last executing test programs: 14m26.312528994s ago: executing program 3 (id=1588): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="85000000be0000003868f8ff08000000cf494000fcffffff18120000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018620007000000000000000010000000841d67c8a1d3a03d48169b24a6ca21dac8394ea746739cfdfd4937503070065e68f3110e3e3cffa0"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006900000095000000000000005ef2f24105a3bea5c9f1a0898314537508c10788502bf81e3528de553f68e60f4347b412753fa9da95aa3b1b5ad09b4bee04682bcd556f6cf3090bb29a873d4db9309acc13c40360134a700cf9478758ac2bd7441cd53ad2fe844c95fef5d5dd2b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffe1f, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d}, 0x14}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 14m26.098366749s ago: executing program 3 (id=1591): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x47, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0xfffc, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80000000}, 0x1c) 14m24.284883422s ago: executing program 3 (id=1595): bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x10) 14m24.067687997s ago: executing program 3 (id=1598): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x40000000000025c, 0x4010) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0xa) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r9, 0x1, 0x0, @val=@iter={&(0x7f00000001c0)=@task={r1, r1, r9}, 0x10}}, 0x20) r10 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) writev(r10, &(0x7f0000002200)=[{&(0x7f0000000100)="716ddaa8f3061a7f625beb6e3a05b049c9713f5e399cdc7c0a149cf8bbbf47f8b4b7cfeda26b63bc", 0x28}], 0x1) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m20.693868112s ago: executing program 3 (id=1609): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0xa2000, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) socket$kcm(0x10, 0x2, 0x4) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x5, 0x0, @void}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/notes', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/75, 0x8e, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') rmdir(&(0x7f0000000040)='./file0\x00') r5 = socket(0x22, 0x3, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r6, 0xffffffffffffffff, 0x37, 0x4608, @void}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x1, 0x9, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x74, 0x7}}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14m16.147510937s ago: executing program 3 (id=1619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x20}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 14m15.618474937s ago: executing program 32 (id=1619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x20}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 8m45.496960266s ago: executing program 5 (id=2497): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x20000000000000) 8m41.247975404s ago: executing program 5 (id=2506): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x6, 0x4, 0x9, 0xfb, 0x8, 0x501}, 0xc) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/config\x00') preadv(r9, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x73, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 8m40.266005124s ago: executing program 5 (id=2509): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) r1 = dup2(r0, r0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f03f, 0x6e}) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x38011, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004110000fb7dbe0000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYRES16=r2], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x100}) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000004380), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000045c0)={0x0, 0x0, &(0x7f0000004580)={&(0x7f0000004440)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf251d000000"], 0x14}, 0x1, 0x0, 0x0, 0x40020}, 0x40000) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002500)='fdinfo/4\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f000008e000/0x2000)=nil, 0x2000, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="141000200e060300"/20], 0x14}}, 0x0) 8m37.505497787s ago: executing program 5 (id=2518): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f000001b180)=""/102384, 0x18ff0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x3ffffffffffff9, 0x4940) readv(r3, &(0x7f0000002140), 0x0) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r3) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x624001, 0x0) mkdirat(r7, &(0x7f0000000400)='./file0\x00', 0x100) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYBLOB=',caChe=mMap,k']) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) open(&(0x7f0000000340)='./file1\x00', 0x84001, 0x69) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x9) 8m34.973507634s ago: executing program 5 (id=2522): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_io_uring_setup(0x4dc9, &(0x7f0000000000)={0x0, 0x8bbc, 0x40, 0x3, 0x24e}, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0xffffb744, @empty}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0xffd8) r5 = socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x20, 0x8000, 0x80, 0xd, {{0x2e, 0x4, 0x2, 0x6, 0xb8, 0x66, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x16, 0x0, [{0x6, 0xd, "870e29dba693976658ba33"}, {0x5, 0x3, "8f"}]}, @cipso={0x86, 0x3f, 0x0, [{0x5, 0xd, "1353e6cdcb619ebca0a67c"}, {0x0, 0x4, "6ad7"}, {0x7, 0x4, "5a97"}, {0x2, 0xe, "9feb34ca5b8fceac46adbe62"}, {0x6, 0xb, "92ad8f615d716d5d56"}, {0x1, 0x9, "ee05b605008e48"}, {0x0, 0x2}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0xac, 0x3, 0x8, [{@broadcast, 0x9}, {@loopback, 0x4}, {@private=0xa010101, 0x3}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x16e}, {@broadcast, 0x3}]}, @generic={0x88, 0x2}, @end, @lsrr={0x83, 0xf, 0x4a, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x34}, @private=0xa010101]}, @ra={0x94, 0x4}]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x1, 0x42, 0x40, 0x2, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000002c0)="a4b6463d91", 0x1000, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000001200)=""/119, &(0x7f00000002c0), &(0x7f00000007c0), 0x7, r7}, 0x38) sendmmsg(r5, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000600)="181ba10392c68522617d", 0xa}, {&(0x7f0000001940)="0a3da193dc9f", 0x6}], 0x2}}], 0x1, 0x0) 8m34.137702312s ago: executing program 2 (id=2523): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4010) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0xa) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/14, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r8, 0x1, 0x0, @val=@iter={&(0x7f00000001c0)=@task={r1, r1, r8}, 0x10}}, 0x20) r9 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) writev(r9, &(0x7f0000002200)=[{&(0x7f0000000100)="716ddaa8f3061a7f625beb6e3a05b049c9713f5e399cdc7c0a149cf8bbbf47f8b4b7cfeda26b63bc", 0x28}], 0x1) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m31.751749212s ago: executing program 5 (id=2526): mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/notes', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r2 = socket(0x22, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x1, 0x9, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x74, 0x7}}) 8m31.744395091s ago: executing program 2 (id=2527): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x40000000000025c, 0x4010) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0xa) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r9, 0x1, 0x0, @val=@iter={&(0x7f00000001c0)=@task={r1, r1, r9}, 0x10}}, 0x20) r10 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) writev(r10, &(0x7f0000002200)=[{&(0x7f0000000100)="716ddaa8f3061a7f625beb6e3a05b049c9713f5e399cdc7c0a149cf8bbbf47f8b4b7cfeda26b63bc", 0x28}], 0x1) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m30.582489578s ago: executing program 2 (id=2529): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0xa2000, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) socket$kcm(0x10, 0x2, 0x4) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x5, 0x0, @void}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/notes', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/75, 0x8e, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') rmdir(&(0x7f0000000040)='./file0\x00') socket(0x22, 0x3, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r5, 0xffffffffffffffff, 0x37, 0x4608, @void}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl2\x00', r7, 0x4, 0x4, 0x1, 0x9, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x74, 0x7}}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 8m28.947603886s ago: executing program 2 (id=2533): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x6, 0x4, 0x9, 0xfb, 0x8, 0x501}, 0xc) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$sock_cred(r9, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/config\x00') preadv(r10, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x73, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) 8m27.59865958s ago: executing program 2 (id=2534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) 8m27.232698791s ago: executing program 2 (id=2536): socket(0x15, 0x803, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, &(0x7f0000001440)=[{0x0}], 0x1, 0x19, 0x0) recvmsg$can_j1939(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20040040) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r6, 0x6, 0x5, 0x0, &(0x7f0000000280)) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @local}, 0x2}}, 0x26) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x2c}}, 0x40020) 8m15.593876707s ago: executing program 33 (id=2526): mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/notes', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r2 = socket(0x22, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x1, 0x9, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x74, 0x7}}) 8m11.832739681s ago: executing program 34 (id=2536): socket(0x15, 0x803, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, &(0x7f0000001440)=[{0x0}], 0x1, 0x19, 0x0) recvmsg$can_j1939(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20040040) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r6, 0x6, 0x5, 0x0, &(0x7f0000000280)) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @local}, 0x2}}, 0x26) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x2c}}, 0x40020) 7m8.065546588s ago: executing program 4 (id=2708): r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) setreuid(0x0, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45}}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000040), 0x12) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) timer_create(0x8, 0x0, &(0x7f0000000280)) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) recvmmsg(r3, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00b7000000000000d0ad1a800800038004000680"], 0x2c}}, 0x0) 7m7.406693852s ago: executing program 4 (id=2710): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4010) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0xa) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/14, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r8, 0x1, 0x0, @val=@iter={&(0x7f00000001c0)=@task={r1, r1, r8}, 0x10}}, 0x20) r9 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) writev(r9, &(0x7f0000002200)=[{&(0x7f0000000100)="716ddaa8f3061a7f625beb6e3a05b049c9713f5e399cdc7c0a149cf8bbbf47f8b4b7cfeda26b63bc", 0x28}], 0x1) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m5.803764427s ago: executing program 4 (id=2713): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_io_uring_setup(0x4dc9, &(0x7f0000000000)={0x0, 0x8bbc, 0x40, 0x3, 0x24e}, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xffffb744, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffd8) socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x20, 0x8000, 0x80, 0xd, {{0x2f, 0x4, 0x2, 0x6, 0xbc, 0x66, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x1c, 0x0, [{0x6, 0x11, "870e29dba693976658ba333ac6f4ba"}, {0x5, 0x3, "8f"}, {0x6, 0x2}]}, @cipso={0x86, 0x4d, 0x0, [{0x5, 0xd, "1353e6cdcb619ebca0a67c"}, {0x1, 0x11, "ccae6dee917070957503fbf974c6de"}, {0x0, 0x4, "6ad7"}, {0x7, 0x4, "5a97"}, {0x2, 0xe, "9feb34ca5b8fceac46adbe62"}, {0x6, 0xb, "92ad8f615d716d5d56"}, {0x1, 0x6, "ee05b605"}, {0x0, 0x2}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0xac, 0x3, 0x8, [{@broadcast, 0x9}, {@loopback, 0x4}, {@private=0xa010101, 0x3}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x16e}, {@broadcast, 0x3}]}, @generic={0x88, 0x2}, @end, @ra={0x94, 0x4}]}}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x1, 0x42, 0x40, 0x2, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000002c0)="a4b6463d91", 0x1000, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000001200)=""/119, &(0x7f00000002c0), &(0x7f00000007c0), 0x7, r5}, 0x38) 7m4.325973963s ago: executing program 4 (id=2719): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x4, {0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0xa8, 0x200000006bf5, 0xffffffffffffff7e, 0x6, 0xf, 0xfffffffd, 0x8000, 0x0, 0x0, r2, 0xce}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r3, 0x0, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x20) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10) r6 = io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0xd4b5, 0x0, 0x3}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000000001"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x15, 0x20000002, r7) bind$alg(r4, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000007580)="731623f1f50ef2bdf6ceffd5e4ebe4c66927d63b970ef26440cf433c53b6bc5d", 0x20) syz_clone(0xc0080, &(0x7f0000000180)="961bca38406b0973f5d039043df2fed8a61b5fa798fbf5ecb610a23a705bea38f87ec5f6da11d95f0dcb8a454cc39a6823392219bd64f66aedebdd49dc7bfa41372f9d1e63f670ae29814e2b7cf746e63c87d0dbb15188dcb9044a768aba885243f65b1e86b7714efc7d3e6de119f46e9a", 0x71, &(0x7f0000000300), &(0x7f00000003c0), &(0x7f0000000400)="8203966738b007a400fc881db94add2206444647eb24462064a46ed8f4eed42c75dd081cbd8605dcbcb9af7020b114534338f2b9f35ab8317af8a49bc7d35ff2db416c67e1926d2a29b4cb8f9c69597a23bda54d204394519b6b5cd483a31ba116bfc59689e59415593fed1b607aa06016d0a9186e00c72cd5c1ac5a19ebd768d726874f6e4f6c450ddfd5bc1d47720c4047d30d9ab4a27d2d07e476fe021b7ac8a683c73c9d1b") r8 = accept$alg(r4, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/25, 0x19}, {0x0}], 0x2}}], 0x2, 0x80002043, 0x0) 6m59.216691056s ago: executing program 4 (id=2731): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@d, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xe1}, {0x5, 0x1, 0xb, 0x1, 0xa, 0xfff8}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, '.'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="c0000000030801010000000000000000020000050500030050000000050003002100000006000240892f00000900010073797a3100000000340004"], 0xc0}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000040) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x35, 0x33, @action={{{}, {}, @device_b}, @mesh_hwmp_psel={0xd, 0x1, {@void, @void, @void, @val={0x7e, 0x15, {{0x1, 0x5}, 0x0, 0xaf, @broadcast, 0x4, 0x3ff}}}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6m56.191335886s ago: executing program 4 (id=2739): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r0, 0x114, 0x271f, 0x0, 0x20000008) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x20042) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="19000040000000007ae6354a0400000063000600000000000100200000000000c91a56324da228d17cc877d2443b1510b1832ddb5ace8b397c416a2da9a21b9c66a9fa51bb37410a353296fda573911f9251fe09971e765d651dddc916f3be46ce416d0d9b46e00be1a05b18f3670b3b85f17920be9bf4440c85890ac3289342"], &(0x7f0000000d40)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x80fe, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d8c, 0x0, 0x1, 0x250}, &(0x7f00000000c0), 0x0) 6m54.597712989s ago: executing program 35 (id=2739): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r0, 0x114, 0x271f, 0x0, 0x20000008) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x20042) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="19000040000000007ae6354a0400000063000600000000000100200000000000c91a56324da228d17cc877d2443b1510b1832ddb5ace8b397c416a2da9a21b9c66a9fa51bb37410a353296fda573911f9251fe09971e765d651dddc916f3be46ce416d0d9b46e00be1a05b18f3670b3b85f17920be9bf4440c85890ac3289342"], &(0x7f0000000d40)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x80fe, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d8c, 0x0, 0x1, 0x250}, &(0x7f00000000c0), 0x0) 4m7.713919783s ago: executing program 7 (id=3108): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x8, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x1, 0x0) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r5, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) listen(r6, 0x9) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000280)=@netrom={'nr', 0x0}, 0x10) socket$isdn_base(0x22, 0x3, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\\\xa5}(-'}, {0x20, '%.\x9b\\$&\xc7^'}, {0x20, '^&'}, {0x20, '@\'.'