2 [ 82.167341][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.322420][ T5877] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.472646][ T5877] usb 2-1: device descriptor read/64, error -71 [ 82.539124][ T6116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.49'. [ 82.981445][ T5877] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.029095][ T6124] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 83.077324][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.107695][ T6124] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.122347][ T5877] usb 2-1: device descriptor read/64, error -71 [ 83.142150][ T6124] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 83.176584][ T6124] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 83.225660][ T6124] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.231616][ T6124] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.238430][ T5877] usb usb2-port1: attempt power cycle [ 83.243960][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 83.254622][ T25] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 83.263847][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.271921][ T25] usb 4-1: Product: syz [ 83.277945][ T6124] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.284959][ T25] usb 4-1: Manufacturer: syz [ 83.292567][ T25] usb 4-1: SerialNumber: syz [ 83.303711][ T25] usb 4-1: config 0 descriptor?? [ 83.324403][ T6124] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.339717][ T6124] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.351552][ T6124] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.359429][ T6124] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 83.367070][ T6124] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.450974][ T6124] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.462182][ T6124] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 83.477033][ T6124] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 83.508946][ T6124] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 83.521947][ T25] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 83.582386][ T5877] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 83.602942][ T5877] usb 2-1: device descriptor read/8, error -71 [ 84.442326][ T5877] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 84.621427][ T5877] usb 2-1: device descriptor read/8, error -71 [ 84.746621][ T5877] usb usb2-port1: unable to enumerate USB device [ 85.302964][ T5140] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.415732][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.423250][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.451531][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.494954][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 85.782643][ T25] usb write operation failed. (-71) [ 85.874366][ T25] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 85.885262][ T25] dvbdev: DVB: registering new adapter (Terratec H7) [ 85.892446][ T25] usb 4-1: media controller created [ 85.909859][ T25] usb read operation failed. (-71) [ 85.921984][ T25] usb write operation failed. (-71) [ 85.949614][ T25] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 86.056957][ T25] usb 4-1: USB disconnect, device number 2 [ 86.133128][ T6154] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.193193][ T6158] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 86.209779][ T6159] netlink: 132 bytes leftover after parsing attributes in process `syz.3.61'. [ 87.204435][ T6168] overlay: Unknown parameter 'obj_role' [ 87.299842][ T6171] netlink: 236 bytes leftover after parsing attributes in process `syz.0.64'. [ 87.308855][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.64'. [ 87.586948][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.593241][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.600402][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.606637][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.612931][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 88.291999][ T6181] tap0: tun_chr_ioctl cmd 1074025673 [ 88.676536][ T6185] netlink: 168 bytes leftover after parsing attributes in process `syz.4.68'. [ 88.775534][ T29] audit: type=1326 audit(1729999304.606:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6182 comm="syz.4.68" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabaad7e719 code=0x0 [ 89.433380][ T1199] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.662752][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 89.669502][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.675617][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.681660][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.688364][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.878972][ T1199] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 89.889111][ T1199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.897169][ T1199] usb 4-1: Product: syz [ 89.908687][ T1199] usb 4-1: Manufacturer: syz [ 89.923159][ T1199] usb 4-1: SerialNumber: syz [ 90.000547][ T1199] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 90.025492][ T5904] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 90.482520][ T6193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.621526][ T6193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.621944][ T1199] usb 4-1: USB disconnect, device number 3 [ 91.633039][ T5904] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 91.642132][ T5904] ath9k_htc: Failed to initialize the device [ 91.654513][ T1199] usb 4-1: ath9k_htc: USB layer deinitialized [ 91.980614][ T6209] netlink: 80 bytes leftover after parsing attributes in process `syz.4.74'. [ 91.991640][ T6209] netlink: 80 bytes leftover after parsing attributes in process `syz.4.74'. [ 92.242374][ T1199] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.270208][ T6213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.73'. [ 92.302325][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 92.402377][ T1199] usb 1-1: Using ep0 maxpacket: 8 [ 92.424822][ T1199] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 92.467017][ T1199] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 92.527477][ T1199] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.553182][ T1199] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.254305][ T1199] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.263668][ T1199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.489742][ T1199] usb 1-1: GET_CAPABILITIES returned 0 [ 93.495697][ T1199] usbtmc 1-1:16.0: can't read capabilities [ 93.501694][ T6229] netlink: 132 bytes leftover after parsing attributes in process `syz.3.82'. [ 93.708638][ T6211] usbtmc 1-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 93.729024][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.752777][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.764278][ T1199] usb 1-1: USB disconnect, device number 3 [ 94.362433][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.542895][ T1199] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.546076][ T25] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 94.574129][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.585770][ T25] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 94.595098][ T25] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 94.603912][ T25] usb 3-1: Manufacturer: syz [ 94.611052][ T25] usb 3-1: config 0 descriptor?? [ 94.692390][ T25] rc_core: IR keymap rc-hauppauge not found [ 94.698318][ T25] Registered IR keymap rc-empty [ 94.712499][ T1199] usb 5-1: Using ep0 maxpacket: 16 [ 94.732754][ T1199] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 94.740855][ T1199] usb 5-1: config 0 has no interface number 0 [ 94.743722][ T25] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 94.768663][ T25] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 94.782029][ T1199] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 50 [ 94.784299][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 94.808370][ T1199] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 94.851976][ T1199] usb 5-1: config 0 interface 41 has no altsetting 0 [ 94.872499][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 94.887553][ T1199] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 94.887948][ T6243] netlink: 36 bytes leftover after parsing attributes in process `syz.1.87'. [ 94.901897][ T1199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.933095][ T1199] usb 5-1: Product: syz [ 94.937458][ T1199] usb 5-1: Manufacturer: syz [ 94.942073][ T1199] usb 5-1: SerialNumber: syz [ 94.979903][ T1199] usb 5-1: config 0 descriptor?? [ 95.001953][ T6237] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 95.018393][ T6237] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 95.052673][ T6243] nbd1: detected capacity change from 0 to 256 [ 95.106910][ T5827] block nbd1: Receive control failed (result -104) [ 95.154246][ T5876] usb 3-1: USB disconnect, device number 2 [ 95.242027][ T6237] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 95.250246][ T6237] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 95.685006][ T1199] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -32 [ 96.703358][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 96.791405][ T6272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.050404][ T6272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.786414][ T6287] FAULT_INJECTION: forcing a failure. [ 97.786414][ T6287] name failslab, interval 1, probability 0, space 0, times 1 [ 97.799977][ T6287] CPU: 0 UID: 0 PID: 6287 Comm: syz.3.94 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 97.810500][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.820581][ T6287] Call Trace: [ 97.823875][ T6287] [ 97.826814][ T6287] dump_stack_lvl+0x241/0x360 [ 97.831518][ T6287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.836751][ T6287] ? __wake_up_klogd+0xcc/0x110 [ 97.841626][ T6287] ? dump_stack+0x9/0x20 [ 97.845898][ T6287] should_fail_ex+0x3b0/0x4e0 [ 97.850601][ T6287] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 97.856348][ T6287] should_failslab+0xac/0x100 [ 97.861045][ T6287] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 97.866788][ T6287] __kmalloc_noprof+0xd8/0x400 [ 97.871578][ T6287] tomoyo_realpath_from_path+0xcf/0x5e0 [ 97.877161][ T6287] tomoyo_path_number_perm+0x23a/0x880 [ 97.882650][ T6287] ? tomoyo_path_number_perm+0x208/0x880 [ 97.888306][ T6287] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 97.894341][ T6287] ? __fget_files+0x29/0x470 [ 97.898959][ T6287] ? __fget_files+0x3f3/0x470 [ 97.903670][ T6287] security_file_ioctl+0xc6/0x2a0 [ 97.908712][ T6287] __se_sys_ioctl+0x47/0x170 [ 97.913304][ T6287] do_syscall_64+0xf3/0x230 [ 97.917802][ T6287] ? clear_bhb_loop+0x35/0x90 [ 97.922476][ T6287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.928367][ T6287] RIP: 0033:0x7f76cfd7e719 [ 97.932784][ T6287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.952387][ T6287] RSP: 002b:00007f76d0bf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.960795][ T6287] RAX: ffffffffffffffda RBX: 00007f76cff36130 RCX: 00007f76cfd7e719 [ 97.968762][ T6287] RDX: 0000000020000040 RSI: 00000000000007a6 RDI: 0000000000000006 [ 97.976728][ T6287] RBP: 00007f76d0bf2090 R08: 0000000000000000 R09: 0000000000000000 [ 97.984696][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.992664][ T6287] R13: 0000000000000000 R14: 00007f76cff36130 R15: 00007ffd67947f88 [ 98.000638][ T6287] [ 98.010871][ T6287] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.183761][ T6295] Zero length message leads to an empty skb [ 98.561633][ T5873] usb 5-1: USB disconnect, device number 4 [ 98.666481][ T29] audit: type=1326 audit(1729999314.496:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6302 comm="syz.1.99" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff800f7e719 code=0x0 [ 98.722521][ T6306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.99'. [ 98.850574][ T5827] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 98.910467][ T5876] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.020444][ T6332] netlink: 132 bytes leftover after parsing attributes in process `syz.1.104'. [ 99.077762][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 99.094614][ T5876] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.120332][ T5876] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 99.159060][ T5876] usb 4-1: config 1 has no interface number 1 [ 99.188053][ T5876] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 99.218542][ T5876] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.229836][ T5876] usb 4-1: config 1 interface 2 has no altsetting 0 [ 99.269968][ T5876] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.270895][ T6337] kvm: emulating exchange as write [ 99.287732][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.295828][ T5876] usb 4-1: Product: syz [ 99.300020][ T5876] usb 4-1: Manufacturer: syz [ 99.304793][ T5876] usb 4-1: SerialNumber: syz [ 99.763177][ T6301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.100'. [ 100.569865][ T6354] netlink: 48 bytes leftover after parsing attributes in process `syz.3.110'. [ 101.933461][ T5874] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 102.452562][ T5874] usb 3-1: unable to get BOS descriptor or descriptor too short [ 102.460894][ T5874] usb 3-1: not running at top speed; connect to a high speed hub [ 102.506924][ T5874] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.536079][ T5874] usb 3-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 102.556163][ T5874] usb 3-1: config 1 interface 0 has no altsetting 0 [ 102.567498][ T5874] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.581342][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.599274][ T5874] usb 3-1: Product: syz [ 102.631682][ T5874] usb 3-1: Manufacturer: syz [ 102.642950][ T5874] usb 3-1: SerialNumber: syz [ 102.853940][ T5827] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 102.863823][ T5827] Bluetooth: hci0: Injecting HCI hardware error event [ 102.876119][ T5827] Bluetooth: hci0: hardware error 0x00 [ 102.888345][ T5874] cdc_ether 3-1:1.0: invalid descriptor buffer length [ 102.900345][ T5874] usb 3-1: bad CDC descriptors [ 102.909765][ T5874] usb 3-1: USB disconnect, device number 3 [ 103.016536][ T5908] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.193936][ T5908] usb 2-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67 [ 103.212785][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.327999][ T5908] usb 2-1: Product: syz [ 103.364760][ T5908] usb 2-1: Manufacturer: syz [ 103.409951][ T5908] usb 2-1: SerialNumber: syz [ 103.620633][ T5908] usb 2-1: config 0 descriptor?? [ 103.720612][ T5908] pwc: Philips