last executing test programs: 36m3.81428538s ago: executing program 32 (id=1193): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) close(0x3) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000200)={0xa, {0x0, 0x40c79, 0x801, 0x300}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/consoles\x00', 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0x408c5333, &(0x7f0000000280)) preadv(r4, &(0x7f0000001300)=[{0x0}], 0x1, 0x0, 0x0) syz_open_dev$loop(0x0, 0x3, 0x80) sendmsg$netlink(r4, 0x0, 0x40000) syz_open_procfs(0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 29m34.215516251s ago: executing program 3 (id=2379): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f00000001c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) 29m29.139065397s ago: executing program 3 (id=2388): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000b0000000a0000000900000000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001680), 0x8000, r5}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_UPDATE_BATCH(0x18, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0}, 0x38) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) 29m26.262307825s ago: executing program 3 (id=2395): syz_open_dev$tty20(0xc, 0x4, 0x1) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x840000000002, 0x3, 0xfa) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0xa5}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 29m26.173297041s ago: executing program 3 (id=2396): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendto$inet(r0, &(0x7f0000000040)="ff1fcd8530a3060e91a67af3bf7bfac53190871583b9f6ebf9bf50f2467af86ec528", 0x22, 0x4, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) 29m26.013467818s ago: executing program 3 (id=2398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) userfaultfd(0x80001) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0422"], 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000180)=0x9, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendto$inet(r5, &(0x7f0000000040)="ff1fcd8530a3060e91a67af3bf7bfac53190871583b9f6ebf9bf50f2467af86ec528", 0x22, 0x4, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) 29m24.478898306s ago: executing program 3 (id=2399): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x101) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(r2, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000fdff01000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000300c0009800800014044"], 0x90}}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000001280)={&(0x7f0000001140)={0x24, @short}, 0x8, &(0x7f0000001240)={0x0}}, 0x0) 29m15.825693684s ago: executing program 33 (id=2385): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x101) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000fdff01000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000300c0009800800014044"], 0x90}}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000001280)={&(0x7f0000001140)={0x24, @short}, 0x8, &(0x7f0000001240)={0x0}}, 0x0) 29m12.538773655s ago: executing program 34 (id=2392): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x101) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000fdff01000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000300c0009800800014044"], 0x90}}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000001280)={&(0x7f0000001140)={0x24, @short}, 0x8, &(0x7f0000001240)={0x0}}, 0x0) 29m9.15362333s ago: executing program 35 (id=2399): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x101) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(r2, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000fdff01000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000300c0009800800014044"], 0x90}}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000001280)={&(0x7f0000001140)={0x24, @short}, 0x8, &(0x7f0000001240)={0x0}}, 0x0) 28m9.652793899s ago: executing program 6 (id=2507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000240)={0x2008}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000040)=']/@^\x00', 0x5) 28m7.354391664s ago: executing program 6 (id=2513): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x2000000000000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x69, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') chdir(0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x40000, @empty}, 0x0, {[0x0, 0xb8e]}}, 0x5c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x6000001c}) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 28m2.500693533s ago: executing program 6 (id=2523): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x2000000000000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x69, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x40000, @empty}, 0x0, {[0x0, 0xb8e]}}, 0x5c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x6000001c}) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 27m59.443280637s ago: executing program 6 (id=2527): r0 = memfd_create(&(0x7f0000000380)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xf6B\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9ac(\xf1\xe0B\xabv\xba\xb3\x8b\xdb\xd9\x01\xe4q\x85\xfa\xad\xac\xbf\xde\xec\fz\x0f\xd8fT\xa8\x9b\xd4\xd2\x91\xa4\x18\xe9>q\xaa$^\x83\xe6\xf7\xce\x9d\xcb\xa8\xd3\xbfQwy`\xcc\xe6\x88\b\xcfK\x8d`Km\xd7\x81\x1f\xa7\xb7\xf0\xde\x10v\xb3g\x048ny^5\x880SX\xeb\xc3\xadW$P\x96\x9d\x92\x89_2\x7f\x9c~\xd9\xa0\xcb\xc2\xa0\xfab\xe8m\x1f\x99\xa0\xd7\xba-\xcf\x03\xf9\xa7\x9d\x8c\x8e,\x93\xfe\xe6)6\xb4:\x16\njg\x19\xf4\n~\fb\x91\xa2\x90h\x97\x81[\xb8\xb2<\xb1\xbd\xe82\xa5\x1f#TAd0\xd7\xdd\xd3\x0f\xb2\xaf\xcd3\xd3D\xb7BC\xcf\x88\xe2_\x80\xe9\xc61C\x7f\xd0\x05\xbcZOG\x94\xe4]\x8f\t', 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)="380101d4", 0x4}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f00000000c0)=0x80000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r5, 0x12e, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000036c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x8, 0x0, 0x0}}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b77c0000000000"], 0xd8) modify_ldt$read_default(0x2, &(0x7f0000000180)=""/159, 0x9f) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)=@GFS2_LARGE_FH_SIZE={0x0, 0x8, {{0x5, 0x3, 0x2, 0x9}, {0x9, 0x4, 0x7, 0xadaf}}}, 0x400) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @mcast2, 0x9}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}]}, 0x34}}, 0xc000) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 27m55.678915051s ago: executing program 6 (id=2535): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) close(r0) symlink(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$video4linux(&(0x7f0000001380), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc008561b, &(0x7f0000000000)) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000027c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000140)='W', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="dcd47a81698aabcb7c00bd82ecf1834db3b005de6b83226625a9441ed445159f49b68d8d2097c52234357d4f61fb6414e9cfdd3ac5bfd09564aed8bcbb8109c7370059d14b973294d7084f1623bcf425e94f0303abd075ce7e0b5233e7c969098c35b05a1c000ccc62e264b990312580fcdb1eb7a7ea2cf3c2e97f3f56d2a1f9ff13e87ba69bee9784e32f143141f620d6a3313ce220f55843df03", 0x9b}, {&(0x7f0000000240)="ab56b03bd51ea142a4a42379e4d527be6bdef1d725c4d6403409da7b1932b071d637c75c444f48b683b0e14cf07febc565c39e2d53ce0f33070252ad53db8cba32ea9158dd68e8b8b32b7218780bf82cf0a51242259781059e9403fecbe60ef43677c98b32e60a354714a0c100c3fe24eea1101c24a7fb8c3129a45b5f2b5fdae7d50ce5a8f28d871606239106bd7a", 0x8f}, {&(0x7f0000000300)="3e8d8b7706d44a969e0fc22d1ffc3d6c4ffe47a637cff0377b8d18c3c6d83bb30effb3ac586cb69f7c3658ef89d9259ec7bc2d0cce3619ee41af409d4e53fc83f89a2938fc28719c9e02d7772dcff71d3abd0384454f31df7fb79e893871de73be4c5bbb768f136d27267c19b6c338c1a39e942d45c903", 0x77}, {&(0x7f0000000100)="3f3227c48628652c5b15d0507a7a6d063a6d31db340e9eafe2997f5f3eb1", 0x1e}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000000900)}], 0x2}}], 0x4, 0x0) shutdown(r5, 0x2) inotify_init1(0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8923, &(0x7f0000000040)={'wlan1\x00'}) 27m52.565208397s ago: executing program 6 (id=2540): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 27m37.321089216s ago: executing program 36 (id=2540): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 12m15.164626378s ago: executing program 5 (id=4969): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xc, 0x0) io_setup(0x7c, &(0x7f0000000240)) io_setup(0x17638000, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="3b000300010010", 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000300)="cad64f18195eea40282f2f4eb9840b6e6b8ebcadb05d6bb5482b444430e944a29f69de0044a602a0805901e4ba5db29b7a7688c744064a9c790101040bbad578a4647a27fdcaa2cd2795b7880f505f68c9bc4f191817de7a09b8dd877653144a9635e05597e860216e59097d3bd1a4f05d55e3f4f9f14d9c00df2605aa265b81b4462de6d29bdab9bd09ef14b89eaf803b2f55e41ac879e8702611bea4ab3d5a1d899b623796c9640384a305d041e6564ca120bffb86ddb70ea9cf5f8543e32ed5b705b2054faebf22a302af4eabb58f61eff0aec6779da0a59dc95f0ef65829fd271ca52e47bbaad28546", 0xeb, 0x200, 0x0, 0x2, r3}]) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000b40)) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x2, 0x0, &(0x7f0000004c80)=""/83, 0x0}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000001180)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x500}, 0x38) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) fcntl$addseals(r2, 0x409, 0x5) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r9, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) setsockopt$inet_int(r9, 0x0, 0x8, &(0x7f00000000c0)=0xfffffe01, 0x4) recvmmsg(r9, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000001040)=0x1) 12m13.676456506s ago: executing program 5 (id=4974): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0xfffc, &(0x7f0000000080)={&(0x7f0000000680)={0x9c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x9c}}, 0x0) 12m13.497602534s ago: executing program 5 (id=4976): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x20, &(0x7f0000000a80)={&(0x7f0000000b00)=""/101, 0x65, 0x0, &(0x7f0000000b80)=""/87, 0x57}}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000200001000000000000000000021400000000ffffffff0800fc68cf6e0000"], 0x2c}}, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file2\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_on}]}) link(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000600)='./file0\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x0, 0x168, 0x9, 0x270, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x270, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'pim6reg0\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ipcomp={{0x30}, {[], 0x12}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000000bd7000ffdbdf2501000000140002006970766c616e310000000c00000000000900010073797a31000000000900030073797a3000000000140002006970766c616e300000000000000000000900010073797a3000000000ea13acf54f784240f4cb10f174bf9c6e3fcb2983b0f05dc919fbd8e84c2a94a5c7ac9d4c5933992a2f26c620aa3d05f2b6fc8ba21ed55e2d7b3309c89f1be67ccd3f4212012868c1df0748421a5f49f765d98164de040ad4bbf66e9f657dd7"], 0x60}, 0x1, 0x0, 0x0, 0x4004800}, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setuid(r6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f00000009c0)=0x3, 0x8) keyctl$get_persistent(0x16, r6, 0xfffffffffffffffb) chdir(&(0x7f00000003c0)='./bus\x00') syz_open_dev$MSR(&(0x7f0000000a40), 0x8, 0x0) 12m13.207540992s ago: executing program 5 (id=4978): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x41400, &(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, {0x3}, &(0x7f0000000240)=""/150, 0x96, &(0x7f0000000300)=""/74, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x7}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000380)={0x904}) read$FUSE(0xffffffffffffffff, &(0x7f00000014c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r2, &(0x7f00000005c0), 0x4001) ptrace$pokeuser(0x6, r7, 0x9, 0xf) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000032680)=""/102396, 0x18ffc) io_setup(0xa, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 12m10.527237207s ago: executing program 5 (id=4984): r0 = syz_open_dev$radio(&(0x7f0000000d80), 0x1, 0x2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000002c0)={0x1}) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x20000000) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x2, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r3 = dup(r2) connect$802154_dgram(r3, &(0x7f0000000080)={0x24, @long}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r3, @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000006800090300000000fffcffff0a0000000000000004000400080001000400000034000c80080003000a917002060001003bea0000080003000000000000000100060000000600010000000000080002000400000010000600fe8000000000000000000000000000aa08000500", @ANYRES32=0x0, @ANYBLOB], 0x74}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000088b77d734c1fa19329a6c000000000000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10) syslog(0x3, &(0x7f0000000040)=""/22, 0x16) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_usb_control_io$hid(r8, 0x0, 0x0) write$P9_RFSYNC(r3, &(0x7f0000000300)={0x7, 0x33, 0x1}, 0x7) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000880)=ANY=[], &(0x7f0000000000)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x2, "ca24"}, @main=@item_4={0x3, 0x0, 0xb, "7366a215"}]}}, 0x0}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x4175, &(0x7f0000000600)={0x0, 0x0, 0x8}, &(0x7f0000000340), &(0x7f00000003c0)) 12m9.520767231s ago: executing program 5 (id=4987): syz_clone3(&(0x7f0000000500)={0x20000000, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x751, 0x2, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0x200001ff, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 12m8.014768936s ago: executing program 37 (id=4987): syz_clone3(&(0x7f0000000500)={0x20000000, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x751, 0x2, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0x200001ff, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 9m57.203598471s ago: executing program 8 (id=5329): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) close(r0) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$video4linux(&(0x7f0000001380), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc008561b, &(0x7f0000000000)) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000027c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000140)='W', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="dcd47a81698aabcb7c00bd82ecf1834db3b005de6b83226625a9441ed445159f49b68d8d2097c52234357d4f61fb6414e9cfdd3ac5bfd09564aed8bcbb8109c7370059d14b973294d7084f1623bcf425e94f0303abd075ce7e0b5233e7c969098c35b05a1c000ccc62e264b990312580fcdb1eb7a7ea2cf3c2e97f3f56d2a1f9ff13e87ba69bee9784e32f143141f620d6a3313ce220f55843df03", 0x9b}, {&(0x7f0000000240)="ab56b03bd51ea142a4a42379e4d527be6bdef1d725c4d6403409da7b1932b071d637c75c444f48b683b0e14cf07febc565c39e2d53ce0f33070252ad53db8cba32ea9158dd68e8b8b32b7218780bf82cf0a51242259781059e9403fecbe60ef43677c98b32e60a354714a0c100c3fe24eea1101c24a7fb8c3129a45b5f2b5fdae7d50ce5a8f28d871606239106bd7a", 0x8f}, {&(0x7f0000000300)="3e8d8b7706d44a969e0fc22d1ffc3d6c4ffe47a637cff0377b8d18c3c6d83bb30effb3ac586cb69f7c3658ef89d9259ec7bc2d0cce3619ee41af409d4e53fc83f89a2938fc28719c9e02d7772dcff71d3abd0384454f31df7fb7", 0x5a}, {&(0x7f0000000100)="3f3227c48628652c5b15d0507a7a6d063a6d31db340e9eafe2997f5f3eb1", 0x1e}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000000900)}], 0x2}}], 0x4, 0x0) shutdown(r5, 0x2) inotify_init1(0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8923, &(0x7f0000000040)={'wlan1\x00'}) 9m55.953452842s ago: executing program 8 (id=5332): setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x3, 0x2, 0x100000002, 0xfffffffffffffffe}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8000, 0x4, 0x81}, &(0x7f0000000400)=0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r1}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000001d40)={{0x12, 0x1, 0x0, 0x43, 0xed, 0xb9, 0x10, 0x1235, 0x10, 0xa738, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb5, 0x0, 0x0, 0x2b, 0xff, 0xea}}, {{0x9, 0x4, 0xb7, 0x0, 0x0, 0x18, 0xad, 0x63}}]}}]}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff2}}}, 0x24}}, 0x0) recvmsg$can_raw(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) fcntl$setpipe(r5, 0x407, 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000000100)='reno\x00', 0x5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r8, r7, 0x12, 0x2008, 0x0, @value=r8}, 0x20) write$tcp_congestion(r6, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r8, r7, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r6, &(0x7f0000000380)='reno\x00', 0x5) ioctl$HIDIOCGSTRING(r5, 0x81044804, &(0x7f0000000000)={0x9f, "0ff6bef793b7765ea389645912b17a47e55889509e32f707a638a284b5b17fea3cdb84aa1f17c68f25e00b7ca831ecea5b901ae65c98cd7c7d35e5feec76c80aef907fa1703efa5a43d174707496e701f43390554e8830a4d2ae153809c7b821b12f629e8662a02da2775dda2b31f81fe1b01ad079f2c388135f0fbfa1979e5a13f7a33ad754db9f98014db8b37c8d09b1dc54ff6bac1e33bb7694aead5d05"}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) 9m50.268165462s ago: executing program 8 (id=5344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x21682, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = fcntl$getown(r0, 0x9) capset(&(0x7f0000000080)={0x20071026, r3}, &(0x7f0000000140)={0x200000, 0x200000, 0x3, 0xfffffffe, 0x8}) mkdirat(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x21, 0xfffffffe}) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x72}, 0x2c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) mkdir(0x0, 0x0) socket$inet(0x2, 0x800, 0x37c) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cb, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009ff0000000000000009210000010122070009058103"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000480)={0x71, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r8, &(0x7f0000000ec0)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003"], 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r9 = dup(r0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 9m44.571974029s ago: executing program 8 (id=5362): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x204, 0x10, 0x100, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x70bd2c, 0x0, 0xa}, [@algo_aead={0x113, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x638, 0x60, "25edc521070000000000000027475459000000ffaafeb3035786c0da8d3add3e2d6c6a3ef75fc955f975bb1b637b1044ed1979b0e15c19284103bcbe325a7a0f021ca5f66b688ac1d121ae9e82225ee9f5c0790f17952902ca4c54d8dfc82a5be97e50ce7c2265cf4558cff67aa750e37619b634667213cd35584c1b65e3c74b7b26fcc8c037fbda72eb001da78a0f8a9d35ada57a6d5cd9f50f2b78d384cfeec3134bef7a65ddd7ddee3fac666558b769c58d8588475f20cb715bb63f18f1693c1bdec31f006f"}}]}, 0x204}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "2f01c4fd8eabb5611b655e5f65991c3e1e6f89550928b713582f37d43e4b35a9f7a5b12d01438c9c419900b0e3001000"}, 0x48, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000003c0)=@chain) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x6ad085a78214bb71, 0x0) quotactl_fd$Q_SYNC(r4, 0xffffffff80000100, 0x0, 0x0) keyctl$link(0x8, r3, r2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x15, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000440)=0x4, 0x4) 9m43.745118623s ago: executing program 8 (id=5365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYRESHEX=r1], 0x2c}}, 0x0) 9m43.372503584s ago: executing program 8 (id=5369): r0 = syz_open_dev$radio(&(0x7f0000000d80), 0x1, 0x2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000002c0)={0x1}) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x20000000) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x2, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r3 = dup(r2) connect$802154_dgram(r3, &(0x7f0000000080)={0x24, @long}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000006800090300000000fffcffff0a0000000000000004000400080001000400000034000c80080003000a917002060001003bea0000080003000000000000000100060000000600010000000000080002000400000010000600fe8000000000000000000000000000aa08000500", @ANYRES32=0x0, @ANYBLOB], 0x74}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000088b77d734c1fa19329a6c000000000000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syslog(0x3, &(0x7f0000000040)=""/22, 0x16) syz_io_uring_setup(0x4175, &(0x7f0000000600)={0x0, 0x0, 0x8}, &(0x7f0000000340), &(0x7f00000003c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x38, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000000c0)=0x1) 9m42.915841281s ago: executing program 38 (id=5369): r0 = syz_open_dev$radio(&(0x7f0000000d80), 0x1, 0x2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000002c0)={0x1}) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x20000000) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x2, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r3 = dup(r2) connect$802154_dgram(r3, &(0x7f0000000080)={0x24, @long}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000006800090300000000fffcffff0a0000000000000004000400080001000400000034000c80080003000a917002060001003bea0000080003000000000000000100060000000600010000000000080002000400000010000600fe8000000000000000000000000000aa08000500", @ANYRES32=0x0, @ANYBLOB], 0x74}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000088b77d734c1fa19329a6c000000000000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syslog(0x3, &(0x7f0000000040)=""/22, 0x16) syz_io_uring_setup(0x4175, &(0x7f0000000600)={0x0, 0x0, 0x8}, &(0x7f0000000340), &(0x7f00000003c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x38, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000000c0)=0x1) 1m56.895004488s ago: executing program 2 (id=6904): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f0000000080), 0x0) 1m56.637608246s ago: executing program 2 (id=6910): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xec, &(0x7f0000000540)=""/236, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x0, 0x0, 0x20, 0x0, "cbfea29368cc60a1ff856ae471fe261fdfb44a306ea8d6996bbcb8eb45d73158"}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m56.369294718s ago: executing program 2 (id=6915): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000540)='lp\x00', 0x6875664344afe1c1) 1m56.224773837s ago: executing program 2 (id=6918): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) umount2(&(0x7f00000004c0)='./file0\x00', 0x0) 1m56.116789783s ago: executing program 2 (id=6922): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(r0, 0x0, 0x0, 0xffffff7f00000000, 0x0) 1m55.773348945s ago: executing program 2 (id=6926): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) r2 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) dup2(r0, r1) 1m55.127860397s ago: executing program 39 (id=6926): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) r2 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) dup2(r0, r1) 10.060102021s ago: executing program 7 (id=7393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x13, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xb, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x8, 0x38, 0x13, {0xffff945a, 0x1}, 0x3, 0xed}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) write(r3, 0x0, 0x0) 9.271576777s ago: executing program 7 (id=7397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f00000000c0)=0x8) listen(r3, 0x9) 5.137245078s ago: executing program 0 (id=7413): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 5.093776971s ago: executing program 0 (id=7414): capget(&(0x7f00000002c0)={0x19980330}, 0x0) 5.008819801s ago: executing program 0 (id=7415): membarrier(0x40, 0x0) 4.951408918s ago: executing program 0 (id=7417): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x9, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000001c0)={0x80000, "340b7832ceefdad118cf501922d6974a270000c50f0000002ddc7d00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r4, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r3}, {r5}], 0x2, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.883199053s ago: executing program 1 (id=7418): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@generic="e7016120af33"]}, 0x1c}}, 0x0) 4.821223653s ago: executing program 1 (id=7420): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x8a000) 4.678166878s ago: executing program 7 (id=7421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) accept(r1, 0x0, 0x0) 4.676461994s ago: executing program 0 (id=7422): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fd\x00') getdents(r2, &(0x7f0000000380)=""/65, 0xada54abf39c771d5) 4.409538265s ago: executing program 1 (id=7424): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 3.557890499s ago: executing program 7 (id=7427): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.419702036s ago: executing program 1 (id=7429): membarrier(0x40, 0x0) 3.392787621s ago: executing program 7 (id=7430): r0 = socket$alg(0x26, 0x5, 0x0) ioperm(0x0, 0xbea, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448e1, &(0x7f0000000240)={0x0, 0x0, "be5e08"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x5c, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5c3a}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) close(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x12001, &(0x7f000000a040)={0x0, 0x3938700}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r6, 0x8921, &(0x7f00000003c0)={'pimreg\x00'}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xc1) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) 3.308729444s ago: executing program 4 (id=7432): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) sendto$inet(r0, &(0x7f0000000180)='{', 0x1, 0x0, 0x0, 0x0) 3.259836277s ago: executing program 1 (id=7433): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='mm_migrate_pages\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='mm_migrate_pages\x00', r0}, 0x10) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 3.061629946s ago: executing program 4 (id=7434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x20}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}, 0x36) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x6, 0x9, 0xff, 0x5}, 'syz0\x00', 0x33}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 1.826173036s ago: executing program 9 (id=7436): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) 1.81544234s ago: executing program 4 (id=7437): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) accept(r1, 0x0, 0x0) 1.757415554s ago: executing program 1 (id=7438): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b07333b6c1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 1.686022482s ago: executing program 9 (id=7439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90009118db0049d90491ceaebfd26d4eef23248000000f858dbb8a1905234", 0x34}, {&(0x7f0000000200)="c67f0d7df974", 0x6}], 0x2) 1.649128229s ago: executing program 0 (id=7440): socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2a, 0x2, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x2d, 0xee, 0x46, 0x10, 0x19d2, 0x1118, 0x82e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x9, 0xbf, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x0, 0x0, 0x0, {}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_usbip_server_init(0x4) syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r1, &(0x7f0000001540)=ANY=[@ANYBLOB="0000000300000001000000000000010019296852d095ee5049000000"], 0x30) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x14927e, 0x0) 1.492641764s ago: executing program 9 (id=7441): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8881}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000002a00)=@v2={0x2, @aes256, 0x10, '\x00', @c}) add_key$keyring(&(0x7f0000000940), 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x3f}, 0x80, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') 1.491951126s ago: executing program 9 (id=7442): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000500)) 1.445034536s ago: executing program 9 (id=7443): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.41593609s ago: executing program 9 (id=7444): socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$char_usb(r2, &(0x7f0000000100)=""/124, 0xfffffd77) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 754.577024ms ago: executing program 4 (id=7445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x2f) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000300)={0x78, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r4, &(0x7f0000ff8000/0x4000)=nil, 0x4000) 180.911605ms ago: executing program 4 (id=7446): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006c040000080003", @ANYRES32=r2, @ANYBLOB="0800b7000400000008002600940900000800a0000200000005001901080000000500190104000000080027"], 0x4c}}, 0x0) 120.740068ms ago: executing program 7 (id=7447): syz_emit_ethernet(0x6a, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x100}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, r4, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x58}}, 0x0) 0s ago: executing program 4 (id=7448): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a700000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='mm_migrate_pages\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='mm_migrate_pages\x00', r0}, 0x10) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): 126.846442][T26946] 0 pages cma reserved [ 2126.943692][T26983] FAULT_INJECTION: forcing a failure. [ 2126.943692][T26983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2126.956923][T26983] CPU: 1 UID: 0 PID: 26983 Comm: syz.0.5937 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 2126.967719][T26983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2126.977892][T26983] Call Trace: [ 2126.981184][T26983] [ 2126.984131][T26983] dump_stack_lvl+0x241/0x360 [ 2126.988833][T26983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2126.994053][T26983] ? __pfx__printk+0x10/0x10 [ 2126.998686][T26983] should_fail_ex+0x3b0/0x4e0 [ 2127.003385][T26983] _copy_from_user+0x31/0xe0 [ 2127.008000][T26983] do_ipv6_setsockopt+0x2f1/0x3630 [ 2127.013128][T26983] ? __lock_acquire+0x1384/0x2050 [ 2127.018186][T26983] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 2127.023772][T26983] ? __pfx_lock_acquire+0x10/0x10 [ 2127.028818][T26983] ? get_pid_task+0x23/0x1f0 [ 2127.033426][T26983] ? __pfx_lock_release+0x10/0x10 [ 2127.038468][T26983] ? kstrtouint_from_user+0x128/0x190 [ 2127.043873][T26983] ? mark_lock+0x9a/0x360 [ 2127.048228][T26983] ? __lock_acquire+0x1384/0x2050 [ 2127.053289][T26983] ipv6_setsockopt+0x5d/0x170 [ 2127.057993][T26983] rawv6_setsockopt+0x327/0x740 [ 2127.062874][T26983] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 2127.068271][T26983] ? __fget_files+0x29/0x470 [ 2127.072889][T26983] ? sock_common_setsockopt+0x37/0xc0 [ 2127.078288][T26983] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2127.084197][T26983] do_sock_setsockopt+0x3af/0x720 [ 2127.089254][T26983] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2127.094816][T26983] ? __fget_files+0x29/0x470 [ 2127.099430][T26983] ? __fget_files+0x3f3/0x470 [ 2127.104135][T26983] ? __fget_files+0x29/0x470 [ 2127.108783][T26983] __sys_setsockopt+0x1a2/0x250 [ 2127.113700][T26983] __x64_sys_setsockopt+0xb5/0xd0 [ 2127.118755][T26983] do_syscall_64+0xf3/0x230 [ 2127.123289][T26983] ? clear_bhb_loop+0x35/0x90 [ 2127.127986][T26983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2127.133951][T26983] RIP: 0033:0x7fc88c97e719 [ 2127.138379][T26983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2127.158017][T26983] RSP: 002b:00007fc88d7e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2127.166471][T26983] RAX: ffffffffffffffda RBX: 00007fc88cb36130 RCX: 00007fc88c97e719 [ 2127.174475][T26983] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000007 [ 2127.182466][T26983] RBP: 00007fc88d7e9090 R08: 0000000000000020 R09: 0000000000000000 [ 2127.190450][T26983] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 2127.198442][T26983] R13: 0000000000000000 R14: 00007fc88cb36130 R15: 00007ffc3bd4ba38 [ 2127.206447][T26983] [ 2127.845196][T26987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2127.868336][T26987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2129.538281][T16684] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 2129.696515][T16684] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2129.718105][T16684] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2129.772110][T16684] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2129.801553][T16684] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2129.864239][T16684] usb 8-1: config 0 descriptor?? [ 2130.402976][T16684] usbhid 8-1:0.0: can't add hid device: -71 [ 2130.409023][T16684] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2130.446036][T16684] usb 8-1: USB disconnect, device number 66 [ 2130.744725][T27019] xt_hashlimit: size too large, truncated to 1048576 [ 2130.811392][ T29] audit: type=1400 audit(1730273199.484:583): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=27013 comm="syz.4.5947" dest=20004 [ 2131.161654][ T29] audit: type=1326 audit(1730273199.834:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27022 comm="syz.0.5951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc88c97e719 code=0x0 [ 2131.922475][ T29] audit: type=1326 audit(1730273200.594:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27029 comm="syz.7.5952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8149d7e719 code=0x0 [ 2132.147920][T27037] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5954'. [ 2133.960512][T27054] xt_hashlimit: max too large, truncated to 1048576 [ 2134.062951][T27058] netlink: 'syz.2.5960': attribute type 21 has an invalid length. [ 2134.070812][T27058] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5960'. [ 2134.137869][T27058] netlink: 'syz.2.5960': attribute type 4 has an invalid length. [ 2134.183609][T27058] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5960'. [ 2134.290830][T27068] ptrace attach of ""[27071] was attempted by "./syz-executor exec"[27068] [ 2134.942755][ T29] audit: type=1326 audit(1730273203.614:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27074 comm="syz.2.5966" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e28d7e719 code=0x0 [ 2137.983293][T27112] xt_limit: Overflow, try lower: 4294967295/4294966784 [ 2138.113383][T27113] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 2138.365148][T27109] 9pnet_fd: Insufficient options for proto=fd [ 2138.431438][T27121] FAULT_INJECTION: forcing a failure. [ 2138.431438][T27121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2138.563364][T27125] xt_limit: Overflow, try lower: 4294967295/4294966784 [ 2138.602704][T27121] CPU: 1 UID: 0 PID: 27121 Comm: syz.9.5978 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 2138.613528][T27121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2138.623609][T27121] Call Trace: [ 2138.626898][T27121] [ 2138.629828][T27121] dump_stack_lvl+0x241/0x360 [ 2138.634504][T27121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2138.639704][T27121] ? __pfx__printk+0x10/0x10 [ 2138.644298][T27121] should_fail_ex+0x3b0/0x4e0 [ 2138.648984][T27121] _copy_from_user+0x31/0xe0 [ 2138.653588][T27121] memdup_user+0x64/0xc0 [ 2138.657848][T27121] strndup_user+0x68/0xc0 [ 2138.662173][T27121] __se_sys_mount+0xe2/0x3c0 [ 2138.666778][T27121] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2138.672758][T27121] ? __pfx___se_sys_mount+0x10/0x10 [ 2138.677957][T27121] ? do_syscall_64+0x100/0x230 [ 2138.682841][T27121] ? __x64_sys_mount+0x20/0xc0 [ 2138.687609][T27121] do_syscall_64+0xf3/0x230 [ 2138.692172][T27121] ? clear_bhb_loop+0x35/0x90 [ 2138.696854][T27121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2138.702749][T27121] RIP: 0033:0x7f1e7957e719 [ 2138.707193][T27121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2138.727236][T27121] RSP: 002b:00007f1e7a2a9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2138.735649][T27121] RAX: ffffffffffffffda RBX: 00007f1e79735f80 RCX: 00007f1e7957e719 [ 2138.743614][T27121] RDX: 0000000020000200 RSI: 00000000200000c0 RDI: 0000000020000180 [ 2138.751623][T27121] RBP: 00007f1e7a2a9090 R08: 0000000000000000 R09: 0000000000000000 [ 2138.759597][T27121] R10: 000000000100c083 R11: 0000000000000246 R12: 0000000000000001 [ 2138.767562][T27121] R13: 0000000000000000 R14: 00007f1e79735f80 R15: 00007ffc4e379b98 [ 2138.775537][T27121] [ 2138.778619][ C1] vkms_vblank_simulate: vblank timer overrun [ 2139.443670][ T29] audit: type=1326 audit(1730273208.114:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27130 comm="syz.0.5982" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc88c97e719 code=0x0 [ 2139.520729][T27136] xt_hashlimit: size too large, truncated to 1048576 [ 2139.777692][ T29] audit: type=1400 audit(1730273208.454:588): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=27126 comm="syz.9.5980" dest=20004 [ 2141.126526][T27147] openvswitch: netlink: Actions may not be safe on all matching packets [ 2142.896801][T27167] overlay: ./file0 is not a directory [ 2144.078491][T27174] xt_hashlimit: max too large, truncated to 1048576 [ 2144.596474][T27182] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5996'. [ 2144.943172][ T29] audit: type=1326 audit(1730273213.614:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27184 comm="syz.7.5997" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8149d7e719 code=0x0 [ 2145.944310][T27193] openvswitch: netlink: Actions may not be safe on all matching packets [ 2146.207274][T23408] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 2147.523674][T27208] overlay: ./file0 is not a directory [ 2151.442289][T27242] ptrace attach of ""[27253] was attempted by "./syz-executor exec"[27242] [ 2152.272632][T27263] overlay: ./file0 is not a directory [ 2154.246076][T27275] xt_limit: Overflow, try lower: 4294967295/4294966784 [ 2154.419832][T27282] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6023'. [ 2155.758252][T27300] x_tables: unsorted entry at hook 1 [ 2157.026700][T27314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2157.949942][T27314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2159.015096][T27323] ptrace attach of ""[27328] was attempted by "./syz-executor exec"[27323] [ 2159.229853][T27333] overlayfs: failed to resolve './file0': -2 [ 2159.697673][T27338] x_tables: unsorted entry at hook 1 [ 2160.252633][T27341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2160.262079][T27342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2160.276378][T27341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2160.289649][T27342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2160.309369][T23408] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 2160.316404][T23408] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 2160.493935][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2162.522875][ T5877] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2162.692674][ T5877] usb 3-1: Using ep0 maxpacket: 16 [ 2162.731711][ T5877] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2162.746801][ T5877] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2162.772277][ T5877] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2162.810193][ T5877] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2162.924136][ T5877] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2162.943715][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2162.963879][ T5877] usb 3-1: Product: syz [ 2163.154515][ T5877] usb 3-1: Manufacturer: syz [ 2163.164597][ T5877] usb 3-1: SerialNumber: syz [ 2163.340419][T27374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6050'. [ 2164.686230][ T29] audit: type=1326 audit(1730273233.364:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27395 comm="syz.0.6057" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc88c97e719 code=0x0 [ 2164.837937][T27400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2164.862941][T27400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2165.509012][ T5877] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 2165.564118][ T5877] usb 3-1: found format II with max.bitrate = 0, frame size=0 [ 2165.571688][ T5877] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2165.592158][T27409] can0: slcan on pts0. [ 2165.621057][ T5877] usb 3-1: USB disconnect, device number 33 [ 2165.714376][T27409] can0 (unregistered): slcan off pts0. [ 2165.992925][T27422] pimreg: entered allmulticast mode [ 2167.193066][T16452] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 2167.252609][ T29] audit: type=1326 audit(1730273235.924:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27433 comm="syz.2.6067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e28d7e719 code=0x0 [ 2168.396437][T16452] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 2168.412135][T16452] usb 8-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 2168.421059][T16452] usb 8-1: Manufacturer: syz [ 2168.427004][T16452] usb 8-1: SerialNumber: syz [ 2168.436724][T16452] usb 8-1: config 0 descriptor?? [ 2169.426247][T16452] IPVS: starting estimator thread 0... [ 2169.491352][T27464] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6075'. [ 2169.514058][T27462] IPVS: using max 19 ests per chain, 45600 per kthread [ 2169.756732][ T5877] usb 8-1: USB disconnect, device number 67 [ 2170.250329][T27469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2170.286575][T27469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2171.354802][T27485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6081'. [ 2171.672894][ T5877] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 2171.826447][ T5877] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 2171.841221][ T5877] usb 8-1: config 0 has no interface number 0 [ 2171.846433][T16452] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2171.871167][ T5877] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2171.882666][ T5877] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.891957][ T5877] usb 8-1: Product: syz [ 2171.909035][ T5877] usb 8-1: Manufacturer: syz [ 2171.926246][ T5877] usb 8-1: SerialNumber: syz [ 2171.962781][ T5877] usb 8-1: config 0 descriptor?? [ 2172.002827][T16452] usb 3-1: Using ep0 maxpacket: 16 [ 2172.010209][T16452] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 30768, setting to 1024 [ 2172.032859][T16452] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 2172.045156][T16452] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 2172.061175][T16452] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2172.069774][T16452] usb 3-1: Product: syz [ 2172.074158][T16452] usb 3-1: Manufacturer: syz [ 2172.078781][T16452] usb 3-1: SerialNumber: syz [ 2172.086154][T16452] usb 3-1: config 0 descriptor?? [ 2172.091820][T27491] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 2172.264416][T27501] can0: slcan on pts0. [ 2172.334704][T27501] can0 (unregistered): slcan off pts0. [ 2172.355860][T27491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2172.379919][ T5877] dvb_usb_ec168 8-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 2172.390647][T27491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2172.415679][ T5877] usb 8-1: USB disconnect, device number 68 [ 2172.428385][T16452] usb 3-1: Limiting number of CPorts to U8_MAX [ 2172.438721][T16452] usb 3-1: Not enough endpoints found in device, aborting! [ 2172.729962][ T5877] usb 3-1: USB disconnect, device number 34 [ 2173.996610][T27520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6093'. [ 2175.546398][T27537] xt_limit: Overflow, try lower: 4294967295/4294966784 [ 2176.977719][T27546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2176.989340][T27546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2177.076181][T27554] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6099'. [ 2177.092723][T14201] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 2177.103252][T27554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6099'. [ 2177.132819][T27554] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6099'. [ 2177.141849][T27554] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6099'. [ 2177.162071][T27557] netlink: 'syz.0.6099': attribute type 1 has an invalid length. [ 2177.169923][T27557] netlink: 'syz.0.6099': attribute type 2 has an invalid length. [ 2177.252839][T14201] usb 8-1: Using ep0 maxpacket: 32 [ 2177.260014][T14201] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 2177.269892][T14201] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2177.272721][T23154] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2177.286768][T14201] usb 8-1: config 0 descriptor?? [ 2177.304914][T14201] gspca_main: sq930x-2.14.0 probing 041e:403c [ 2177.376110][ T29] audit: type=1326 audit(1730273246.034:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27559 comm="syz.0.6103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc88c97e719 code=0x0 [ 2177.459244][T23154] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2177.473431][T23154] usb 3-1: config 0 has no interface number 0 [ 2177.486864][T23154] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2177.496803][T23154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.510749][T23154] usb 3-1: Product: syz [ 2177.515419][T23154] usb 3-1: Manufacturer: syz [ 2177.520312][T23154] usb 3-1: SerialNumber: syz [ 2177.647769][T23154] usb 3-1: config 0 descriptor?? [ 2178.422386][T14201] gspca_sq930x: ucbus_write failed -110 [ 2178.428736][T14201] sq930x 8-1:0.0: probe with driver sq930x failed with error -110 [ 2179.792486][T23154] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 2179.846654][T23154] usb 8-1: USB disconnect, device number 69 [ 2179.863740][T27581] can0: slcan on pts0. [ 2180.093187][T27584] can0 (unregistered): slcan off pts0. [ 2180.199686][T14201] usb 3-1: USB disconnect, device number 35 [ 2180.566987][T27596] kvm: pic: non byte write [ 2182.536998][T27628] ./bus: Can't lookup blockdev [ 2183.165710][T23154] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 2183.942985][T23154] usb 8-1: Using ep0 maxpacket: 16 [ 2184.006656][T23154] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 30768, setting to 1024 [ 2184.113581][ T5877] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2184.132831][T23154] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 2184.499212][T23154] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 2184.508998][T23154] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.524601][T23154] usb 8-1: config 0 descriptor?? [ 2184.530384][T23154] usb 8-1: can't set config #0, error -71 [ 2184.538978][T23154] usb 8-1: USB disconnect, device number 70 [ 2184.547351][ T5877] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2184.555976][ T5877] usb 3-1: config 0 has no interface number 0 [ 2184.571576][ T5877] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2184.586322][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.601900][ T5877] usb 3-1: Product: syz [ 2184.607790][ T5877] usb 3-1: Manufacturer: syz [ 2184.612499][ T5877] usb 3-1: SerialNumber: syz [ 2184.639479][ T5877] usb 3-1: config 0 descriptor?? [ 2184.903434][T23154] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 2185.118862][T23154] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 2185.138659][T23154] usb 8-1: config 0 has no interface number 0 [ 2185.162092][T23154] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2185.190247][T23154] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2185.217231][T23154] usb 8-1: Product: syz [ 2185.224652][T23154] usb 8-1: Manufacturer: syz [ 2185.229638][T23154] usb 8-1: SerialNumber: syz [ 2185.249250][T23154] usb 8-1: config 0 descriptor?? [ 2186.218089][T27663] can0: slcan on ptm0. [ 2186.379468][ T5877] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 2186.391374][T23154] dvb_usb_ec168 8-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 2186.657266][T27670] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 2186.663851][T27670] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2186.672737][T27670] vhci_hcd vhci_hcd.0: Device attached [ 2186.682054][T27673] vhci_hcd: connection closed [ 2186.682311][ T6557] vhci_hcd: stop threads [ 2186.698708][ T6557] vhci_hcd: release socket [ 2186.712654][ T6557] vhci_hcd: disconnect device [ 2186.802198][ T6464] usb 3-1: USB disconnect, device number 36 [ 2187.933567][T27663] can0 (unregistered): slcan off ptm0. [ 2187.940900][ T6464] usb 8-1: USB disconnect, device number 71 [ 2189.772646][T27706] block device autoloading is deprecated and will be removed. [ 2190.039357][T27709] x_tables: unsorted entry at hook 1 [ 2190.182634][T27710] netlink: 'syz.4.6138': attribute type 1 has an invalid length. [ 2190.190507][T27710] netlink: 'syz.4.6138': attribute type 2 has an invalid length. [ 2191.432608][T27724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2191.502396][T27724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2194.014535][T27749] ./bus: Can't lookup blockdev [ 2196.037921][T27768] x_tables: unsorted entry at hook 1 [ 2196.121177][T27768] netlink: 'syz.0.6152': attribute type 1 has an invalid length. [ 2196.129069][T27768] netlink: 'syz.0.6152': attribute type 2 has an invalid length. [ 2196.750695][T27781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2197.201926][T27781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2197.229520][T14201] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2197.295484][T27773] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6155'. [ 2197.387546][T14201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2197.403759][T14201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2197.438217][T14201] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2197.471193][T14201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2197.493041][T27799] 9pnet_fd: Insufficient options for proto=fd [ 2197.501154][T14201] usb 3-1: config 0 descriptor?? [ 2198.252229][T14201] usbhid 3-1:0.0: can't add hid device: -71 [ 2198.689260][T14201] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2198.782639][T14201] usb 3-1: USB disconnect, device number 37 [ 2198.915228][T27816] x_tables: unsorted entry at hook 1 [ 2198.928565][T27816] netlink: 'syz.0.6167': attribute type 1 has an invalid length. [ 2198.937084][T27816] netlink: 'syz.0.6167': attribute type 2 has an invalid length. [ 2199.908078][T27835] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6172'. [ 2200.996574][T27848] x_tables: unsorted entry at hook 1 [ 2201.121716][T27852] x_tables: unsorted entry at hook 1 [ 2202.514672][T27868] x_tables: unsorted entry at hook 1 [ 2202.609704][T27868] netlink: 'syz.9.6183': attribute type 1 has an invalid length. [ 2202.618419][T27868] netlink: 'syz.9.6183': attribute type 2 has an invalid length. [ 2202.644014][T23408] Bluetooth: hci6: unexpected event for opcode 0x040d [ 2202.712880][ T5877] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2202.890554][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2203.044936][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2203.782784][ T5877] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2203.945950][T27893] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6189'. [ 2204.135238][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2204.246585][ T5877] usb 3-1: config 0 descriptor?? [ 2204.903042][ T5877] isku 0003:1E7D:319C.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 2205.405904][ T5877] isku 0003:1E7D:319C.0025: couldn't init struct isku_device [ 2205.422681][ T5877] isku 0003:1E7D:319C.0025: couldn't install keyboard [ 2205.452332][ T5877] isku 0003:1E7D:319C.0025: probe with driver isku failed with error -71 [ 2205.495516][ T5877] usb 3-1: USB disconnect, device number 38 [ 2206.044827][T27923] x_tables: unsorted entry at hook 1 [ 2206.255266][T27926] netlink: 'syz.2.6197': attribute type 1 has an invalid length. [ 2206.289314][T27926] netlink: 'syz.2.6197': attribute type 2 has an invalid length. [ 2207.689408][T27944] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6202'. [ 2208.426927][T23408] Bluetooth: hci2: unexpected event for opcode 0x040d [ 2209.169043][T27965] ptrace attach of ""[27969] was attempted by "./syz-executor exec"[27965] [ 2210.833963][T27985] x_tables: unsorted entry at hook 1 [ 2211.274043][T27985] netlink: 'syz.4.6214': attribute type 1 has an invalid length. [ 2211.281996][T27985] netlink: 'syz.4.6214': attribute type 2 has an invalid length. [ 2211.583848][T28000] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6217'. [ 2212.116173][T28001] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6216'. [ 2217.869621][T28053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2217.921932][T28053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2217.964591][T28053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2217.985684][T28057] x_tables: unsorted entry at hook 1 [ 2217.997265][T28053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2218.037067][ T29] audit: type=1326 audit(1730273286.594:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28055 comm="syz.4.6231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bfcd7e719 code=0x0 [ 2219.018737][T28072] x_tables: unsorted entry at hook 1 [ 2219.612987][T28075] netlink: 'syz.0.6235': attribute type 1 has an invalid length. [ 2221.325846][T28075] netlink: 'syz.0.6235': attribute type 2 has an invalid length. [ 2222.063443][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.161536][ T29] audit: type=1326 audit(1730273290.834:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28093 comm="syz.2.6239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e28d7e719 code=0x0 [ 2224.324897][T16452] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 2224.370801][T23408] Bluetooth: hci2: unexpected event for opcode 0x200a [ 2224.539704][T16452] usb 8-1: Using ep0 maxpacket: 16 [ 2224.682843][T16452] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 30768, setting to 1024 [ 2224.856457][T16452] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 2225.023406][T16452] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 2225.072673][T16452] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2225.272286][T16452] usb 8-1: Product: syz [ 2225.276787][T16452] usb 8-1: Manufacturer: syz [ 2225.550724][T16452] usb 8-1: SerialNumber: syz [ 2225.571420][T16452] usb 8-1: config 0 descriptor?? [ 2225.581097][T28116] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 2226.268639][T16452] usb 8-1: Cannot retrieve CPort count: -110 [ 2226.293354][T16452] usb 8-1: Cannot retrieve CPort count: -110 [ 2226.311982][T16452] es2_ap_driver 8-1:0.0: probe with driver es2_ap_driver failed with error -110 [ 2226.315997][T28116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2226.601224][T28145] x_tables: unsorted entry at hook 1 [ 2226.689549][T28145] netlink: 'syz.2.6255': attribute type 1 has an invalid length. [ 2226.697485][T28145] netlink: 'syz.2.6255': attribute type 2 has an invalid length. [ 2226.706920][T28116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2226.823401][ T29] audit: type=1326 audit(1730273295.504:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28151 comm="syz.4.6259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bfcd7e719 code=0x0 [ 2226.855618][T28156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6260'. [ 2226.871048][T28156] xt_ipcomp: unknown flags 12 [ 2226.898148][T28158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2226.907167][T28158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2226.956051][T28160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6258'. [ 2227.953633][ T5877] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2228.122713][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 2230.961200][T16684] usb 8-1: USB disconnect, device number 72 [ 2230.973219][ T29] audit: type=1326 audit(1730273299.644:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28190 comm="syz.2.6271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e28d7e719 code=0x0 [ 2231.589363][ T5877] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2231.598821][T28203] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6272'. [ 2231.614694][T28203] xt_ipcomp: unknown flags 12 [ 2231.638292][ T5877] usb 3-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2231.693542][ T5877] usb 3-1: string descriptor 0 read error: -71 [ 2231.699908][ T5877] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 2231.709360][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2231.751341][T28206] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6274'. [ 2231.763778][ T5877] usb 3-1: can't set config #128, error -71 [ 2231.771143][ T5877] usb 3-1: USB disconnect, device number 39 [ 2233.872971][T28230] xt_limit: Overflow, try lower: 4294967295/4294966784 [ 2236.053325][T28255] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6286'. [ 2236.067874][T28255] xt_ipcomp: unknown flags 12 [ 2238.494878][T28281] x_tables: unsorted entry at hook 1 [ 2241.487759][T28304] ./bus: Can't lookup blockdev [ 2243.383605][T16684] IPVS: starting estimator thread 0... [ 2243.473048][T28323] IPVS: using max 33 ests per chain, 79200 per kthread [ 2245.442733][T28319] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2245.546609][T28349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2245.631061][T28349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2247.248742][T28358] ./bus: Can't lookup blockdev [ 2247.529594][ T29] audit: type=1326 audit(1730273316.184:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28359 comm="syz.4.6313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bfcd7e719 code=0x0 [ 2250.315387][T28383] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6322'. [ 2251.363058][T28383] xt_ipcomp: unknown flags 12 [ 2252.107677][T28405] ./bus: Can't lookup blockdev [ 2252.782618][ T5877] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2253.756025][T28432] FAULT_INJECTION: forcing a failure. [ 2253.756025][T28432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2253.782649][T28432] CPU: 1 UID: 0 PID: 28432 Comm: syz.0.6331 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 2253.793474][T28432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2253.794388][ T29] audit: type=1326 audit(1730273322.454:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28417 comm="syz.2.6328" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e28d7e719 code=0x0 [ 2253.803532][T28432] Call Trace: [ 2253.803544][T28432] [ 2253.803553][T28432] dump_stack_lvl+0x241/0x360 [ 2253.803583][T28432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2253.803604][T28432] ? __pfx__printk+0x10/0x10 [ 2253.803630][T28432] ? snprintf+0xda/0x120 [ 2253.803655][T28432] should_fail_ex+0x3b0/0x4e0 [ 2253.803681][T28432] _copy_to_user+0x31/0xb0 [ 2253.803714][T28432] simple_read_from_buffer+0xca/0x150 [ 2253.803740][T28432] proc_fail_nth_read+0x1e9/0x250 [ 2253.803766][T28432] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2253.803792][T28432] ? rw_verify_area+0x55e/0x6f0 [ 2253.879398][T28432] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2253.884961][T28432] vfs_read+0x1fc/0xb70 [ 2253.889125][T28432] ? fdget_pos+0x24e/0x320 [ 2253.893546][T28432] ? __pfx_vfs_read+0x10/0x10 [ 2253.898223][T28432] ? __fget_files+0x3f3/0x470 [ 2253.902907][T28432] ? fdget_pos+0x24e/0x320 [ 2253.907325][T28432] ksys_read+0x183/0x2b0 [ 2253.911653][T28432] ? __pfx_ksys_read+0x10/0x10 [ 2253.916422][T28432] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 2253.922675][T28432] ? syscall_user_dispatch+0x4e/0x90 [ 2253.927995][T28432] do_syscall_64+0xf3/0x230 [ 2253.932505][T28432] ? clear_bhb_loop+0x35/0x90 [ 2253.937188][T28432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2253.943078][T28432] RIP: 0033:0x7fc88c97d15c [ 2253.947488][T28432] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2253.967091][T28432] RSP: 002b:00007fc88d82b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2253.975507][T28432] RAX: ffffffffffffffda RBX: 00007fc88cb35f80 RCX: 00007fc88c97d15c [ 2253.983476][T28432] RDX: 000000000000000f RSI: 00007fc88d82b0a0 