}], 0xa, "a1a5f9"}, 0x28) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xe737}}, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 4m5.58674974s ago: executing program 7 (id=3110): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r0, &(0x7f0000001040)="0040ed", 0x3, 0x6000c804, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f00000001c0), &(0x7f0000000580), &(0x7f00000005c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="00000080", @ANYRES16=r2, @ANYBLOB="000300000000030000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0c009900030000003500000030005080110001005a080039084eeef16f162471f4000000050009000100000005000200000000000800030005ac0f00"], 0x58}, 0x1, 0x0, 0x0, 0x228c755bd72ca5cf}, 0x0) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) syz_clone(0x800000, &(0x7f0000000240)="5c7bcd6022c6148494abbb5a17e377fe5923ac8cd4efcfe581d5fb741a07c1f52b41a78a0bb7053c399bec6cf8613ed0134ebaf5c6f70212e14a195372ec39317cd282450728f7596f89c7c98c2015b13f453ae16f6b68d81ac72e89be140593be0ddd1bd956aec3ed0319fd39a5390202005826188eb042750d15f03ef649e60b63e46b3c95605d9732b44373ce15fd8c92f4315245b145a26800f8582d78ac851d91ef7d453fd4b878bd0ff146", 0xae, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000440)="310e11c9b17396cf8c8f97bb50c089552c172a9cd6cc6a035336cbb9f5e066707857ef639dedd15c2291bc46428872c849f6c0d38f9d03b632420ab45ce58c1094316de78e1f3595d65bd37a99bdb360de7fd39359db3e13eb5c0389776ba710dbb64228f012603d89d5b8086a15b3c10c8d990a762f1a2a4f1c9acbd53295b7f99d75b253dcc9afbbce48024948ae53ed00acba8225d95652adb52e3f8bc93519eb192a7df52e47e9e8ab6ab63a14f7e7a6d5e3d31e2638f7b9d01f6643bbf2b5df583261a9938e08d5b6abab61f661dc00f185f48863e83f8d1ceb6d651850d2e2ab463a8cfe524d9eec81df3dd22f") 4m4.68539585s ago: executing program 7 (id=3114): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0xffffffff, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)='D', 0x1, 0x4008080, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x8) shutdown(r2, 0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000440)={0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000007100000000809a8059d66d22225e364b498725d90b56e8196a7c2044cdad8b18904288f9"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000040)="4aa18c382640a045dfb4f1d83a"}, 0x20) ioctl$KDGKBMODE(r0, 0x4bfa, &(0x7f0000000080)) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_io_uring_setup(0x73d, &(0x7f00000000c0), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000040)) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x0, {0x0, r9}}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r10 = syz_open_dev$audion(&(0x7f00000000c0), 0xe60, 0x604180) bind$802154_dgram(r10, &(0x7f0000000300)={0x24, @none={0x0, 0x1}}, 0x14) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 4m2.310019219s ago: executing program 7 (id=3119): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) landlock_restrict_self(r1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) 4m0.334373983s ago: executing program 7 (id=3123): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r0, &(0x7f0000001040)="0040ed", 0x3, 0x6000c804, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f00000001c0), &(0x7f0000000580), &(0x7f00000005c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) syz_clone(0x800000, &(0x7f0000000240)="5c7bcd6022c6148494abbb5a17e377fe5923ac8cd4efcfe581d5fb741a07c1f52b41a78a0bb7053c399bec6cf8613ed0134ebaf5c6f70212e14a195372ec39317cd282450728f7596f89c7c98c2015b13f453ae16f6b68d81ac72e89be140593be0ddd1bd956aec3ed0319fd39a5390202005826188eb042750d15f03ef649e60b63e46b3c95605d9732b44373ce15fd8c92f4315245b145a26800f8582d78ac851d91ef7d453fd4b878bd0ff146", 0xae, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000440)="310e11c9b17396cf8c8f97bb50c089552c172a9cd6cc6a035336cbb9f5e066707857ef639dedd15c2291bc46428872c849f6c0d38f9d03b632420ab45ce58c1094316de78e1f3595d65bd37a99bdb360de7fd39359db3e13eb5c0389776ba710dbb64228f012603d89d5b8086a15b3c10c8d990a762f1a2a4f1c9acbd53295b7f99d75b253dcc9afbbce48024948ae53ed00acba8225d95652adb52e3f8bc93519eb192a7df52e47e9e8ab6ab63a14f7e7a6d5e3d31e2638f7b9d01f6643bbf2b5df583261a9938e08d5b6abab61f661dc00f185f48863e83f8d1ceb6d651850d2e2ab463a8cfe524d9eec81df3dd22f") 3m59.069780451s ago: executing program 7 (id=3126): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="00040c000000070001c722c37d2558"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/netlink\x00') read$char_usb(r1, &(0x7f0000000140)=""/189, 0xfffffecd) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x2006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00') shmctl$IPC_RMID(0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x16f}, 0x8) close(r7) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffd8) socket$nl_generic(0x10, 0x3, 0x10) 3m43.989136772s ago: executing program 36 (id=3126): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="00040c000000070001c722c37d2558"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/netlink\x00') read$char_usb(r1, &(0x7f0000000140)=""/189, 0xfffffecd) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x2006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00') shmctl$IPC_RMID(0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x16f}, 0x8) close(r7) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffd8) socket$nl_generic(0x10, 0x3, 0x10) 8.908146659s ago: executing program 0 (id=3692): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r3 = syz_open_dev$video(&(0x7f0000000000), 0x2fed, 0x0) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000580)={0xc4, "c6efcee100000600000000000000fbe071aae79af601000000000c00"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_usb_connect$cdc_ncm(0x4, 0xc7, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2101c84, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00', 0x162) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.81669251s ago: executing program 1 (id=3693): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/pm_wakeup_irq', 0x0, 0x0) syz_clone3(&(0x7f0000000580)={0x2000c1000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 7.828364923s ago: executing program 1 (id=3695): socket$kcm(0x10, 0xd, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002f40), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="393d867e6f01a357df252100000009001f0070687933000000000a0001007770616e335fd2"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000880) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPOIB_PKEY={0x6, 0x1, 0x9}, @IFLA_IPOIB_MODE={0x6}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "fdb87942485c70d0", "e9f894f1bea78dae88e137bbe22cb78d6c1bd363aba53c9e1899fae620c670d9", '\x00\x00\x00T', "00000000000cd800"}, 0x38) sendto$inet6(r0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) 5.319643043s ago: executing program 9 (id=3701): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002c00010324bd7002f9dbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002c00010025bd7000fcdbdf2504"], 0x1c}, 0x1, 0x0, 0x0, 0x4000c}, 0x20000000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000280)={r6, 0x0, 0x9, 0x8, 0x0, [0x0], [0x4, 0x0, 0x0, 0xbd], [0x0, 0xb, 0x100, 0xd], [0x2, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000000)={r7, 0x80000}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) 4.082047191s ago: executing program 1 (id=3702): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a) sendmmsg$sock(r2, &(0x7f00000212c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="15df", 0x2}], 0x1}}], 0x1, 0x40001) splice(r2, 0x0, r1, 0x0, 0x4ff9c, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x10, 0x7800, 0x230b, 0x3, {{0x25, 0x4, 0x0, 0x1, 0x94, 0x65, 0x0, 0x2, 0x0, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0x2c, 0x30, 0x3, 0x8, [{@multicast2, 0x7ff}, {@remote, 0x81}, {@multicast1, 0x6e4b}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x25}, {@rand_addr=0x64010102, 0xefed}]}, @rr={0x7, 0x17, 0x97, [@empty, @multicast1, @private=0xa010100, @private=0xa010100, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0xa4, 0x3, 0xd, [{@rand_addr=0x64010101, 0x8}, {@empty, 0x1}, {@empty, 0x9d4}]}, @generic={0x83, 0x2}, @rr={0x7, 0xf, 0x5, [@loopback, @local, @multicast2]}, @ra={0x94, 0x4}, @generic={0x82, 0x9, "913cc7e4725961"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', r3, 0x29, 0x0, 0x28, 0xb, 0x12, @local, @private2={0xfc, 0x2, '\x00', 0x3}, 0x48, 0x20, 0x9, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000000000006300000005000000950074000100000000000000ec92760fb8de5b4d46a8640cfee78c2116c26ca8ff8e97b4c3be359872f696d7ba4cb9e09b9c6184e9c9dc65a50868caa486f3e1c4c815e46a8532c05beef3ba294200cac85c10756cf9592c"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.402065224s ago: executing program 0 (id=3703): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="24000a0018000110000000000000000002180000ff0000060000000008000100ac1414"], 0x24}}, 0x0) 3.075089648s ago: executing program 6 (id=3705): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/pm_wakeup_irq', 0x0, 0x0) syz_clone3(&(0x7f0000000580)={0x2000c1000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 3.060333983s ago: executing program 0 (id=3706): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3c}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3.008058186s ago: executing program 1 (id=3707): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0xffffffff, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)='D', 0x1, 0x4008080, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x8) shutdown(r2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000440)={0x1}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000040)="4aa18c382640a045dfb4f1d83a"}, 0x20) ioctl$KDGKBMODE(r0, 0x4bfa, &(0x7f0000000080)) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_io_uring_setup(0x73d, &(0x7f00000000c0), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000040)) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x0, {0x0, r9}}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r10 = syz_open_dev$audion(&(0x7f00000000c0), 0xe60, 0x604180) bind$802154_dgram(r10, &(0x7f0000000300)={0x24, @none={0x0, 0x1}}, 0x14) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 2.893355156s ago: executing program 0 (id=3709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006"], 0x34}}, 0x0) 2.787698046s ago: executing program 8 (id=3710): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', 0x0, &(0x7f00000001c0)='autofs\x00', 0x26c02, &(0x7f0000001540)='\r\x87\x17^\x981\xd5\x14\xe2\x81\xa6\xcd\t\xa5\xbasG\x88\x7f]\x03\xf3\xd5t\x97\x9f\xee\"\xebU\xccM\x02\x17\x0f[\x9c\x9e\xa6\xd2\xe4(\xea\x7f\xe4\x90K\xcb\xb5;f\x02}\x147\x04=\xe50\x8d;\x90!\x01,\xdb,\xb9\x8e\t\x13\x1eh\xbc^<\xd2\x809G\xe6H\xbb&^\\\x9c\xady\xd9\xb5\xa3\x16\xd0\xdf\x1a\xaa\xfcHz\x89\x19\xe1\xe6+\xf6\xc3\xad\x80\x98\xc2\x10\x91\xec\xf6\x93=\xbe\x10\xfc`\x86\xa7\xe6\xae\x00*R\x92\x05\xf6\x80u\xf9\xb7S{\xd6\x99\x9a\xf3\xcc\x04o\xdd\x91 \x92;\x87\xfb\x82c>\x82VR8\xe5\x0f\xeb\xcdJz\f\xf5.\xd7!\xa1\xfe\xc8\xf0\xb5\\\xc2\xc7\xc7\xaa\xd9:\xa3+\x12\x9f\xfc\xf6@},`=\xea\x91\fJ\xe4\rC\xa9\xe0\x8b%\x9f\'\xbdX\xbfS\x00\x8c\x84\x10\xcf\xf0\xd7\xe0\xf9\xf8E\xa3?\x17\\\x9e\n\xa1h!\x9e\xd8\xe8\xa5\xc5\xbf_\xa7\xc9\x91U\x86=\xa5\xf7g~\xaa\xc8N\"^\x8e%') socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) truncate(&(0x7f0000000000)='./file1\x00', 0x5e02) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x4a, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r5, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 2.786821913s ago: executing program 1 (id=3711): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r3, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) listen(r4, 0x9) socket$isdn_base(0x22, 0x3, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xe737}}, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 2.739360839s ago: executing program 6 (id=3712): io_setup(0xfb, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="13", 0x1, 0x4}]) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000180)={0x1, "0f034b40caa7607e8fcaffb34f6f3ff4a5ce3f0c866b0db3dac7105d9348b682", 0x800, 0x7fffffff, 0xc8, 0x1, 0x4}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='affs\x00', 0x8090, 0x0) (async) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='affs\x00', 0x8090, 0x0) 2.418485341s ago: executing program 0 (id=3713): msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000080)=""/77) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockname$inet6(r0, 0x0, &(0x7f0000000100)) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000007000a74000000060a0b04000000000000000002000000480004802c2001800b000100736f636b656e6f0000000280080002400000040b0800013e00000a03bef5605e28e100891800018008000100647570000c000280080001400000000c0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x9c}}, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x7, 0xa, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="00000000000000002c000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) io_setup(0x4082, &(0x7f0000000380)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r6 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000200)={0x0, r7}, 0x0) (async) syz_io_uring_setup(0x1002945, &(0x7f0000001400)={0x0, 0x0, 0x10}, &(0x7f0000001480), &(0x7f00000014c0)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x89, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) 2.34815297s ago: executing program 9 (id=3714): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x2, &(0x7f00000003c0)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x64}], &(0x7f0000000200)='GPL\x00', 0x8, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.747883472s ago: executing program 1 (id=3715): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="0001000000000000") close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) 1.633793965s ago: executing program 6 (id=3716): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) flock(r2, 0x5) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r3, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x2b}], 0x1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x70) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=ANY=[@ANYRESOCT=r2], 0x18}], 0x1}, 0x400000000000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000393000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x28, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xf000, 0xeeee1000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c0f000000c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576648eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af095a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0714b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb6ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b40867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d0400000000000000a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f710100ab8d0b545c334014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b57fe072d3218983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) ioctl$KVM_GET_NESTED_STATE(r8, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='mpol=interleave=static,mpol=default']) r9 = fsmount(r0, 0x0, 0x0) accept4(r5, &(0x7f0000000100)=@generic, &(0x7f0000000180)=0x80, 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, 0x0, 0x0) set_tid_address(&(0x7f0000000000)) 1.606616316s ago: executing program 8 (id=3717): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x268680) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x11cac6) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) readv(r2, &(0x7f0000000340)=[{&(0x7f0000001040)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, "4a349800000000806913220909000909000a48"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x7e) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000002880)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00ff687372001400028008000200"/28, @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x0) 1.496110014s ago: executing program 9 (id=3718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000000)={&(0x7f0000000300)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) 1.350497507s ago: executing program 9 (id=3719): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, 0x0) 1.33990441s ago: executing program 8 (id=3720): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="316f825a3d29f96a392ea917017b4cd300000000bee700d6dd1fb41a20baf7f7343067fd40cdd4f16742e94b000000005d0200b7f3028100ae8180db94b9de7456ae62b0e61861f615947de10ae3c4fa199fb5fe7766a0842912179154a96fa88e161d861e77a486e10d1d1d0b90c8997e6917226fe4bb5d77e85706336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d186ac9b2382a75ac68920ca3d542aece1ba7920a8f39b270458224e74a22fa1db2f647b55a4f113a476c5902ef", 0xd1}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2", 0x76}, {&(0x7f0000000800)="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", 0x1bb}, {&(0x7f0000000040)="b22377eea7b6d3460287c9966016342f6d666b9730771e432fbf568ca53a225f9ddd45d390249edb60cc91574b4d144c73e49ead3917f8", 0x37}], 0x4}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000100)='#\x00N', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="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", 0x11b}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.27607599s ago: executing program 6 (id=3721): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {0x7, 0x0}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.164292891s ago: executing program 8 (id=3722): syz_emit_ethernet(0x8e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x58, 0x6, 0x1, @remote, @local, {[], {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x40, {[@mss={0x1e, 0x4, 0xf05a}, @mptcp=@generic={0x47, 0xd, "f2fe1caea803634b3f89fb"}, @sack={0x5, 0x12, [0x40, 0x0, 0x0, 0x200]}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "7224407c80fe8a3616b4bf3400006cc8"}, @eol, @generic={0x5, 0x7, "604852f17f"}]}}}}}}}}, 0x0) 1.137930872s ago: executing program 6 (id=3723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006"], 0x34}}, 0x0) 1.091937438s ago: executing program 9 (id=3724): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000203050000000000000000000a000000000000000100000f9693"], 0x1c}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0) rmdir(0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='\x00'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x51, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x9c) r7 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r7, 0x1dd7, 0x1, 0x0, 0x0, 0x0) 997.00502ms ago: executing program 8 (id=3725): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="1200"/12, @ANYBLOB="043af7c9b1e061bc8be5be14611122995a441399f0a3db50534b6de214be34e3d0e60580b50b1434c22228cd796f7641b82e777768aec3f8dc23c4f41384e4ee1f20c1289c4c04724990607e6b546019942affa7"], 0x20) listen(0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$ndb(0x0, 0x0, 0x0) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB='#ayz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0xffffffffffffffff, 0x1}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 939.169688ms ago: executing program 6 (id=3726): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x1, 0x0) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) listen(r4, 0x9) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000280)=@netrom={'nr', 0x0}, 0x10) socket$isdn_base(0x22, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\\\xa5}(-'}, {0x20, '%.\x9b\\$&\xc7^'}, {0x20, '^&'}, {0x20, '@\'.'}], 0xa, "a1a5f9"}, 0x28) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 115.104759ms ago: executing program 8 (id=3727): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', 0x0, &(0x7f00000001c0)='autofs\x00', 0x26c02, &(0x7f0000001540)='\r\x87\x17^\x981\xd5\x14\xe2\x81\xa6\xcd\t\xa5\xbasG\x88\x7f]\x03\xf3\xd5t\x97\x9f\xee\"\xebU\xccM\x02\x17\x0f[\x9c\x9e\xa6\xd2\xe4(\xea\x7f\xe4\x90K\xcb\xb5;f\x02}\x147\x04=\xe50\x8d;\x90!\x01,\xdb,\xb9\x8e\t\x13\x1eh\xbc^<\xd2\x809G\xe6H\xbb&^\\\x9c\xady\xd9\xb5\xa3\x16\xd0\xdf\x1a\xaa\xfcHz\x89\x19\xe1\xe6+\xf6\xc3\xad\x80\x98\xc2\x10\x91\xec\xf6\x93=\xbe\x10\xfc`\x86\xa7\xe6\xae\x00*R\x92\x05\xf6\x80u\xf9\xb7S{\xd6\x99\x9a\xf3\xcc\x04o\xdd\x91 \x92;\x87\xfb\x82c>\x82VR8\xe5\x0f\xeb\xcdJz\f\xf5.\xd7!\xa1\xfe\xc8\xf0\xb5\\\xc2\xc7\xc7\xaa\xd9:\xa3+\x12\x9f\xfc\xf6@},`=\xea\x91\fJ\xe4\rC\xa9\xe0\x8b%\x9f\'\xbdX\xbfS\x00\x8c\x84\x10\xcf\xf0\xd7\xe0\xf9\xf8E\xa3?\x17\\\x9e\n\xa1h!\x9e\xd8\xe8\xa5\xc5\xbf_\xa7\xc9\x91U\x86=\xa5\xf7g~\xaa\xc8N\"^\x8e%') socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) truncate(&(0x7f0000000000)='./file1\x00', 0x5e02) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x4a, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r5, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 112.3394ms ago: executing program 9 (id=3728): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x4b6a, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000080)=""/48, &(0x7f0000000240)=0x30) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x200, 0x4, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x6000100}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) set_mempolicy(0x4005, &(0x7f0000000000)=0x80000084, 0x6) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000b000033d47cd31c0000000000000000000063011800000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYRES32=r7, @ANYRES16=r1, @ANYBLOB="b5bece410faf327931da9f89d07b092916446a9d77dd47c76e66493178f6c55e8a33a053eae10a5f30e6fe80e697f026eed92744a873c3ee51"], 0x44}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket$inet_smc(0x2b, 0x1, 0x0) set_mempolicy_home_node(&(0x7f00001c6000/0x3000)=nil, 0x3000, 0x3, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff030000652608b68ea1c9dd21b9294fdbb67af9eeea690b6190464624d7376f4f7b8bd0716bc58ea3000800000000000090e695a500118d766e529ccc221559d81195b0e1e7091555dc981d04f3ccf829d06ec0034628f5", @ANYRES16=r9, @ANYBLOB="000227bd7000fddbdf252e0000000600060003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40094}, 0x4000000) fremovexattr(r4, &(0x7f00000002c0)=@known='trusted.overlay.opaque\x00') setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x6, @initdev={0xac, 0x1e, 0x9, 0x0}, 0x4e24, 0x0, 'dh\x00', 0xd, 0x5, 0x800030}, 0x2c) 0s ago: executing program 0 (id=3729): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000d00)={'#! ', './file0', [{0x20, ','}, {0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^\xd9\x15\xdfn\x00\x00\xac\xca\'\xef\xb0*\x13j=\xda\xfd$p\xa5\xda\x94<\x15\xdaY\x1cD\xf6\xf3\x98\xc6\x9e\x88\x9c\xe4\r9!