PCA645VC USB webcam detected. [ 103.922014][ T6397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.947493][ T6397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.218479][ T5908] pwc: send_video_command error -71 [ 104.238468][ T5908] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 104.247588][ T5908] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 104.274316][ T5908] usb 2-1: USB disconnect, device number 6 [ 104.379848][ T5876] usb 4-1: 2:1 : invalid UAC_AS_GENERAL desc [ 104.393246][ T5876] usb 4-1: selecting invalid altsetting 0 [ 104.509920][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.582482][ T5873] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.752773][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 104.769747][ T5873] usb 5-1: too many configurations: 42, using maximum allowed: 8 [ 104.795461][ T5873] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 104.810661][ T5873] usb 5-1: can't read configurations, error -61 [ 104.942776][ T5873] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 105.005528][ T5827] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 105.176621][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 105.182783][ T5873] usb 5-1: too many configurations: 42, using maximum allowed: 8 [ 105.205878][ T5873] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 105.213870][ T5873] usb 5-1: can't read configurations, error -61 [ 105.238218][ T5873] usb usb5-port1: attempt power cycle [ 105.849840][ T5873] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 105.877953][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 105.889214][ T5873] usb 5-1: too many configurations: 42, using maximum allowed: 8 [ 105.910817][ T5873] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 105.924646][ T5873] usb 5-1: can't read configurations, error -61 [ 106.152510][ T5873] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 106.173012][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 106.178656][ T5873] usb 5-1: too many configurations: 42, using maximum allowed: 8 [ 106.188780][ T5873] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 106.205796][ T5873] usb 5-1: can't read configurations, error -61 [ 106.213211][ T5873] usb usb5-port1: unable to enumerate USB device [ 106.278968][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.130'. [ 106.328023][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 106.349068][ T6446] netlink: 36 bytes leftover after parsing attributes in process `syz.3.130'. [ 106.503563][ T6454] openvswitch: netlink: Actions may not be safe on all matching packets [ 106.622387][ T6446] nbd2: detected capacity change from 0 to 65536 [ 106.636872][ T6452] netlink: 64 bytes leftover after parsing attributes in process `syz.1.132'. [ 106.668123][ T5827] block nbd2: Receive control failed (result -32) [ 106.763691][ T6111] block nbd2: Dead connection, failed to find a fallback [ 106.804651][ T6111] block nbd2: shutting down sockets [ 106.836618][ T6111] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.172873][ T6111] Buffer I/O error on dev nbd2, logical block 0, async page read [ 107.251117][ T6111] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.767514][ T6111] Buffer I/O error on dev nbd2, logical block 0, async page read [ 107.777152][ T6111] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.786634][ T6111] Buffer I/O error on dev nbd2, logical block 0, async page read [ 107.794778][ T6111] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.871098][ T6111] Buffer I/O error on dev nbd2, logical block 0, async page read [ 107.892474][ T6111] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.901535][ T6111] Buffer I/O error on dev nbd2, logical block 0, async page read [ 107.915144][ T6111] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.924254][ T6111] Buffer I/O error on dev nbd2, logical block 0, async page read [ 108.683243][ T29] audit: type=1800 audit(1729999323.976:5): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.135" name="/" dev="fuse" ino=1 res=0 errno=0 [ 108.723704][ T6111] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.735904][ T6111] Buffer I/O error on dev nbd2, logical block 0, async page read [ 108.743825][ T6111] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.752921][ T6111] Buffer I/O error on dev nbd2, logical block 0, async page read [ 108.760719][ T6111] ldm_validate_partition_table(): Disk read failed. [ 108.767810][ T6111] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.777304][ T6111] Buffer I/O error on dev nbd2, logical block 0, async page read [ 108.785452][ T6111] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.794770][ T6111] Buffer I/O error on dev nbd2, logical block 0, async page read [ 108.802854][ T6111] Dev nbd2: unable to read RDB block 0 [ 108.812802][ T6111] nbd2: unable to read partition table [ 108.824657][ T6111] ldm_validate_partition_table(): Disk read failed. [ 108.831659][ T6111] Dev nbd2: unable to read RDB block 0 [ 108.837946][ T6111] nbd2: unable to read partition table [ 108.843598][ T6476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.854386][ T6111] block nbd2: NBD_DISCONNECT [ 108.859012][ T6111] block nbd2: Send disconnect failed -32 [ 108.863724][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.052515][ T5876] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 109.146707][ T6489] mmap: syz.3.140 (6489) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.234082][ T5876] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 109.253371][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.295246][ T5876] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 109.311722][ T5876] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 109.325112][ T5876] usb 5-1: Manufacturer: syz [ 109.338670][ T5876] usb 5-1: config 0 descriptor?? [ 109.437105][ T5876] rc_core: IR keymap rc-hauppauge not found [ 109.448449][ T5876] Registered IR keymap rc-empty [ 109.465682][ T5876] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 109.516836][ T5876] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 109.742473][ T5877] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 109.940443][ T5876] usb 5-1: USB disconnect, device number 9 [ 109.952734][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 109.973872][ T5877] usb 2-1: config 0 has an invalid interface number: 6 but max is 2 [ 109.986214][ T5877] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 110.032369][ T5877] usb 2-1: config 0 has no interface number 1 [ 110.068643][ T5877] usb 2-1: config 0 has no interface number 2 [ 110.096758][ T5877] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 110.141290][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.177251][ T5877] usb 2-1: config 0 descriptor?? [ 110.187627][ T6502] ip6gretap0: entered promiscuous mode [ 110.215151][ T6502] batadv_slave_0: entered promiscuous mode [ 110.463292][ T5877] qcserial 2-1:0.6: Qualcomm USB modem converter detected [ 110.658017][ T6510] cgroup: Unknown subsys name 'uid>00000000000000060928' [ 110.666707][ T6504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.704854][ T6510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.147'. [ 111.254501][ T6504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.333241][ T25] usb 2-1: USB disconnect, device number 8 [ 111.340156][ T25] qcserial 2-1:0.6: device disconnected [ 113.241605][ T6540] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 113.325231][ T6540] netlink: 80 bytes leftover after parsing attributes in process `syz.1.152'. [ 114.987963][ T6552] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 115.316653][ T6564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.353761][ T6564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.952353][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.960611][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.969040][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.979622][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.989122][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 115.996584][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.210433][ T6560] Cannot find set identified by id 0 to match [ 116.311652][ T6573] chnl_net:caif_netlink_parms(): no params data found [ 116.480540][ T6589] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 116.508019][ T6589] netlink: 80 bytes leftover after parsing attributes in process `syz.1.167'. [ 116.520429][ T6589] netlink: 80 bytes leftover after parsing attributes in process `syz.1.167'. [ 116.533180][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.540599][ T6573] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.553271][ T6573] bridge_slave_0: entered allmulticast mode [ 116.560448][ T6573] bridge_slave_0: entered promiscuous mode [ 116.568918][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.576156][ T6573] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.586157][ T6573] bridge_slave_1: entered allmulticast mode [ 116.599842][ T6573] bridge_slave_1: entered promiscuous mode [ 116.629809][ T6573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.640913][ T6573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.663226][ T5908] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 116.913834][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 116.941052][ T5908] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid maxpacket 18624, setting to 64 [ 116.971770][ T5908] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 117.052312][ T5908] usb 5-1: config 0 interface 0 has no altsetting 0 [ 117.105205][ T5908] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 117.158285][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.207004][ T5908] usb 5-1: Product: syz [ 117.231404][ T5908] usb 5-1: Manufacturer: syz [ 117.260909][ T5908] usb 5-1: SerialNumber: syz [ 117.318653][ T5908] usb 5-1: config 0 descriptor?? [ 117.324061][ T6573] team0: Port device team_slave_0 added [ 117.345641][ T6573] team0: Port device team_slave_1 added [ 117.371854][ T5908] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 117.372711][ T9] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 117.421547][ T6599] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 117.442114][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.456764][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.498960][ T6573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.511931][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.530526][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.644280][ T9] usb 3-1: device descriptor read/64, error -71 [ 117.657273][ T6573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.675100][ T5908] usb 5-1: USB disconnect, device number 10 [ 118.398098][ T55] Bluetooth: hci5: command tx timeout [ 118.512318][ T9] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 118.531635][ T6573] hsr_slave_0: entered promiscuous mode [ 118.555236][ T6573] hsr_slave_1: entered promiscuous mode [ 118.572453][ T6573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.580065][ T6573] Cannot create hsr debugfs directory [ 118.782926][ T9] usb 3-1: device descriptor read/64, error -71 [ 118.904147][ T9] usb usb3-port1: attempt power cycle [ 119.296630][ T9] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 119.345575][ T9] usb 3-1: device descriptor read/8, error -71 [ 119.493697][ T6573] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 119.551603][ T6573] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 119.596363][ T6573] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 119.623328][ T6573] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 119.706880][ T6622] Cannot find set identified by id 0 to match [ 120.162877][ T6624] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 120.209982][ T6624] netlink: 80 bytes leftover after parsing attributes in process `syz.2.177'. [ 120.230502][ T6624] netlink: 80 bytes leftover after parsing attributes in process `syz.2.177'. [ 120.280103][ T6630] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 121.156221][ T6573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.167997][ T55] Bluetooth: hci5: command tx timeout [ 121.201769][ T6573] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.305789][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.312954][ T6527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.358529][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.365639][ T6527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.440218][ T6641] kAFS: No cell specified [ 121.529035][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.539057][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.549038][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.559049][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.569069][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.601183][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.619036][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.629018][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.649031][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.659078][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.669432][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.679022][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.689078][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.699080][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.709276][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.719341][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.729198][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.749175][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.769634][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.779580][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.789981][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.809071][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.819202][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.830350][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.849148][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.869467][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.879177][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.900279][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.909264][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.919950][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.942952][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.959263][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.969191][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.979388][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 121.989499][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 