RDI: 0000000000000003 [ 2253.991440][T28432] RBP: 00007fc88d82b090 R08: 0000000000000000 R09: 0000000000000000 [ 2253.999405][T28432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2254.007372][T28432] R13: 0000000000000000 R14: 00007fc88cb35f80 R15: 00007ffc3bd4ba38 [ 2254.015367][T28432] [ 2256.601439][T11283] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 2257.262805][T28471] x_tables: unsorted entry at hook 1 [ 2257.268299][T11283] usb 8-1: Using ep0 maxpacket: 32 [ 2257.291725][T11283] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2257.353624][T11283] usb 8-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2257.516351][T11283] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2257.575026][T28475] xt_limit: Overflow, try lower: 4294967295/4294966784 [ 2257.655575][T11283] usb 8-1: config 0 descriptor?? [ 2258.007281][T28453] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2258.018351][ T5877] usb 8-1: USB disconnect, device number 73 [ 2259.509820][ T29] audit: type=1326 audit(1730273328.184:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28488 comm="syz.7.6349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8149d7e719 code=0x0 [ 2261.321744][T28514] x_tables: unsorted entry at hook 1 [ 2261.332052][T28515] x_tables: unsorted entry at hook 1 [ 2261.588778][ T29] audit: type=1326 audit(1730273330.254:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28519 comm="syz.9.6357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7957e719 code=0x0 [ 2261.912603][T16452] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2262.084667][T16452] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2262.095729][T16452] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2262.111543][T16452] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2262.131615][T16452] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.160451][T16452] usb 3-1: config 0 descriptor?? [ 2262.652641][T16452] usbhid 3-1:0.0: can't add hid device: -71 [ 2262.659454][T16452] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2262.743259][T16452] usb 3-1: USB disconnect, device number 41 [ 2264.675332][ T29] audit: type=1400 audit(1730273333.134:601): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=28539 comm="syz.9.6363" dest=20004 [ 2265.077570][T23408] Bluetooth: hci0: unexpected event for opcode 0x040d [ 2265.085536][T28555] x_tables: unsorted entry at hook 1 [ 2266.535455][T28576] ./bus: Can't lookup blockdev [ 2268.936448][T28590] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6377'. [ 2268.957651][T28590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2269.349731][T28590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2269.522898][ T29] audit: type=1400 audit(1730273337.344:602): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=28585 comm="syz.2.6376" dest=20004 [ 2269.624079][T28597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2269.719623][T28597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2270.672396][T28606] xt_limit: Overflow, try lower: 4294967295/4294966784 [ 2270.842445][T28606] overlay: ./file0 is not a directory [ 2271.488336][T28616] overlay: ./file0 is not a directory [ 2272.733314][ T29] audit: type=1400 audit(1730273341.404:603): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=28623 comm="syz.2.6388" dest=20004 [ 2274.333330][T28633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2274.382937][T28633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2274.725005][T28639] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6383'. [ 2280.281262][T28706] overlayfs: missing 'lowerdir' [ 2282.763179][T14201] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2282.799301][T28733] x_tables: unsorted entry at hook 1 [ 2282.919157][T28734] netlink: 'syz.0.6416': attribute type 1 has an invalid length. [ 2282.934272][T28734] netlink: 'syz.0.6416': attribute type 2 has an invalid length. [ 2282.956577][T14201] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2282.981980][T14201] usb 3-1: config 0 has no interface number 0 [ 2283.048423][T14201] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2283.058554][T14201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2283.186847][T14201] usb 3-1: Product: syz [ 2283.191294][T14201] usb 3-1: Manufacturer: syz [ 2283.196618][T14201] usb 3-1: SerialNumber: syz [ 2283.955351][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.955891][T14201] usb 3-1: config 0 descriptor?? [ 2284.157191][ T29] audit: type=1326 audit(1730273352.834:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28745 comm="syz.9.6418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7957e719 code=0x0 [ 2285.043486][T14201] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 2285.384498][T14201] usb 3-1: USB disconnect, device number 42 [ 2290.202736][ T6464] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2291.193492][T28823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2291.244871][T28823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2291.416848][ T6464] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2291.419816][T28823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2291.573555][ T6464] usb 3-1: config 0 has no interface number 0 [ 2291.598263][T28823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2291.639871][ T6464] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2291.726019][ T6464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2291.862615][ T6464] usb 3-1: Product: syz [ 2291.866829][ T6464] usb 3-1: Manufacturer: syz [ 2291.871433][ T6464] usb 3-1: SerialNumber: syz [ 2291.879484][ T6464] usb 3-1: config 0 descriptor?? [ 2291.964753][T28834] netlink: 168 bytes leftover after parsing attributes in process `syz.9.6441'. [ 2293.142231][ T6464] usb 3-1: can't set config #0, error -71 [ 2294.124630][ T6464] usb 3-1: USB disconnect, device number 43 [ 2294.148230][T28844] x_tables: unsorted entry at hook 1 [ 2296.127622][T28862] x_tables: unsorted entry at hook 1 [ 2297.192973][T28862] netlink: 'syz.0.6450': attribute type 1 has an invalid length. [ 2297.200830][T28862] netlink: 'syz.0.6450': attribute type 2 has an invalid length. [ 2297.783639][T28876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2297.943009][T28876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2297.992718][T28882] x_tables: unsorted entry at hook 1 [ 2298.098099][T28883] can0: slcan on pts0. [ 2298.204336][T28884] can0 (unregistered): slcan off pts0. [ 2299.262694][T11283] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2300.352597][T11283] usb 3-1: Using ep0 maxpacket: 32 [ 2300.673125][T28907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2301.015841][T11283] usb 3-1: device descriptor read/all, error -71 [ 2301.273933][T28907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2302.670405][T28933] x_tables: unsorted entry at hook 1 [ 2302.796300][ T6464] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 2302.982730][ T6464] usb 8-1: Using ep0 maxpacket: 16 [ 2302.999456][ T6464] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2303.100814][ T6464] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2303.237175][ T6464] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2303.328470][ T6464] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2303.509302][ T6464] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2303.528223][ T6464] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2303.552643][ T6464] usb 8-1: Product: syz [ 2303.673824][ T6464] usb 8-1: Manufacturer: syz [ 2303.678480][ T6464] usb 8-1: SerialNumber: syz [ 2303.692886][T11283] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2304.022330][T28945] ./bus: Can't lookup blockdev [ 2305.302628][T11283] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2305.461949][T11283] usb 3-1: config 0 has no interface number 0 [ 2305.553521][T11283] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2305.581976][T11283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2305.647086][T11283] usb 3-1: Product: syz [ 2305.671312][T11283] usb 3-1: Manufacturer: syz [ 2305.762172][T11283] usb 3-1: SerialNumber: syz [ 2305.993815][T11283] usb 3-1: config 0 descriptor?? [ 2306.512761][T11283] usb 3-1: can't set config #0, error -71 [ 2306.546050][T11283] usb 3-1: USB disconnect, device number 46 [ 2306.813070][T28963] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2306.822311][T28963] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2307.539052][ T6464] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 2308.072588][ T6464] usb 8-1: found format II with max.bitrate = 0, frame size=0 [ 2308.080130][ T6464] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2308.099738][ T6464] usb 8-1: USB disconnect, device number 74 [ 2309.653452][T28986] netlink: 'syz.0.6486': attribute type 1 has an invalid length. [ 2309.661318][T28986] netlink: 'syz.0.6486': attribute type 2 has an invalid length. [ 2309.746602][T28989] sctp: [Deprecated]: syz.4.6485 (pid 28989) Use of int in max_burst socket option deprecated. [ 2309.746602][T28989] Use struct sctp_assoc_value instead [ 2310.798506][T29003] FAULT_INJECTION: forcing a failure. [ 2310.798506][T29003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2310.822823][T29003] CPU: 1 UID: 0 PID: 29003 Comm: syz.7.6491 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 2310.833826][T29003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2310.843915][T29003] Call Trace: [ 2310.847215][T29003] [ 2310.850175][T29003] dump_stack_lvl+0x241/0x360 [ 2310.854898][T29003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2310.860139][T29003] ? __pfx__printk+0x10/0x10 [ 2310.864768][T29003] ? __pfx_lock_release+0x10/0x10 [ 2310.869921][T29003] should_fail_ex+0x3b0/0x4e0 [ 2310.874641][T29003] _copy_from_iter+0x21f/0x1e70 [ 2310.879539][T29003] ? __virt_addr_valid+0x183/0x530 [ 2310.884692][T29003] ? __pfx_lock_release+0x10/0x10 [ 2310.889758][T29003] ? __alloc_skb+0x28f/0x440 [ 2310.894461][T29003] ? __pfx__copy_from_iter+0x10/0x10 [ 2310.899772][T29003] ? __virt_addr_valid+0x183/0x530 [ 2310.904907][T29003] ? __virt_addr_valid+0x183/0x530 [ 2310.910037][T29003] ? __virt_addr_valid+0x45f/0x530 [ 2310.915175][T29003] ? __check_object_size+0x48e/0x900 [ 2310.920590][T29003] netlink_sendmsg+0x73d/0xcb0 [ 2310.925399][T29003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2310.930721][T29003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2310.936047][T29003] __sock_sendmsg+0x221/0x270 [ 2310.940759][T29003] ____sys_sendmsg+0x52a/0x7e0 [ 2310.945559][T29003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2310.950889][T29003] __sys_sendmsg+0x292/0x380 [ 2310.955512][T29003] ? __pfx___sys_sendmsg+0x10/0x10 [ 2310.960661][T29003] ? __pfx_vfs_write+0x10/0x10 [ 2310.965487][T29003] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2310.971842][T29003] ? do_syscall_64+0x100/0x230 [ 2310.976641][T29003] ? do_syscall_64+0xb6/0x230 [ 2310.981345][T29003] do_syscall_64+0xf3/0x230 [ 2310.985879][T29003] ? clear_bhb_loop+0x35/0x90 [ 2310.990578][T29003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2310.996493][T29003] RIP: 0033:0x7f8149d7e719 [ 2311.000927][T29003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2311.020562][T29003] RSP: 002b:00007f814aa9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2311.029022][T29003] RAX: ffffffffffffffda RBX: 00007f8149f35f80 RCX: 00007f8149d7e719 [ 2311.037032][T29003] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000003 [ 2311.045035][T29003] RBP: 00007f814aa9e090 R08: 0000000000000000 R09: 0000000000000000 [ 2311.053037][T29003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2311.061050][T29003] R13: 0000000000000000 R14: 00007f8149f35f80 R15: 00007ffdeb7e66e8 [ 2311.069067][T29003] [ 2311.702165][T29013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2311.782986][T29013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2312.416498][T29023] netlink: 'syz.2.6497': attribute type 1 has an invalid length. [ 2312.424367][T29023] netlink: 'syz.2.6497': attribute type 2 has an invalid length. [ 2313.547479][T23408] Bluetooth: hci2: unexpected event for opcode 0x040d [ 2313.552831][T29039] netlink: 'syz.7.6503': attribute type 21 has an invalid length. [ 2313.609662][T29039] netlink: 'syz.7.6503': attribute type 1 has an invalid length. [ 2313.647907][T29039] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6503'. [ 2316.163432][T29068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2316.174808][T29068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2316.453204][ T6464] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 2317.102878][ T6464] usb 8-1: Using ep0 maxpacket: 32 [ 2317.110196][ T6464] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 2317.146667][ T6464] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2317.253136][T29032] [U] ^C [ 2317.294209][ T6464] usb 8-1: config 0 descriptor?? [ 2317.303398][ T6464] gspca_main: sq930x-2.14.0 probing 041e:403c [ 2317.444991][T29077] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6513'. [ 2317.518054][ T6464] gspca_sq930x: reg_r 001f failed -32 [ 2317.526881][ T6464] sq930x 8-1:0.0: probe with driver sq930x failed with error -32 [ 2317.581896][T19809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2317.594066][T19809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2317.604927][T19809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2317.617251][T19809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2317.628074][T19809] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2317.633286][T26353] Bluetooth: hci1: unexpected event for opcode 0x040d [ 2317.642425][T19809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2317.821877][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2317.835780][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2317.922102][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2317.938397][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.006702][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2318.018275][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.035428][T29080] chnl_net:caif_netlink_parms(): no params data found [ 2318.070877][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2318.081374][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.091886][T29060] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2318.189150][T29080] bridge0: port 1(bridge_slave_0) entered blocking state [ 2318.196692][T29080] bridge0: port 1(bridge_slave_0) entered disabled state [ 2318.204718][T29080] bridge_slave_0: entered allmulticast mode [ 2318.211477][T29080] bridge_slave_0: entered promiscuous mode [ 2318.236496][T29080] bridge0: port 2(bridge_slave_1) entered blocking state [ 2318.244287][T29080] bridge0: port 2(bridge_slave_1) entered disabled state [ 2318.251587][T29080] bridge_slave_1: entered allmulticast mode [ 2318.259650][T29080] bridge_slave_1: entered promiscuous mode [ 2318.297919][T29080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2318.314346][T29080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2318.337656][ T11] team0: left allmulticast mode [ 2318.343147][ T11] team_slave_0: left allmulticast mode [ 2318.348766][ T11] team_slave_1: left allmulticast mode [ 2318.356332][ T11] team0: left promiscuous mode [ 2318.361230][ T11] team_slave_0: left promiscuous mode [ 2318.367187][ T11] team_slave_1: left promiscuous mode [ 2318.373070][ T11] bridge0: port 3(team0) entered disabled state [ 2318.384957][ T11] bridge_slave_1: left allmulticast mode [ 2318.390773][ T11] bridge_slave_1: left promiscuous mode [ 2318.396643][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2318.405751][ T11] bridge_slave_0: left allmulticast mode [ 2318.411432][ T11] bridge_slave_0: left promiscuous mode [ 2318.417428][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2318.928800][T29108] kvm_intel: kvm [29107]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x5c7fda [ 2318.995173][T29108] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6521'. [ 2319.022122][T29111] loop8: detected capacity change from 0 to 7 [ 2319.028990][ T11] tipc: Left network mode [ 2319.037238][T29080] team0: Port device team_slave_0 added [ 2319.084695][T29111] Dev loop8: unable to read RDB block 7 [ 2319.107816][T29080] team0: Port device team_slave_1 added [ 2319.113931][T29111] loop8: unable to read partition table [ 2319.119769][T29111] loop8: partition table beyond EOD, truncated [ 2319.142738][T29111] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 2319.142738][T29111] ) failed (rc=-5) [ 2319.182642][T29080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2319.189646][T29080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2319.222826][T14201] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2319.252604][T29080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2319.276108][T16684] usb 8-1: USB disconnect, device number 75 [ 2319.384977][T29080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2319.391951][T29080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2319.435223][T14201] usb 3-1: Using ep0 maxpacket: 16 [ 2319.452739][T14201] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2319.462953][T14201] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2319.472915][T29080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2319.482522][T14201] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2319.501971][T14201] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2319.548165][T14201] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2319.558057][T14201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2319.568545][T14201] usb 3-1: Product: syz [ 2319.576540][T14201] usb 3-1: Manufacturer: syz [ 2319.581262][T14201] usb 3-1: SerialNumber: syz [ 2319.678420][T29080] hsr_slave_0: entered promiscuous mode [ 2319.684220][T23408] Bluetooth: hci4: command tx timeout [ 2319.702891][T29080] hsr_slave_1: entered promiscuous mode [ 2319.718588][T29080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2319.726732][T29080] Cannot create hsr debugfs directory [ 2319.751465][ T11] hsr_slave_0: left promiscuous mode [ 2319.767025][ T11] hsr_slave_1: left promiscuous mode [ 2319.781928][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2319.799727][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2319.808450][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2319.817675][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2319.851974][ T11] veth1_vlan: left promiscuous mode [ 2319.868224][ T11] veth0_vlan: left promiscuous mode [ 2319.986583][ T11] pimreg (unregistering): left allmulticast mode [ 2320.561260][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2320.636406][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2321.657937][ T11] IPVS: stop unused estimator thread 0... [ 2321.763104][T23408] Bluetooth: hci4: command tx timeout [ 2321.792265][T29080] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2321.804791][T14201] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 2321.807212][T29080] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2321.818812][T14201] usb 3-1: found format II with max.bitrate = 0, frame size=0 [ 2321.828922][T14201] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2321.832264][T29080] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2321.852162][T14201] usb 3-1: USB disconnect, device number 47 [ 2321.861108][T29080] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2321.921373][T29080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2321.940532][T29080] 8021q: adding VLAN 0 to HW filter on device team0 [ 2321.957412][T23586] bridge0: port 1(bridge_slave_0) entered blocking state [ 2321.964577][T23586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2321.984291][T23586] bridge0: port 2(bridge_slave_1) entered blocking state [ 2321.991362][T23586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2322.121877][T29080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2322.270442][T29080] veth0_vlan: entered promiscuous mode [ 2322.284675][T29080] veth1_vlan: entered promiscuous mode [ 2322.309589][T29080] veth0_macvtap: entered promiscuous mode [ 2322.319819][T29080] veth1_macvtap: entered promiscuous mode [ 2322.337543][T29080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2322.349458][T29080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.359516][T29080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2322.371547][T29080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.382303][T29080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2322.393167][T29080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.403256][T29080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2322.413884][T29080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.426253][T29080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2322.438575][T29080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2322.452001][T29080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.462204][T29080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2322.474536][T29080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.484475][T29080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2322.495220][T29080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.505317][T29080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2322.516064][T29080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.528022][T29080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2322.541954][T29080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2322.551269][T29080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2322.560765][T29080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2322.570916][T29080] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2322.640399][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2322.648917][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2322.674341][T22066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2322.682244][T22066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2323.857910][T23408] Bluetooth: hci4: command tx timeout [ 2324.885696][T29129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2324.916466][T29129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2324.927452][T29127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2324.934781][T29127] IPv6: NLM_F_CREATE should be set when creating new route [ 2324.942022][T29127] IPv6: NLM_F_CREATE should be set when creating new route [ 2325.017115][T29129] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 2325.040217][T29129] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 2325.093285][T29135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2325.171128][T29135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2325.212856][T23408] Bluetooth: hci1: unexpected event for opcode 0x040d [ 2325.311927][T19809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2325.325255][T19809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2325.336773][T19809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2325.462600][ T6557] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2325.474038][ T6557] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2325.511354][T26353] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2325.521143][T26353] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2325.539074][T26353] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2325.635948][ T6557] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2325.647747][ T6557] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2325.796318][ T6557] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2325.810993][ T6557] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2325.812630][T16330] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2325.925513][T23408] Bluetooth: hci4: command tx timeout [ 2325.946765][ T6557] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2325.957561][ T6557] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2326.022648][T16330] usb 3-1: Using ep0 maxpacket: 16 [ 2326.034334][T16330] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2326.056543][T16330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2326.065050][T16330] usb 3-1: Product: syz [ 2326.069511][T16330] usb 3-1: Manufacturer: syz [ 2326.075190][T16330] usb 3-1: SerialNumber: syz [ 2326.087070][T16330] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2326.093846][T16330] r8152-cfgselector 3-1: config 0 descriptor?? [ 2326.120982][T29141] chnl_net:caif_netlink_parms(): no params data found [ 2327.015812][T29170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2327.025776][T29141] bridge0: port 1(bridge_slave_0) entered blocking state [ 2327.035173][T29170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2327.051510][T29141] bridge0: port 1(bridge_slave_0) entered disabled state [ 2327.059135][T29141] bridge_slave_0: entered allmulticast mode [ 2327.066486][T29141] bridge_slave_0: entered promiscuous mode [ 2327.089662][T29146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2327.112200][T29146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2327.134281][T23154] r8152-cfgselector 3-1: USB disconnect, device number 48 [ 2327.508106][ T6557] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 2327.615098][T23408] Bluetooth: hci3: command tx timeout [ 2327.650019][T23408] Bluetooth: hci0: unexpected event for opcode 0x040d [ 2327.934223][ T6557] bond0 (unregistering): Released all slaves [ 2327.950086][T29141] bridge0: port 2(bridge_slave_1) entered blocking state [ 2327.957775][T29141] bridge0: port 2(bridge_slave_1) entered disabled state [ 2327.965538][T29141] bridge_slave_1: entered allmulticast mode [ 2327.972683][T29141] bridge_slave_1: entered promiscuous mode [ 2328.012872][T16330] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2328.084727][T29152] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2328.119704][T29141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2328.160119][T29141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2328.180058][T29187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2328.197010][T29187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2328.224205][T16330] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2328.232669][T16330] usb 3-1: config 0 has no interface number 0 [ 2328.241464][T16330] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2328.252938][T16330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2328.261575][T16330] usb 3-1: Product: syz [ 2328.266590][T16330] usb 3-1: Manufacturer: syz [ 2328.271360][T16330] usb 3-1: SerialNumber: syz [ 2328.278925][T16330] usb 3-1: config 0 descriptor?? [ 2328.316784][T29141] team0: Port device team_slave_0 added [ 2328.326000][T29141] team0: Port device team_slave_1 added [ 2328.372425][T29141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2328.387919][T29141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2328.431756][T29141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2328.455845][ T6557] hsr_slave_0: left promiscuous mode [ 2328.468445][ T6557] hsr_slave_1: left promiscuous mode [ 2328.496409][ T6557] veth1_vlan: left promiscuous mode [ 2328.503308][ T6557] veth0_vlan: left promiscuous mode [ 2328.622135][ T6557] pimreg (unregistering): left allmulticast mode [ 2328.805319][T29197] loop6: detected capacity change from 0 to 524287999 [ 2329.384382][T16330] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 2329.682723][T23408] Bluetooth: hci3: command tx timeout [ 2330.597734][T29141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2330.605007][T29141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2330.639481][T29141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2330.660381][T29191] can0: slcan on pts0. [ 2330.735149][T29141] hsr_slave_0: entered promiscuous mode [ 2330.742156][T29141] hsr_slave_1: entered promiscuous mode [ 2330.750847][T29141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2330.758851][T29141] Cannot create hsr debugfs directory [ 2330.782776][T29193] can0 (unregistered): slcan off pts0. [ 2330.824586][T16330] usb 3-1: USB disconnect, device number 49 [ 2330.917132][ T6557] IPVS: stop unused estimator thread 0... [ 2331.155557][T29141] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2331.178450][T29141] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2331.189591][T29141] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2331.198987][T29141] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2331.259019][T29141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2331.279621][T29141] 8021q: adding VLAN 0 to HW filter on device team0 [ 2331.290603][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 2331.297766][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2331.312263][T17970] bridge0: port 2(bridge_slave_1) entered blocking state [ 2331.319436][T17970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2331.471800][T29141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2331.626828][T29141] veth0_vlan: entered promiscuous mode [ 2331.640720][T29141] veth1_vlan: entered promiscuous mode [ 2331.666736][T29141] veth0_macvtap: entered promiscuous mode [ 2331.676151][T29141] veth1_macvtap: entered promiscuous mode [ 2331.694850][T29141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2331.705640][T29141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2331.715591][T29141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2331.726215][T29141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2331.736090][T29141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2331.748478][T29141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2331.758537][T29141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2331.769069][T29141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2331.772910][T23408] Bluetooth: hci3: command tx timeout [ 2331.778994][T29141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2331.794891][T29141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2331.806761][T29141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2331.819513][T29141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2331.831115][T29141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2331.841648][T29141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2331.852419][T29141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2331.862284][T29141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2331.873279][T29141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2331.883212][T29141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2331.893950][T29141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2331.903886][T29141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2331.914618][T29141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2331.925784][T29141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2331.938133][T29141] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2331.947186][T29141] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2331.956030][T29141] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2331.964809][T29141] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2332.050177][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2332.060450][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2332.083791][T17970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2332.094135][T17970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2333.842920][T23408] Bluetooth: hci3: command tx timeout [ 2344.805396][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2351.410718][T29233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6549'. [ 2351.450837][T29233] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 2351.478428][T26353] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2351.496312][T26353] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2351.624124][T26353] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2351.634380][T26353] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2351.642336][T26353] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2351.654152][T26353] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2351.776380][T29239] ./bus: Can't lookup blockdev [ 2352.689683][T29234] chnl_net:caif_netlink_parms(): no params data found [ 2353.084486][T29234] bridge0: port 1(bridge_slave_0) entered blocking state [ 2353.092750][T29234] bridge0: port 1(bridge_slave_0) entered disabled state [ 2353.100180][T29234] bridge_slave_0: entered allmulticast mode [ 2353.107139][T29234] bridge_slave_0: entered promiscuous mode [ 2353.116559][T14201] usb 10-1: USB disconnect, device number 37 [ 2353.133570][T29234] bridge0: port 2(bridge_slave_1) entered blocking state [ 2353.150691][T29234] bridge0: port 2(bridge_slave_1) entered disabled state [ 2353.159342][T29234] bridge_slave_1: entered allmulticast mode [ 2353.167081][T29234] bridge_slave_1: entered promiscuous mode [ 2353.219710][ T3537] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2353.272661][T29234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2353.293580][T29234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2353.329376][ T3537] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2353.384450][T29234] team0: Port device team_slave_0 added [ 2353.557500][ T3537] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2353.736088][T29234] team0: Port device team_slave_1 added [ 2354.243410][ T3537] batman_adv: batadv0: Removing interface: macvtap0 [ 2354.260862][ T3537] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2354.322793][T26353] Bluetooth: hci5: command tx timeout [ 2354.465791][T29234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2354.474015][T29234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2354.502563][T29234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2354.515039][T29234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2354.522011][T29234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2354.552628][T29234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2354.806302][T29234] hsr_slave_0: entered promiscuous mode [ 2354.813448][T29234] hsr_slave_1: entered promiscuous mode [ 2354.821426][T29234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2354.829728][T29234] Cannot create hsr debugfs directory [ 2354.897733][T29279] FAULT_INJECTION: forcing a failure. [ 2354.897733][T29279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2354.924462][T29279] CPU: 1 UID: 0 PID: 29279 Comm: syz.7.6560 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 2354.935280][T29279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2354.945352][T29279] Call Trace: [ 2354.948648][T29279] [ 2354.951592][T29279] dump_stack_lvl+0x241/0x360 [ 2354.956303][T29279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2354.961523][T29279] ? __pfx__printk+0x10/0x10 [ 2354.966133][T29279] ? vfs_write+0x730/0xd30 [ 2354.970572][T29279] should_fail_ex+0x3b0/0x4e0 [ 2354.975307][T29279] _copy_from_user+0x31/0xe0 [ 2354.979933][T29279] get_timespec64+0x97/0x280 [ 2354.984570][T29279] ? __fget_files+0x3f3/0x470 [ 2354.989286][T29279] ? __pfx_get_timespec64+0x10/0x10 [ 2354.994527][T29279] __se_sys_clock_nanosleep+0x1a5/0x3c0 [ 2355.000100][T29279] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 2355.006197][T29279] ? do_syscall_64+0x100/0x230 [ 2355.010987][T29279] ? do_syscall_64+0xb6/0x230 [ 2355.015681][T29279] do_syscall_64+0xf3/0x230 [ 2355.020200][T29279] ? clear_bhb_loop+0x35/0x90 [ 2355.024892][T29279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2355.030797][T29279] RIP: 0033:0x7fc69417e719 [ 2355.035222][T29279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2355.054839][T29279] RSP: 002b:00007fc694f92038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2355.063267][T29279] RAX: ffffffffffffffda RBX: 00007fc694336058 RCX: 00007fc69417e719 [ 2355.071252][T29279] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 00000000fffffffa [ 2355.079335][T29279] RBP: 00007fc694f92090 R08: 0000000000000000 R09: 0000000000000000 [ 2355.087326][T29279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2355.095313][T29279] R13: 0000000000000000 R14: 00007fc694336058 R15: 00007ffff0cd5368 [ 2355.103317][T29279] [ 2355.529887][T29285] xt_limit: Overflow, try lower: 4294967295/4294966784 [ 2356.257618][T29293] ./bus: Can't lookup blockdev [ 2356.747743][T26353] Bluetooth: hci5: command tx timeout [ 2358.984356][T23408] Bluetooth: hci5: command tx timeout [ 2359.014088][ T3537] bridge_slave_1: left allmulticast mode [ 2359.019790][ T3537] bridge_slave_1: left promiscuous mode [ 2359.025913][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 2359.362629][T29309] ./bus: Can't lookup blockdev [ 2360.048564][ T3537] bridge_slave_0: left allmulticast mode [ 2360.290759][ T3537] bridge_slave_0: left promiscuous mode [ 2360.523731][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 2361.133093][T23408] Bluetooth: hci5: command tx timeout [ 2362.142630][T29330] xt_limit: Overflow, try lower: 4294967295/4294966784 [ 2363.135374][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2363.145942][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2363.157985][ T3537] bond0 (unregistering): Released all slaves [ 2364.278919][T29350] ./bus: Can't lookup blockdev [ 2365.834407][ T3537] hsr_slave_0: left promiscuous mode [ 2365.872585][ T3537] hsr_slave_1: left promiscuous mode [ 2365.890699][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2365.898426][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2365.912198][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2365.920636][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2366.437677][ T3537] veth1_vlan: left promiscuous mode [ 2366.462759][ T3537] veth0_vlan: left promiscuous mode [ 2366.557554][T16684] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2367.054914][T16684] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2367.063191][T16684] usb 3-1: config 0 has no interface number 0 [ 2367.094960][T16684] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2367.107504][T16684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2367.110103][T29387] xt_ipcomp: unknown flags 12 [ 2367.129182][T16684] usb 3-1: Product: syz [ 2367.136811][T16684] usb 3-1: Manufacturer: syz [ 2367.151761][T16684] usb 3-1: SerialNumber: syz [ 2367.171537][T16684] usb 3-1: config 0 descriptor?? [ 2367.204091][ T3537] pimreg (unregistering): left allmulticast mode [ 2368.388034][T16684] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 2369.245449][T29396] slcan: can't register candev [ 2369.255343][T29396] Falling back ldisc for pts0. [ 2369.329853][ T6464] usb 3-1: USB disconnect, device number 50 [ 2369.447764][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 2369.521048][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 2370.206001][T29383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6590'. [ 2370.246617][T29402] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6593'. [ 2370.321109][T29234] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2370.509917][T29234] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2370.571692][T29234] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2370.643689][T29234] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2370.690070][ T29] audit: type=1326 audit(1730273695.338:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29421 comm="syz.0.6598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc88c97e719 code=0x0 [ 2371.059581][T29234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2371.077568][T29234] 8021q: adding VLAN 0 to HW filter on device team0 [ 2371.089505][ T2127] bridge0: port 1(bridge_slave_0) entered blocking state [ 2371.096730][ T2127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2371.215389][T22066] bridge0: port 2(bridge_slave_1) entered blocking state [ 2371.222595][T22066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2371.772515][ T3537] IPVS: stop unused estimator thread 0... [ 2371.855558][T29234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2372.069922][T29447] program syz.0.6604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2372.138857][T29234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2372.148121][T23408] Bluetooth: hci3: unexpected event 0x01 length: 12 > 1 [ 2372.231585][T29456] syz.0.6607: attempt to access beyond end of device [ 2372.231585][T29456] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2372.254053][T29456] hpfs: hpfs_map_sector(): read error [ 2372.307874][T29443] block nbd4: shutting down sockets [ 2372.586034][T29234] veth0_vlan: entered promiscuous mode [ 2372.607214][T29479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6615'. [ 2372.610762][T29234] veth1_vlan: entered promiscuous mode [ 2372.675285][T29234] veth0_macvtap: entered promiscuous mode [ 2372.696139][T29234] veth1_macvtap: entered promiscuous mode [ 2372.750204][T29234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2372.768462][T29234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2372.779019][T29234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2372.801342][T29234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2372.819559][T29234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2372.846346][T29234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2372.866609][T29234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2372.877941][T29234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2372.890028][T29234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2372.901259][T29234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2372.924027][T29234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2372.932214][T29490] netlink: 'syz.2.6621': attribute type 5 has an invalid length. [ 2372.958531][T29234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2372.973426][T29492] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2372.985888][T29492] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2372.998428][T29492] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2372.998504][T29234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2373.015907][T29234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2373.026582][T29234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2373.026824][T29492] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2373.036816][T29234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2373.036841][T29234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2373.036860][T29234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2373.036874][T29234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2373.036892][T29234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2373.036905][T29234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2373.038437][T29234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2373.115921][T29234] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2373.125231][T29234] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2373.134077][T29234] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2373.142850][T29234] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2373.152151][T29492] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2373.171587][T29492] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2373.178135][T29492] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2373.201845][T29492] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2373.222161][T29492] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2373.246650][T29492] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2373.296809][T29492] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2373.348795][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2373.372942][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2373.445890][T23586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2373.460081][T23586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2373.461151][T29509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6626'. [ 2373.538404][T29509] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2373.547639][T29509] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2373.556862][T29509] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2373.565877][T29509] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2373.587903][T29509] vxlan0: entered promiscuous mode [ 2373.766555][T29524] overlayfs: failed to get inode (-116) [ 2373.783390][T29524] overlayfs: failed to get inode (-116) [ 2374.348944][T29532] loop4: detected capacity change from 0 to 16384 [ 2374.426428][T29535] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 2374.472585][T29535] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 2374.723706][T29554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6644'. [ 2374.737439][T29554] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6644'. [ 2374.747869][T29554] netlink: 592 bytes leftover after parsing attributes in process `syz.0.6644'. [ 2374.758095][T29554] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6644'. [ 2375.001765][T29569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6649'. [ 2375.042694][T23408] Bluetooth: hci4: command 0x0c1a tx timeout [ 2375.049043][T23408] Bluetooth: hci2: command 0x0406 tx timeout [ 2375.056289][T23408] Bluetooth: hci1: command 0x0406 tx timeout [ 2375.203074][T23408] Bluetooth: hci3: command 0x0c1a tx timeout [ 2375.246182][T29580] 9pnet_fd: p9_fd_create_tcp (29580): problem connecting socket to 127.0.0.1 [ 2375.283435][T23408] Bluetooth: hci5: command 0x0c1a tx timeout [ 2375.485648][T29591] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 2376.313218][T26353] Bluetooth: hci4: unexpected event for opcode 0x040e [ 2377.122981][T23408] Bluetooth: hci2: command 0x0406 tx timeout [ 2377.282852][T23408] Bluetooth: hci3: command 0x0c1a tx timeout [ 2377.366130][T23408] Bluetooth: hci5: command 0x0c1a tx timeout [ 2377.568004][T29661] gfs2: path_lookup on F©ZÜF„ýYX¶:·ý1^ÛmÁ‘»Ç-&ËvªTÅ¢Nò?32g{¬¢… returned error -2 [ 2377.987340][T29677] binfmt_misc: register: failed to install interpreter file ./file0 [ 2378.862959][T29733] nvme_fabrics: missing parameter 'transport=%s' [ 2378.871043][T29733] nvme_fabrics: missing parameter 'nqn=%s' [ 2379.468841][T26353] Bluetooth: hci3: command 0x0c1a tx timeout [ 2379.476901][T26353] Bluetooth: hci5: command 0x0c1a tx timeout [ 2380.220535][T26353] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 2381.548372][T26353] Bluetooth: hci5: command 0x0c1a tx timeout [ 2382.207666][T29815] netlink: 'syz.0.6754': attribute type 2 has an invalid length. [ 2382.880900][T26353] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 2383.565008][T26353] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 2383.609203][T26353] Bluetooth: hci5: command 0x0c1a tx timeout [ 2383.953077][ T29] audit: type=1400 audit(1730273708.608:606): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=29842 comm="syz.2.6768" dest=2 [ 2384.246390][T26353] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2384.255431][T26353] Bluetooth: hci2: Injecting HCI hardware error event [ 2384.269426][T23408] Bluetooth: hci2: hardware error 0x00 [ 2384.621264][T29889] unsupported nlmsg_type 40 [ 2385.500896][T16684] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 2385.924322][T16684] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 2385.935294][T16684] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2385.952717][T29922] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6799'. [ 2386.005241][T16684] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2386.015750][T16684] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2386.024791][T16684] usb 10-1: Manufacturer: syz [ 2386.065461][T29926] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6803'. [ 2386.103533][T16684] usb 10-1: config 0 descriptor?? [ 2386.302593][T16684] rc_core: IR keymap rc-hauppauge not found [ 2386.308756][T16684] Registered IR keymap rc-empty [ 2386.325299][T16684] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 2386.344675][T16684] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input52 [ 2386.365220][T23408] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2386.463330][T16684] usb 10-1: USB disconnect, device number 38 [ 2386.920309][T23408] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 2386.929876][T23408] Bluetooth: hci3: Injecting HCI hardware error event [ 2386.946521][T23408] Bluetooth: hci3: hardware error 0x00 [ 2388.093069][T29570] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 2388.102036][T29570] Bluetooth: hci4: Injecting HCI hardware error event [ 2388.115273][T29570] Bluetooth: hci4: hardware error 0x00 [ 2388.243613][T19809] Bluetooth: hci5: command 0x0c1a tx timeout [ 2388.287791][T29960] block nbd2: shutting down sockets [ 2388.629840][T29976] binder: BINDER_SET_CONTEXT_MGR already set [ 2388.638963][T29976] binder: 29974:29976 ioctl 4018620d 20000040 returned -16 [ 2389.442683][T23408] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2389.820100][T23408] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2389.851775][T30007] binder: BINDER_SET_CONTEXT_MGR already set [ 2389.858514][T30007] binder: 30006:30007 ioctl 4018620d 20000040 returned -16 [ 2389.902207][T23408] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2390.167759][T29570] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2390.648850][T30046] binder_alloc: 30045: binder_alloc_buf, no vma [ 2390.896002][T29570] Bluetooth: hci1: unexpected event for opcode 0x0c57 [ 2391.012542][ T6464] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 2391.101228][T30074] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6861'. [ 2391.202898][ T6464] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2391.229739][ T6464] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2391.268352][ T6464] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 2391.297394][ T6464] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2391.315812][ T6464] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2391.337390][T30051] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2391.371788][ T6464] hub 3-1:1.0: bad descriptor, ignoring hub [ 2391.389275][ T6464] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2391.413839][ T6464] cdc_wdm 3-1:1.0: skipping garbage [ 2391.419113][ T6464] cdc_wdm 3-1:1.0: skipping garbage [ 2391.434631][ T6464] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2391.442370][ T6464] cdc_wdm 3-1:1.0: Unknown control protocol [ 2391.471583][T30097] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6871'. [ 2391.625671][T30110] cgroup: subsys name conflicts with all [ 2391.692854][T16684] usb 3-1: USB disconnect, device number 51 [ 2393.372610][T16684] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 2393.442862][T23154] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 2393.541323][T16684] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2393.566126][T16684] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2393.578720][T16684] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 2393.590833][T16684] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2393.601096][T16684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2393.623268][T30051] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2393.642261][T16684] hub 3-1:1.0: bad descriptor, ignoring hub [ 2393.648539][T16684] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2393.657894][T16684] cdc_wdm 3-1:1.0: skipping garbage [ 2393.663331][T23154] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2393.682502][T16684] cdc_wdm 3-1:1.0: skipping garbage [ 2393.693214][T23154] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2393.703186][T16684] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2393.709118][T16684] cdc_wdm 3-1:1.0: Unknown control protocol [ 2393.725164][T23154] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2393.752522][T23154] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2393.775194][T23154] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2393.801516][T23154] usb 8-1: config 0 descriptor?? [ 2393.872876][T14201] usb 3-1: USB disconnect, device number 52 [ 2394.134267][T30194] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 2394.239457][T23154] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 2394.244413][T23154] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2394.528517][T16684] usb 8-1: USB disconnect, device number 76 [ 2394.811574][T30223] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 2394.962764][T29570] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2394.973754][T29570] Bluetooth: hci1: Injecting HCI hardware error event [ 2394.986519][T23408] Bluetooth: hci1: hardware error 0x00 [ 2395.857216][ T29] audit: type=1400 audit(1730273720.498:607): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=30231 comm="syz.0.6928" dest=2 [ 2397.457558][T23408] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2397.688526][T29570] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2397.699707][T29570] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2397.709417][T29570] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2397.719351][T29570] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2397.729075][T29570] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2397.737363][T29570] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2398.352345][T30255] syzkaller0: entered promiscuous mode [ 2398.358709][T30255] syzkaller0: entered allmulticast mode [ 2398.371493][T30239] chnl_net:caif_netlink_parms(): no params data found [ 2400.212101][T29570] Bluetooth: hci0: command tx timeout [ 2402.346497][T29570] Bluetooth: hci0: command tx timeout [ 2404.415696][T29570] Bluetooth: hci0: command tx timeout [ 2406.202603][T23154] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 2406.246847][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.373507][T23154] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2406.382869][T23154] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2406.396567][T23154] usb 8-1: config 0 descriptor?? [ 2406.490063][T29570] Bluetooth: hci0: command tx timeout [ 2406.779254][T30343] netlink: 'syz.0.6969': attribute type 21 has an invalid length. [ 2406.789833][T30343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6969'. [ 2406.841465][T23154] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 2406.862537][T23154] [drm] Initialized udl on minor 2 [ 2406.905548][T30239] bridge0: port 1(bridge_slave_0) entered blocking state [ 2406.914444][T30239] bridge0: port 1(bridge_slave_0) entered disabled state [ 2406.927245][T30239] bridge_slave_0: entered allmulticast mode [ 2406.934764][T30239] bridge_slave_0: entered promiscuous mode [ 2406.943530][T30239] bridge0: port 2(bridge_slave_1) entered blocking state [ 2406.950671][T30239] bridge0: port 2(bridge_slave_1) entered disabled state [ 2406.957999][T30239] bridge_slave_1: entered allmulticast mode [ 2406.965220][T30239] bridge_slave_1: entered promiscuous mode [ 2407.025709][T30239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2407.036019][T23154] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2407.057697][T30239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2407.063195][T23154] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 2407.093802][T16684] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2407.107606][T23154] usb 8-1: USB disconnect, device number 77 [ 2407.115539][T16684] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 2407.156796][T30239] team0: Port device team_slave_0 added [ 2407.175430][T30239] team0: Port device team_slave_1 added [ 2407.185515][T30377] 9pnet_fd: p9_fd_create_tcp (30377): problem connecting socket to 127.0.0.1 [ 2407.224450][T30239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2407.237136][T30239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2407.265335][T30239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2407.277985][T30239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2407.285518][T30239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2407.312360][T30239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2407.375678][T30239] hsr_slave_0: entered promiscuous mode [ 2407.385131][T30239] hsr_slave_1: entered promiscuous mode [ 2407.398212][T30239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2407.406236][T30239] Cannot create hsr debugfs directory [ 2407.621485][T30239] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2407.764836][T30239] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.050138][T30410] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6996'. [ 2408.242872][T30239] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.337120][T30239] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.472631][T30431] 9pnet_fd: p9_fd_create_tcp (30431): problem connecting socket to 127.0.0.1 [ 2409.089871][T30239] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2409.123263][T30239] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2409.137627][T30239] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2409.148759][T30239] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2409.245259][T30239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2409.275761][T30239] 8021q: adding VLAN 0 to HW filter on device team0 [ 2409.308659][ T2127] bridge0: port 1(bridge_slave_0) entered blocking state [ 2409.315917][ T2127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2409.358561][T23586] bridge0: port 2(bridge_slave_1) entered blocking state [ 2409.365760][T23586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2409.615626][T30239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2412.172202][T29954] Bluetooth: hci0: command 0x0405 tx timeout [ 2412.332817][T14201] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 2412.453873][T28466] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 2412.612742][T14201] usb 8-1: Using ep0 maxpacket: 8 [ 2412.738205][T14201] usb 8-1: config 0 has no interfaces? [ 2412.860268][T14201] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 2412.871845][T14201] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2412.884178][T14201] usb 8-1: config 0 descriptor?? [ 2412.896733][T28466] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 2412.936931][T30491] overlayfs: failed to resolve './file0': -2 [ 2413.046498][T30239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2413.159998][T30239] veth0_vlan: entered promiscuous mode [ 2413.175547][T29122] usb 8-1: USB disconnect, device number 78 [ 2413.196776][T30239] veth1_vlan: entered promiscuous mode [ 2413.197692][T30497] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2413.220095][T30497] overlayfs: failed to set xattr on upper [ 2413.227463][T30497] overlayfs: ...falling back to redirect_dir=nofollow. [ 2413.246665][T30497] overlayfs: ...falling back to index=off. [ 2413.256454][T30497] overlayfs: ...falling back to uuid=null. [ 2413.277663][T30239] veth0_macvtap: entered promiscuous mode [ 2413.300249][T30239] veth1_macvtap: entered promiscuous mode [ 2413.339002][T30239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2413.359213][T30239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.369943][T30239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2413.380940][T30239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.391097][T30239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2413.401697][T30239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.417881][T30239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2413.428564][T30239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.438828][T30239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2413.449374][T30239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.460945][T30239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2413.479850][T30239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.491320][T30239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2413.546928][T30239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.568529][T30239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.584118][T30239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.599242][T30239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.609902][T30239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.620847][T30239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.630795][T30239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.641511][T30239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.656244][T30239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.668594][T30239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.678677][T30239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.689483][T30239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.700673][T30239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2413.714206][T30239] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.725521][T30239] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.750279][T30239] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.761147][T30239] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.982664][ T29] audit: type=1326 audit(1730273738.628:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30509 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c51b7e719 code=0x7fc00000 [ 2414.272738][ T29] audit: type=1326 audit(1730273738.628:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30509 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c51b7e719 code=0x7fc00000 [ 2415.064196][T23586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2415.104312][T16330] IPVS: starting estimator thread 0... [ 2415.164808][ T2127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2415.172956][ T2127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2415.198049][ T29] audit: type=1326 audit(1730273738.628:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30509 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c51b7e719 code=0x7fc00000 [ 2415.465749][T30524] IPVS: using max 16 ests per chain, 38400 per kthread [ 2415.474303][T30525] overlayfs: failed to resolve './file0': -2 [ 2415.490887][T23586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2415.536527][ T29] audit: type=1326 audit(1730273738.628:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30509 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c51b7e719 code=0x7fc00000 [ 2415.692770][ T29] audit: type=1326 audit(1730273738.628:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30509 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c51b7e719 code=0x7fc00000 [ 2415.739055][ T29] audit: type=1326 audit(1730273738.628:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30509 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c51b7e719 code=0x7fc00000 [ 2415.760830][ T29] audit: type=1326 audit(1730273738.628:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30509 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c51b7e719 code=0x7fc00000 [ 2415.782785][ T29] audit: type=1326 audit(1730273738.628:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30509 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c51b7e719 code=0x7fc00000 [ 2415.804547][ T29] audit: type=1326 audit(1730273738.628:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30509 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c51b7e719 code=0x7fc00000 [ 2415.826749][ T29] audit: type=1326 audit(1730273738.628:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30509 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c51b7e719 code=0x7fc00000 [ 2419.505512][T30549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7041'. [ 2423.338517][T30574] overlayfs: failed to resolve './file0': -2 [ 2423.364369][T30576] block nbd9: shutting down sockets [ 2424.524036][T30594] ipip0: entered promiscuous mode [ 2424.647167][T30586] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7054'. [ 2426.043872][T30614] overlayfs: failed to resolve './file0': -2 [ 2426.148341][T30625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7067'. [ 2426.183796][T30627] block nbd1: shutting down sockets [ 2426.577500][T30635] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 2426.925808][T30641] Bluetooth: MGMT ver 1.23 [ 2427.619782][T30638] syz.9.7062 (30638) used greatest stack depth: 18544 bytes left [ 2427.758548][T30654] overlayfs: failed to resolve './file0': -2 [ 2428.032825][T30666] block nbd4: shutting down sockets [ 2430.685469][T30693] overlayfs: failed to resolve './file0': -2 [ 2431.511839][T30707] block nbd9: shutting down sockets [ 2435.453265][T30754] block nbd9: shutting down sockets [ 2438.992645][ T5877] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 2439.162786][ T5877] usb 10-1: Using ep0 maxpacket: 16 [ 2439.216099][ T5877] usb 10-1: config 8 has an invalid interface number: 206 but max is 0 [ 2439.271832][ T5877] usb 10-1: config 8 has no interface number 0 [ 2439.300505][ T5877] usb 10-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 2439.348561][ T5877] usb 10-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 2439.391670][ T5877] usb 10-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2439.439118][ T5877] usb 10-1: config 8 interface 206 has no altsetting 0 [ 2439.474599][ T5877] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 2439.484258][ T5877] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2439.492334][ T5877] usb 10-1: Product: syz [ 2439.497300][ T5877] usb 10-1: Manufacturer: syz [ 2439.502235][ T5877] usb 10-1: SerialNumber: syz [ 2439.720664][ T5877] garmin_gps 10-1:8.206: Garmin GPS usb/tty converter detected [ 2439.783640][ T5877] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 2439.794624][ T5877] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 2439.805442][ T5877] usb 10-1: USB disconnect, device number 39 [ 2439.818195][ T5877] garmin_gps 10-1:8.206: device disconnected [ 2440.212624][T16684] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2440.392532][T16684] usb 2-1: Using ep0 maxpacket: 32 [ 2440.401985][T16684] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2440.419436][T16684] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2440.447546][T16684] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2440.453266][T30820] xt_hashlimit: invalid rate [ 2440.471034][T16684] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2440.488449][T16684] usb 2-1: Product: syz [ 2440.495335][T16684] usb 2-1: Manufacturer: syz [ 2440.510563][T16684] hub 2-1:4.0: USB hub found [ 2440.714880][T16684] hub 2-1:4.0: 2 ports detected [ 2442.313716][ T62] wlan0: Trigger new scan to find an IBSS to join [ 2442.539157][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 2442.539183][ T29] audit: type=1400 audit(1730273767.208:674): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=30840 comm="syz.4.7142" dest=20004 [ 2442.629320][T16684] hub 2-1:4.0: activate --> -90 [ 2442.704964][T30847] xt_hashlimit: invalid rate [ 2442.829890][T16684] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 2442.830232][ T6464] usb 2-1: USB disconnect, device number 29 [ 2442.861877][ T29] audit: type=1400 audit(1730273767.528:675): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=30848 comm="syz.4.7146" [ 2443.421032][T30854] input: syz0 as /devices/virtual/input/input53 [ 2447.382637][T17970] wlan0: Trigger new scan to find an IBSS to join [ 2448.913138][T30907] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 2448.919811][T30907] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2448.943370][T30907] vhci_hcd vhci_hcd.0: Device attached [ 2449.659314][ T62] wlan0: Creating new IBSS network, BSSID 86:ad:6a:0e:e3:a1 [ 2450.032809][T16330] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 2450.075230][ T6464] vhci_hcd: vhci_device speed not set [ 2450.151367][T30923] vlan2: entered promiscuous mode [ 2450.156764][T30923] vlan2: entered allmulticast mode [ 2450.162269][T30923] syz_tun: entered allmulticast mode [ 2450.167829][T30923] syz_tun: entered promiscuous mode [ 2450.186927][T30923] team0: Port device vlan2 added [ 2450.196779][ T6464] usb 47-1: new high-speed USB device number 3 using vhci_hcd [ 2450.223406][T16330] usb 8-1: Using ep0 maxpacket: 8 [ 2450.247722][T16330] usb 8-1: config 0 has no interfaces? [ 2450.257553][T16330] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2450.288729][T30923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7170'. [ 2450.298097][T16330] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2450.406791][T16330] usb 8-1: config 0 descriptor?? [ 2450.636576][T30923] team0 (unregistering): Port device team_slave_0 removed [ 2450.650813][T30923] team0 (unregistering): Port device team_slave_1 removed [ 2450.664706][T30923] syz_tun: left allmulticast mode [ 2450.669854][T30923] syz_tun: left promiscuous mode [ 2450.679258][T30923] team0 (unregistering): Port device vlan2 removed [ 2450.720045][T30911] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 2450.732575][ T62] vhci_hcd: stop threads [ 2450.742773][ T62] vhci_hcd: release socket [ 2450.814224][ T62] vhci_hcd: disconnect device [ 2452.464902][T16330] usb 8-1: USB disconnect, device number 79 [ 2453.966230][T30949] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7177'. [ 2455.482593][ T6464] vhci_hcd: vhci_device speed not set [ 2456.603136][T30990] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7191'. [ 2457.876713][T31012] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 2457.897425][T31012] tipc: Started in network mode [ 2457.903342][T31012] tipc: Node identity ac1414aa, cluster identity 4711 [ 2457.916298][T31012] tipc: Enabled bearer , priority 10 [ 2459.044390][T16330] tipc: Node number set to 2886997162 [ 2461.098414][T31039] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7207'. [ 2466.993820][T31085] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7220'. [ 2467.697148][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2469.623894][T16330] page_pool_release_retry() stalled pool shutdown: id 87, 1 inflight 61 sec [ 2470.801609][T31123] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7235'. [ 2471.230651][T31134] fuseblk: Bad value for 'fd' [ 2474.229384][ T6464] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 2474.878484][ T6464] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2474.891577][T31167] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7249'. [ 2474.908900][ T6464] usb 8-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 2474.918594][ T6464] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2474.949075][ T6464] usb 8-1: Product: syz [ 2474.958158][ T6464] usb 8-1: Manufacturer: syz [ 2475.011538][ T6464] usb 8-1: SerialNumber: syz [ 2476.731205][T31172] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 2476.753362][ T6464] qmi_wwan 8-1:1.0: skipping garbage [ 2476.773845][ T6464] qmi_wwan 8-1:1.0: probe with driver qmi_wwan failed with error -22 [ 2476.933814][ T6464] usb 8-1: USB disconnect, device number 80 [ 2476.984055][T31172] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 2477.374225][T31181] input: syz0 as /devices/virtual/input/input56 [ 2478.832020][T31203] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7263'. [ 2479.867287][T23586] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2481.532608][T11283] IPVS: starting estimator thread 0... [ 2481.623668][T31223] IPVS: using max 18 ests per chain, 43200 per kthread [ 2481.779655][T31229] input: syz0 as /devices/virtual/input/input57 [ 2482.586151][T31233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2483.309799][T31246] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7278'. [ 2483.548918][T23154] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 2483.753524][T29570] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 2483.760458][T23154] usb 8-1: Using ep0 maxpacket: 16 [ 2483.982972][T23154] usb 8-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 2483.992718][T23154] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2484.057172][T23154] usb 8-1: Product: syz [ 2484.081997][T23154] usb 8-1: Manufacturer: syz [ 2484.090403][T23154] usb 8-1: SerialNumber: syz [ 2484.110773][T23154] usb 8-1: config 0 descriptor?? [ 2484.399247][ T29] audit: type=1326 audit(1730273809.068:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31263 comm="syz.0.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88c97e719 code=0x7ffc0000 [ 2484.514986][T31267] fuse: Bad value for 'fd' [ 2484.882996][ T29] audit: type=1326 audit(1730273809.108:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31263 comm="syz.0.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88c97e719 code=0x7ffc0000 [ 2484.915233][T23154] omninet 8-1:0.0: required endpoints missing [ 2484.930174][T23154] usb 8-1: USB disconnect, device number 81 [ 2484.938989][ T29] audit: type=1326 audit(1730273809.178:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31263 comm="syz.0.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc88c97e719 code=0x7ffc0000 [ 2484.960763][ T29] audit: type=1326 audit(1730273809.178:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31263 comm="syz.0.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88c97e719 code=0x7ffc0000 [ 2484.982815][ T29] audit: type=1326 audit(1730273809.188:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31263 comm="syz.0.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88c97e719 code=0x7ffc0000 [ 2485.004705][ T29] audit: type=1326 audit(1730273809.238:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31263 comm="syz.0.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc88c97e719 code=0x7ffc0000 [ 2486.041259][ T29] audit: type=1326 audit(1730273810.708:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31263 comm="syz.0.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88c97e719 code=0x7ffc0000 [ 2486.080005][T31286] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7290'. [ 2486.179181][ T29] audit: type=1326 audit(1730273810.848:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31263 comm="syz.0.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88c97e719 code=0x7ffc0000 [ 2486.307887][ T29] audit: type=1400 audit(1730273810.978:684): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=31291 comm="syz.9.7292" dest=20000 [ 2486.396538][ T29] audit: type=1326 audit(1730273810.988:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31263 comm="syz.0.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc88c97e719 code=0x7ffc0000 [ 2487.102869][T31277] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 2487.404861][T31304] overlayfs: failed to resolve './file0': -2 [ 2487.764589][T29570] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2487.774180][T29570] Bluetooth: hci0: Injecting HCI hardware error event [ 2487.793339][T29570] Bluetooth: hci0: hardware error 0x00 [ 2488.023174][T31277] usb 8-1: Using ep0 maxpacket: 8 [ 2488.030079][T31277] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2488.041150][T31277] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2488.050515][T31277] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2488.072500][T31277] usb 8-1: Product: syz [ 2488.076720][T31277] usb 8-1: Manufacturer: syz [ 2488.081339][T31277] usb 8-1: SerialNumber: syz [ 2488.097635][T31277] usb 8-1: config 0 descriptor?? [ 2488.115814][T31277] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2488.155512][T31306] fuse: Bad value for 'fd' [ 2490.065142][T29570] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2490.458142][T31346] fuse: Bad value for 'fd' [ 2490.620102][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 2490.620121][ T29] audit: type=1400 audit(1730273815.288:689): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=31349 comm="syz.4.7313" dest=20004 [ 2490.810203][T31359] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 2490.816869][T31359] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2490.852496][T14201] IPVS: starting estimator thread 0... [ 2490.878278][T31359] vhci_hcd vhci_hcd.0: Device attached [ 2490.953511][T31366] IPVS: using max 19 ests per chain, 45600 per kthread [ 2491.063564][T14201] vhci_hcd: vhci_device speed not set [ 2491.128475][T14201] usb 41-1: new high-speed USB device number 15 using vhci_hcd [ 2491.309840][T31277] gspca_zc3xx: reg_r err -71 [ 2492.676817][T31277] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2492.684267][T31277] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2492.700727][T31277] usb 8-1: USB disconnect, device number 82 [ 2492.764025][ T29] audit: type=1400 audit(1730273817.438:690): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=31390 comm="syz.1.7326" dest=20004 [ 2493.969813][T31417] binder: 31413:31417 ioctl 4018620d 0 returned -22 [ 2494.062580][T31360] vhci_hcd: connection reset by peer [ 2494.079406][ T62] vhci_hcd: stop threads [ 2494.084248][ T62] vhci_hcd: release socket [ 2494.120919][ T62] vhci_hcd: disconnect device [ 2495.636892][T31459] binder: 31458:31459 ioctl c0306201 0 returned -14 [ 2495.677939][T31463] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7351'. [ 2495.812658][T11283] IPVS: starting estimator thread 0... [ 2495.912532][T31470] IPVS: using max 22 ests per chain, 52800 per kthread [ 2496.316454][T14201] vhci_hcd: vhci_device speed not set [ 2496.492635][T31488] binder: 31487:31488 ioctl c0306201 0 returned -14 [ 2496.663076][T31494] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7364'. [ 2497.289358][ T6464] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2497.463328][ T6464] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2497.508686][ T6464] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2497.718187][ T6464] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2497.963015][ T6464] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2498.012005][T31503] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2498.048594][ T6464] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2498.195413][T31523] binder: 31522:31523 ioctl c0306201 0 returned -14 [ 2498.702512][T11283] usb 2-1: USB disconnect, device number 30 [ 2498.772014][T31536] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7377'. [ 2499.071209][T31548] xt_l2tp: missing protocol rule (udp|l2tpip) [ 2501.228306][T31580] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7394'. [ 2502.501293][T29570] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 2505.279783][T31627] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7408'. [ 2505.781842][T31650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7418'. [ 2506.269880][T31662] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7423'. [ 2506.788987][T29570] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2506.798442][T29570] Bluetooth: hci5: Injecting HCI hardware error event [ 2506.810789][T29570] Bluetooth: hci5: hardware error 0x00 [ 2507.263765][T29954] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 2508.711685][T31702] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7435'. [ 2508.884163][T29570] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2509.110997][T31714] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 2509.117677][T31714] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2509.147927][T31714] vhci_hcd vhci_hcd.0: Device attached [ 2509.192851][T11283] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2509.322931][ T6464] vhci_hcd: vhci_device speed not set [ 2509.361620][T11283] usb 2-1: Using ep0 maxpacket: 16 [ 2509.393892][T31679] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 2509.402987][ T6464] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 2509.475065][T11283] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 2509.489186][T11283] usb 2-1: config 0 has no interface number 0 [ 2509.586055][T11283] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2509.599796][T11283] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2509.870391][T11283] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2509.879577][T11283] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2509.887869][T11283] usb 2-1: Product: syz [ 2509.892068][T11283] usb 2-1: SerialNumber: syz [ 2509.899036][T11283] usb 2-1: config 0 descriptor?? [ 2509.932554][T11283] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 2509.940338][T11283] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input58 [ 2510.463733][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 2510.513714][T31732] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7446'. [ 2510.832459][ C0] [ 2510.834840][ C0] ======================================================== [ 2510.842042][ C0] WARNING: possible irq lock inversion dependency detected [ 2510.849241][ C0] 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 Not tainted [ 2510.856349][ C0] -------------------------------------------------------- [ 2510.863546][ C0] syz.7.7447/31734 just changed the state of lock: [ 2510.870050][ C0] ffff888042c60230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 2510.879751][ C0] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 2510.887729][ C0] (tasklist_lock){.