\a\x16\xa9\b\x00\x00\x00\x00\x00\x00\xbe\xed\x00\x00\x00M*\xc1}\x11@\xa1W\xa6\x8e&\x97\x8c\xa2\xd3*d\x00\x00\x00\x00\x00\x00\x00\x00\x007\x00\x00\x00\xa2\xfd\'\xaen\x90\rzt\x85\x9a0?\x16\"\x99e\xea\r:\xa9J\xa3\xd7\xc6\x8aB\xc4\xe4s-\xfd\xe4\x18\x00\xdfo\xbf\xc3\x80v\x16\xa2UDL\x04\xdb\xe9\xc1`\v\xb1X\xd6\x89\xf7\x89Q\xc1jr\xcd\f\xba\xf5\x9a\x1dP\x99\x12=\xd4\xa4\x99h\x03;\xd8\xf8\n\xc6\x00'/189}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xcdr\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\x1bQMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0h\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqj\x130\x0e\xe4\x86\xf0\x1c\v\x1b3\xb6\xd4%1\x16=]\x91\xa0\xfd\x1a@\x8d\x16\xa6\xa6\xc0_O\"^\xb5:?T\x96\x00\xd6\x1fC6$)\x9c\xdf\xf7\x0e8q:[\x89\xf5\xde\x82\x11\xa1\xed\x88\xb7\x84\xdc\xd7;\xcb\x1fn1\xf8\xb3\xfb{\x106a\xde\xe1\x94\xfc\x1a\x1d\xffP\xd0KKv.\x1a\xa2\x1f\n\xc6\x97\x99\xd0.\x93i\xfaCF|-\xe1Pp0t\x9fM\xa5Zr\xce\xcdjO\x9c\xaa\xe1\xa9\'\npuG\x15B\xdd\x90\x156\x14D\n\x9a\xda\xb5\x8aAu\xd6\xf9\f\xcav\xae\xa8\x9a\xcdj\xcd\x8f\xec\x89\xcf>\x99\f/\xe3\xe7\xf6\xfc\x99\xad\x8e\xd3[\xe3\x9e'}]}, 0x4af) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}, {0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r3 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) fallocate(r3, 0x0, 0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x1, 0x2, 0x0, 0x6, 0x402, 0x8}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b32, &(0x7f0000000040)) kernel console output (not intermixed with test programs): rings: Mfr=0, Product=0, SerialNumber=0 [ 1208.768596][ T5909] usb 9-1: config 0 descriptor?? [ 1208.886523][T16767] hsr_slave_0: entered promiscuous mode [ 1209.375526][T16767] hsr_slave_1: entered promiscuous mode [ 1209.944149][ T5909] usbhid 9-1:0.0: can't add hid device: -71 [ 1210.210584][ T5909] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1210.226253][T16767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1210.233851][T16767] Cannot create hsr debugfs directory [ 1210.286268][ T5909] usb 9-1: USB disconnect, device number 4 [ 1210.706549][T16984] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2924'. [ 1210.716617][T16984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 1210.756012][ T3075] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1210.916869][ T3075] usb 7-1: Using ep0 maxpacket: 32 [ 1210.996375][ T3075] usb 7-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1211.176208][T16982] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2925'. [ 1211.206164][ T3075] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.220266][ T3075] usb 7-1: Product: syz [ 1211.224536][ T3075] usb 7-1: Manufacturer: syz [ 1211.230763][ T3075] usb 7-1: SerialNumber: syz [ 1211.258934][ T3075] usb 7-1: config 0 descriptor?? [ 1212.284643][T17001] hsr0: entered promiscuous mode [ 1212.474158][ T3075] (unnamed net_device) (uninitialized): Assigned a random MAC address: 6a:9c:15:2c:00:49 [ 1212.560804][T17005] fuse: Bad value for 'rootmode' [ 1213.127924][T17001] hsr_slave_0: left promiscuous mode [ 1213.172252][T17001] hsr_slave_1: left promiscuous mode [ 1213.280501][T17001] hsr0 (unregistering): left promiscuous mode [ 1213.317124][ T3075] rtl8150 7-1:0.0: eth10: rtl8150 is detected [ 1213.331476][ T3075] usb 7-1: USB disconnect, device number 10 [ 1213.454035][T17023] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2931'. [ 1213.464007][T17023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'. [ 1213.686629][T17027] ieee802154 phy0 wpan0: encryption failed: -22 [ 1213.843319][T16767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1214.318011][T16767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1214.599362][T16767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1214.659596][T16767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1214.854244][T16767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.896489][T16767] 8021q: adding VLAN 0 to HW filter on device team0 [ 1214.922270][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.929468][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1214.953264][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.960460][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.005584][ T974] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1215.196820][ T974] usb 9-1: Using ep0 maxpacket: 8 [ 1215.213847][ T974] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1215.248514][ T974] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 1215.273006][ T974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.299765][ T974] usb 9-1: config 0 descriptor?? [ 1215.508276][T16767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1215.753302][T16767] veth0_vlan: entered promiscuous mode [ 1216.000050][T17046] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2937'. [ 1216.041317][T17046] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2937'. [ 1216.045630][T17033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.195091][T16767] veth1_vlan: entered promiscuous mode [ 1216.258477][T16767] veth0_macvtap: entered promiscuous mode [ 1216.273993][T16767] veth1_macvtap: entered promiscuous mode [ 1216.279968][T17033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1216.366443][T16767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.378501][ T974] corsair-psu 0003:1B1C:1C0D.000C: unknown main item tag 0x0 [ 1216.387242][T16767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.403197][T16767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.416481][T16767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.416728][ T974] corsair-psu 0003:1B1C:1C0D.000C: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.8-1/input0 [ 1216.444495][T16767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.475585][T16767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.505831][T16767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.525471][T16767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.546107][T16767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.547014][ T974] corsair-psu 0003:1B1C:1C0D.000C: unable to initialize device (-38) [ 1216.607403][ T974] corsair-psu 0003:1B1C:1C0D.000C: probe with driver corsair-psu failed with error -38 [ 1216.687428][ T974] usb 9-1: USB disconnect, device number 5 [ 1216.768336][T16767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.804019][T16767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.814568][T16767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.826082][T16767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1216.852777][T16767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.533923][T16767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.562102][T16767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.605884][T16767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.625472][T16767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.645789][T16767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.656748][T16767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.675527][T16767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.965516][T16767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.982323][T16767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.016584][T16767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.065435][T16767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.313278][T16767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1218.389554][T16767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.467324][T16767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.503079][T16767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.529450][T17063] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2941'. [ 1218.536305][T16767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.557924][T17063] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2941'. [ 1218.735780][ T8] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1218.869495][T17070] ieee802154 phy0 wpan0: encryption failed: -22 [ 1218.959611][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.985496][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.006425][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1219.029061][ T8] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1219.057300][ T8494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.058105][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.089111][ T8494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.106657][ T8] usb 2-1: Product: syz [ 1219.110921][ T8] usb 2-1: Manufacturer: syz [ 1219.158950][ T8] usb 2-1: SerialNumber: syz [ 1219.181087][T17082] fuse: Bad value for 'rootmode' [ 1219.186454][ T8] usb 2-1: config 0 descriptor?? [ 1220.661465][ T8] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4a:5b:46:bc:06:19 [ 1220.730799][ T8] rtl8150 2-1:0.0: eth9: rtl8150 is detected [ 1220.956651][ T8] usb 2-1: USB disconnect, device number 59 [ 1221.080261][T17109] netlink: 'syz.0.2950': attribute type 1 has an invalid length. [ 1221.565642][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2950'. [ 1222.818589][T17133] netlink: 'syz.8.2953': attribute type 1 has an invalid length. [ 1222.976267][T17133] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1224.874812][T17167] overlayfs: workdir and upperdir must be separate subtrees [ 1224.984716][T17169] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2960'. [ 1225.114620][T17169] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2960'. [ 1225.170665][T17170] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2959'. [ 1225.181759][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2959'. [ 1225.918041][ T3075] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1226.005995][T17183] hsr0: entered promiscuous mode [ 1226.046956][T17183] hsr_slave_0: left promiscuous mode [ 1226.095026][ T3075] usb 8-1: Using ep0 maxpacket: 32 [ 1226.112855][T17186] fuse: Bad value for 'rootmode' [ 1226.203915][T17183] hsr_slave_1: left promiscuous mode [ 1226.217308][ T3075] usb 8-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1226.244925][ T3075] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.293767][ T3075] usb 8-1: Product: syz [ 1226.306990][ T3075] usb 8-1: Manufacturer: syz [ 1226.311633][ T3075] usb 8-1: SerialNumber: syz [ 1226.755635][ T3075] usb 8-1: config 0 descriptor?? [ 1227.300922][T17183] hsr0 (unregistering): left promiscuous mode [ 1228.187153][ T3075] (unnamed net_device) (uninitialized): Assigned a random MAC address: 86:f9:bb:1e:4b:c1 [ 1228.238333][ T3075] rtl8150 8-1:0.0: eth9: rtl8150 is detected [ 1228.271790][ T3075] usb 8-1: USB disconnect, device number 6 [ 1229.507916][T17220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2967'. [ 1229.569708][T17220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'. [ 1229.801702][T17227] fuse: Bad value for 'fd' [ 1231.635046][T17242] trusted_key: syz.8.2974 sent an empty control message without MSG_MORE. [ 1231.664335][T17242] binder_alloc: 17241: pid 17241 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1231.734909][ T5909] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1231.873610][T17246] Smack: duplicate mount options [ 1231.947962][ T5909] usb 7-1: Using ep0 maxpacket: 16 [ 1231.983992][T17246] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2972'. [ 1232.020611][ T5909] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1232.078475][ T5909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1232.354723][ T5909] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1232.532918][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.564298][ T5909] usb 7-1: Product: syz [ 1232.571856][ T5909] usb 7-1: Manufacturer: syz [ 1232.627184][ T5909] usb 7-1: SerialNumber: syz [ 1232.728943][ T5909] usb 7-1: config 0 descriptor?? [ 1232.753211][ T5909] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1232.795752][ T5909] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1234.746893][ T5909] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1234.753294][ T5909] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1234.776206][ T5909] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1234.789375][ T5909] em28xx 7-1:0.0: No AC97 audio processor [ 1236.089799][T17263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2981'. [ 1236.177253][T17263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2981'. [ 1236.388964][T17278] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2984'. [ 1236.399015][T17278] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2984'. [ 1236.765561][T17280] netlink: 'syz.7.2983': attribute type 2 has an invalid length. [ 1236.776739][ T3075] usb 7-1: USB disconnect, device number 11 [ 1236.783469][ T3075] em28xx 7-1:0.0: Disconnecting em28xx [ 1236.854726][ T3075] em28xx 7-1:0.0: Freeing device [ 1238.383376][T17299] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 1238.490803][T17300] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2989'. [ 1238.500959][T17300] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2989'. [ 1238.559371][T17299] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 1239.104938][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.565657][T17315] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2994'. [ 1241.578888][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2994'. [ 1241.917936][T17322] sctp: [Deprecated]: syz.6.2997 (pid 17322) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1241.917936][T17322] Use struct sctp_sack_info instead [ 1242.115803][T17325] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2998'. [ 1242.124957][T17325] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2998'. [ 1242.194492][ T8] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1242.336617][T17332] xt_cluster: node mask cannot exceed total number of nodes [ 1242.344065][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1242.347344][ T8] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1242.580944][ T974] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1242.589226][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.599018][ T8] usb 2-1: Product: syz [ 1242.603216][ T8] usb 2-1: Manufacturer: syz [ 1242.607921][ T8] usb 2-1: SerialNumber: syz [ 1242.615244][ T8] usb 2-1: config 0 descriptor?? [ 1242.754263][ T974] usb 7-1: Using ep0 maxpacket: 16 [ 1242.766683][ T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.781293][ T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.798743][ T974] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1242.810751][ T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.823911][ T974] usb 7-1: config 0 descriptor?? [ 1243.772160][ T974] usbhid 7-1:0.0: can't add hid device: -71 [ 1243.966136][ T974] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1244.171810][ T974] usb 7-1: USB disconnect, device number 12 [ 1244.197131][ T8] (unnamed net_device) (uninitialized): Assigned a random MAC address: ba:3c:7c:93:c7:ad [ 1244.351326][ T8] rtl8150 2-1:0.0: eth9: rtl8150 is detected [ 1244.407873][ T8] usb 2-1: USB disconnect, device number 60 [ 1246.217525][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 1246.298659][T17364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3011'. [ 1246.343954][T17364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3011'. [ 1247.469799][T17376] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3012'. [ 1247.542309][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3012'. [ 1248.340984][T17384] binder: BINDER_SET_CONTEXT_MGR already set [ 1248.383433][T17384] binder: 17383:17384 ioctl 4018620d 20000040 returned -16 [ 1248.573944][ T5906] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1249.546201][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 1249.555287][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.583937][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.603661][ T5906] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1249.612758][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.665608][ T5906] usb 2-1: config 0 descriptor?? [ 1251.314871][ T8] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1251.560094][ T5906] usbhid 2-1:0.0: can't add hid device: -71 [ 1251.573713][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 1251.579287][ T5906] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1251.597590][ T8] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1251.613146][ T5906] usb 2-1: USB disconnect, device number 61 [ 1251.621514][ T8] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1251.654707][ T8] usb 9-1: config 1 has no interface number 1 [ 1251.748032][ T8] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1251.839328][T17407] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1251.943233][ T8] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1251.950544][T14786] kernel write not supported for file /sg0 (pid: 14786 comm: kworker/1:1) [ 1252.064255][ T8] usb 9-1: language id specifier not provided by device, defaulting to English [ 1252.103720][ T8] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1252.130949][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.192164][ T8] usb 9-1: Product: syz [ 1252.212301][ T8] usb 9-1: Manufacturer: syz [ 1252.233829][ T8] usb 9-1: SerialNumber: syz [ 1252.492579][ T8] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 1252.548890][ T8] usb 9-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1252.593703][T17418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3024'. [ 1252.622018][ T8] usb 9-1: USB disconnect, device number 6 [ 1252.685507][T17418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3024'. [ 1254.139282][T17430] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3028'. [ 1254.159376][T16797] udevd[16797]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1254.198113][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3028'. [ 1254.339196][T17430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3028'. [ 1257.172227][ T8] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1257.186276][T17471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1257.194099][T17471] IPv6: NLM_F_CREATE should be set when creating new route [ 1257.381967][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1257.442700][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1257.501649][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1257.596339][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.604826][ T8] usb 2-1: Product: syz [ 1257.609000][ T8] usb 2-1: Manufacturer: syz [ 1257.613918][ T8] usb 2-1: SerialNumber: syz [ 1257.717945][ T8] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1258.195726][ T8] usb 2-1: USB disconnect, device number 62 [ 1258.295524][T17480] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3041'. [ 1258.317984][T17480] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3041'. [ 1262.270456][T17500] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3046'. [ 1262.279782][T17500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3046'. [ 1262.348873][T17516] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3051'. [ 1262.378423][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3051'. [ 1262.492374][T17519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1262.593019][T14786] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1262.812903][T14786] usb 9-1: Using ep0 maxpacket: 32 [ 1262.821283][T17525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3054'. [ 1262.830777][T17525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3054'. [ 