122.009177][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 122.019766][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 122.029826][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 122.039185][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 122.070020][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 122.079798][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 122.089029][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 122.099321][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 122.112147][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 122.129215][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 122.139349][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 122.159459][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 122.172819][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 122.270799][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 122.299761][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 122.352512][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 122.408230][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 122.525654][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.186'. [ 122.578644][ T6655] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 122.580003][ T6657] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 122.659450][ T6573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.278903][ T55] Bluetooth: hci5: command tx timeout [ 123.514500][ T6668] Cannot find set identified by id 0 to match [ 123.968572][ T6672] netlink: 'syz.2.191': attribute type 1 has an invalid length. [ 124.014427][ T6675] loop2: detected capacity change from 0 to 7 [ 124.041581][ T6675] Dev loop2: unable to read RDB block 7 [ 124.057902][ T6675] loop2: unable to read partition table [ 124.074424][ T6675] loop2: partition table beyond EOD, truncated [ 124.089474][ T6679] netlink: 132 bytes leftover after parsing attributes in process `syz.3.190'. [ 124.103112][ T6675] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 124.309520][ T6677] netlink: 100 bytes leftover after parsing attributes in process `syz.3.190'. [ 125.128084][ T6688] capability: warning: `syz.1.194' uses deprecated v2 capabilities in a way that may be insecure [ 125.149975][ T6688] capability: warning: `syz.1.194' uses 32-bit capabilities (legacy support in use) [ 125.283277][ T41] block nbd1: Possible stuck request ffff8880258b0000: control (read@0,4096B). Runtime 30 seconds [ 125.445786][ T55] Bluetooth: hci5: command tx timeout [ 125.458225][ T6573] veth0_vlan: entered promiscuous mode [ 126.169165][ T6698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.179094][ T6698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.199681][ T6698] netlink: 'syz.3.197': attribute type 9 has an invalid length. [ 126.207574][ T6698] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.197'. [ 126.246029][ T6573] veth1_vlan: entered promiscuous mode [ 126.326592][ T6573] veth0_macvtap: entered promiscuous mode [ 126.387573][ T6573] veth1_macvtap: entered promiscuous mode [ 126.431423][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.456957][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.469643][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.483985][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.569786][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.582742][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.592817][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.603462][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.629294][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.654027][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.667996][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.679079][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.889290][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.972330][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.068247][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.155570][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.285971][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.395118][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.434534][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.488927][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.524023][ T6573] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.533211][ T6573] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.542579][ T6573] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.568853][ T6573] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.218942][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.271539][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.329180][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.443906][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.312376][ T6743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.366416][ T6743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.324032][ T6750] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 131.334034][ T6750] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 131.344027][ T6750] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 131.354028][ T6750] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 131.364015][ T6750] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 131.374016][ T6750] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 131.384108][ T6750] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 131.394015][ T6750] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 131.404029][ T6750] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 131.414147][ T6750] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 131.424019][ T6750] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 131.434024][ T6750] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 131.444010][ T6750] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 131.454012][ T6750] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 131.464024][ T6750] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 131.474039][ T6750] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 132.693907][ T55] Bluetooth: hci5: command tx timeout [ 133.115434][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 133.299067][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.305395][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.885797][ T6787] Bluetooth: MGMT ver 1.23 [ 134.508920][ T6805] geneve3: entered promiscuous mode [ 134.522323][ T6805] geneve3: entered allmulticast mode [ 134.722424][ T5904] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 134.967474][ T6815] netlink: 80 bytes leftover after parsing attributes in process `syz.1.228'. [ 134.990416][ T6815] netlink: 80 bytes leftover after parsing attributes in process `syz.1.228'. [ 136.935132][ T6827] netlink: 72 bytes leftover after parsing attributes in process `syz.1.231'. [ 137.604967][ T6834] loop2: detected capacity change from 0 to 7 [ 137.627919][ T6834] Dev loop2: unable to read RDB block 7 [ 137.639966][ T6834] loop2: unable to read partition table [ 137.659653][ T6834] loop2: partition table beyond EOD, truncated [ 137.689123][ T6834] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 137.878691][ T6765] syz.5.216 (6765): drop_caches: 1 [ 138.032379][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 138.198483][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 138.245079][ T9] usb 5-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 138.278936][ T9] usb 5-1: Manufacturer: syz [ 138.355099][ T9] usb 5-1: config 0 descriptor?? [ 139.576226][ T9] gs_usb 5-1:0.0: Couldn't send data format (err=-110) [ 139.583234][ T9] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 139.959809][ T6852] netlink: 80 bytes leftover after parsing attributes in process `syz.1.239'. [ 140.119694][ T6852] netlink: 80 bytes leftover after parsing attributes in process `syz.1.239'. [ 140.124414][ T6855] Cannot find set identified by id 0 to match [ 141.411592][ T5876] usb 5-1: USB disconnect, device number 11 [ 141.485955][ T6866] FAULT_INJECTION: forcing a failure. [ 141.485955][ T6866] name failslab, interval 1, probability 0, space 0, times 0 [ 141.499007][ T6866] CPU: 1 UID: 0 PID: 6866 Comm: syz.2.245 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 141.509618][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 141.519665][ T6866] Call Trace: [ 141.522937][ T6866] [ 141.525876][ T6866] dump_stack_lvl+0x241/0x360 [ 141.530572][ T6866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.535776][ T6866] ? __pfx__printk+0x10/0x10 [ 141.540362][ T6866] ? fs_reclaim_acquire+0x93/0x130 [ 141.545468][ T6866] ? __pfx___might_resched+0x10/0x10 [ 141.550751][ T6866] should_fail_ex+0x3b0/0x4e0 [ 141.555425][ T6866] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 141.561141][ T6866] should_failslab+0xac/0x100 [ 141.565813][ T6866] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 141.571526][ T6866] __kmalloc_noprof+0xd8/0x400 [ 141.576294][ T6866] tomoyo_realpath_from_path+0xcf/0x5e0 [ 141.581844][ T6866] tomoyo_path_number_perm+0x23a/0x880 [ 141.587311][ T6866] ? tomoyo_path_number_perm+0x208/0x880 [ 141.592941][ T6866] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 141.598950][ T6866] ? __fget_files+0x29/0x470 [ 141.603546][ T6866] ? __fget_files+0x3f3/0x470 [ 141.608236][ T6866] security_file_ioctl+0xc6/0x2a0 [ 141.613268][ T6866] __se_sys_ioctl+0x47/0x170 [ 141.617869][ T6866] do_syscall_64+0xf3/0x230 [ 141.622371][ T6866] ? clear_bhb_loop+0x35/0x90 [ 141.627047][ T6866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.632935][ T6866] RIP: 0033:0x7f8a4ff7e719 [ 141.637345][ T6866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.656945][ T6866] RSP: 002b:00007f8a50dce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.665357][ T6866] RAX: ffffffffffffffda RBX: 00007f8a50135f80 RCX: 00007f8a4ff7e719 [ 141.673323][ T6866] RDX: 0000000020000080 RSI: 00000000c04064aa RDI: 0000000000000003 [ 141.681298][ T6866] RBP: 00007f8a50dce090 R08: 0000000000000000 R09: 0000000000000000 [ 141.689262][ T6866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.697229][ T6866] R13: 0000000000000000 R14: 00007f8a50135f80 R15: 00007fffab1e8548 [ 141.705211][ T6866] [ 141.709056][ T6866] ERROR: Out of memory at tomoyo_realpath_from_path. [ 141.952340][ T5874] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 142.902319][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 142.902528][ T5873] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 142.909071][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.947785][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.028891][ T5904] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 143.275040][ T5873] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 143.282271][ T5874] usb 2-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 143.288976][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.301462][ T5873] usb 5-1: Product: syz [ 143.309407][ T5873] usb 5-1: Manufacturer: syz [ 143.383020][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.425603][ T5873] usb 5-1: SerialNumber: syz [ 143.479528][ T5904] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.480394][ T5873] usb 5-1: config 0 descriptor?? [ 143.487966][ T5874] usb 2-1: config 0 descriptor?? [ 143.502312][ T5904] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 143.512789][ T5904] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 143.548896][ T5904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.575648][ T5904] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.585268][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.602414][ T5904] usb 3-1: Product: syz [ 143.626961][ T5904] usb 3-1: Manufacturer: syz [ 143.631614][ T5904] usb 3-1: SerialNumber: syz [ 143.979177][ T5874] usbhid 2-1:0.0: can't add hid device: -71 [ 143.985288][ T5874] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 143.995871][ T5874] usb 2-1: USB disconnect, device number 9 [ 144.072901][ T6888] netlink: 'syz.5.250': attribute type 12 has an invalid length. [ 144.080703][ T6888] netlink: 132 bytes leftover after parsing attributes in process `syz.5.250'. [ 144.090986][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.5.250'. [ 144.101734][ T6888] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.250'. [ 144.131645][ T5873] usb 5-1: Firmware version (0.0) predates our first public release. [ 144.159892][ T5873] usb 5-1: Please update to version 0.2 or newer [ 144.179951][ T5873] usb 5-1: Firmware: build [ 144.382436][ T5904] usb 3-1: 0:2 : does not exist [ 144.400468][ T5904] usb 3-1: USB disconnect, device number 9 [ 144.420260][ T6111] udevd[6111]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 144.763825][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.252'. [ 146.008662][ T6906] vlan2: entered promiscuous mode [ 146.014134][ T6906] vlan2: entered allmulticast mode [ 146.088162][ T6906] vlan0: entered allmulticast mode [ 146.118668][ T6906] veth0_vlan: entered allmulticast mode [ 146.190597][ T6906] vlan0: entered promiscuous mode [ 146.662697][ T6906] team0: Port device vlan2 added [ 146.691248][ T5904] usb 5-1: USB disconnect, device number 12 [ 146.788755][ T6912] veth0_vlan: left allmulticast mode [ 147.915297][ T6912] vlan0: left allmulticast mode [ 147.921042][ T6912] vlan0: left promiscuous mode [ 148.242528][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 148.282418][ T6912] team0: Port device vlan2 removed [ 148.413235][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 148.419995][ T9] usb 6-1: config 0 has no interfaces? [ 148.477830][ T9] usb 6-1: config 0 has no interfaces? [ 148.515457][ T9] usb 6-1: config 0 has no interfaces? [ 148.852909][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 148.882285][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.890380][ T9] usb 6-1: Product: syz [ 148.902272][ T9] usb 6-1: Manufacturer: syz [ 148.912278][ T9] usb 6-1: SerialNumber: syz [ 148.925740][ T9] usb 6-1: config 0 descriptor?? [ 149.143579][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.166478][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.243799][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.301415][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.312425][ T5908] usb 6-1: USB disconnect, device number 2 [ 150.261353][ T7012] program syz.2.273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.670832][ T5908] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 150.802318][ T5908] usb 6-1: device descriptor read/64, error -71 [ 151.642288][ T5908] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 151.656191][ T7012] syz.2.273 (7012): drop_caches: 2 [ 152.019682][ T7040] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536872256 (1073744512 ns) > initial count (152 ns). Using initial count to start timer. [ 152.184693][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 152.272912][ T5873] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 152.365819][ T25] usb 3-1: config 1 interface 0 altsetting 160 endpoint 0x81 has an invalid bInterval 221, changing to 11 [ 152.377631][ T25] usb 3-1: config 1 interface 0 altsetting 160 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.392949][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.285'. [ 152.477115][ T25] usb 3-1: config 1 interface 0 has no altsetting 0 [ 152.484214][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 152.523334][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.534173][ T5873] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.560834][ T25] usb 3-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.40 [ 152.570087][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.578193][ T25] usb 3-1: Product: syz [ 152.582447][ T25] usb 3-1: Manufacturer: 㻼 [ 152.587062][ T25] usb 3-1: SerialNumber: syz [ 152.596531][ T5873] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 152.605682][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 152.613967][ T5873] usb 2-1: Product: syz [ 152.618151][ T5873] usb 2-1: Manufacturer: syz [ 152.623008][ T5873] usb 2-1: SerialNumber: syz [ 152.631598][ T5873] usb 2-1: config 0 descriptor?? [ 152.835697][ T7036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.861606][ T7036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.869285][ T7043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.282'. [ 153.089671][ T25] usbhid 3-1:1.0: can't add hid device: -71 [ 153.096926][ T25] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 153.112346][ T5904] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 153.125239][ T25] usb 3-1: USB disconnect, device number 10 [ 153.272313][ T5904] usb 6-1: Using ep0 maxpacket: 16 [ 153.280532][ T5904] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.298255][ T5904] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 153.308051][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.309650][ T7069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.317639][ T5904] usb 6-1: Product: syz [ 153.329150][ T5904] usb 6-1: Manufacturer: syz [ 153.333893][ T5904] usb 6-1: SerialNumber: syz [ 153.334701][ T7069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.342489][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 153.358820][ T5904] usb 6-1: config 0 descriptor?? [ 153.368702][ T5904] ims_pcu 6-1:0.0: Zero length descriptor [ 153.374651][ T5904] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22 [ 153.429554][ T7071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.439606][ T7071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.452057][ T7072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.461931][ T7072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.512343][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 153.519141][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.526088][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 153.535311][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.549021][ T9] usb 5-1: config 0 descriptor?? [ 153.592301][ T1199] usb 6-1: USB disconnect, device number 5 [ 153.927396][ T7080] netlink: 'syz.3.294': attribute type 10 has an invalid length. [ 153.960083][ T7080] team0: Port device wlan1 added [ 153.961715][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.993060][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.017835][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.036190][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.095245][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 154.101253][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 154.171895][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 154.178600][ T9] usb 5-1: USB disconnect, device number 13 [ 154.305937][ T7085] input: syz0 as /devices/virtual/input/input9 [ 154.332396][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 154.343940][ T25] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 154.556482][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.579321][ T62] Bluetooth: hci6: Frame reassembly failed (-84) [ 154.862581][ T25] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.881856][ T25] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 154.895217][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.930241][ T25] usb 3-1: config 0 descriptor?? [ 155.049018][ T7099] netlink: 132 bytes leftover after parsing attributes in process `syz.1.297'. [ 155.142636][ T7097] netlink: 100 bytes leftover after parsing attributes in process `syz.1.297'. [ 155.171776][ T25] usb 3-1: USB disconnect, device number 11 [ 155.334330][ T41] block nbd1: Possible stuck request ffff8880258b0000: control (read@0,4096B). Runtime 60 seconds [ 155.870417][ T7108] openvswitch: netlink: Actions may not be safe on all matching packets [ 156.055326][ T7115] 9pnet_fd: Insufficient options for proto=fd [ 156.252315][ T5908] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 156.416043][ T5908] usb 6-1: device descriptor read/64, error -71 [ 156.452432][ T55] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 156.664033][ T5908] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 156.906488][ T7130] Process accounting resumed [ 156.922517][ T5908] usb 6-1: device descriptor read/64, error -71 [ 157.042858][ T5908] usb usb6-port1: attempt power cycle [ 157.281590][ T7138] netlink: 80 bytes leftover after parsing attributes in process `syz.4.311'. [ 157.299706][ T7138] netlink: 80 bytes leftover after parsing attributes in process `syz.4.311'. [ 157.532294][ T5908] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 157.634098][ T5908] usb 6-1: device descriptor read/8, error -71 [ 157.742953][ T5873] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 157.828435][ T7149] input: syz1 as /devices/virtual/input/input10 [ 157.893150][ T5908] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 157.924105][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 157.936655][ T5908] usb 6-1: device descriptor read/8, error -71 [ 157.947601][ T5873] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 157.974047][ T5873] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.008155][ T5873] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.034505][ T5873] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.067279][ T5908] usb usb6-port1: unable to enumerate USB device [ 158.074528][ T5873] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.114319][ T5873] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 158.141884][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.379704][ T5873] usb 5-1: GET_CAPABILITIES returned 0 [ 158.394946][ T5873] usbtmc 5-1:16.0: can't read capabilities [ 158.588198][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 158.714549][ T7140] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 158.776528][ T5873] usb 5-1: USB disconnect, device number 14 [ 161.245810][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.323'. [ 161.326612][ T7176] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 161.344379][ T7176] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (133) [ 161.829862][ T7196] overlayfs: failed to resolve '/I [ 161.829862][ T7196] ': -2 [ 162.093900][ T7202] netlink: 'syz.1.328': attribute type 2 has an invalid length. [ 162.101884][ T7202] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.328'. [ 165.603284][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 165.612105][ T7259] netlink: 36 bytes leftover after parsing attributes in process `syz.2.341'. [ 168.528009][ T7300] Process accounting resumed [ 170.075558][ T7289] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 170.083213][ T7289] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 170.124772][ T7289] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 170.152036][ T7289] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 170.166631][ T7289] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 170.174794][ T7289] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 170.199560][ T7289] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 170.212426][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.450353][ T7319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.503995][ T1199] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 170.516609][ T7319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.628473][ T7322] netlink: 'syz.5.355': attribute type 21 has an invalid length. [ 170.724285][ T7322] netlink: 132 bytes leftover after parsing attributes in process `syz.5.355'. [ 170.757721][ T1199] usb 5-1: Using ep0 maxpacket: 16 [ 170.816862][ T7322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.355'. [ 171.017401][ T1199] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 171.048360][ T1199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.082624][ T1199] usb 5-1: Product: syz [ 171.086820][ T1199] usb 5-1: Manufacturer: syz [ 171.112377][ T1199] usb 5-1: SerialNumber: syz [ 171.143188][ T1199] usb 5-1: config 0 descriptor?? [ 171.213472][ T1199] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 171.221709][ T1199] usb 5-1: Detected FT232H [ 171.460058][ T1199] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 171.475565][ T1199] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 171.489964][ T1199] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 171.503423][ T1199] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 171.655059][ T1199] usb 5-1: USB disconnect, device number 15 [ 171.665702][ T1199] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 171.675755][ T1199] ftdi_sio 5-1:0.0: device disconnected [ 171.765537][ T7335] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 172.137371][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 172.212465][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 172.212536][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 172.219065][ T55] Bluetooth: hci5: command 0x0c1a tx timeout [ 173.560092][ T7366] ======================================================= [ 173.560092][ T7366] WARNING: The mand mount option has been deprecated and [ 173.560092][ T7366] and is ignored by this kernel. Remove the mand [ 173.560092][ T7366] option from the mount to silence this warning. [ 173.560092][ T7366] ======================================================= [ 173.598181][ T7366] hugetlbfs: Unknown parameter 'nr_fnod¿Œ»' [ 174.205704][ T7370] veth0_vlan: left promiscuous mode [ 174.213757][ T7370] veth0_vlan: entered promiscuous mode [ 174.284375][ T7376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.292954][ T5831] Bluetooth: hci5: command 0x0c1a tx timeout [ 174.324872][ T7376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.415596][ T7379] loop2: detected capacity change from 0 to 7 [ 174.427901][ T7379] Dev loop2: unable to read RDB block 7 [ 174.442254][ T7379] loop2: unable to read partition table [ 174.448056][ T7379] loop2: partition table beyond EOD, truncated [ 174.468987][ T7376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.478514][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.498100][ T7379] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 174.499923][ T5873] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 174.526179][ T7376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.534525][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.692448][ T1199] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 174.722436][ T5873] usb 5-1: device descriptor read/64, error -71 [ 174.862281][ T1199] usb 6-1: Using ep0 maxpacket: 16 [ 174.889543][ T1199] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.909736][ T1199] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 174.934574][ T1199] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.963630][ T1199] usb 6-1: config 0 descriptor?? [ 175.427540][ T7411] netlink: 80 bytes leftover after parsing attributes in process `syz.1.380'. [ 175.546290][ T7411] netlink: 80 bytes leftover after parsing attributes in process `syz.1.380'. [ 175.870808][ T1199] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 175.894557][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.373'. [ 176.328181][ T7381] netlink: 256 bytes leftover after parsing attributes in process `syz.5.373'. [ 176.364913][ T7381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.373504][ T5831] Bluetooth: hci5: command 0x0c1a tx timeout [ 176.385965][ T7381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.414460][ T9] usb 6-1: USB disconnect, device number 10 [ 177.126194][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 177.309013][ T9] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 177.330859][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.383221][ T9] usb 3-1: config 0 descriptor?? [ 178.333856][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 178.344090][ T9] asix 3-1:0.0: probe with driver asix failed with error -61 [ 178.747203][ T9] usb 3-1: USB disconnect, device number 12 [ 178.752363][ T5873] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 178.922325][ T5873] usb 6-1: Using ep0 maxpacket: 32 [ 178.929358][ T5873] usb 6-1: config 251 has an invalid interface number: 19 but max is 1 [ 178.939624][ T5873] usb 6-1: config 251 has an invalid interface number: 217 but max is 1 [ 178.953408][ T5873] usb 6-1: config 251 has no interface number 0 [ 178.959769][ T5873] usb 6-1: config 251 has no interface number 1 [ 178.972570][ T5873] usb 6-1: config 251 interface 19 has no altsetting 0 [ 179.002433][ T5873] usb 6-1: config 251 interface 217 has no altsetting 0 [ 179.016953][ T5873] usb 6-1: New USB device found, idVendor=12d1, idProduct=c4a9, bcdDevice=bd.40 [ 179.030851][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.052369][ T5873] usb 6-1: Product: syz [ 179.056645][ T5873] usb 6-1: Manufacturer: syz [ 179.061252][ T5873] usb 6-1: SerialNumber: syz [ 179.298494][ T29] audit: type=1326 audit(2000000006.589:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7444 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb57e719 code=0x7ffc0000 [ 179.323947][ T7445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.349179][ T29] audit: type=1326 audit(2000000006.619:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7444 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb57e719 code=0x7ffc0000 [ 179.396706][ T7445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.448459][ T29] audit: type=1326 audit(2000000006.619:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7444 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fbccb57e719 