+.+}-{2:2} [ 2510.887764][ C0] [ 2510.887764][ C0] [ 2510.887764][ C0] and interrupts could create inverse lock ordering between them. [ 2510.887764][ C0] [ 2510.906832][ C0] [ 2510.906832][ C0] other info that might help us debug this: [ 2510.914898][ C0] Chain exists of: [ 2510.914898][ C0] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 2510.914898][ C0] [ 2510.927892][ C0] Possible interrupt unsafe locking scenario: [ 2510.927892][ C0] [ 2510.936393][ C0] CPU0 CPU1 [ 2510.941765][ C0] ---- ---- [ 2510.947136][ C0] lock(tasklist_lock); [ 2510.951395][ C0] local_irq_disable(); [ 2510.958151][ C0] lock(&dev->event_lock#2); [ 2510.965371][ C0] lock(&new->fa_lock); [ 2510.972155][ C0] [ 2510.975613][ C0] lock(&dev->event_lock#2); [ 2510.980497][ C0] [ 2510.980497][ C0] *** DEADLOCK *** [ 2510.980497][ C0] [ 2510.988647][ C0] 3 locks held by syz.7.7447/31734: [ 2510.993852][ C0] #0: ffffffff8e7f4a00 (sched_map-wait-type-override){+.+.}-{2:2}, at: schedule+0x90/0x320 [ 2511.003988][ C0] #1: ffffc90000007c00 (drivers/tty/vt/keyboard.c:274){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 2511.014639][ C0] #2: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: input_handler_for_each_handle+0x29/0x1d0 [ 2511.025265][ C0] [ 2511.025265][ C0] the shortest dependencies between 2nd lock and 1st lock: [ 2511.034631][ C0] -> (tasklist_lock){.+.+}-{2:2} { [ 2511.040038][ C0] HARDIRQ-ON-R at: [ 2511.044283][ C0] lock_acquire+0x1ed/0x550 [ 2511.050989][ C0] _raw_read_lock+0x36/0x50 [ 2511.057692][ C0] __do_wait+0x12d/0x850 [ 2511.064145][ C0] do_wait+0x1e9/0x560 [ 2511.070413][ C0] kernel_wait+0xe9/0x240 [ 2511.076954][ C0] call_usermodehelper_exec_work+0xbd/0x230 [ 2511.085055][ C0] process_scheduled_works+0xa63/0x1850 [ 2511.092806][ C0] worker_thread+0x870/0xd30 [ 2511.099607][ C0] kthread+0x2f0/0x390 [ 2511.105904][ C0] ret_from_fork+0x4b/0x80 [ 2511.105941][ C0] ret_from_fork_asm+0x1a/0x30 [ 2511.113029][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2511.119423][ C0] SOFTIRQ-ON-R at: [ 2511.126954][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2511.130562][ C0] lock_acquire+0x1ed/0x550 [ 2511.137853][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2511.144139][ C0] _raw_read_lock+0x36/0x50 [ 2511.152258][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2511.157706][ C0] __do_wait+0x12d/0x850 [ 2511.165704][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2511.171013][ C0] do_wait+0x1e9/0x560 [ 2511.178756][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2511.184264][ C0] kernel_wait+0xe9/0x240 [ 2511.191472][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2511.197668][ C0] call_usermodehelper_exec_work+0xbd/0x230 [ 2511.204780][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2511.212628][ C0] process_scheduled_works+0xa63/0x1850 [ 2511.219891][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2511.227233][ C0] worker_thread+0x870/0xd30 [ 2511.234346][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2511.240883][ C0] kthread+0x2f0/0x390 [ 2511.249514][T31277] usb 2-1: USB disconnect, device number 31 [ 2511.249562][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2511.254041][ C0] ret_from_fork+0x4b/0x80 [ 2511.268819][ C0] ret_from_fork_asm+0x1a/0x30 [ 2511.268853][ C0] INITIAL USE at: [ 2511.268869][ C0] lock_acquire+0x1ed/0x550 [ 2511.293330][ C0] _raw_write_lock_irq+0xd3/0x120 [ 2511.300473][ C0] copy_process+0x2267/0x3d50 [ 2511.307280][ C0] kernel_clone+0x223/0x880 [ 2511.313917][ C0] user_mode_thread+0x132/0x1a0 [ 2511.320894][ C0] rest_init+0x23/0x300 [ 2511.327172][ C0] start_kernel+0x47f/0x500 [ 2511.333782][ C0] x86_64_start_reservations+0x2a/0x30 [ 2511.341321][ C0] x86_64_start_kernel+0x9f/0xa0 [ 2511.348343][ C0] common_startup_64+0x13e/0x147 [ 2511.355358][ C0] INITIAL READ USE at: [ 2511.359934][ C0] lock_acquire+0x1ed/0x550 [ 2511.366956][ C0] _raw_read_lock+0x36/0x50 [ 2511.374008][ C0] __do_wait+0x12d/0x850 [ 2511.380782][ C0] do_wait+0x1e9/0x560 [ 2511.387357][ C0] kernel_wait+0xe9/0x240 [ 2511.394190][ C0] call_usermodehelper_exec_work+0xbd/0x230 [ 2511.402588][ C0] process_scheduled_works+0xa63/0x1850 [ 2511.410664][ C0] worker_thread+0x870/0xd30 [ 2511.417758][ C0] kthread+0x2f0/0x390 [ 2511.424328][ C0] ret_from_fork+0x4b/0x80 [ 2511.431252][ C0] ret_from_fork_asm+0x1a/0x30 [ 2511.438524][ C0] } [ 2511.441266][ C0] ... key at: [] tasklist_lock+0x18/0x40 [ 2511.449314][ C0] ... acquired at: [ 2511.453374][ C0] lock_acquire+0x1ed/0x550 [ 2511.458038][ C0] _raw_read_lock+0x36/0x50 [ 2511.462701][ C0] send_sigio+0x108/0x390 [ 2511.467203][ C0] kill_fasync+0x256/0x4f0 [ 2511.471776][ C0] lease_break_callback+0x26/0x30 [ 2511.476978][ C0] __break_lease+0x6d5/0x1820 [ 2511.481816][ C0] vfs_truncate+0x26b/0x3b0 [ 2511.486475][ C0] do_sys_truncate+0xdb/0x190 [ 2511.491306][ C0] do_syscall_64+0xf3/0x230 [ 2511.495965][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2511.502023][ C0] [ 2511.504337][ C0] -> (&f_owner->lock){....}-{2:2} { [ 2511.509704][ C0] INITIAL USE at: [ 2511.513753][ C0] lock_acquire+0x1ed/0x550 [ 2511.520152][ C0] _raw_write_lock_irq+0xd3/0x120 [ 2511.527098][ C0] __f_setown+0x6b/0x380 [ 2511.533251][ C0] generic_setlease+0xc74/0x1550 [ 2511.540102][ C0] fcntl_setlease+0x404/0x540 [ 2511.546686][ C0] do_fcntl+0x69d/0x1a60 [ 2511.552835][ C0] __se_sys_fcntl+0xd2/0x1e0 [ 2511.559326][ C0] do_syscall_64+0xf3/0x230 [ 2511.565733][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2511.573536][ C0] INITIAL READ USE at: [ 2511.578031][ C0] lock_acquire+0x1ed/0x550 [ 2511.584905][ C0] _raw_read_lock_irqsave+0xdd/0x130 [ 2511.592529][ C0] send_sigio+0x37/0x390 [ 2511.599107][ C0] kill_fasync+0x256/0x4f0 [ 2511.605856][ C0] lease_break_callback+0x26/0x30 [ 2511.613220][ C0] __break_lease+0x6d5/0x1820 [ 2511.620236][ C0] vfs_truncate+0x26b/0x3b0 [ 2511.627080][ C0] do_sys_truncate+0xdb/0x190 [ 2511.634100][ C0] do_syscall_64+0xf3/0x230 [ 2511.640941][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2511.649173][ C0] } [ 2511.651848][ C0] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2511.660886][ C0] ... acquired at: [ 2511.664856][ C0] lock_acquire+0x1ed/0x550 [ 2511.669543][ C0] _raw_read_lock_irqsave+0xdd/0x130 [ 2511.674995][ C0] send_sigio+0x37/0x390 [ 2511.679413][ C0] kill_fasync+0x256/0x4f0 [ 2511.683998][ C0] lease_break_callback+0x26/0x30 [ 2511.689184][ C0] __break_lease+0x6d5/0x1820 [ 2511.694031][ C0] vfs_truncate+0x26b/0x3b0 [ 2511.698711][ C0] do_sys_truncate+0xdb/0x190 [ 2511.703575][ C0] do_syscall_64+0xf3/0x230 [ 2511.708266][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2511.714327][ C0] [ 2511.716639][ C0] -> (&new->fa_lock){....}-{2:2} { [ 2511.721849][ C0] INITIAL USE at: [ 2511.725825][ C0] lock_acquire+0x1ed/0x550 [ 2511.732064][ C0] _raw_write_lock_irq+0xd3/0x120 [ 2511.738851][ C0] fasync_remove_entry+0xff/0x1d0 [ 2511.745613][ C0] lease_modify+0x1bd/0x3a0 [ 2511.751851][ C0] locks_remove_file+0x577/0x10c0 [ 2511.758604][ C0] __fput+0x1a6/0x880 [ 2511.764327][ C0] task_work_run+0x24f/0x310 [ 2511.770650][ C0] do_exit+0xa2f/0x28e0 [ 2511.776534][ C0] do_group_exit+0x207/0x2c0 [ 2511.782851][ C0] get_signal+0x16a3/0x1740 [ 2511.789093][ C0] arch_do_signal_or_restart+0x96/0x860 [ 2511.796460][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 2511.803733][ C0] do_syscall_64+0x100/0x230 [ 2511.810052][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2511.817677][ C0] INITIAL READ USE at: [ 2511.822081][ C0] lock_acquire+0x1ed/0x550 [ 2511.828752][ C0] _raw_read_lock_irqsave+0xdd/0x130 [ 2511.836201][ C0] kill_fasync+0x199/0x4f0 [ 2511.842865][ C0] lease_break_callback+0x26/0x30 [ 2511.850061][ C0] __break_lease+0x6d5/0x1820 [ 2511.856904][ C0] vfs_truncate+0x26b/0x3b0 [ 2511.863579][ C0] do_sys_truncate+0xdb/0x190 [ 2511.870425][ C0] do_syscall_64+0xf3/0x230 [ 2511.877101][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2511.885158][ C0] } [ 2511.887732][ C0] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2511.896485][ C0] ... acquired at: [ 2511.900359][ C0] lock_acquire+0x1ed/0x550 [ 2511.905031][ C0] _raw_read_lock_irqsave+0xdd/0x130 [ 2511.910475][ C0] kill_fasync+0x199/0x4f0 [ 2511.915057][ C0] mousedev_notify_readers+0x719/0xc80 [ 2511.920676][ C0] mousedev_event+0x5d9/0x1390 [ 2511.925631][ C0] input_handler_events_default+0x107/0x1c0 [ 2511.931685][ C0] input_pass_values+0x286/0x860 [ 2511.936782][ C0] input_event_dispose+0x30f/0x600 [ 2511.942063][ C0] input_handle_event+0xa71/0xbe0 [ 2511.947256][ C0] input_inject_event+0x22f/0x340 [ 2511.952448][ C0] evdev_write+0x5fd/0x790 [ 2511.957027][ C0] vfs_write+0x2a3/0xd30 [ 2511.961434][ C0] ksys_write+0x183/0x2b0 [ 2511.965937][ C0] do_syscall_64+0xf3/0x230 [ 2511.970618][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2511.976683][ C0] [ 2511.978995][ C0] -> (&dev->event_lock#2){..-.}-{2:2} { [ 2511.984564][ C0] IN-SOFTIRQ-W at: [ 2511.988568][ C0] lock_acquire+0x1ed/0x550 [ 2511.994732][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 2512.001675][ C0] input_inject_event+0xc5/0x340 [ 2512.008261][ C0] kd_sound_helper+0x101/0x210 [ 2512.014669][ C0] input_handler_for_each_handle+0x103/0x1d0 [ 2512.022288][ C0] call_timer_fn+0x18e/0x650 [ 2512.028529][ C0] __run_timer_base+0x66a/0x8e0 [ 2512.035025][ C0] run_timer_softirq+0xb7/0x170 [ 2512.041520][ C0] handle_softirqs+0x2c5/0x980 [ 2512.047928][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 2512.054170][ C0] irq_exit_rcu+0x9/0x30 [ 2512.060053][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2512.067328][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2512.074954][ C0] schedule+0x109/0x320 [ 2512.080753][ C0] schedule_timeout+0xb0/0x310 [ 2512.087160][ C0] unix_wait_for_peer+0x250/0x340 [ 2512.093844][ C0] unix_dgram_sendmsg+0x127f/0x1f80 [ 2512.100712][ C0] __sock_sendmsg+0x221/0x270 [ 2512.107063][ C0] ____sys_sendmsg+0x52a/0x7e0 [ 2512.113484][ C0] __sys_sendmmsg+0x3ab/0x730 [ 2512.119807][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 2512.126321][ C0] do_syscall_64+0xf3/0x230 [ 2512.132479][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2512.140014][ C0] INITIAL USE at: [ 2512.143899][ C0] lock_acquire+0x1ed/0x550 [ 2512.149961][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 2512.156805][ C0] input_inject_event+0xc5/0x340 [ 2512.163306][ C0] kbd_led_trigger_activate+0xb8/0x100 [ 2512.170318][ C0] led_trigger_set+0x582/0x9c0 [ 2512.176641][ C0] led_trigger_set_default+0x229/0x260 [ 2512.183656][ C0] led_classdev_register_ext+0x6e6/0x8a0 [ 2512.190851][ C0] input_leds_connect+0x489/0x630 [ 2512.197433][ C0] input_register_device+0xd3b/0x1110 [ 2512.204358][ C0] atkbd_connect+0x752/0xa00 [ 2512.210504][ C0] serio_driver_probe+0x7f/0xa0 [ 2512.216935][ C0] really_probe+0x2b8/0xad0 [ 2512.222995][ C0] __driver_probe_device+0x1a2/0x390 [ 2512.229838][ C0] driver_probe_device+0x50/0x430 [ 2512.236413][ C0] __driver_attach+0x45f/0x710 [ 2512.242727][ C0] bus_for_each_dev+0x239/0x2b0 [ 2512.249134][ C0] serio_handle_event+0x1c7/0x920 [ 2512.255710][ C0] process_scheduled_works+0xa63/0x1850 [ 2512.262816][ C0] worker_thread+0x870/0xd30 [ 2512.268968][ C0] kthread+0x2f0/0x390 [ 2512.274591][ C0] ret_from_fork+0x4b/0x80 [ 2512.280570][ C0] ret_from_fork_asm+0x1a/0x30 [ 2512.286912][ C0] } [ 2512.289428][ C0] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 2512.298465][ C0] ... acquired at: [ 2512.302264][ C0] mark_lock+0x223/0x360 [ 2512.306676][ C0] __lock_acquire+0xbf9/0x2050 [ 2512.311614][ C0] lock_acquire+0x1ed/0x550 [ 2512.316289][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 2512.321744][ C0] input_inject_event+0xc5/0x340 [ 2512.326856][ C0] kd_sound_helper+0x101/0x210 [ 2512.331785][ C0] input_handler_for_each_handle+0x103/0x1d0 [ 2512.337934][ C0] call_timer_fn+0x18e/0x650 [ 2512.342692][ C0] __run_timer_base+0x66a/0x8e0 [ 2512.347798][ C0] run_timer_softirq+0xb7/0x170 [ 2512.352827][ C0] handle_softirqs+0x2c5/0x980 [ 2512.357760][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 2512.362513][ C0] irq_exit_rcu+0x9/0x30 [ 2512.367182][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2512.372978][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2512.379127][ C0] schedule+0x109/0x320 [ 2512.383449][ C0] schedule_timeout+0xb0/0x310 [ 2512.388380][ C0] unix_wait_for_peer+0x250/0x340 [ 2512.393572][ C0] unix_dgram_sendmsg+0x127f/0x1f80 [ 2512.398939][ C0] __sock_sendmsg+0x221/0x270 [ 2512.403785][ C0] ____sys_sendmsg+0x52a/0x7e0 [ 2512.408720][ C0] __sys_sendmmsg+0x3ab/0x730 [ 2512.413565][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 2512.418583][ C0] do_syscall_64+0xf3/0x230 [ 2512.423250][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2512.429308][ C0] [ 2512.431617][ C0] [ 2512.431617][ C0] stack backtrace: [ 2512.437492][ C0] CPU: 0 UID: 0 PID: 31734 Comm: syz.7.7447 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 2512.448240][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2512.458286][ C0] Call Trace: [ 2512.461557][ C0] [ 2512.464395][ C0] dump_stack_lvl+0x241/0x360 [ 2512.469068][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2512.474275][ C0] ? __pfx__printk+0x10/0x10 [ 2512.478860][ C0] ? print_shortest_lock_dependencies+0xf2/0x160 [ 2512.485203][ C0] print_irq_inversion_bug+0x33d/0x390 [ 2512.490659][ C0] mark_lock_irq+0x80c/0xc20 [ 2512.495243][ C0] ? __pfx_mark_lock_irq+0x10/0x10 [ 2512.500354][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2512.505728][ C0] ? lockdep_lock+0x123/0x2b0 [ 2512.510407][ C0] ? save_trace+0x5a/0xb50 [ 2512.514817][ C0] mark_lock+0x223/0x360 [ 2512.519050][ C0] __lock_acquire+0xbf9/0x2050 [ 2512.523826][ C0] lock_acquire+0x1ed/0x550 [ 2512.528325][ C0] ? input_inject_event+0xc5/0x340 [ 2512.533455][ C0] ? mark_lock+0x9a/0x360 [ 2512.537774][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 2512.542810][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 2512.548093][ C0] ? input_inject_event+0xc5/0x340 [ 2512.553199][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 2512.559092][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 2512.564552][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 2512.569573][ C0] input_inject_event+0xc5/0x340 [ 2512.574776][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2512.581111][ C0] kd_sound_helper+0x101/0x210 [ 2512.585876][ C0] ? __pfx_kd_sound_helper+0x10/0x10 [ 2512.591156][ C0] input_handler_for_each_handle+0x103/0x1d0 [ 2512.597130][ C0] ? input_handler_for_each_handle+0x29/0x1d0 [ 2512.603189][ C0] call_timer_fn+0x18e/0x650 [ 2512.607774][ C0] ? call_timer_fn+0xc0/0x650 [ 2512.612448][ C0] ? __pfx_kd_nosound+0x10/0x10 [ 2512.617293][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 2512.622405][ C0] ? __pfx_kd_nosound+0x10/0x10 [ 2512.627261][ C0] ? __pfx_kd_nosound+0x10/0x10 [ 2512.632104][ C0] ? __pfx_kd_nosound+0x10/0x10 [ 2512.637033][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2512.642232][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 2512.647422][ C0] ? __pfx_kd_nosound+0x10/0x10 [ 2512.652266][ C0] __run_timer_base+0x66a/0x8e0 [ 2512.657117][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 2512.662484][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2512.668816][ C0] run_timer_softirq+0xb7/0x170 [ 2512.673662][ C0] handle_softirqs+0x2c5/0x980 [ 2512.678422][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 2512.683216][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2512.688507][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 2512.693716][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 2512.698303][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 2512.703513][ C0] irq_exit_rcu+0x9/0x30 [ 2512.707924][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2512.713556][ C0] [ 2512.716478][ C0] [ 2512.719403][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2512.725378][ C0] RIP: 0010:schedule+0x109/0x320 [ 2512.730310][ C0] Code: eb 08 48 89 ef e8 27 8f 96 f5 4c 8d bd 78 12 00 00 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 ca f5 34 f6 49 8b 3f <48> 85 ff 74 0a be 01 00 00 00 e8 d8 de cd f8 48 c7 c7 00 4a 7f 8e [ 2512.749923][ C0] RSP: 0018:ffffc90004587448 EFLAGS: 00000246 [ 2512.755992][ C0] RAX: 1ffff1100d692d8f RBX: 7fffffffffffffff RCX: 8ef1cc36e6cf3100 [ 2512.764069][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0adc40 RDI: 0000000000000000 [ 2512.772034][ C0] RBP: ffff88806b495a00 R08: ffffffff94296817 R09: 1ffffffff2852d02 [ 2512.780024][ C0] R10: dffffc0000000000 R11: fffffbfff2852d03 R12: dffffc0000000000 [ 2512.788000][ C0] R13: 1ffff920008b0e90 R14: ffffffff8bc67e60 R15: ffff88806b496c78 [ 2512.795972][ C0] ? schedule+0x90/0x320 [ 2512.800215][ C0] ? schedule+0x90/0x320 [ 2512.804448][ C0] schedule_timeout+0xb0/0x310 [ 2512.809209][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2512.814576][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2512.819765][ C0] ? prepare_to_wait_exclusive+0x84/0x230 [ 2512.825494][ C0] unix_wait_for_peer+0x250/0x340 [ 2512.830513][ C0] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 2512.836050][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2512.842110][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2512.847482][ C0] unix_dgram_sendmsg+0x127f/0x1f80 [ 2512.852680][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2512.858245][ C0] ? __import_iovec+0x3a8/0x870 [ 2512.863117][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2512.868666][ C0] __sock_sendmsg+0x221/0x270 [ 2512.873348][ C0] ____sys_sendmsg+0x52a/0x7e0 [ 2512.878112][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2512.883392][ C0] ? rcu_is_watching+0x15/0xb0 [ 2512.888150][ C0] ? __might_fault+0xaa/0x120 [ 2512.892823][ C0] __sys_sendmmsg+0x3ab/0x730 [ 2512.897496][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2512.902697][ C0] ? wake_up_q+0xdc/0x120 [ 2512.907027][ C0] ? futex_wait+0x285/0x360 [ 2512.911528][ C0] ? __pfx_futex_wait+0x10/0x10 [ 2512.916382][ C0] ? unix_dgram_connect+0xaec/0xd80 [ 2512.921574][ C0] ? do_futex+0x33b/0x560 [ 2512.925900][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2512.931889][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2512.937865][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2512.944209][ C0] ? do_syscall_64+0x100/0x230 [ 2512.948992][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 2512.953859][ C0] do_syscall_64+0xf3/0x230 [ 2512.958364][ C0] ? clear_bhb_loop+0x35/0x90 [ 2512.963036][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2512.968922][ C0] RIP: 0033:0x7fc69417e719 [ 2512.973332][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2512.992937][ C0] RSP: 002b:00007fc694fb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2513.001355][ C0] RAX: ffffffffffffffda RBX: 00007fc694335f80 RCX: 00007fc69417e719 [ 2513.009322][ C0] RDX: 0000000000000651 RSI: 0000000020000000 RDI: 0000000000000005 [ 2513.017298][ C0] RBP: 00007fc6941f132e R08: 0000000000000000 R09: 0000000000000000 [ 2513.025345][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2513.033414][ C0] R13: 0000000000000000 R14: 00007fc694335f80 R15: 00007ffff0cd5368 [ 2513.041384][ C0] [ 2513.052752][T31739] veth0_virt_wifi: entered promiscuous mode [ 2513.055586][ T11] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2513.113210][T31715] vhci_hcd: connection reset by peer [ 2513.119064][ T53] vhci_hcd: stop threads [ 2513.123373][ T53] vhci_hcd: release socket [ 2513.127860][ T53] vhci_hcd: disconnect device [ 2513.146098][T31277] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2514.572994][ T6464] vhci_hcd: vhci_device speed not set