1263.592903][T14786] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1263.600681][T14786] usb 9-1: can't read configurations, error -61 [ 1263.853269][T14786] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1264.092912][T14786] usb 9-1: Using ep0 maxpacket: 32 [ 1264.179897][T14786] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1264.239214][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 1264.245754][T14786] usb 9-1: can't read configurations, error -61 [ 1264.258942][T14786] usb usb9-port1: attempt power cycle [ 1264.802413][T14786] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1266.080630][T14786] usb 9-1: device descriptor read/8, error -71 [ 1266.308575][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 1267.420651][T17551] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3061'. [ 1267.429859][T17551] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3061'. [ 1268.384340][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 1268.584459][T17575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3069'. [ 1268.593543][T17575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3069'. [ 1269.722068][T17590] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3074'. [ 1269.733809][T17590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3074'. [ 1270.857499][T17602] overlayfs: workdir and upperdir must be separate subtrees [ 1270.963012][T17603] netlink: 84 bytes leftover after parsing attributes in process `syz.8.3077'. [ 1271.023751][T17603] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3077'. [ 1272.203917][ T8] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1272.262864][T17616] sctp: [Deprecated]: syz.0.3079 (pid 17616) Use of int in max_burst socket option deprecated. [ 1272.262864][T17616] Use struct sctp_assoc_value instead [ 1272.369323][T17625] nullb0: AHDI p1 p3 p4 [ 1272.372501][ T8] usb 9-1: Using ep0 maxpacket: 32 [ 1272.382264][T17625] nullb0: p1 size 2739478287 extends beyond EOD, truncated [ 1272.396020][ T8] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1272.431278][ T8] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1272.432538][T17625] nullb0: p4 size 2395519696 extends beyond EOD, [ 1272.462421][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.492379][ T8] usb 9-1: Product: syz [ 1272.502419][ T8] usb 9-1: Manufacturer: syz [ 1272.512701][ T8] usb 9-1: SerialNumber: syz [ 1272.527753][T17625] truncated [ 1272.567886][ T8] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1273.474640][ T8] usb 9-1: USB disconnect, device number 11 [ 1275.193228][T17650] netlink: 'syz.8.3089': attribute type 1 has an invalid length. [ 1275.774999][T17650] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1278.975402][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1278.979638][T17683] program syz.6.3095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1278.994907][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1279.007251][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1279.026258][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1279.043510][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1279.052647][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1279.466024][T17681] chnl_net:caif_netlink_parms(): no params data found [ 1279.748328][T17695] netlink: 'syz.0.3099': attribute type 1 has an invalid length. [ 1280.440355][T17695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1280.505118][T17681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.524392][T17681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.532176][T17681] bridge_slave_0: entered allmulticast mode [ 1280.543548][T17681] bridge_slave_0: entered promiscuous mode [ 1280.553236][T17681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.562943][T17681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.570409][T17681] bridge_slave_1: entered allmulticast mode [ 1280.582996][T17681] bridge_slave_1: entered promiscuous mode [ 1280.637474][T17681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1280.652275][T17681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1280.706232][T17681] team0: Port device team_slave_0 added [ 1280.722013][T17681] team0: Port device team_slave_1 added [ 1280.827059][T17681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1280.837714][T17681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1280.866488][T17681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1280.880449][T17681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1280.887783][T17681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1280.914743][T17681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1281.052216][ T5909] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1281.092018][ T5832] Bluetooth: hci3: command tx timeout [ 1281.130413][T17681] hsr_slave_0: entered promiscuous mode [ 1281.147286][T17681] hsr_slave_1: entered promiscuous mode [ 1281.158560][T17681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1281.166728][T17681] Cannot create hsr debugfs directory [ 1281.261866][ T5909] usb 9-1: Using ep0 maxpacket: 16 [ 1281.289438][ T5909] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.309382][ T5909] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.322323][ T5909] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1281.336522][ T5909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.379741][ T5909] usb 9-1: config 0 descriptor?? [ 1282.245586][T17681] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.252375][ T5909] usbhid 9-1:0.0: can't add hid device: -71 [ 1282.265039][ T5909] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1282.363745][ T5909] usb 9-1: USB disconnect, device number 12 [ 1282.810433][T17681] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.391751][ T5832] Bluetooth: hci3: command tx timeout [ 1283.729073][T17681] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.848288][T17681] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.801729][ T5832] Bluetooth: hci3: command tx timeout [ 1286.255539][T17732] ieee802154 phy0 wpan0: encryption failed: -22 [ 1286.564472][T17681] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1286.624600][T17681] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1286.652111][T17681] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1286.676007][T17681] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1287.619907][T17681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.714847][T17681] 8021q: adding VLAN 0 to HW filter on device team0 [ 1287.853618][T16935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.860809][T16935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1287.892285][ T5832] Bluetooth: hci3: command tx timeout [ 1287.963510][T16935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.970725][T16935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1288.151183][T17754] netlink: 'syz.8.3115': attribute type 1 has an invalid length. [ 1288.863012][T17754] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1289.091485][T14786] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1289.146286][T17760] netlink: 92 bytes leftover after parsing attributes in process `syz.8.3117'. [ 1289.353425][T17681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1289.381526][T14786] usb 7-1: Using ep0 maxpacket: 32 [ 1289.389058][T14786] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1289.463132][T14786] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1290.025716][T14786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.037622][T14786] usb 7-1: Product: syz [ 1290.042307][T14786] usb 7-1: Manufacturer: syz [ 1290.046942][T14786] usb 7-1: SerialNumber: syz [ 1290.074569][T14786] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1290.093863][T17681] veth0_vlan: entered promiscuous mode [ 1290.195420][T17681] veth1_vlan: entered promiscuous mode [ 1290.247871][T17681] veth0_macvtap: entered promiscuous mode [ 1290.568071][T17681] veth1_macvtap: entered promiscuous mode [ 1291.064092][ T5909] usb 7-1: USB disconnect, device number 13 [ 1291.138060][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.181771][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.262939][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.289311][T17787] syz.8.3122: attempt to access beyond end of device [ 1291.289311][T17787] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1291.312160][T17787] FAT-fs (nbd8): unable to read boot sector [ 1291.348356][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.516477][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.716300][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.801357][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.850768][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.871318][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.912460][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.951440][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.962209][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.981320][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.992366][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.022138][T17681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1292.043459][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.067384][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.091276][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.129638][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.152077][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.171491][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.181482][ T5874] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1292.201780][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.276471][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.306995][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.341425][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.381246][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.462235][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.481407][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.491215][ T5874] usb 7-1: Using ep0 maxpacket: 16 [ 1292.497194][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.498839][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.512505][T17681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1292.571240][T17801] trusted_key: encrypted_key: insufficient parameters specified [ 1292.719674][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.402867][ T5874] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1293.412475][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.423308][ T5874] usb 7-1: config 0 descriptor?? [ 1293.436040][T17681] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.453069][T17681] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.471238][T17681] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.490408][T17681] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.802738][ T974] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1294.301474][ T974] usb 8-1: Using ep0 maxpacket: 32 [ 1294.405217][ T974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.515023][ T974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.596847][ T974] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1294.656245][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.702978][ T974] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.730285][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.799079][ T5874] usbhid 7-1:0.0: can't add hid device: -71 [ 1294.801239][ T974] usb 8-1: config 0 descriptor?? [ 1294.823551][ T5874] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1294.847374][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.876784][ T974] hub 8-1:0.0: USB hub found [ 1294.899834][ T5874] usb 7-1: USB disconnect, device number 14 [ 1294.903247][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.147173][ T974] hub 8-1:0.0: 1 port detected [ 1295.223280][T17815] netlink: 'syz.0.3129': attribute type 5 has an invalid length. [ 1296.261401][ T974] hub 8-1:0.0: hub_hub_status failed (err = -32) [ 1296.275525][ T974] hub 8-1:0.0: config failed, can't get hub status (err -32) [ 1296.781935][ T974] usbhid 8-1:0.0: can't add hid device: -32 [ 1296.787979][ T974] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 1296.910308][T17832] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3134'. [ 1296.919402][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3134'. [ 1297.111158][T17838] ieee802154 phy0 wpan0: encryption failed: -22 [ 1298.129374][T17849] trusted_key: encrypted_key: insufficient parameters specified [ 1300.091453][T17860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3142'. [ 1300.459981][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.516375][T14786] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1300.680941][T17864] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3143'. [ 1300.693178][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3143'. [ 1300.960402][T14786] usb 7-1: device descriptor read/64, error -71 [ 1301.250243][T14786] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1301.611110][T14786] usb 7-1: device descriptor read/64, error -71 [ 1301.916707][T14786] usb usb7-port1: attempt power cycle [ 1302.685412][T14786] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1302.785615][T14786] usb 7-1: device descriptor read/8, error -71 [ 1303.229149][T14786] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1304.919146][T14786] usb 7-1: device descriptor read/8, error -71 [ 1305.041939][T14786] usb usb7-port1: unable to enumerate USB device [ 1305.450275][T17889] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3148'. [ 1305.465939][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3148'. [ 1306.629191][T17899] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1311.021015][ T974] usb 8-1: USB disconnect, device number 7 [ 1311.351009][T16100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1311.373608][T16100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1311.386846][T16100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1311.424501][T16100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1311.445990][T16100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1311.453519][T16100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1312.204318][T17920] chnl_net:caif_netlink_parms(): no params data found [ 1313.408518][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 1313.570308][ T54] Bluetooth: hci4: command tx timeout [ 1314.305437][ T7915] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.382419][T17920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.392969][T17920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.420509][T17920] bridge_slave_0: entered allmulticast mode [ 1314.448349][T17920] bridge_slave_0: entered promiscuous mode [ 1314.476260][T17920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.504126][T17920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.536368][T17920] bridge_slave_1: entered allmulticast mode [ 1314.593570][T17920] bridge_slave_1: entered promiscuous mode [ 1315.344929][ T7915] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.660177][ T5832] Bluetooth: hci4: command tx timeout [ 1315.873040][ T7915] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.602156][T17920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.644530][T17920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1316.830175][ T7915] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.472278][T17920] team0: Port device team_slave_0 added [ 1317.538919][T17992] netlink: 'syz.6.3179': attribute type 1 has an invalid length. [ 1317.741412][ T5832] Bluetooth: hci4: command tx timeout [ 1317.793160][T17992] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1317.806589][T17920] team0: Port device team_slave_1 added [ 1318.522870][T17920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.570296][T17920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1318.625246][T17920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.639152][T17920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.653389][T17920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1318.703805][T17920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1319.839838][ T54] Bluetooth: hci4: command tx timeout [ 1320.349166][ T7915] bridge_slave_1: left allmulticast mode [ 1320.365901][ T7915] bridge_slave_1: left promiscuous mode [ 1320.380161][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.170332][ T7915] bridge_slave_0: left allmulticast mode [ 1321.189919][ T7915] bridge_slave_0: left promiscuous mode [ 1321.217330][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.784252][T18043] netlink: 'syz.1.3193': attribute type 1 has an invalid length. [ 1323.896644][T18049] binder: 18048:18049 ioctl 4018620d 0 returned -22 [ 1324.188789][T18056] fuse: Bad value for 'rootmode' [ 1324.569224][ T7915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1324.588796][ T7915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1324.599046][ T7915] bond0 (unregistering): Released all slaves [ 1324.805354][ T7915] bond1 (unregistering): Released all slaves [ 1324.826763][T17920] hsr_slave_0: entered promiscuous mode [ 1324.834900][T17920] hsr_slave_1: entered promiscuous mode [ 1324.841496][T17920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1324.849284][T17920] Cannot create hsr debugfs directory [ 1328.121344][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3199'. [ 1328.181059][T18095] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3199'. [ 1328.222842][ T7915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1328.232762][T18095] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3199'. [ 1328.259405][ T7915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1328.311236][ T7915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1328.434169][ T7915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1328.502495][ T5909] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1328.542224][T18095] nbd0: detected capacity change from 0 to 140460462964736 [ 1328.563594][T18105] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3202'. [ 1328.569680][T16797] block nbd0: Send control failed (result -89) [ 1328.582019][T16797] block nbd0: Request send failed, requeueing [ 1328.585025][T18105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3202'. [ 1328.622037][ T54] block nbd0: Receive control failed (result -32) [ 1328.735289][ T26] block nbd0: Dead connection, failed to find a fallback [ 1328.743272][ T26] block nbd0: shutting down sockets [ 1328.749419][ T26] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1328.760682][ T26] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1328.816361][T16797] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1328.841394][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 1328.870803][ T7915] veth1_macvtap: left promiscuous mode [ 1329.059271][T16797] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1329.067429][T16797] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1329.076632][ T7915] veth0_macvtap: left promiscuous mode [ 1329.096687][ T7915] veth1_vlan: left promiscuous mode [ 1329.099444][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.117596][ T7915] veth0_vlan: left promiscuous mode [ 1329.211202][T16797] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1329.441606][ T5909] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 1329.469763][T16797] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1329.473912][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.512084][T16797] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1329.533744][T16797] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1329.533935][ T5909] usb 2-1: config 0 descriptor?? [ 1329.568243][T16797] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1329.586735][T16797] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1329.614412][T16797] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1329.632945][T16797] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1329.649437][T16797] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1329.657708][T16797] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1329.672165][T16797] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1329.680768][T16797] ldm_validate_partition_table(): Disk read failed. [ 1329.687485][T16797] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1329.698139][T16797] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1329.708596][T16797] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1329.718366][T16797] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1329.726924][T16797] Dev nbd0: unable to read RDB block 0 [ 1329.733524][T16797] nbd0: unable to read partition table [ 1329.787075][T16797] ldm_validate_partition_table(): Disk read failed. [ 1329.805408][T16797] Dev nbd0: unable to read RDB block 0 [ 1329.813321][T16797] nbd0: unable to read partition table [ 1329.962357][T18114] netlink: 'syz.0.3204': attribute type 1 has an invalid length. [ 1330.070901][T18099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.091259][T18099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.166819][ T5909] corsair-psu 0003:1B1C:1C0D.000D: unknown main item tag 0x0 [ 1330.190602][ T5909] corsair-psu 0003:1B1C:1C0D.