code=0x7ffc0000 [ 179.491092][ T5873] option 6-1:251.19: GSM modem (1-port) converter detected [ 179.521018][ T5873] usb 6-1: Found UVC 252.03 device syz (12d1:c4a9) [ 179.533284][ T29] audit: type=1326 audit(2000000006.619:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7444 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb57e719 code=0x7ffc0000 [ 179.562388][ T5873] usb 6-1: No valid video chain found. [ 179.582734][ T5873] usb 6-1: USB disconnect, device number 11 [ 179.606302][ T5873] option 6-1:251.19: device disconnected [ 179.622810][ T29] audit: type=1326 audit(2000000006.619:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7444 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbccb57e719 code=0x7ffc0000 [ 179.762691][ T29] audit: type=1326 audit(2000000006.619:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7444 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb57e719 code=0x7ffc0000 [ 179.795846][ T7455] loop2: detected capacity change from 0 to 7 [ 179.824291][ T7455] Dev loop2: unable to read RDB block 7 [ 179.827761][ T29] audit: type=1326 audit(2000000006.619:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7444 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fbccb57e719 code=0x7ffc0000 [ 179.830373][ T7455] loop2: unable to read partition table [ 179.882388][ T29] audit: type=1326 audit(2000000006.619:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7444 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb57e719 code=0x7ffc0000 [ 179.902480][ T7455] loop2: partition table beyond EOD, truncated [ 179.954548][ T7455] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 179.962251][ T29] audit: type=1326 audit(2000000006.619:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7444 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fbccb57e719 code=0x7ffc0000 [ 179.991994][ T29] audit: type=1326 audit(2000000006.619:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7444 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb57e719 code=0x7ffc0000 [ 181.018051][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.029852][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.228299][ T7472] Process accounting resumed [ 181.440270][ T7476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.400'. [ 182.771032][ T7490] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 182.938293][ T7493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.972745][ T7493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.282328][ T25] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 183.522594][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 183.540646][ T25] usb 6-1: config 0 has an invalid interface number: 111 but max is 0 [ 183.709870][ T25] usb 6-1: config 0 has no interface number 0 [ 183.725669][ T25] usb 6-1: config 0 interface 111 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 184.315906][ T25] usb 6-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=fc.66 [ 184.364817][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.666790][ T25] usb 6-1: Product: syz [ 184.692396][ T25] usb 6-1: Manufacturer: syz [ 184.697467][ T25] usb 6-1: SerialNumber: syz [ 184.716422][ T25] usb 6-1: config 0 descriptor?? [ 184.882505][ T25] ushc 6-1:0.111: probe with driver ushc failed with error -110 [ 184.955619][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.004582][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.079898][ T5908] usb 6-1: USB disconnect, device number 12 [ 185.127784][ T5831] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 185.242291][ T25] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 185.414200][ T7522] overlayfs: failed to resolve './file1': -2 [ 185.424502][ T25] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 185.441354][ T41] block nbd1: Possible stuck request ffff8880258b0000: control (read@0,4096B). Runtime 90 seconds [ 185.444617][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.499454][ T25] usb 3-1: config 0 descriptor?? [ 185.984155][ T7532] Process accounting resumed [ 186.786649][ T25] pegasus 3-1:0.0: probe with driver pegasus failed with error -121 [ 187.289876][ T7536] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 187.582837][ T7550] loop2: detected capacity change from 0 to 7 [ 187.625499][ T7550] Dev loop2: unable to read RDB block 7 [ 187.631483][ T7550] loop2: unable to read partition table [ 187.649946][ T7550] loop2: partition table beyond EOD, truncated [ 187.681490][ T7550] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 187.878432][ T7562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.724845][ T5904] usb 3-1: USB disconnect, device number 13 [ 190.339285][ T7581] netlink: 'syz.5.427': attribute type 9 has an invalid length. [ 190.396855][ T7581] netlink: 134688 bytes leftover after parsing attributes in process `syz.5.427'. [ 192.152927][ T7591] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.161376][ T7601] loop2: detected capacity change from 0 to 7 [ 192.189760][ T7601] Dev loop2: unable to read RDB block 7 [ 192.195913][ T7601] loop2: unable to read partition table [ 192.210656][ T7601] loop2: partition table beyond EOD, truncated [ 192.217640][ T7601] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 193.299044][ T7623] netlink: 'syz.3.444': attribute type 10 has an invalid length. [ 193.360612][ T7623] warning: `syz.3.444' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 193.388199][ T7623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.444'. [ 193.400660][ T7623] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 193.541588][ T7627] loop2: detected capacity change from 0 to 7 [ 193.548095][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 193.566231][ T7627] Dev loop2: unable to read RDB block 7 [ 193.577508][ T7627] loop2: unable to read partition table [ 193.586526][ T7627] loop2: partition table beyond EOD, truncated [ 193.599276][ T7627] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 193.711502][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 193.752602][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 193.775984][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 193.809506][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 193.833597][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.874860][ T9] usb 6-1: config 0 descriptor?? [ 194.141215][ T7632] loop2: detected capacity change from 0 to 7 [ 194.160680][ T7632] Dev loop2: unable to read RDB block 7 [ 194.181677][ T7632] loop2: unable to read partition table [ 194.199978][ T7632] loop2: partition table beyond EOD, truncated [ 194.224757][ T7632] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 194.378250][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.402467][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.968934][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 194.968992][ T29] audit: type=1326 audit(2000000022.219:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7634 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4ff7e719 code=0x7ffc0000 [ 194.982316][ T7636] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 195.558744][ T7637] Cannot find set identified by id 0 to match [ 195.602271][ T29] audit: type=1326 audit(2000000022.219:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7634 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4ff7e719 code=0x7ffc0000 [ 195.638264][ T7643] FAULT_INJECTION: forcing a failure. [ 195.638264][ T7643] name failslab, interval 1, probability 0, space 0, times 0 [ 195.703559][ T7643] CPU: 1 UID: 0 PID: 7643 Comm: syz.2.452 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 195.714179][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 195.724246][ T7643] Call Trace: [ 195.727516][ T7643] [ 195.730459][ T7643] dump_stack_lvl+0x241/0x360 [ 195.735156][ T7643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.740365][ T7643] ? __pfx__printk+0x10/0x10 [ 195.744974][ T7643] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 195.750517][ T7643] ? __pfx___might_resched+0x10/0x10 [ 195.755800][ T7643] should_fail_ex+0x3b0/0x4e0 [ 195.760484][ T7643] ? getname_flags+0xb7/0x540 [ 195.765175][ T7643] should_failslab+0xac/0x100 [ 195.769867][ T7643] ? getname_flags+0xb7/0x540 [ 195.774565][ T7643] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 195.779954][ T7643] getname_flags+0xb7/0x540 [ 195.784477][ T7643] ? do_syscall_64+0x100/0x230 [ 195.789253][ T7643] __x64_sys_renameat2+0xad/0xe0 [ 195.794208][ T7643] do_syscall_64+0xf3/0x230 [ 195.798704][ T7643] ? clear_bhb_loop+0x35/0x90 [ 195.803397][ T7643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.809282][ T7643] RIP: 0033:0x7f8a4ff7e719 [ 195.813690][ T7643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.833295][ T7643] RSP: 002b:00007f8a50dce038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 195.841721][ T7643] RAX: ffffffffffffffda RBX: 00007f8a50135f80 RCX: 00007f8a4ff7e719 [ 195.849713][ T7643] RDX: 0000000000000005 RSI: 0000000020000100 RDI: 0000000000000005 [ 195.857689][ T7643] RBP: 00007f8a50dce090 R08: 0000000000000002 R09: 0000000000000000 [ 195.865669][ T7643] R10: 0000000020000580 R11: 0000000000000246 R12: 0000000000000001 [ 195.873660][ T7643] R13: 0000000000000000 R14: 00007f8a50135f80 R15: 00007fffab1e8548 [ 195.881661][ T7643] [ 195.884795][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.995417][ T29] audit: type=1326 audit(2000000022.229:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7634 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f8a4ff7e719 code=0x7ffc0000 [ 196.040314][ T29] audit: type=1326 audit(2000000022.299:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7634 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4ff7e719 code=0x7ffc0000 [ 196.084073][ T29] audit: type=1326 audit(2000000022.299:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7634 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4ff7e719 code=0x7ffc0000 [ 196.105354][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.396448][ T9] appletouch 6-1:0.0: Failed to request geyser raw mode [ 196.410068][ T7648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.454'. [ 196.434176][ T9] appletouch 6-1:0.0: probe with driver appletouch failed with error -5 [ 196.465836][ T7648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.454'. [ 196.994188][ T7649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.020693][ T9] usb 6-1: USB disconnect, device number 13 [ 197.175785][ T7649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.078316][ T7649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.161671][ T7665] openvswitch: netlink: Actions may not be safe on all matching packets [ 198.275882][ T7649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.492741][ T5908] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 198.670852][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 198.857449][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 199.013897][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 199.090826][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 199.266196][ T7672] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 199.275834][ T5908] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 199.296153][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.304808][ T5908] usb 3-1: Product: syz [ 199.311735][ T5908] usb 3-1: Manufacturer: syz [ 199.317049][ T5908] usb 3-1: SerialNumber: syz [ 199.428072][ T5908] usb 3-1: config 0 descriptor?? [ 199.459602][ T5908] iguanair 3-1:0.0: failed to submit urb: -90 [ 199.467747][ T5908] iguanair 3-1:0.0: probe with driver iguanair failed with error -90 [ 199.673493][ T5908] usb 3-1: USB disconnect, device number 14 [ 199.850651][ T7680] Cannot find set identified by id 0 to match [ 200.344594][ T7686] FAULT_INJECTION: forcing a failure. [ 200.344594][ T7686] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 200.373083][ T7686] CPU: 1 UID: 0 PID: 7686 Comm: syz.2.465 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 200.383705][ T7686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 200.393778][ T7686] Call Trace: [ 200.397070][ T7686] [ 200.400017][ T7686] dump_stack_lvl+0x241/0x360 [ 200.404725][ T7686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.409952][ T7686] ? __pfx__printk+0x10/0x10 [ 200.414575][ T7686] should_fail_ex+0x3b0/0x4e0 [ 200.419279][ T7686] strncpy_from_user+0x36/0x260 [ 200.424175][ T7686] getname_flags+0xf1/0x540 [ 200.428695][ T7686] ? do_syscall_64+0x100/0x230 [ 200.433482][ T7686] __x64_sys_renameat2+0xad/0xe0 [ 200.438455][ T7686] do_syscall_64+0xf3/0x230 [ 200.442980][ T7686] ? clear_bhb_loop+0x35/0x90 [ 200.447682][ T7686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.453590][ T7686] RIP: 0033:0x7f8a4ff7e719 [ 200.458003][ T7686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.477602][ T7686] RSP: 002b:00007f8a50dce038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 200.486020][ T7686] RAX: ffffffffffffffda RBX: 00007f8a50135f80 RCX: 00007f8a4ff7e719 [ 200.493992][ T7686] RDX: 0000000000000005 RSI: 0000000020000100 RDI: 0000000000000005 [ 200.501959][ T7686] RBP: 00007f8a50dce090 R08: 0000000000000002 R09: 0000000000000000 [ 200.509924][ T7686] R10: 0000000020000580 R11: 0000000000000246 R12: 0000000000000001 [ 200.517891][ T7686] R13: 0000000000000000 R14: 00007f8a50135f80 R15: 00007fffab1e8548 [ 200.525868][ T7686] [ 200.528975][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.587697][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.600648][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.616671][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.627591][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.635416][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 203.642818][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.996640][ T7724] openvswitch: netlink: Actions may not be safe on all matching packets [ 204.102474][ T969] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 204.121591][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.252316][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 204.261459][ T969] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.292331][ T969] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.322282][ T969] usb 3-1: config 0 interface 0 has no altsetting 0 [ 204.328922][ T969] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 204.367643][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.423381][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.445839][ T969] usb 3-1: config 0 descriptor?? [ 204.669998][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.016234][ T969] kye 0003:0458:5012.