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.1-1/input0 [ 1330.289543][ T5909] corsair-psu 0003:1B1C:1C0D.000D: unable to initialize device (-38) [ 1330.323380][ T5909] corsair-psu 0003:1B1C:1C0D.000D: probe with driver corsair-psu failed with error -38 [ 1330.435565][T17117] usb 2-1: USB disconnect, device number 63 [ 1330.720458][ T7915] team0 (unregistering): Port device team_slave_1 removed [ 1330.783217][ T7915] team0 (unregistering): Port device team_slave_0 removed [ 1331.155780][T18116] autofs: Unknown parameter 'u.F/& PP@R]83rkz);G]g1Z00000008' [ 1331.982545][T18107] netlink: 'syz.6.3203': attribute type 4 has an invalid length. [ 1332.052820][T18114] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1334.524172][T18143] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1334.873289][T17920] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1334.936045][T17920] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1335.047907][T17920] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1335.076324][T17920] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1335.326455][T18161] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1335.434769][T18163] netlink: 'syz.1.3216': attribute type 1 has an invalid length. [ 1335.467061][T18163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1335.627726][T17920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1335.731439][T17920] 8021q: adding VLAN 0 to HW filter on device team0 [ 1335.743442][ T8815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.750615][ T8815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1335.857541][T18175] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.865155][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.872307][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1335.889031][ T5909] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1336.083208][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 1336.136001][ T5909] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1336.211637][ T5909] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1336.274338][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.368239][ T5909] usb 2-1: Product: syz [ 1336.441442][ T5909] usb 2-1: Manufacturer: syz [ 1336.446093][ T5909] usb 2-1: SerialNumber: syz [ 1336.544356][ T5909] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1336.699843][T18191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1336.761016][T14786] usb 2-1: USB disconnect, device number 64 [ 1337.226766][T18199] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1338.057476][T17920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1338.195873][T18207] blk_print_req_error: 24 callbacks suppressed [ 1338.195893][T18207] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1338.248999][T18207] buffer_io_error: 23 callbacks suppressed [ 1338.249019][T18207] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1338.314479][T18207] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1338.337060][T18207] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1338.352666][T18215] netlink: 'syz.8.3226': attribute type 1 has an invalid length. [ 1338.374438][T18207] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1338.402851][T18207] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1338.412048][T18207] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1338.421479][T18207] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1338.429540][T18207] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1338.438780][T18207] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1338.446810][T18207] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1338.456040][T18207] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1338.464128][T18207] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1338.475560][T18207] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1338.485064][T18207] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1338.494569][T18207] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1338.516925][T18215] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1338.734671][T18207] ldm_validate_partition_table(): Disk read failed. [ 1338.769721][T18207] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1339.533325][T18207] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1340.027759][T18217] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3223'. [ 1340.030250][T18207] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1340.037271][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3223'. [ 1340.046197][T18207] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1340.069028][T18207] Dev nbd0: unable to read RDB block 0 [ 1340.074872][T18207] nbd0: unable to read partition table [ 1340.826253][T18241] binder: BINDER_SET_CONTEXT_MGR already set [ 1340.832455][T18241] binder: 18240:18241 ioctl 4018620d 20000040 returned -16 [ 1340.856288][T18238] ieee802154 phy0 wpan0: encryption failed: -22 [ 1340.936237][T17920] veth0_vlan: entered promiscuous mode [ 1340.985976][T17920] veth1_vlan: entered promiscuous mode [ 1341.066473][T18247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1341.204645][T17920] veth0_macvtap: entered promiscuous mode [ 1341.255140][T17920] veth1_macvtap: entered promiscuous mode [ 1341.993079][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.060468][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.071099][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.088441][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.099726][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.118507][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.129557][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.166186][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.193563][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.238423][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.276002][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.310541][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.371926][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.507183][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.588508][T18273] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1342.787709][T17920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1342.949388][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.978013][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.022404][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.050402][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.081043][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.110060][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.122039][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.138779][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.161225][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.172378][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.189713][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.201342][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.228515][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.247968][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.263832][T17920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1343.281427][T17920] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.313248][T17920] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.338484][T17920] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.357516][T17920] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.573127][T17359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.637520][T17359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.721862][T16935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.739545][T16935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.744476][T18302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1345.986468][T18309] binder_alloc: 18306: binder_alloc_buf, no vma [ 1346.030578][T18309] binder_alloc: 18306: binder_alloc_buf, no vma [ 1347.917021][T18327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1349.844916][T18353] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1351.599371][T18371] binder_alloc: 18370: binder_alloc_buf, no vma [ 1351.600001][T18368] lo speed is unknown, defaulting to 1000 [ 1351.606160][T18371] binder_alloc: 18370: binder_alloc_buf, no vma [ 1351.692734][T18368] lo speed is unknown, defaulting to 1000 [ 1351.749037][T18374] lo speed is unknown, defaulting to 1000 [ 1351.755425][T18374] lo speed is unknown, defaulting to 1000 [ 1351.815831][T18368] lo speed is unknown, defaulting to 1000 [ 1351.824781][T18374] lo speed is unknown, defaulting to 1000 [ 1352.008365][T18381] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1352.765522][T18374] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1353.036362][T18391] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1353.136480][T18378] hpH^e$: renamed from lo (while UP) [ 1353.478514][T18374] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1353.796380][T18374] hpH^e$ speed is unknown, defaulting to 1000 [ 1353.896072][T18374] hpH^e$ speed is unknown, defaulting to 1000 [ 1354.045806][T18374] hpH^e$ speed is unknown, defaulting to 1000 [ 1354.097938][T17117] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1354.112356][T18413] binder: 18412:18413 ioctl c0306201 0 returned -14 [ 1354.124593][T18374] hpH^e$ speed is unknown, defaulting to 1000 [ 1354.297858][T17117] usb 10-1: Using ep0 maxpacket: 16 [ 1354.370238][T18374] hpH^e$ speed is unknown, defaulting to 1000 [ 1354.432182][T17117] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.714469][T17117] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.924481][T18374] hpH^e$ speed is unknown, defaulting to 1000 [ 1354.942937][T18374] hpH^e$ speed is unknown, defaulting to 1000 [ 1355.006243][T17117] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1355.027753][T17117] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.051458][T18374] hpH^e$ speed is unknown, defaulting to 1000 [ 1355.051522][T17117] usb 10-1: config 0 descriptor?? [ 1355.187820][T18368] infiniband sz1: set active [ 1355.197010][ T974] hpH^e$ speed is unknown, defaulting to 1000 [ 1355.240411][T18368] infiniband sz1: added hpH^e$ [ 1355.392006][T18424] fuse: Bad value for 'rootmode' [ 1355.448418][T18368] sz1: rxe_create_cq: returned err = -12 [ 1355.480479][T18437] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3269'. [ 1355.494852][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3269'. [ 1355.531187][T18368] infiniband sz1: Couldn't create ib_mad CQ [ 1355.778582][T18368] infiniband sz1: Couldn't open port 1 [ 1355.821816][T17117] usbhid 10-1:0.0: can't add hid device: -71 [ 1355.838950][T17117] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1355.896797][T17117] usb 10-1: USB disconnect, device number 2 [ 1355.921437][T18368] RDS/IB: sz1: added [ 1355.944080][T18368] smc: adding ib device sz1 with port count 1 [ 1355.976279][T18368] smc: ib device sz1 port 1 has pnetid [ 1356.024826][ T5909] hpH^e$ speed is unknown, defaulting to 1000 [ 1356.068623][T18368] hpH^e$ speed is unknown, defaulting to 1000 [ 1356.146420][T18442] FAULT_INJECTION: forcing a failure. [ 1356.146420][T18442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1356.189220][T18442] CPU: 1 UID: 0 PID: 18442 Comm: syz.6.3271 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1356.200033][T18442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1356.210115][T18442] Call Trace: [ 1356.213411][T18442] [ 1356.216359][T18442] dump_stack_lvl+0x241/0x360 [ 1356.221079][T18442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1356.226306][T18442] ? __pfx__printk+0x10/0x10 [ 1356.230936][T18442] should_fail_ex+0x3b0/0x4e0 [ 1356.235646][T18442] _copy_from_user+0x2f/0xc0 [ 1356.240265][T18442] bpf_test_init+0x11f/0x180 [ 1356.244885][T18442] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 1356.250294][T18442] ? __pfx_lock_release+0x10/0x10 [ 1356.255356][T18442] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1356.261186][T18442] ? __fget_files+0x2a/0x410 [ 1356.265802][T18442] ? __fget_files+0x2a/0x410 [ 1356.270421][T18442] ? fput+0x21b/0x290 [ 1356.274423][T18442] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1356.280250][T18442] bpf_prog_test_run+0x2e4/0x360 [ 1356.285210][T18442] __sys_bpf+0x48d/0x810 [ 1356.289466][T18442] ? __pfx___sys_bpf+0x10/0x10 [ 1356.294239][T18442] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1356.300223][T18442] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1356.306559][T18442] ? do_syscall_64+0x100/0x230 [ 1356.311327][T18442] __x64_sys_bpf+0x7c/0x90 [ 1356.315745][T18442] do_syscall_64+0xf3/0x230 [ 1356.320253][T18442] ? clear_bhb_loop+0x35/0x90 [ 1356.324927][T18442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.330821][T18442] RIP: 0033:0x7f25d2585d29 [ 1356.335232][T18442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1356.354835][T18442] RSP: 002b:00007f25d3393038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1356.363256][T18442] RAX: ffffffffffffffda RBX: 00007f25d2775fa0 RCX: 00007f25d2585d29 [ 1356.371229][T18442] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 1356.379366][T18442] RBP: 00007f25d3393090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.387330][T18442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.395294][T18442] R13: 0000000000000000 R14: 00007f25d2775fa0 R15: 00007ffeb50f7c68 [ 1356.403274][T18442] [ 1356.631658][T18368] hpH^e$ speed is unknown, defaulting to 1000 [ 1357.019713][T18455] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3273'. [ 1357.031204][T18455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3273'. [ 1357.561551][T18368] hpH^e$ speed is unknown, defaulting to 1000 [ 1358.039974][T18368] hpH^e$ speed is unknown, defaulting to 1000 [ 1358.507904][ T3075] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1358.817540][ T3075] usb 7-1: Using ep0 maxpacket: 16 [ 1358.849129][ T3075] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1358.888339][ T3075] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1358.931196][ T3075] usb 7-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 1358.967889][ T3075] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.028562][ T3075] usb 7-1: config 0 descriptor?? [ 1359.107300][T18368] hpH^e$ speed is unknown, defaulting to 1000 [ 1359.965945][ T3075] ortek 0003:05A4:8003.000E: unknown main item tag 0x7 [ 1359.974011][ T3075] ortek 0003:05A4:8003.000E: unknown main item tag 0x0 [ 1359.990314][ T3075] ortek 0003:05A4:8003.000E: hidraw0: USB HID v0.00 Device [HID 05a4:8003] on usb-dummy_hcd.6-1/input0 [ 1360.432532][T18368] hpH^e$ speed is unknown, defaulting to 1000 [ 1360.499732][T18486] blk_print_req_error: 6 callbacks suppressed [ 1360.499753][T18486] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1360.583828][T18486] buffer_io_error: 6 callbacks suppressed [ 1360.583850][T18486] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1360.692051][T18486] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1360.778888][T18486] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1360.828307][T18486] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1360.867102][ T3075] usb 7-1: USB disconnect, device number 19 [ 1360.945597][T18486] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1361.080485][T18368] hpH^e$ speed is unknown, defaulting to 1000 [ 1361.090869][T18486] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1361.611767][T18486] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1361.683235][T18486] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1361.692548][T18486] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1361.703188][T18486] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1361.712554][T18486] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1361.721657][T18486] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1361.731148][T18486] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1361.743840][T18486] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1361.754599][T18486] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1361.764507][T18486] ldm_validate_partition_table(): Disk read failed. [ 1361.772050][T18486] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1361.783471][T18486] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1361.792693][T18486] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1361.802171][T18486] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1361.813164][T18486] Dev nbd0: unable to read RDB block 0 [ 1361.821982][T18486] nbd0: unable to read partition table [ 1361.894310][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.459142][T18368] hpH^e$ speed is unknown, defaulting to 1000 [ 1362.758339][T18486] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3279'. [ 1362.787626][T18486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3279'. [ 1364.054081][T18524] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3285'. [ 1364.084390][T18524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3285'. [ 1364.707211][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 1368.367726][T18564] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1369.378262][T17117] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1369.746644][T17117] usb 10-1: too many configurations: 164, using maximum allowed: 8 [ 1369.800324][T18586] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3298'. [ 1369.811655][T18586] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3298'. [ 1370.300808][T17117] usb 10-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 1370.336923][T17117] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.569627][T17117] usb 10-1: config 0 descriptor?? [ 1370.857057][ T5873] usb 10-1: USB disconnect, device number 3 [ 1372.830815][T18619] netlink: del zone limit has 4 unknown bytes [ 1374.739107][T18648] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3314'. [ 1374.805130][T18648] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3314'. [ 1374.950787][T18654] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3315'. [ 1374.962726][T18654] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3315'. [ 1378.263378][T18684] autofs: Unknown parameter 'u.F/& PP@R]83rkz);G]g1Z00000007' [ 1378.909915][T18701] syz.6.3323: attempt to access beyond end of device [ 1378.909915][T18701] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1378.923482][T18701] syz.6.3323: attempt to access beyond end of device [ 1378.923482][T18701] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1378.936758][T18701] syz.6.3323: attempt to access beyond end of device [ 1378.936758][T18701] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1378.951438][T18701] syz.6.3323: attempt to access beyond end of device [ 1378.951438][T18701] nbd6: rw=0, sector=18, nr_sectors = 2 limit=0 [ 1378.965858][T18701] syz.6.3323: attempt to access beyond end of device [ 1378.965858][T18701] nbd6: rw=0, sector=30, nr_sectors = 2 limit=0 [ 1378.980200][T18701] syz.6.3323: attempt to access beyond end of device [ 1378.980200][T18701] nbd6: rw=0, sector=36, nr_sectors = 2 limit=0 [ 1379.737691][T14786] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1379.896727][T14786] usb 9-1: Using ep0 maxpacket: 8 [ 1379.915408][T18717] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3328'. [ 1379.925288][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3328'. [ 1379.979280][T14786] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.031761][ T5909] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1380.039438][T14786] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 1380.039535][T14786] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.255121][T14786] usb 9-1: config 0 descriptor?? [ 1380.526672][ T5909] usb 10-1: Using ep0 maxpacket: 16 [ 1380.545614][ T5909] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.660867][ T5909] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.731419][T18705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.740536][ T5909] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1380.749048][T18705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.782914][ T5909] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.264114][T14786] corsair-psu 0003:1B1C:1C0D.000F: unknown main item tag 0x0 [ 1381.271991][ T5909] usb 10-1: config 0 descriptor?? [ 1381.485693][T14786] corsair-psu 0003:1B1C:1C0D.000F: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.8-1/input0 [ 1381.666322][T14786] corsair-psu 0003:1B1C:1C0D.000F: unable to initialize device (-38) [ 1381.699135][T14786] corsair-psu 0003:1B1C:1C0D.000F: probe with driver corsair-psu failed with error -38 [ 1381.766471][T14786] usb 9-1: USB disconnect, device number 13 [ 1382.406898][ T5909] usbhid 10-1:0.0: can't add hid device: -71 [ 1382.413531][ T5909] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1382.500430][ T5909] usb 10-1: USB disconnect, device number 4 [ 1383.399920][T18756] autofs: Unknown parameter 'u.F/& PP@R]83rkz);G]g1Z00000008' [ 1383.406319][T18760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1387.636927][T18800] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3345'. [ 1387.647172][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3345'. [ 1388.922352][T18811] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1390.209582][T18821] autofs: Unknown parameter 'u.F/& PP@R]83rkz);G]g1Z00000008' [ 1391.602107][T18837] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3356'. [ 1392.216612][T18852] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1393.176424][T18848] netlink: zone id is out of range [ 1393.202152][T18848] netlink: zone id is out of range [ 1393.255674][T18848] netlink: zone id is out of range [ 1393.260845][T18848] netlink: zone id is out of range [ 1393.602503][T18848] netlink: zone id is out of range [ 1393.667994][T18848] netlink: zone id is out of range [ 1393.731291][T18848] netlink: zone id is out of range [ 1393.814865][T18848] netlink: zone id is out of range [ 1393.874424][T18848] netlink: zone id is out of range [ 1393.883496][T14786] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1393.927559][T18848] netlink: zone id is out of range [ 1394.060169][T14786] usb 7-1: Using ep0 maxpacket: 8 [ 1394.572278][T14786] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1395.494607][T14786] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 1395.504592][T14786] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.518773][T14786] usb 7-1: config 0 descriptor?? [ 1395.547166][T18903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1396.665411][ T5874] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1396.710162][T18880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.743920][T18880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.049224][T14786] corsair-psu 0003:1B1C:1C0D.0010: unknown main item tag 0x0 [ 1397.055647][ T5909] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 1397.069359][T14786] corsair-psu 0003:1B1C:1C0D.0010: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.6-1/input0 [ 1397.136123][T14786] corsair-psu 0003:1B1C:1C0D.0010: unable to initialize device (-38) [ 1397.160971][T14786] corsair-psu 0003:1B1C:1C0D.0010: probe with driver corsair-psu failed with error -38 [ 1397.194373][T14786] usb 7-1: USB disconnect, device number 20 [ 1397.290240][ T5909] usb 2-1: config 0 has an invalid interface number: 165 but max is 0 [ 1397.315364][ T5909] usb 2-1: config 0 has an invalid descriptor of length 38, skipping remainder of the config [ 1397.360471][ T5909] usb 2-1: config 0 has no interface number 0 [ 1397.398062][ T5909] usb 2-1: too many endpoints for config 0 interface 165 altsetting 254: 111, using maximum allowed: 30 [ 1397.450934][ T5909] usb 2-1: config 0 interface 165 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 1397.484359][ T5909] usb 2-1: config 0 interface 165 has no altsetting 0 [ 1397.510703][ T5909] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1397.544669][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.577672][ T5909] usb 2-1: Product: syz [ 1397.595086][ T5909] usb 2-1: Manufacturer: syz [ 1397.620828][ T5909] usb 2-1: SerialNumber: syz [ 1397.678875][ T5909] usb 2-1: config 0 descriptor?? [ 1398.284635][ T5909] streamzap 2-1:0.165: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1398.323993][ T5909] usb 2-1: USB disconnect, device number 65 [ 1400.530318][ T5909] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1400.799354][ T5909] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1400.826567][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.001830][ T5909] usb 2-1: Product: syz [ 1401.138940][ T5909] usb 2-1: Manufacturer: syz [ 1401.281466][ T5909] usb 2-1: SerialNumber: syz [ 1401.377257][ T5909] usb 2-1: config 0 descriptor?? [ 1401.425997][T18981] FAULT_INJECTION: forcing a failure. [ 1401.425997][T18981] name failslab, interval 1, probability 0, space 0, times 0 [ 1401.455254][T18981] CPU: 1 UID: 0 PID: 18981 Comm: syz.9.3383 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1401.466056][T18981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1401.476126][T18981] Call Trace: [ 1401.479415][T18981] [ 1401.482358][T18981] dump_stack_lvl+0x241/0x360 [ 1401.487037][T18981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1401.492243][T18981] ? __pfx__printk+0x10/0x10 [ 1401.496851][T18981] ? kmem_cache_alloc_noprof+0x48/0x380 [ 1401.502420][T18981] ? __pfx___might_resched+0x10/0x10 [ 1401.507725][T18981] ? __fget_files+0x2a/0x410 [ 1401.512320][T18981] should_fail_ex+0x3b0/0x4e0 [ 1401.517009][T18981] should_failslab+0xac/0x100 [ 1401.521710][T18981] ? getname_flags+0xb7/0x540 [ 1401.526393][T18981] kmem_cache_alloc_noprof+0x70/0x380 [ 1401.531784][T18981] getname_flags+0xb7/0x540 [ 1401.536297][T18981] __x64_sys_execve+0x78/0xb0 [ 1401.541087][T18981] do_syscall_64+0xf3/0x230 [ 1401.545592][T18981] ? clear_bhb_loop+0x35/0x90 [ 1401.550287][T18981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.556191][T18981] RIP: 0033:0x7fbab1185d29 [ 1401.560626][T18981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1401.580242][T18981] RSP: 002b:00007fbaaeff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1401.588649][T18981] RAX: ffffffffffffffda RBX: 00007fbab1375fa0 RCX: 00007fbab1185d29 [ 1401.596626][T18981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 1401.604609][T18981] RBP: 00007fbaaeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1401.612605][T18981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1401.620907][T18981] R13: 0000000000000000 R14: 00007fbab1375fa0 R15: 00007ffd1bb6de78 [ 1401.628888][T18981] [ 1401.631956][ C1] vkms_vblank_simulate: vblank timer overrun [ 1402.197996][T18995] hsr0: entered promiscuous mode [ 1402.245884][T18995] hsr_slave_0: left promiscuous mode [ 1402.316205][T18999] fuse: Bad value for 'rootmode' [ 1402.375497][T18995] hsr_slave_1: left promiscuous mode [ 1402.388054][ T5909] usb 2-1: Firmware version (0.0) predates our first public release. [ 1402.404581][ T5909] usb 2-1: Please update to version 0.2 or newer [ 1402.676752][T18995] hsr0 (unregistering): left promiscuous mode [ 1402.827234][ T5909] usb 2-1: USB disconnect, device number 66 [ 1404.958567][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 1407.230850][T19045] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3397'. [ 1407.241137][T19045] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3397'. [ 1407.764962][T19048] netlink: 1420 bytes leftover after parsing attributes in process `syz.6.3398'. [ 1407.794679][T19048] net_ratelimit: 14 callbacks suppressed [ 1407.832239][T19048] openvswitch: netlink: Flow key attr not present in new flow. [ 1407.881414][T19048] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3398'. [ 1408.911859][T19062] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3400'. [ 1411.554612][ T5909] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1412.820080][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 1412.829818][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1412.895696][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1413.274618][ T5909] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1413.283674][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.352211][ T5909] usb 2-1: config 0 descriptor?? [ 1413.554632][ T974] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1413.586116][ T5909] usbhid 2-1:0.0: can't add hid device: -71 [ 1413.749775][ T5909] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1413.830809][ T974] usb 7-1: Using ep0 maxpacket: 32 [ 1413.865757][ T5909] usb 2-1: USB disconnect, device number 67 [ 1413.883760][ T974] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1413.911238][ T974] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1413.929378][ T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.943459][ T974] usb 7-1: Product: syz [ 1413.953548][ T974] usb 7-1: Manufacturer: syz [ 1413.985063][ T974] usb 7-1: SerialNumber: syz [ 1414.001248][ T974] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1414.024597][ T8] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1414.184481][ T8] usb 10-1: Using ep0 maxpacket: 32 [ 1414.523014][ T8] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1414.534593][ T8] usb 10-1: config 0 has no interface number 0 [ 1414.545136][ T8] usb 10-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1414.546276][T14786] usb 7-1: USB disconnect, device number 21 [ 1414.555197][ T8] usb 10-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1414.558510][ T8] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1414.580674][ T5909] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1414.629565][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.638355][ T8] usb 10-1: Product: syz [ 1414.645898][ T8] usb 10-1: Manufacturer: syz [ 1414.650899][ T8] usb 10-1: SerialNumber: syz [ 1414.658888][ T8] usb 10-1: config 0 descriptor?? [ 1414.667103][ T8] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1414.768963][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 1414.783689][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1414.797958][ T5909] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 1414.807441][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.819880][ T5909] usb 2-1: config 0 descriptor?? [ 1414.874916][ T8] usb 10-1: qt2_setup_urbs - submit read urb failed -90 [ 1414.889792][ T8] quatech2 10-1:0.51: probe with driver quatech2 failed with error -90 [ 1415.078982][T19092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.087695][T19092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.253428][T19099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.366753][T19099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.421720][ T5909] corsair-psu 0003:1B1C:1C0D.0011: unknown main item tag 0x0 [ 1415.463715][ T5909] corsair-psu 0003:1B1C:1C0D.0011: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.1-1/input0 [ 1415.535026][ T5909] corsair-psu 0003:1B1C:1C0D.0011: unable to initialize device (-38) [ 1415.581914][ T5909] corsair-psu 0003:1B1C:1C0D.0011: probe with driver corsair-psu failed with error -38 [ 1415.642227][ T5909] usb 2-1: USB disconnect, device number 68 [ 1416.174506][T19108] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3416'. [ 1416.654520][ T5874] usb 10-1: USB disconnect, device number 5 [ 1417.488032][ T5909] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1417.663887][T19129] netlink: 'syz.1.3422': attribute type 4 has an invalid length. [ 1418.723714][ T5909] usb 10-1: Using ep0 maxpacket: 16 [ 1418.740999][ T5909] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1418.764272][ T5909] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1418.818048][ T5909] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1418.862724][ T5909] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.891725][ T5909] usb 10-1: config 0 descriptor?? [ 1418.899540][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3423'. [ 1419.164425][ T974] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1419.273682][T19143] netlink: 'syz.1.3426': attribute type 1 has an invalid length. [ 1419.500835][ T5909] kovaplus 0003:1E7D:2D50.0012: item fetching failed at offset 0/3 [ 1419.512380][ T5909] kovaplus 0003:1E7D:2D50.0012: parse failed [ 1419.532483][T19143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1419.543518][ T5909] kovaplus 0003:1E7D:2D50.0012: probe with driver kovaplus failed with error -22 [ 1419.608635][ T974] usb 9-1: Using ep0 maxpacket: 32 [ 1419.728661][ T5874] usb 10-1: USB disconnect, device number 6 [ 1419.739440][ T974] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1419.781136][ T974] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1419.796293][ T974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.175934][ T974] usb 9-1: Product: syz [ 1420.341690][ T974] usb 9-1: Manufacturer: syz [ 1420.396624][ T974] usb 9-1: SerialNumber: syz [ 1420.416226][ T974] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1420.640644][ T974] usb 9-1: USB disconnect, device number 15 [ 1420.874351][ T3075] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1421.044244][ T3075] usb 2-1: Using ep0 maxpacket: 16 [ 1421.069889][ T3075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1421.102320][ T3075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1421.113882][ T3075] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1421.123737][ T3075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.140272][ T3075] usb 2-1: config 0 descriptor?? [ 1421.289933][T19169] hpH^e$ speed is unknown, defaulting to 1000 [ 1421.969220][ T3075] usbhid 2-1:0.0: can't add hid device: -71 [ 1421.984402][ T3075] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1422.015728][ T3075] usb 2-1: USB disconnect, device number 69 [ 1423.338846][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.240654][T19169] hpH^e$ speed is unknown, defaulting to 1000 [ 1426.914383][T19210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1429.453716][ T5874] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1431.483584][T17117] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1432.593429][T17117] usb 10-1: Using ep0 maxpacket: 16 [ 1432.600332][T17117] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1432.611795][T17117] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1432.725291][T19242] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3452'. [ 1432.775927][T17117] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1432.786228][T17117] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.798941][T19242] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3452'. [ 1432.814363][T17117] usb 10-1: config 0 descriptor?? [ 1432.903404][T19242] netlink: 'syz.6.3452': attribute type 10 has an invalid length. [ 1434.343558][ T5909] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1434.802207][ T8] IPVS: starting estimator thread 0... [ 1434.953367][ T5909] usb 9-1: Using ep0 maxpacket: 16 [ 1435.188443][ T5909] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1435.203475][ T5909] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1435.218152][T19281] IPVS: using max 25 ests per chain, 60000 per kthread [ 1435.225813][ T5909] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1435.240780][ T5909] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1435.264955][ T5909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1435.310930][ T5909] usb 9-1: SerialNumber: syz [ 1435.336025][T19270] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1435.643446][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 1437.561722][T19294] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3465'. [ 1437.581439][T19294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3465'. [ 1437.735732][T19302] blk_print_req_error: 6 callbacks suppressed [ 1437.735755][T19302] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1437.796578][T19302] buffer_io_error: 6 callbacks suppressed [ 1437.796598][T19302] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1437.837494][T19302] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1437.847358][T19302] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1437.863087][T19302] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1437.913162][T17117] usbhid 10-1:0.0: can't add hid device: -71 [ 1437.919416][T17117] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1437.943283][ T5909] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1437.969242][T19302] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1437.981236][T19302] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1437.990992][T19302] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1438.034826][T19302] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1438.073142][T19302] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1438.108697][T19302] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1438.122022][T19302] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1438.136505][T19302] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1438.148119][T19302] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1438.263268][T19302] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1438.275269][T19302] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1438.285300][T19302] ldm_validate_partition_table(): Disk read failed. [ 1438.293115][T19302] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1438.302693][T19302] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1438.311333][T17117] usb 10-1: USB disconnect, device number 7 [ 1438.322722][T19302] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1438.332209][T19302] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1438.343975][T19302] Dev nbd0: unable to read RDB block 0 [ 1438.354837][T19302] nbd0: unable to read partition table [ 1438.562562][T19302] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3468'. [ 