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 205.107120][ T969] kye 0003:0458:5012.0002: item fetching failed at offset 0/1 [ 205.130140][ T969] kye 0003:0458:5012.0002: parse failed [ 205.148221][ T7734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.154364][ T969] kye 0003:0458:5012.0002: probe with driver kye failed with error -22 [ 205.166284][ T7734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.220644][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.463550][ T7738] Cannot find set identified by id 0 to match [ 205.754656][ T55] Bluetooth: hci0: command tx timeout [ 206.672512][ T7753] loop2: detected capacity change from 0 to 7 [ 206.680215][ T11] bridge_slave_1: left allmulticast mode [ 207.290612][ T11] bridge_slave_1: left promiscuous mode [ 207.354071][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.394719][ T7673] usb 3-1: USB disconnect, device number 15 [ 207.559912][ T5841] Dev loop2: unable to read RDB block 7 [ 207.573346][ T11] bridge_slave_0: left allmulticast mode [ 207.578058][ T5841] loop2: unable to read partition table [ 207.588367][ T11] bridge_slave_0: left promiscuous mode [ 207.600854][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.610538][ T5841] loop2: partition table beyond EOD, truncated [ 207.719233][ T5202] Dev loop2: unable to read RDB block 7 [ 207.740871][ T5202] loop2: unable to read partition table [ 207.748234][ T7764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.762526][ T5202] loop2: partition table beyond EOD, truncated [ 207.843936][ T55] Bluetooth: hci0: command tx timeout [ 207.956366][ T7764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.518304][ T55] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 208.807773][ T7784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.838475][ T7784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.080822][ T7779] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 209.432880][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.452622][ T969] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 209.466744][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.490357][ T11] bond0 (unregistering): Released all slaves [ 209.529078][ T7711] chnl_net:caif_netlink_parms(): no params data found [ 209.549415][ T7772] netlink: 'syz.3.487': attribute type 10 has an invalid length. [ 209.588604][ T7772] team0: Port device netdevsim0 added [ 209.633306][ T7781] netlink: 80 bytes leftover after parsing attributes in process `syz.2.491'. [ 209.660397][ T969] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 209.661259][ T7781] netlink: 80 bytes leftover after parsing attributes in process `syz.2.491'. [ 209.702428][ T969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.743814][ T969] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 209.762556][ T969] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 209.788925][ T969] usb 6-1: Manufacturer: syz [ 209.801856][ T969] usb 6-1: config 0 descriptor?? [ 209.883982][ T7797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.894200][ T55] Bluetooth: hci0: command tx timeout [ 209.932333][ T969] rc_core: IR keymap rc-hauppauge not found [ 209.935387][ T7799] openvswitch: netlink: Actions may not be safe on all matching packets [ 209.938457][ T969] Registered IR keymap rc-empty [ 209.981086][ T969] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 210.040433][ T969] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input13 [ 210.243526][ T7806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.405592][ T7806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.644962][ T7805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.010960][ T7805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.088479][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 211.199822][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 211.282993][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 211.322753][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 211.330181][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 211.380111][ T5876] usb 6-1: USB disconnect, device number 14 [ 211.422304][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 211.464759][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 211.509347][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 211.538097][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 211.562421][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 211.727499][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 211.740052][ T7831] Cannot find set identified by id 0 to match [ 211.972717][ T55] Bluetooth: hci0: command tx timeout [ 211.990201][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.146777][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.202359][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.212722][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.220143][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.237493][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.244997][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.254015][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.262768][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.270273][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.278014][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.285794][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.293577][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.300992][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.308645][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.316305][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.323985][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.332378][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.339781][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.347539][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.355011][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.383757][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 212.811669][ T7711] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.960833][ T7711] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.177118][ T7711] bridge_slave_0: entered allmulticast mode [ 213.310880][ T7711] bridge_slave_0: entered promiscuous mode [ 213.385224][ T7711] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.426840][ T7711] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.492603][ T7711] bridge_slave_1: entered allmulticast mode [ 213.499761][ T7711] bridge_slave_1: entered promiscuous mode [ 213.574771][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.502'. [ 213.631477][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.502'. [ 213.672273][ T7843] netlink: 36 bytes leftover after parsing attributes in process `syz.5.502'. [ 213.839643][ T6111] block nbd3: NBD_DISCONNECT [ 213.843454][ T7711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.845990][ T55] block nbd3: Receive control failed (result -32) [ 213.892402][ T6111] block nbd3: Send disconnect failed -32 [ 213.898617][ T6111] block nbd3: shutting down sockets [ 213.922904][ T7711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.289210][ T7848] netlink: 80 bytes leftover after parsing attributes in process `syz.2.504'. [ 214.355836][ T7848] netlink: 80 bytes leftover after parsing attributes in process `syz.2.504'. [ 215.511659][ T41] block nbd1: Possible stuck request ffff8880258b0000: control (read@0,4096B). Runtime 120 seconds [ 215.541833][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 215.551895][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'. [ 215.560933][ T7867] netlink: 36 bytes leftover after parsing attributes in process `syz.1.510'. [ 215.621820][ T11] hsr_slave_0: left promiscuous mode [ 215.672071][ T11] hsr_slave_1: left promiscuous mode [ 215.704135][ T55] block nbd4: Receive control failed (result -32) [ 215.716362][ T6111] block nbd4: NBD_DISCONNECT [ 215.720994][ T6111] block nbd4: Send disconnect failed -32 [ 215.762520][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.769998][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.788126][ T6111] block nbd4: shutting down sockets [ 215.849694][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.881775][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.005924][ T11] veth1_macvtap: left promiscuous mode [ 216.981020][ T11] veth0_macvtap: left promiscuous mode [ 216.986831][ T11] veth1_vlan: left promiscuous mode [ 217.002512][ T11] veth0_vlan: left promiscuous mode [ 218.213351][ T7884] Process accounting resumed [ 220.295675][ T11] team0 (unregistering): Port device team_slave_1 removed [ 220.394774][ T11] team0 (unregistering): Port device team_slave_0 removed [ 221.957751][ T7909] netlink: 80 bytes leftover after parsing attributes in process `syz.2.522'. [ 221.994012][ T7909] netlink: 80 bytes leftover after parsing attributes in process `syz.2.522'. [ 222.118457][ T7711] team0: Port device team_slave_0 added [ 222.997158][ T7918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.525'. [ 223.140740][ T7711] team0: Port device team_slave_1 added [ 223.268593][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.290005][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.315888][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.370257][ T7711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.384502][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.391608][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.417614][ T7711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.605350][ T7711] hsr_slave_0: entered promiscuous mode [ 223.649729][ T7711] hsr_slave_1: entered promiscuous mode [ 224.979895][ T7711] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 225.015047][ T7711] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 225.063133][ T7711] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 225.104351][ T7711] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 225.507854][ T7711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.599041][ T7711] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.647559][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.654741][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.728722][ T2946] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.735871][ T2946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.890258][ T7711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.065672][ T7974] loop2: detected capacity change from 0 to 7 [ 226.105489][ T7974] Dev loop2: unable to read RDB block 7 [ 226.111125][ T7974] loop2: unable to read partition table [ 226.138695][ T7974] loop2: partition table beyond EOD, truncated [ 226.162338][ T7974] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 226.416322][ T7711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.146123][ T29] audit: type=1326 audit(2000000055.439:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4ff7e719 code=0x7ffc0000 [ 228.201749][ T29] audit: type=1326 audit(2000000055.459:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4ff7e719 code=0x7ffc0000 [ 228.259974][ T29] audit: type=1326 audit(2000000055.469:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a4ff7e719 code=0x7ffc0000 [ 228.298673][ T8010] overlayfs: missing 'lowerdir' [ 228.309510][ T29] audit: type=1326 audit(2000000055.489:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4ff7e719 code=0x7ffc0000 [ 228.336268][ T29] audit: type=1326 audit(2000000055.529:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a4ff7e719 code=0x7ffc0000 [ 228.371775][ T7711] veth0_vlan: entered promiscuous mode [ 228.401835][ T29] audit: type=1326 audit(2000000055.529:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4ff7e719 code=0x7ffc0000 [ 228.455917][ T7711] veth1_vlan: entered promiscuous mode [ 228.486462][ T29] audit: type=1326 audit(2000000055.529:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4ff7e719 code=0x7ffc0000 [ 228.545528][ T7711] veth0_macvtap: entered promiscuous mode [ 228.574670][ T29] audit: type=1326 audit(2000000055.529:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a4ff7d0b0 code=0x7ffc0000 [ 228.615333][ T7711] veth1_macvtap: entered promiscuous mode [ 228.628566][ T29] audit: type=1326 audit(2000000055.529:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8a4ff7ff47 code=0x7ffc0000 [ 228.690116][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.703325][ T8017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.717821][ T29] audit: type=1326 audit(2000000055.529:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a4ff7e719 code=0x7ffc0000 [ 228.721502][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.820494][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.852344][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.877207][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.909567][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.942869][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.978452][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.011336][ T8017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.031630][ T7711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.065406][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.079178][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.121796][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.147234][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.297699][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.310358][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.320661][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.331372][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.368837][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.391467][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.417324][ T7711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.465872][ T7711] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.490628][ T7711] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.522799][ T7711] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.550025][ T7711] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.753295][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.792336][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.959158][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.462789][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.974312][ T8054] Cannot find add_set index 0 as target [ 232.006202][ T8054] netlink: 'syz.1.546': attribute type 13 has an invalid length. [ 232.016442][ T8054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.546'. [ 232.216399][ T8057] netlink: 80 bytes leftover after parsing attributes in process `syz.1.548'. [ 232.844629][ T8057] netlink: 80 bytes leftover after parsing attributes in process `syz.1.548'. [ 235.037149][ T8106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.095350][ T8106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.275705][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.285518][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.305742][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.315536][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.325636][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.335670][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.355645][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.365672][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.375776][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.385641][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.397770][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.415736][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.435715][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.445465][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.465670][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.475551][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.485621][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.505691][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.515663][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.535678][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.545670][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.565673][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.585521][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.595755][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.605922][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.626104][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.636370][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.655650][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.665730][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.669941][ T8138] netlink: 80 bytes leftover after parsing attributes in process `syz.3.561'. [ 237.713354][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 237.744292][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.513262][ T8131] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.524104][ T8138] netlink: 80 bytes leftover after parsing attributes in process `syz.3.561'. [ 238.525181][ T8139] UBIFS error (pid: 8139): cannot open "./file0", error -22 [ 238.631973][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 238.652362][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 238.665917][ T8144] netlink: 36 bytes leftover after parsing attributes in process `syz.2.562'. [ 238.669641][ T8146] openvswitch: netlink: Actions may not be safe on all matching packets [ 238.770093][ T8149] loop2: detected capacity change from 0 to 7 [ 238.955536][ T8149] Dev loop2: unable to read RDB block 7 [ 238.961261][ T8149] loop2: unable to read partition table [ 239.803059][ T8149] loop2: partition table beyond EOD, truncated [ 239.809270][ T8149] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 239.922827][ T55] block nbd5: Receive control failed (result -32) [ 239.968632][ T6111] block nbd5: NBD_DISCONNECT [ 239.973601][ T6111] block nbd5: Send disconnect failed -32 [ 239.979266][ T6111] block nbd5: shutting down sockets [ 239.995973][ T8160] openvswitch: netlink: Actions may not be safe on all matching packets [ 241.470827][ T55] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 241.520141][ T8185] FAULT_INJECTION: forcing a failure. [ 241.520141][ T8185] name failslab, interval 1, probability 0, space 0, times 0 [ 241.533566][ T8185] CPU: 1 UID: 0 PID: 8185 Comm: syz.3.573 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 241.544188][ T8185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 241.554257][ T8185] Call Trace: [ 241.557549][ T8185] [ 241.560497][ T8185] dump_stack_lvl+0x241/0x360 [ 241.565200][ T8185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.570415][ T8185] ? __pfx__printk+0x10/0x10 [ 241.575021][ T8185] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 241.580587][ T8185] ? __pfx___might_resched+0x10/0x10 [ 241.585893][ T8185] should_fail_ex+0x3b0/0x4e0 [ 241.590592][ T8185] ? vm_area_dup+0x61/0x290 [ 241.595109][ T8185] should_failslab+0xac/0x100 [ 241.599797][ T8185] ? vm_area_dup+0x61/0x290 [ 241.604314][ T8185] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 241.609702][ T8185] vm_area_dup+0x61/0x290 [ 241.614049][ T8185] __split_vma+0x1cb/0xc50 [ 241.618486][ T8185] ? __pfx___split_vma+0x10/0x10 [ 241.623430][ T8185] ? mas_prev_range+0xe8/0x130 [ 241.628213][ T8185] ? can_vma_merge_right+0x1d3/0x500 [ 241.633525][ T8185] vma_modify+0x141c/0x1a80 [ 241.638047][ T8185] ? __pfx_mt_find+0x10/0x10 [ 241.642666][ T8185] ? __pfx_vma_modify+0x10/0x10 [ 241.647543][ T8185] vma_modify_policy+0x3a6/0x420 [ 241.652514][ T8185] ? __pfx_vma_modify_policy+0x10/0x10 [ 241.658009][ T8185] mbind_range+0x2cf/0x830 [ 241.662436][ T8185] ? mas_find+0x950/0xbb0 [ 241.666787][ T8185] __se_sys_mbind+0xc12/0x1a10 [ 241.671596][ T8185] ? __pfx___se_sys_mbind+0x10/0x10 [ 241.676810][ T8185] ? __mutex_unlock_slowpath+0x21d/0x750 [ 241.682462][ T8185] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 241.688454][ T8185] ? __fget_files+0x3f3/0x470 [ 241.693171][ T8185] ? do_syscall_64+0x100/0x230 [ 241.697956][ T8185] ? __x64_sys_mbind+0x21/0xf0 [ 241.702741][ T8185] do_syscall_64+0xf3/0x230 [ 241.707262][ T8185] ? clear_bhb_loop+0x35/0x90 [ 241.711960][ T8185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.717865][ T8185] RIP: 0033:0x7f76cfd7e719 [ 241.722295][ T8185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.741916][ T8185] RSP: 002b:00007f76d0c34038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 241.750351][ T8185] RAX: ffffffffffffffda RBX: 00007f76cff35f80 RCX: 00007f76cfd7e719 [ 241.755152][ T5904] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 241.758321][ T8185] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020001000 [ 241.773845][ T8185] RBP: 00007f76d0c34090 R08: 0000000000000000 R09: 0000000000000000 [ 241.781835][ T8185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.789821][ T8185] R13: 0000000000000000 R14: 00007f76cff35f80 R15: 00007ffd67947f88 [ 241.797804][ T8185] [ 241.934769][ T5904] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 241.944319][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.198502][ T5904] usb 6-1: config 0 descriptor?? [ 242.206368][ T5904] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 243.431723][ T8210] netlink: 80 bytes leftover after parsing attributes in process `syz.1.577'. [ 243.470113][ T5904] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 243.477976][ T8210] netlink: 80 bytes leftover after parsing attributes in process `syz.1.577'. [ 243.771650][ T5904] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 243.783846][ T8219] FAULT_INJECTION: forcing a failure. [ 243.783846][ T8219] name failslab, interval 1, probability 0, space 0, times 0 [ 243.796964][ T8219] CPU: 0 UID: 0 PID: 8219 Comm: syz.2.579 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 243.807582][ T8219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 243.817665][ T8219] Call Trace: [ 243.819197][ T8221] openvswitch: netlink: Actions may not be safe on all matching packets [ 243.820942][ T8219] [ 243.820954][ T8219] dump_stack_lvl+0x241/0x360 [ 243.820985][ T8219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.842101][ T8219] ? __pfx__printk+0x10/0x10 [ 243.846723][ T8219] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 243.852644][ T8219] ? __pfx___might_resched+0x10/0x10 [ 243.857960][ T8219] should_fail_ex+0x3b0/0x4e0 [ 243.862659][ T8219] ? hugetlbfs_alloc_inode+0xf5/0x140 [ 243.868051][ T8219] should_failslab+0xac/0x100 [ 243.872746][ T8219] ? hugetlbfs_alloc_inode+0xf5/0x140 [ 243.878138][ T8219] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 243.883883][ T8219] hugetlbfs_alloc_inode+0xf5/0x140 [ 243.889100][ T8219] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 243.894938][ T8219] alloc_inode+0x65/0x1a0 [ 243.899293][ T8219] new_inode+0x22/0x1d0 [ 243.903473][ T8219] ? resv_map_alloc+0x1c4/0x2c0 [ 243.908344][ T8219] hugetlbfs_get_inode+0x8a/0x4b0 [ 243.913393][ T8219] hugetlb_file_setup+0x204/0x5c0 [ 243.918436][ T8219] ksys_mmap_pgoff+0x20d/0x720 [ 243.923225][ T8219] do_syscall_64+0xf3/0x230 [ 243.927743][ T8219] ? clear_bhb_loop+0x35/0x90 [ 243.932433][ T8219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.938346][ T8219] RIP: 0033:0x7f8a4ff7e719 [ 243.942772][ T8219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.962391][ T8219] RSP: 002b:00007f8a50dce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 243.970825][ T8219] RAX: ffffffffffffffda RBX: 00007f8a50135f80 RCX: 00007f8a4ff7e719 [ 243.978808][ T8219] RDX: 0000000000000004 RSI: 0000000000ff5000 RDI: 0000000020000000 [ 243.986790][ T8219] RBP: 00007f8a50dce090 R08: ffffffffffffffff R09: 0000000000000000 [ 243.994775][ T8219] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001 [ 244.002759][ T8219] R13: 0000000000000000 R14: 00007f8a50135f80 R15: 00007fffab1e8548 [ 244.010755][ T8219] [ 244.668103][ T5904] usb 6-1: USB disconnect, device number 15 [ 246.011783][ T41] block nbd1: Possible stuck request ffff8880258b0000: control (read@0,4096B). Runtime 150 seconds [ 246.046265][ T8250] FAULT_INJECTION: forcing a failure. [ 246.046265][ T8250] name failslab, interval 1, probability 0, space 0, times 0 [ 246.059866][ T8250] CPU: 0 UID: 0 PID: 8250 Comm: syz.5.587 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 246.070480][ T8250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 246.080548][ T8250] Call Trace: [ 246.083840][ T8250] [ 246.086781][ T8250] dump_stack_lvl+0x241/0x360 [ 246.091478][ T8250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.096689][ T8250] ? __pfx__printk+0x10/0x10 [ 246.101298][ T8250] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 246.106855][ T8250] ? __pfx___might_resched+0x10/0x10 [ 246.112158][ T8250] should_fail_ex+0x3b0/0x4e0 [ 246.116854][ T8250] ? mas_alloc_nodes+0x26c/0x840 [ 246.121809][ T8250] should_failslab+0xac/0x100 [ 246.126496][ T8250] ? mas_alloc_nodes+0x26c/0x840 [ 246.131445][ T8250] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 246.136834][ T8250] mas_alloc_nodes+0x26c/0x840 [ 246.141617][ T8250] mas_preallocate+0x554/0x8c0 [ 246.146396][ T8250] ? __pfx_mas_preallocate+0x10/0x10 [ 246.151706][ T8250] ? __mas_set_range+0x133/0x3c0 [ 246.156666][ T8250] __split_vma+0x302/0xc50 [ 246.161105][ T8250] ? __pfx___split_vma+0x10/0x10 [ 246.166055][ T8250] ? mas_prev_range+0xe8/0x130 [ 246.170840][ T8250] ? can_vma_merge_right+0x1d3/0x500 [ 246.176154][ T8250] vma_modify+0x141c/0x1a80 [ 246.180669][ T8250] ? __pfx_mt_find+0x10/0x10 [ 246.185292][ T8250] ? __pfx_vma_modify+0x10/0x10 [ 246.190163][ T8250] vma_modify_policy+0x3a6/0x420 [ 246.195122][ T8250] ? __pfx_vma_modify_policy+0x10/0x10 [ 246.200618][ T8250] mbind_range+0x2cf/0x830 [ 246.205045][ T8250] ? mas_find+0x950/0xbb0 [ 246.209392][ T8250] __se_sys_mbind+0xc12/0x1a10 [ 246.214196][ T8250] ? __pfx___se_sys_mbind+0x10/0x10 [ 246.219425][ T8250] ? __mutex_unlock_slowpath+0x21d/0x750 [ 246.225078][ T8250] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 246.231075][ T8250] ? __fget_files+0x3f3/0x470 [ 246.235798][ T8250] ? do_syscall_64+0x100/0x230 [ 246.240588][ T8250] ? __x64_sys_mbind+0x21/0xf0 [ 246.245377][ T8250] do_syscall_64+0xf3/0x230 [ 246.249897][ T8250] ? clear_bhb_loop+0x35/0x90 [ 246.254602][ T8250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.260518][ T8250] RIP: 0033:0x7fbccb57e719 [ 246.264943][ T8250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.284552][ T8250] RSP: 002b:00007fbccc393038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 246.292991][ T8250] RAX: ffffffffffffffda RBX: 00007fbccb735f80 RCX: 00007fbccb57e719 [ 246.300982][ T8250] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020001000 [ 246.308962][ T8250] RBP: 00007fbccc393090 R08: 0000000000000000 R09: 0000000000000000 [ 246.316946][ T8250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.324938][ T8250] R13: 0000000000000000 R14: 00007fbccb735f80 R15: 00007ffc3187cff8 [ 246.332944][ T8250] [ 247.178734][ T8256] netlink: 236 bytes leftover after parsing attributes in process `syz.1.589'. [ 247.187782][ T8256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.589'. [ 247.664285][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'. [ 249.190109][ T8302] netlink: 80 bytes leftover after parsing attributes in process `syz.1.598'. [ 249.251389][ T8302] netlink: 80 bytes leftover after parsing attributes in process `syz.1.598'. [ 249.286047][ T8301] netlink: 'syz.2.597': attribute type 29 has an invalid length. [ 249.321096][ T8306] netlink: 'syz.2.597': attribute type 29 has an invalid length. [ 249.455978][ T8301] netlink: 500 bytes leftover after parsing attributes in process `syz.2.597'. [ 250.322741][ T8301] unsupported nla_type 40 [ 253.597799][ T8348] loop2: detected capacity change from 0 to 7 [ 254.305977][ T8348] Dev loop2: unable to read RDB block 7 [ 254.311609][ T8348] loop2: unable to read partition table [ 254.317524][ T8348] loop2: partition table beyond EOD, truncated [ 254.323769][ T8348] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 256.071270][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.078059][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.187875][ T8365] loop2: detected capacity change from 0 to 7 [ 256.218410][ T5841] Dev loop2: unable to read RDB block 7 [ 256.227618][ T5841] loop2: unable to read partition table [ 256.255608][ T5841] loop2: partition table beyond EOD, truncated [ 256.397850][ T5202] Dev loop2: unable to read RDB block 7 [ 256.409477][ T5202] loop2: unable to read partition table [ 256.430955][ T5202] loop2: partition table beyond EOD, truncated [ 257.410527][ T55] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 257.831911][ T8394] FAULT_INJECTION: forcing a failure. [ 257.831911][ T8394] name failslab, interval 1, probability 0, space 0, times 0 [ 257.911789][ T8398] netlink: 236 bytes leftover after parsing attributes in process `syz.1.619'. [ 257.920968][ T8398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'. [ 258.231959][ T8394] CPU: 1 UID: 0 PID: 8394 Comm: syz.2.616 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 258.242598][ T8394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 258.252668][ T8394] Call Trace: [ 258.255960][ T8394] [ 258.258905][ T8394] dump_stack_lvl+0x241/0x360 [ 258.263607][ T8394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.268826][ T8394] ? __pfx__printk+0x10/0x10 [ 258.273436][ T8394] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 258.278997][ T8394] ? __pfx___might_resched+0x10/0x10 [ 258.284318][ T8394] should_fail_ex+0x3b0/0x4e0 [ 258.289023][ T8394] ? mas_alloc_nodes+0x26c/0x840 [ 258.294183][ T8394] should_failslab+0xac/0x100 [ 258.298877][ T8394] ? mas_alloc_nodes+0x26c/0x840 [ 258.303830][ T8394] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 258.309225][ T8394] mas_alloc_nodes+0x26c/0x840 [ 258.314014][ T8394] mas_preallocate+0x554/0x8c0 [ 258.318796][ T8394] ? 0xffffffffa0000960 [ 258.322962][ T8394] ? __pfx_mas_preallocate+0x10/0x10 [ 258.328272][ T8394] ? __mas_set_range+0x133/0x3c0 [ 258.333227][ T8394] commit_merge+0x3ff/0x760 [ 258.337772][ T8394] ? __pfx_commit_merge+0x10/0x10 [ 258.342834][ T8394] ? dup_anon_vma+0x7d/0x2b0 [ 258.347449][ T8394] vma_modify+0x1620/0x1a80 [ 258.351967][ T8394] ? kasan_save_track+0x51/0x80 [ 258.356834][ T8394] ? kasan_save_track+0x3f/0x80 [ 258.361716][ T8394] ? vma_modify+0x7d1/0x1a80 [ 258.366327][ T8394] ? __pfx_vma_modify+0x10/0x10 [ 258.371201][ T8394] vma_modify_policy+0x3a6/0x420 [ 258.376162][ T8394] ? __pfx_vma_modify_policy+0x10/0x10 [ 258.381661][ T8394] mbind_range+0x2cf/0x830 [ 258.386098][ T8394] ? mas_find+0x950/0xbb0 [ 258.390452][ T8394] __se_sys_mbind+0xc12/0x1a10 [ 258.395259][ T8394] ? __pfx___se_sys_mbind+0x10/0x10 [ 258.400475][ T8394] ? __mutex_unlock_slowpath+0x21d/0x750 [ 258.406130][ T8394] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 258.412128][ T8394] ? __fget_files+0x3f3/0x470 [ 258.416844][ T8394] ? do_syscall_64+0x100/0x230 [ 258.421625][ T8394] ? __x64_sys_mbind+0x21/0xf0 [ 258.426412][ T8394] do_syscall_64+0xf3/0x230 [ 258.430930][ T8394] ? clear_bhb_loop+0x35/0x90 [ 258.435626][ T8394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.441534][ T8394] RIP: 0033:0x7f8a4ff7e719 [ 258.445967][ T8394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.465579][ T8394] RSP: 002b:00007f8a50dce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 258.473983][ T8394] RAX: ffffffffffffffda RBX: 00007f8a50135f80 RCX: 00007f8a4ff7e719 [ 258.481945][ T8394] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020001000 [ 258.489906][ T8394] RBP: 00007f8a50dce090 R08: 0000000000000000 R09: 0000000000000000 [ 258.497986][ T8394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.505947][ T8394] R13: 0000000000000000 R14: 00007f8a50135f80 R15: 00007fffab1e8548 [ 258.513923][ T8394] [ 258.742913][ T8408] block device autoloading is deprecated and will be removed. [ 258.934334][ T8414] netlink: 88 bytes leftover after parsing attributes in process `syz.3.623'. [ 258.971491][ T8412] netlink: 'syz.2.622': attribute type 1 has an invalid length. [ 258.986377][ T8412] netlink: 224 bytes leftover after parsing attributes in process `syz.2.622'. [ 259.029606][ T30] INFO: task syz.0.102:6316 blocked for more than 143 seconds. [ 259.038369][ T30] Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 259.047294][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.071454][ T30] task:syz.0.102 state:D stack:25328 pid:6316 tgid:6308 ppid:5828 flags:0x00004004 [ 259.082384][ T8415] overlayfs: conflicting lowerdir path [ 259.082440][ T30] Call Trace: [ 259.091304][ T30] [ 259.094830][ T30] __schedule+0x185a/0x4b70 [ 259.099465][ T30] ? __pfx___schedule+0x10/0x10 [ 259.104609][ T30] ? __pfx_lock_release+0x10/0x10 [ 259.109795][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 259.123878][ T30] ? schedule+0x90/0x320 [ 259.128199][ T30] schedule+0x14b/0x320 [ 259.132615][ T5904] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 259.140341][ T30] schedule_preempt_disabled+0x13/0x30 [ 259.146162][ T30] __mutex_lock+0x6a7/0xd70 [ 259.151205][ T30] ? __mutex_lock+0x52a/0xd70 [ 259.158067][ T30] ? sync_bdevs+0x1ae/0x340 [ 259.162698][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 259.167784][ T30] ? _atomic_dec_and_lock+0x9a/0x130 [ 259.173737][ T30] ? iput+0x3be/0xa50 [ 259.177800][ T30] sync_bdevs+0x1ae/0x340 [ 259.182267][ T30] ksys_sync+0xe2/0x1c0 [ 259.186522][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 259.191357][ T30] ? do_syscall_64+0x100/0x230 [ 259.196284][ T30] ? do_syscall_64+0xb6/0x230 [ 259.201144][ T30] __do_sys_sync+0xe/0x20 [ 259.205728][ T30] do_syscall_64+0xf3/0x230 [ 259.210299][ T30] ? clear_bhb_loop+0x35/0x90 [ 259.215547][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.221505][ T30] RIP: 0033:0x7f6a0a57e719 [ 259.226335][ T30] RSP: 002b:00007f6a0b3be038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 259.234931][ T30] RAX: ffffffffffffffda RBX: 00007f6a0a735f80 RCX: 00007f6a0a57e719 [ 259.243046][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.251115][ T30] RBP: 00007f6a0a5f132e R08: 0000000000000000 R09: 0000000000000000 [ 259.260184][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.268403][ T30] R13: 0000000000000000 R14: 00007f6a0a735f80 R15: 00007ffc6b00a198 [ 259.276569][ T30] [ 259.279883][ T30] [ 259.279883][ T30] Showing all locks held in the system: [ 259.287792][ T30] 4 locks held by rcu_exp_gp_kthr/19: [ 259.303945][ T5904] usb 6-1: Using ep0 maxpacket: 8 [ 259.311242][ T30] #0: ffff8880b863ea58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 259.325976][ T5904] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 259.337706][ T5904] usb 6-1: config 150 has no interface number 0 [ 259.349367][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 259.361936][ T5904] usb 6-1: config 150 interface 204 has no altsetting 0 [ 259.370728][ T5904] usb 6-1: config 150 interface 1 has no altsetting 0 [ 259.377701][ T30] #2: ffff8880257fc618 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xbe/0x14b0 [ 259.389385][ T5904] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 259.399389][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.407792][ T30] #3: ffff8880b863ea58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 259.418231][ T5904] usb 6-1: Product: syz [ 259.422793][ T5904] usb 6-1: Manufacturer: syz [ 259.427488][ T30] 1 lock held by khungtaskd/30: [ 259.432468][ T5904] usb 6-1: SerialNumber: syz [ 259.437224][ T30] #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 259.447855][ T30] 1 lock held by dhcpcd/5496: [ 259.458531][ T30] #0: ffffffff8fcc0cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 259.469627][ T30] 2 locks held by getty/5587: [ 259.475153][ T30] #0: ffff888035c320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 259.485174][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 259.495865][ T30] 1 lock held by udevd/5833: [ 259.500758][ T30] #0: ffff88802580b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc50 [ 259.510130][ T30] 5 locks held by kworker/0:8/5904: [ 259.515624][ T30] #0: ffff888021694d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 259.527121][ T30] #1: ffffc90004447d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 259.539953][ T30] #2: ffff888144fef190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 259.549458][ T30] #3: ffff8880212ca190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 259.558933][ T30] #4: ffff888144edd278 (&(&priv->bus_notifier)->rwsem){++++}-{3:3}, at: blocking_notifier_call_chain+0x53/0x90 [ 259.583088][ T30] 4 locks held by udevd/6111: [ 259.587828][ T30] #0: ffff888029910790 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 [ 259.606379][ T30] #1: ffff888024e3c088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 259.621698][ T30] #2: ffff8881437a55a8 (kn->active#22){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 259.641107][ T30] #3: ffff8880212ca190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 [ 259.650580][ T30] 1 lock held by syz.0.102/6316: [ 259.656344][ T30] #0: ffff88802580b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1ae/0x340 [ 259.665940][ T30] 6 locks held by syz.2.622/8412: [ 259.676961][ T30] #0: [ 259.678815][ T5904] xr_serial 6-1:150.204: xr_serial converter detected [ 259.690966][ T30] ffffffff8fd26a70 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 259.700144][ T30] #1: ffffffff8fd26928 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 259.709268][ T30] #2: ffffffff8f52a3e8 (hwsim_phys_lock){+.+.}-{3:3}, at: hwsim_del_radio_nl+0x89/0x150 [ 259.719637][ T30] #3: ffffffff8fcc0cc8 (rtnl_mutex){+.+.}-{3:3}, at: ieee802154_unregister_hw+0x5a/0xe0 [ 259.729731][ T30] #4: ffff888027ece788 (&local->iflist_mtx#2){+.+.}-{3:3}, at: ieee802154_remove_interfaces+0x33/0x1d0 [ 259.741449][ T30] #5: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 259.752735][ T30] [ 259.780741][ T30] ============================================= [ 259.780741][ T30] [ 259.797556][ T30] NMI backtrace for cpu 0 [ 259.801914][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 259.812427][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 259.822502][ T30] Call Trace: [ 259.825796][ T30] [ 259.828762][ T30] dump_stack_lvl+0x241/0x360 [ 259.833468][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.838693][ T30] ? __pfx__printk+0x10/0x10 [ 259.843320][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 259.848291][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 259.853774][ T30] ? _printk+0xd5/0x120 [ 259.857947][ T30] ? __pfx__printk+0x10/0x10 [ 259.862556][ T30] ? __wake_up_klogd+0xcc/0x110 [ 259.867432][ T30] ? __pfx__printk+0x10/0x10 [ 259.872050][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 259.877102][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 259.883110][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 259.889122][ T30] watchdog+0xff4/0x1040 [ 259.893394][ T30] ? watchdog+0x1ea/0x1040 [ 259.897845][ T30] ? __pfx_watchdog+0x10/0x10 [ 259.902550][ T30] kthread+0x2f0/0x390 [ 259.906632][ T30] ? __pfx_watchdog+0x10/0x10 [ 259.911312][ T30] ? __pfx_kthread+0x10/0x10 [ 259.915904][ T30] ret_from_fork+0x4b/0x80 [ 259.920317][ T30] ? __pfx_kthread+0x10/0x10 [ 259.924899][ T30] ret_from_fork_asm+0x1a/0x30 [ 259.929668][ T30] [ 259.933738][ T30] Sending NMI from CPU 0 to CPUs 1: [ 259.938989][ C1] NMI backtrace for cpu 1 [ 259.939001][ C1] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 259.939021][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 259.939032][ C1] Workqueue: bat_events batadv_nc_worker [ 259.939059][ C1] RIP: 0010:lock_release+0x609/0xa30 [ 259.939084][ C1] Code: 00 48 c7 c7 c0 dc 0a 8c e8 64 02 4e 0a b8 ff ff ff ff 65 0f c1 05 57 06 92 7e 83 f8 01 0f 85 9a 00 00 00 4c 89 f3 48 c1 eb 03 <42> 80 3c 3b 00 74 08 4c 89 f7 e8 e8 00 8b 00 48 c7 84 24 90 00 00 [ 259.939099][ C1] RSP: 0018:ffffc90000107960 EFLAGS: 00000802 [ 259.939112][ C1] RAX: 0000000000000001 RBX: 1ffff92000020f3e RCX: ffffc90000107903 [ 259.939124][ C1] RDX: 0000000000000002 RSI: ffffffff8c0adcc0 RDI: ffffffff8c602f60 [ 259.939136][ C1] RBP: ffffc90000107a98 R08: ffffffff901bd66f R09: 1ffffffff2037acd [ 259.939148][ C1] R10: dffffc0000000000 R11: fffffbfff2037ace R12: 1ffff92000020f38 [ 259.939161][ C1] R13: 0000000000000246 R14: ffffc900001079f0 R15: dffffc0000000000 [ 259.939173][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 259.939187][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.939198][ C1] CR2: 00007f16ea3d0870 CR3: 0000000031e44000 CR4: 00000000003526f0 [ 259.939214][ C1] Call Trace: [ 259.939220][ C1] [ 259.939226][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 259.939248][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 259.939272][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 259.939293][ C1] ? nmi_handle+0x2a/0x5a0 [ 259.939317][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 259.939338][ C1] ? nmi_handle+0x14f/0x5a0 [ 259.939354][ C1] ? nmi_handle+0x2a/0x5a0 [ 259.939371][ C1] ? lock_release+0x609/0xa30 [ 259.939392][ C1] ? default_do_nmi+0x63/0x160 [ 259.939415][ C1] ? exc_nmi+0x123/0x1f0 [ 259.939436][ C1] ? end_repeat_nmi+0xf/0x53 [ 259.939458][ C1] ? lock_release+0x609/0xa30 [ 259.939480][ C1] ? lock_release+0x609/0xa30 [ 259.939503][ C1] ? lock_release+0x609/0xa30 [ 259.939525][ C1] [ 259.939530][ C1] [ 259.939538][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 259.939560][ C1] ? batadv_nc_purge_paths+0x312/0x3b0 [ 259.939576][ C1] ? __pfx_lock_release+0x10/0x10 [ 259.939597][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 259.939617][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 259.939645][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 259.939666][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 259.939682][ C1] ? batadv_nc_purge_paths+0x312/0x3b0 [ 259.939697][ C1] _raw_spin_unlock_bh+0x1b/0x40 [ 259.939720][ C1] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 259.939737][ C1] batadv_nc_purge_paths+0x312/0x3b0 [ 259.939758][ C1] batadv_nc_worker+0x365/0x610 [ 259.939782][ C1] ? process_scheduled_works+0x976/0x1850 [ 259.939804][ C1] process_scheduled_works+0xa63/0x1850 [ 259.939837][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 259.939862][ C1] ? assign_work+0x364/0x3d0 [ 259.939884][ C1] worker_thread+0x870/0xd30 [ 259.939912][ C1] ? __kthread_parkme+0x169/0x1d0 [ 259.939935][ C1] ? __pfx_worker_thread+0x10/0x10 [ 259.939956][ C1] kthread+0x2f0/0x390 [ 259.939971][ C1] ? __pfx_worker_thread+0x10/0x10 [ 259.939991][ C1] ? __pfx_kthread+0x10/0x10 [ 259.940007][ C1] ret_from_fork+0x4b/0x80 [ 259.940028][ C1] ? __pfx_kthread+0x10/0x10 [ 259.940043][ C1] ret_from_fork_asm+0x1a/0x30 [ 259.940072][ C1] [ 259.954397][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 259.954412][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 259.954435][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 259.954446][ T30] Call Trace: [ 259.954452][ T30] [ 259.954461][ T30] dump_stack_lvl+0x241/0x360 [ 259.954490][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.954512][ T30] ? __pfx__printk+0x10/0x10 [ 259.954530][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 259.954561][ T30] ? vscnprintf+0x5d/0x90 [ 259.954586][ T30] panic+0x349/0x880 [ 259.954607][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 259.954631][ T30] ? __pfx_panic+0x10/0x10 [ 259.954648][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 259.954668][ T30] ? __irq_work_queue_local+0x137/0x410 [ 259.954693][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 259.954711][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 259.954734][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 259.954760][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 259.954785][ T30] watchdog+0x1033/0x1040 [ 259.954808][ T30] ? watchdog+0x1ea/0x1040 [ 259.954835][ T30] ? __pfx_watchdog+0x10/0x10 [ 259.954857][ T30] kthread+0x2f0/0x390 [ 259.954881][ T30] ? __pfx_watchdog+0x10/0x10 [ 259.954903][ T30] ? __pfx_kthread+0x10/0x10 [ 259.954922][ T30] ret_from_fork+0x4b/0x80 [ 259.954945][ T30] ? __pfx_kthread+0x10/0x10 [ 259.954962][ T30] ret_from_fork_asm+0x1a/0x30 [ 259.954997][ T30] [ 260.426965][ T30] Kernel Offset: disabled [ 260.431275][ T30] Rebooting in 86400 seconds..