1438.592868][T19302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3468'. [ 1438.725801][ T5909] usb 9-1: USB disconnect, device number 16 [ 1440.574137][T19321] netlink: 'syz.0.3473': attribute type 4 has an invalid length. [ 1444.045230][T19346] trusted_key: encrypted_key: insufficient parameters specified [ 1446.915440][T19378] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1447.193524][T10443] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1447.899007][T10443] usb 10-1: Using ep0 maxpacket: 8 [ 1447.945616][T10443] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 1447.980852][T10443] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 1448.067846][T10443] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1448.185599][T10443] usb 10-1: config 250 has no interface number 0 [ 1448.234611][T10443] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1448.295128][T10443] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1448.482554][T10443] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1448.502521][T10443] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1448.574517][T10443] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1448.602626][T10443] usb 10-1: config 250 interface 228 has no altsetting 0 [ 1448.740090][T10443] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1448.749447][T10443] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1448.757876][T10443] usb 10-1: Product: syz [ 1448.762146][T10443] usb 10-1: SerialNumber: syz [ 1449.741116][T10443] hub 10-1:250.228: bad descriptor, ignoring hub [ 1449.802511][T10443] hub 10-1:250.228: probe with driver hub failed with error -5 [ 1449.825559][T10443] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1450.191136][T19411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.284694][T19411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.769798][T19415] trusted_key: encrypted_key: insufficient parameters specified [ 1452.986595][ T5909] usb 10-1: USB disconnect, device number 8 [ 1452.998514][ T5909] usblp0: removed [ 1453.272058][T19430] xt_connbytes: Forcing CT accounting to be enabled [ 1453.289315][T19430] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1453.341074][T19434] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3506'. [ 1453.352092][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3506'. [ 1454.047470][T19433] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1454.060717][ T974] IPVS: starting estimator thread 0... [ 1454.153144][T19443] IPVS: using max 24 ests per chain, 57600 per kthread [ 1454.197706][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1454.197719][ T29] audit: type=1326 audit(2000000521.672:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19444 comm="syz.0.3509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8abeb85d29 code=0x7ffc0000 [ 1454.273953][ T29] audit: type=1326 audit(2000000521.712:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19444 comm="syz.0.3509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8abeb84690 code=0x7ffc0000 [ 1454.317944][ T29] audit: type=1326 audit(2000000521.712:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19444 comm="syz.0.3509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8abeb87557 code=0x7ffc0000 [ 1454.395506][ T29] audit: type=1326 audit(2000000521.712:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19444 comm="syz.0.3509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8abeb85d29 code=0x7ffc0000 [ 1454.481141][ T29] audit: type=1326 audit(2000000521.712:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19444 comm="syz.0.3509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8abeb87557 code=0x7ffc0000 [ 1454.502774][ C0] vkms_vblank_simulate: vblank timer overrun [ 1454.621944][T19456] trusted_key: encrypted_key: insufficient parameters specified [ 1455.031873][ T29] audit: type=1326 audit(2000000521.712:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19444 comm="syz.0.3509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8abeb8498a code=0x7ffc0000 [ 1455.166118][ T29] audit: type=1326 audit(2000000521.712:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19444 comm="syz.0.3509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8abeb85d29 code=0x7ffc0000 [ 1455.351235][ T29] audit: type=1326 audit(2000000521.712:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19444 comm="syz.0.3509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f8abeb85d29 code=0x7ffc0000 [ 1455.465190][ T29] audit: type=1326 audit(2000000521.712:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19444 comm="syz.0.3509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8abeb85d29 code=0x7ffc0000 [ 1455.532107][ T29] audit: type=1326 audit(2000000521.712:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19444 comm="syz.0.3509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8abeb85d29 code=0x7ffc0000 [ 1459.393906][T19492] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3524'. [ 1459.823710][T19499] FAULT_INJECTION: forcing a failure. [ 1459.823710][T19499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1460.021314][T19500] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3525'. [ 1460.031429][T19500] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3525'. [ 1460.178438][T19499] CPU: 1 UID: 0 PID: 19499 Comm: syz.9.3526 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1460.189251][T19499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1460.199339][T19499] Call Trace: [ 1460.202637][T19499] [ 1460.205594][T19499] dump_stack_lvl+0x241/0x360 [ 1460.210304][T19499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1460.215523][T19499] ? __pfx__printk+0x10/0x10 [ 1460.220166][T19499] ? snprintf+0xda/0x120 [ 1460.224435][T19499] should_fail_ex+0x3b0/0x4e0 [ 1460.229149][T19499] _copy_to_user+0x31/0xb0 [ 1460.233599][T19499] simple_read_from_buffer+0xca/0x150 [ 1460.239005][T19499] proc_fail_nth_read+0x1e9/0x250 [ 1460.244035][T19499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1460.249667][T19499] ? rw_verify_area+0x55e/0x6f0 [ 1460.254539][T19499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1460.260096][T19499] vfs_read+0x1fc/0xb70 [ 1460.264275][T19499] ? __pfx___mutex_lock+0x10/0x10 [ 1460.269294][T19499] ? __pfx_vfs_read+0x10/0x10 [ 1460.273973][T19499] ? __fget_files+0x2a/0x410 [ 1460.278562][T19499] ? __fget_files+0x395/0x410 [ 1460.283227][T19499] ? __fget_files+0x2a/0x410 [ 1460.287814][T19499] ksys_read+0x18f/0x2b0 [ 1460.292051][T19499] ? __pfx_ksys_read+0x10/0x10 [ 1460.296805][T19499] ? do_syscall_64+0x100/0x230 [ 1460.301576][T19499] ? do_syscall_64+0xb6/0x230 [ 1460.306252][T19499] do_syscall_64+0xf3/0x230 [ 1460.310745][T19499] ? clear_bhb_loop+0x35/0x90 [ 1460.315435][T19499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.321319][T19499] RIP: 0033:0x7fbab118473c [ 1460.325726][T19499] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1460.345319][T19499] RSP: 002b:00007fbaaeff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1460.353717][T19499] RAX: ffffffffffffffda RBX: 00007fbab1375fa0 RCX: 00007fbab118473c [ 1460.361676][T19499] RDX: 000000000000000f RSI: 00007fbaaeff60a0 RDI: 0000000000000004 [ 1460.369635][T19499] RBP: 00007fbaaeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1460.377593][T19499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1460.385546][T19499] R13: 0000000000000000 R14: 00007fbab1375fa0 R15: 00007ffd1bb6de78 [ 1460.393513][T19499] [ 1460.983100][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3529'. [ 1461.100227][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3529'. [ 1462.024138][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3529'. [ 1462.114580][T19516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1467.125666][ T5917] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1467.321583][ T5917] usb 9-1: Using ep0 maxpacket: 16 [ 1467.470642][ T5917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1467.540818][ T5917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.703199][ T5917] usb 9-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 1468.118391][ T5917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.155241][ T5917] usb 9-1: config 0 descriptor?? [ 1468.898594][ T5917] apple 0003:05AC:0274.0013: unknown main item tag 0x0 [ 1468.974721][ T5917] apple 0003:05AC:0274.0013: hidraw0: USB HID v0.00 Device [HID 05ac:0274] on usb-dummy_hcd.8-1/input0 [ 1469.306810][ T5917] usb 9-1: USB disconnect, device number 17 [ 1470.263101][T19571] macvtap1: entered promiscuous mode [ 1470.268648][T19571] macvtap1: entered allmulticast mode [ 1470.289837][T19571] vlan0: entered allmulticast mode [ 1470.300461][T19571] veth0_vlan: entered allmulticast mode [ 1470.307399][T19571] vlan0: entered promiscuous mode [ 1470.497280][T19580] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1470.615501][T19571] team0: Device macvtap1 failed to register rx_handler [ 1470.832512][T19571] vlan0: left allmulticast mode [ 1470.837538][T19571] veth0_vlan: left allmulticast mode [ 1470.895480][T19571] vlan0: left promiscuous mode [ 1470.929374][T19586] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3550'. [ 1471.083496][T19586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3550'. [ 1472.785230][T19599] netlink: 'syz.0.3554': attribute type 4 has an invalid length. [ 1474.615318][T19610] blk_print_req_error: 6 callbacks suppressed [ 1474.615338][T19610] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1474.645410][T19610] buffer_io_error: 6 callbacks suppressed [ 1474.645474][T19610] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1474.678480][T19610] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1474.723271][T19610] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1474.733787][T19610] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1474.743426][T19610] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1474.764493][T19610] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1474.774245][T19610] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1474.781903][T19612] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3556'. [ 1474.782281][T19610] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1474.807121][T19610] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1474.832809][T19610] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1474.843375][T19610] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1474.860288][T19610] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1474.932237][T19610] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1474.948267][T19610] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1474.958205][T19610] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1474.968316][T19610] ldm_validate_partition_table(): Disk read failed. [ 1474.985335][T19610] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1474.994683][T19610] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1475.008848][T19610] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1475.018271][T19610] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1475.031717][T19610] Dev nbd0: unable to read RDB block 0 [ 1475.039895][T19610] nbd0: unable to read partition table [ 1475.728191][T19615] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3557'. [ 1475.738087][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3557'. [ 1476.841379][T19627] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3559'. [ 1478.992579][T19640] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3563'. [ 1479.009283][T19640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3563'. [ 1479.613264][T19647] netlink: 'syz.1.3565': attribute type 4 has an invalid length. [ 1479.711114][T19649] trusted_key: encrypted_key: insufficient parameters specified [ 1480.368905][T19650] netlink: 'syz.1.3565': attribute type 4 has an invalid length. [ 1480.442789][T19647] infiniband sz1: set down [ 1480.449758][T17117] hpH^e$ speed is unknown, defaulting to 1000 [ 1480.459243][T17117] hpH^e$ speed is unknown, defaulting to 1000 [ 1480.522029][T19643] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3564'. [ 1480.531330][T19643] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3564'. [ 1480.602196][T19650] infiniband sz1: set active [ 1480.632169][T19234] hpH^e$ speed is unknown, defaulting to 1000 [ 1480.639682][T10443] hpH^e$ speed is unknown, defaulting to 1000 [ 1480.647508][ T974] hpH^e$ speed is unknown, defaulting to 1000 [ 1480.665797][T10443] hpH^e$ speed is unknown, defaulting to 1000 [ 1480.785059][T19655] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1480.974885][T19663] netlink: 'syz.0.3569': attribute type 14 has an invalid length. [ 1482.602677][T19687] blk_print_req_error: 6 callbacks suppressed [ 1482.602696][T19687] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1482.618041][T19687] buffer_io_error: 6 callbacks suppressed [ 1482.618092][T19687] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1482.665249][T19687] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1482.701057][T19687] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1482.840861][T19687] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1482.850051][T19687] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1482.859382][T19687] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1482.868677][T19687] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1482.877950][T19687] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1482.888575][T19687] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1482.900270][T19692] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3575'. [ 1482.912181][T19692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3575'. [ 1482.923961][T19687] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1482.933586][T19687] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1482.945730][T19687] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1482.955021][T19687] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1482.964831][T19687] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1482.974456][T19687] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1482.983046][T19687] ldm_validate_partition_table(): Disk read failed. [ 1482.991394][T19687] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1483.002628][T19687] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1483.011819][T19687] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1483.022149][T19687] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1483.032285][T19687] Dev nbd0: unable to read RDB block 0 [ 1483.040966][T19687] nbd0: unable to read partition table [ 1484.068514][T19700] trusted_key: encrypted_key: insufficient parameters specified [ 1484.775236][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.692835][T19712] Cache volume key already in use (9p,(null),) [ 1486.778368][T19723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1487.468845][T10443] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1488.030675][T10443] usb 9-1: Using ep0 maxpacket: 8 [ 1488.251368][T10443] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1488.280366][T10443] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 1488.321240][T10443] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.342103][T10443] usb 9-1: config 0 descriptor?? [ 1489.203373][T19753] 9pnet_fd: Insufficient options for proto=fd [ 1489.314006][T19736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.430774][T19736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.058396][T10443] corsair-psu 0003:1B1C:1C0D.0014: unknown main item tag 0x0 [ 1490.088569][T10443] corsair-psu 0003:1B1C:1C0D.0014: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.8-1/input0 [ 1490.190349][T10443] corsair-psu 0003:1B1C:1C0D.0014: unable to initialize device (-38) [ 1490.221693][T10443] corsair-psu 0003:1B1C:1C0D.0014: probe with driver corsair-psu failed with error -38 [ 1490.247652][T19759] netlink: 'syz.0.3597': attribute type 8 has an invalid length. [ 1490.271741][ T8816] Bluetooth: hci0: Frame reassembly failed (-84) [ 1490.292944][T10443] usb 9-1: USB disconnect, device number 18 [ 1490.301872][T19770] FAULT_INJECTION: forcing a failure. [ 1490.301872][T19770] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.384446][T19770] CPU: 0 UID: 0 PID: 19770 Comm: syz.6.3600 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1490.395277][T19770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1490.405371][T19770] Call Trace: [ 1490.408673][T19770] [ 1490.411616][T19770] dump_stack_lvl+0x241/0x360 [ 1490.416304][T19770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1490.421512][T19770] ? __pfx__printk+0x10/0x10 [ 1490.426201][T19770] ? fs_reclaim_acquire+0x93/0x130 [ 1490.431319][T19770] ? __pfx___might_resched+0x10/0x10 [ 1490.436636][T19770] should_fail_ex+0x3b0/0x4e0 [ 1490.441330][T19770] should_failslab+0xac/0x100 [ 1490.446015][T19770] __kmalloc_noprof+0xdd/0x4c0 [ 1490.450773][T19770] ? tomoyo_encode+0x26f/0x540 [ 1490.455538][T19770] tomoyo_encode+0x26f/0x540 [ 1490.460132][T19770] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1490.465773][T19770] tomoyo_path_number_perm+0x236/0x860 [ 1490.471241][T19770] ? __lock_acquire+0x1397/0x2100 [ 1490.476355][T19770] ? tomoyo_path_number_perm+0x206/0x860 [ 1490.482002][T19770] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1490.488007][T19770] ? __pfx_lock_release+0x10/0x10 [ 1490.493034][T19770] ? __fget_files+0x2a/0x410 [ 1490.497676][T19770] ? __fget_files+0x2a/0x410 [ 1490.502287][T19770] security_file_ioctl+0xc6/0x2a0 [ 1490.507319][T19770] __se_sys_ioctl+0x46/0x170 [ 1490.511923][T19770] do_syscall_64+0xf3/0x230 [ 1490.516433][T19770] ? clear_bhb_loop+0x35/0x90 [ 1490.521108][T19770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.527003][T19770] RIP: 0033:0x7f25d2585d29 [ 1490.531418][T19770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1490.551024][T19770] RSP: 002b:00007f25d3393038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1490.559525][T19770] RAX: ffffffffffffffda RBX: 00007f25d2775fa0 RCX: 00007f25d2585d29 [ 1490.567505][T19770] RDX: 00000000200002c0 RSI: 00000000c058560f RDI: 0000000000000003 [ 1490.575481][T19770] RBP: 00007f25d3393090 R08: 0000000000000000 R09: 0000000000000000 [ 1490.583451][T19770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1490.591420][T19770] R13: 0000000000000000 R14: 00007f25d2775fa0 R15: 00007ffeb50f7c68 [ 1490.599401][T19770] [ 1490.650330][T19770] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1490.657514][T19770] use of bytesused == 0 is deprecated and will be removed in the future, [ 1490.691401][T19770] use the actual size instead. [ 1492.079653][T19785] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1492.280699][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1492.298004][ T5832] Bluetooth: hci0: command 0x1003 tx timeout [ 1492.381370][ T8] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1492.790733][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1492.814218][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1492.885173][ T8] usb 9-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 1493.400671][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.447343][ T8] usb 9-1: config 0 descriptor?? [ 1493.735779][T19803] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3610'. [ 1494.131266][ T8] wacom 0003:056A:032A.0015: unknown main item tag 0x0 [ 1494.293701][ T8] wacom 0003:056A:032A.0015: unknown main item tag 0x0 [ 1494.351244][ T8] wacom 0003:056A:032A.0015: unknown main item tag 0x0 [ 1494.465000][ T8] wacom 0003:056A:032A.0015: unknown main item tag 0x0 [ 1494.473014][ T8] wacom 0003:056A:032A.0015: unknown main item tag 0x0 [ 1494.491293][ T8] wacom 0003:056A:032A.0015: hidraw0: USB HID v0.00 Device [HID 056a:032a] on usb-dummy_hcd.8-1/input0 [ 1494.538233][ T8] usb 9-1: USB disconnect, device number 19 [ 1496.466882][ T8] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1496.825369][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 1497.039919][ T8] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1497.049418][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1497.069576][ T8] usb 7-1: Product: syz [ 1497.073957][ T8] usb 7-1: Manufacturer: syz [ 1497.078571][ T8] usb 7-1: SerialNumber: syz [ 1497.206442][ T8] usb 7-1: config 0 descriptor?? [ 1497.923759][ T8] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1498.475895][ T8] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1498.512622][ T8] sq905 7-1:0.0: probe with driver sq905 failed with error -71 [ 1498.552943][ T8] usb 7-1: USB disconnect, device number 23 [ 1498.642849][T19863] Process accounting resumed [ 1505.425294][T19912] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3642'. [ 1505.530276][T19915] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3643'. [ 1511.329183][T19965] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3658'. [ 1511.431524][T19957] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3657'. [ 1511.440652][T19957] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3657'. [ 1511.835371][T19972] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3659'. [ 1511.876425][T19972] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3659'. [ 1514.843345][T20005] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3667'. [ 1514.857147][T20005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3667'. [ 1516.648025][ T5906] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1517.049079][ T5906] usb 7-1: Using ep0 maxpacket: 32 [ 1517.109433][ T5906] usb 7-1: config 3 has an invalid interface number: 227 but max is 0 [ 1517.129979][ T5906] usb 7-1: config 3 has no interface number 0 [ 1517.141253][ T5906] usb 7-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=8a.99 [ 1517.161598][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.202903][ T5906] usb 7-1: Product: syz [ 1517.207127][ T5906] usb 7-1: Manufacturer: syz [ 1517.307322][ T5906] usb 7-1: SerialNumber: syz [ 1517.339865][ T5906] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1517.348074][ T5906] cxusb: set interface failed [ 1517.366534][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 1517.375836][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1517.389145][ T5906] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1517.409183][ T5906] usb 7-1: media controller created [ 1517.434256][T20028] 9pnet_fd: Insufficient options for proto=fd [ 1517.454986][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1517.767806][ T5906] DVB: Unable to find symbol lgdt330x_attach() [ 1517.793213][ T5906] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1518.750908][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 1518.756899][ T5906] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1519.009592][ T5906] usb 7-1: USB disconnect, device number 24 [ 1519.112227][ T5906] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1519.887153][T20057] GUP no longer grows the stack in syz.0.3684 (20057): 20004000-2000a000 (20002000) [ 1519.910044][T20057] CPU: 0 UID: 0 PID: 20057 Comm: syz.0.3684 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1519.920847][T20057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1519.930900][T20057] Call Trace: [ 1519.934172][T20057] [ 1519.937096][T20057] dump_stack_lvl+0x241/0x360 [ 1519.941782][T20057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1519.946976][T20057] ? __pfx__printk+0x10/0x10 [ 1519.951565][T20057] ? find_vma+0xf9/0x170 [ 1519.955825][T20057] __get_user_pages+0x4385/0x49e0 [ 1519.960863][T20057] ? __lock_acquire+0x1397/0x2100 [ 1519.965908][T20057] ? __pfx___get_user_pages+0x10/0x10 [ 1519.971314][T20057] get_user_pages_remote+0x31e/0xb60 [ 1519.976608][T20057] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1519.982418][T20057] ? __access_remote_vm+0x320/0x800 [ 1519.987617][T20057] __access_remote_vm+0x229/0x800 [ 1519.992642][T20057] ? __pfx___access_remote_vm+0x10/0x10 [ 1519.998181][T20057] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1520.003400][T20057] ? alloc_pages_noprof+0xef/0x170 [ 1520.008516][T20057] proc_pid_cmdline_read+0x5b2/0x860 [ 1520.013811][T20057] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1520.019622][T20057] ? rw_verify_area+0x55e/0x6f0 [ 1520.024558][T20057] vfs_readv+0x6bc/0xa80 [ 1520.028798][T20057] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1520.034600][T20057] ? __pfx_vfs_readv+0x10/0x10 [ 1520.039370][T20057] ? __fget_files+0x2a/0x410 [ 1520.043955][T20057] ? __fget_files+0x395/0x410 [ 1520.048626][T20057] ? __fget_files+0x2a/0x410 [ 1520.053216][T20057] __x64_sys_preadv+0x1b7/0x2d0 [ 1520.058075][T20057] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1520.063449][T20057] ? do_syscall_64+0x100/0x230 [ 1520.068218][T20057] ? do_syscall_64+0xb6/0x230 [ 1520.072904][T20057] do_syscall_64+0xf3/0x230 [ 1520.077409][T20057] ? clear_bhb_loop+0x35/0x90 [ 1520.082084][T20057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.087996][T20057] RIP: 0033:0x7f8abeb85d29 [ 1520.092407][T20057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1520.112006][T20057] RSP: 002b:00007f8abc9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1520.120418][T20057] RAX: ffffffffffffffda RBX: 00007f8abed76080 RCX: 00007f8abeb85d29 [ 1520.128388][T20057] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 1520.136361][T20057] RBP: 00007f8abec01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1520.144328][T20057] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1520.152293][T20057] R13: 0000000000000000 R14: 00007f8abed76080 R15: 00007ffcb3a8ff48 [ 1520.160278][T20057] [ 1520.327249][T20068] blk_print_req_error: 6 callbacks suppressed [ 1520.327270][T20068] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1520.343191][T20068] buffer_io_error: 6 callbacks suppressed [ 1520.343208][T20068] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1520.408380][T20068] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1520.418780][T20068] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1520.427864][T20068] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1520.437826][T20068] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1520.447981][T20068] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1520.457558][T20068] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1520.465880][ T5906] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1520.476803][T20068] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1520.487255][T20068] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1520.496900][T20068] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1520.506501][T20068] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1520.517582][T20068] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1520.527578][T20068] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1520.538491][T20068] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1520.548047][T20068] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1520.558027][T20068] ldm_validate_partition_table(): Disk read failed. [ 1520.567072][T20068] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1520.576637][T20068] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1520.587655][T20068] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1520.597619][T20068] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1520.608781][T20068] Dev nbd0: unable to read RDB block 0 [ 1520.618725][T20068] nbd0: unable to read partition table [ 1520.757826][T20068] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3688'. [ 1520.768352][T20068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3688'. [ 1521.108462][ T5906] usb 9-1: Using ep0 maxpacket: 16 [ 1521.115825][ T5906] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1521.127070][ T5906] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1521.144095][ T5906] usb 9-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 1521.155966][ T5906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.177114][ T5906] usb 9-1: config 0 descriptor?? [ 1521.449268][T20071] netlink: 'syz.0.3689': attribute type 33 has an invalid length. [ 1521.607007][T20075] sctp: [Deprecated]: syz.0.3689 (pid 20075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1521.607007][T20075] Use struct sctp_sack_info instead [ 1521.644804][ T5906] wacom 0003:056A:00D0.0016: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 1521.661984][ T5906] wacom 0003:056A:00D0.0016: hidraw0: USB HID v0.36 Device [HID 056a:00d0] on usb-dummy_hcd.8-1/input0 [ 1521.680220][ T5906] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:00D0.0016/input/input22 [ 1521.725976][T20071] 9pnet_fd: Insufficient options for proto=fd [ 1522.846143][ T5906] usb 9-1: USB disconnect, device number 20 [ 1523.658367][ T5906] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1523.852283][ T5906] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1523.877329][ T5906] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.916144][ T5906] usb 9-1: Product: syz [ 1523.948446][ T5906] usb 9-1: Manufacturer: syz [ 1523.961229][ T5906] usb 9-1: SerialNumber: syz [ 1523.985674][ T5906] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1524.839149][ T974] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1526.038281][ T974] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1526.045820][ T974] ath9k_htc: Failed to initialize the device [ 1526.187928][ T974] usb 9-1: ath9k_htc: USB layer deinitialized [ 1527.704667][T20107] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3699'. [ 1528.017359][T20107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3699'. [ 1528.122422][ T5906] usb 9-1: USB disconnect, device number 21 [ 1528.129222][T20113] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3701'. [ 1528.276005][T20120] loop2: detected capacity change from 0 to 7 [ 1528.309211][T20120] Dev loop2: unable to read RDB block 7 [ 1528.325061][T20120] loop2: unable to read partition table [ 1528.335856][T20120] loop2: partition table beyond EOD, truncated [ 1528.371555][T20120] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1528.456622][T20125] binder_alloc: 20124: binder_alloc_buf, no vma [ 1529.004543][T20140] /dev/nullb0: Can't open blockdev [ 1529.036729][T20141] /dev/nullb0: Can't open blockdev [ 1530.006864][T20153] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3717'. [ 1530.018570][T20158] netlink: 'syz.9.3718': attribute type 1 has an invalid length. [ 1530.148074][ T974] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1530.340870][ T974] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1530.369067][ T974] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1530.381055][ T974] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1530.406675][ T974] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1530.422104][T20171] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3724'. [ 1530.434127][ T974] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1530.471227][ T974] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1530.480952][ T974] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1530.498638][ T974] usb 2-1: Product: syz [ 1530.508327][ T974] usb 2-1: Manufacturer: syz [ 1530.531055][ T974] cdc_wdm 2-1:1.0: skipping garbage [ 1530.537117][ T974] cdc_wdm 2-1:1.0: skipping garbage [ 1530.559030][ T974] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1530.602864][ T974] cdc_wdm 2-1:1.0: Unknown control protocol [ 1531.471766][T20187] [ 1531.474156][T20187] ====================================================== [ 1531.481185][T20187] WARNING: possible circular locking dependency detected [ 1531.488218][T20187] 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 Not tainted [ 1531.495345][T20187] ------------------------------------------------------ [ 1531.502371][T20187] syz.9.3728/20187 is trying to acquire lock: [ 1531.508444][T20187] ffff888029cb1e60 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaa/0x120 [ 1531.517347][T20187] [ 1531.517347][T20187] but task is already holding lock: [ 1531.524715][T20187] ffff888142fd6120 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xdd/0x9a0 [ 1531.534034][T20187] [ 1531.534034][T20187] which lock already depends on the new lock. [ 1531.534034][T20187] [ 1531.544434][T20187] [ 1531.544434][T20187] the existing dependency chain (in reverse order) is: [ 1531.553437][T20187] [ 1531.553437][T20187] -> #5 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1531.561253][T20187] lock_acquire+0x1ed/0x550 [ 1531.566274][T20187] __mutex_lock+0x1ac/0xee0 [ 1531.571298][T20187] blk_mq_init_sched+0x3fa/0x830 [ 1531.576749][T20187] elevator_init_mq+0x20e/0x320 [ 1531.582155][T20187] add_disk_fwnode+0x10d/0xf80 [ 1531.587436][T20187] sd_probe+0xba6/0x1100 [ 1531.592190][T20187] really_probe+0x2b8/0xad0 [ 1531.597210][T20187] __driver_probe_device+0x1a2/0x390 [ 1531.603024][T20187] driver_probe_device+0x50/0x430 [ 1531.608563][T20187] __device_attach_driver+0x2d6/0x530 [ 1531.614445][T20187] bus_for_each_drv+0x24e/0x2e0 [ 1531.619811][T20187] __device_attach_async_helper+0x22d/0x300 [ 1531.626219][T20187] async_run_entry_fn+0xa8/0x420 [ 1531.631682][T20187] process_scheduled_works+0xa66/0x1840 [ 1531.637751][T20187] worker_thread+0x870/0xd30 [ 1531.642869][T20187] kthread+0x2f0/0x390 [ 1531.647489][T20187] ret_from_fork+0x4b/0x80 [ 1531.652424][T20187] ret_from_fork_asm+0x1a/0x30 [ 1531.657712][T20187] [ 1531.657712][T20187] -> #4 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 1531.666584][T20187] lock_acquire+0x1ed/0x550 [ 1531.671608][T20187] blk_queue_enter+0xe1/0x600 [ 1531.676807][T20187] blk_mq_alloc_request+0x4fa/0xaa0 [ 1531.682523][T20187] scsi_execute_cmd+0x16c/0x10e0 [ 1531.688004][T20187] read_capacity_16+0x2b4/0x1450 [ 1531.693472][T20187] sd_revalidate_disk+0x1013/0xbce0 [ 1531.699187][T20187] sd_probe+0x9fa/0x1100 [ 1531.703951][T20187] really_probe+0x2b8/0xad0 [ 1531.708970][T20187] __driver_probe_device+0x1a2/0x390 [ 1531.714769][T20187] driver_probe_device+0x50/0x430 [ 1531.720311][T20187] __device_attach_driver+0x2d6/0x530 [ 1531.726199][T20187] bus_for_each_drv+0x24e/0x2e0 [ 1531.731569][T20187] __device_attach_async_helper+0x22d/0x300 [ 1531.737983][T20187] async_run_entry_fn+0xa8/0x420 [ 1531.743437][T20187] process_scheduled_works+0xa66/0x1840 [ 1531.749503][T20187] worker_thread+0x870/0xd30 [ 1531.754605][T20187] kthread+0x2f0/0x390 [ 1531.759187][T20187] ret_from_fork+0x4b/0x80 [ 1531.764115][T20187] ret_from_fork_asm+0x1a/0x30 [ 1531.769418][T20187] [ 1531.769418][T20187] -> #3 (&q->limits_lock){+.+.}-{4:4}: [ 1531.777069][T20187] lock_acquire+0x1ed/0x550 [ 1531.782106][T20187] __mutex_lock+0x1ac/0xee0 [ 1531.787145][T20187] nbd_set_size+0x2e0/0x8f0 [ 1531.792184][T20187] nbd_genl_connect+0x157c/0x1c80 [ 1531.797730][T20187] genl_rcv_msg+0xb14/0xec0 [ 1531.802758][T20187] netlink_rcv_skb+0x1e3/0x430 [ 1531.808035][T20187] genl_rcv+0x28/0x40 [ 1531.812531][T20187] netlink_unicast+0x7f6/0x990 [ 1531.817807][T20187] netlink_sendmsg+0x8e4/0xcb0 [ 1531.823082][T20187] __sock_sendmsg+0x221/0x270 [ 1531.828305][T20187] ____sys_sendmsg+0x52a/0x7e0 [ 1531.833589][T20187] __sys_sendmsg+0x269/0x350 [ 1531.838705][T20187] do_syscall_64+0xf3/0x230 [ 1531.843730][T20187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.850138][T20187] [ 1531.850138][T20187] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1531.858836][T20187] lock_acquire+0x1ed/0x550 [ 1531.863852][T20187] blk_mq_submit_bio+0x1536/0x2390 [ 1531.869473][T20187] __submit_bio+0x2c6/0x560 [ 1531.874488][T20187] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 1531.880631][T20187] mpage_readahead+0x630/0x780 [ 1531.885910][T20187] read_pages+0x176/0x750 [ 1531.890756][T20187] page_cache_ra_unbounded+0x606/0x720 [ 1531.896732][T20187] page_cache_sync_ra+0x3c5/0xad0 [ 1531.902272][T20187] filemap_get_pages+0x605/0x2080 [ 1531.907818][T20187] filemap_read+0x452/0xf50 [ 1531.912836][T20187] blkdev_read_iter+0x2d8/0x430 [ 1531.918199][T20187] vfs_read+0x991/0xb70 [ 1531.922865][T20187] ksys_read+0x18f/0x2b0 [ 1531.927616][T20187] do_syscall_64+0xf3/0x230 [ 1531.932633][T20187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.939047][T20187] [ 1531.939047][T20187] -> #1 (mapping.invalidate_lock#2){++++}-{4:4}: [ 1531.947566][T20187] lock_acquire+0x1ed/0x550 [ 1531.952580][T20187] down_read+0xb1/0xa40 [ 1531.957247][T20187] filemap_fault+0x615/0x1490 [ 1531.962433][T20187] __do_fault+0x135/0x390 [ 1531.967280][T20187] handle_pte_fault+0x39eb/0x5ed0 [ 1531.972819][T20187] handle_mm_fault+0x1053/0x1ad0 [ 1531.978283][T20187] __get_user_pages+0x1c82/0x49e0 [ 1531.983821][T20187] populate_vma_page_range+0x264/0x330 [ 1531.989801][T20187] __mm_populate+0x27a/0x460 [ 1531.994907][T20187] vm_mmap_pgoff+0x2c3/0x3d0 [ 1532.000008][T20187] ksys_mmap_pgoff+0x4eb/0x720 [ 1532.005285][T20187] do_syscall_64+0xf3/0x230 [ 1532.010316][T20187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.016729][T20187] [ 1532.016729][T20187] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 1532.024281][T20187] validate_chain+0x18ef/0x5920 [ 1532.029649][T20187] __lock_acquire+0x1397/0x2100 [ 1532.035007][T20187] lock_acquire+0x1ed/0x550 [ 1532.040026][T20187] __might_fault+0xc6/0x120 [ 1532.045137][T20187] _copy_from_user+0x2a/0xc0 [ 1532.050247][T20187] blk_trace_ioctl+0x1ad/0x9a0 [ 1532.055523][T20187] blkdev_ioctl+0x40c/0x6a0 [ 1532.060540][T20187] __se_sys_ioctl+0xf5/0x170 [ 1532.065644][T20187] do_syscall_64+0xf3/0x230 [ 1532.070667][T20187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.077076][T20187] [ 1532.077076][T20187] other info that might help us debug this: [ 1532.077076][T20187] [ 1532.087287][T20187] Chain exists of: [ 1532.087287][T20187] &mm->mmap_lock --> &q->q_usage_counter(queue)#50 --> &q->debugfs_mutex [ 1532.087287][T20187] [ 1532.101628][T20187] Possible unsafe locking scenario: [ 1532.101628][T20187] [ 1532.109066][T20187] CPU0 CPU1 [ 1532.114416][T20187] ---- ---- [ 1532.119769][T20187] lock(&q->debugfs_mutex); [ 1532.124355][T20187] lock(&q->q_usage_counter(queue)#50); [ 1532.132512][T20187] lock(&q->debugfs_mutex); [ 1532.139617][T20187] rlock(&mm->mmap_lock); [ 1532.144027][T20187] [ 1532.144027][T20187] *** DEADLOCK *** [ 1532.144027][T20187] [ 1532.152254][T20187] 1 lock held by syz.9.3728/20187: [ 1532.157354][T20187] #0: ffff888142fd6120 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xdd/0x9a0 [ 1532.167190][T20187] [ 1532.167190][T20187] stack backtrace: [ 1532.173065][T20187] CPU: 1 UID: 0 PID: 20187 Comm: syz.9.3728 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1532.183814][T20187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1532.193869][T20187] Call Trace: [ 1532.197154][T20187] [ 1532.200078][T20187] dump_stack_lvl+0x241/0x360 [ 1532.204756][T20187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1532.209947][T20187] ? __pfx__printk+0x10/0x10 [ 1532.214550][T20187] print_circular_bug+0x13a/0x1b0 [ 1532.219685][T20187] check_noncircular+0x36a/0x4a0 [ 1532.224647][T20187] ? __pfx_check_noncircular+0x10/0x10 [ 1532.230118][T20187] ? lockdep_lock+0x123/0x2b0 [ 1532.234803][T20187] validate_chain+0x18ef/0x5920 [ 1532.239660][T20187] ? is_bpf_text_address+0x26/0x2a0 [ 1532.244865][T20187] ? 0xffffffffa0001d50 [ 1532.249016][T20187] ? 0xffffffffa0001d50 [ 1532.253162][T20187] ? __pfx_validate_chain+0x10/0x10 [ 1532.258447][T20187] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1532.264600][T20187] ? kernel_text_address+0xa7/0xe0 [ 1532.269708][T20187] ? mark_lock+0x9a/0x360 [ 1532.274035][T20187] ? __lock_acquire+0x1397/0x2100 [ 1532.279050][T20187] ? string+0x26a/0x2b0 [ 1532.283204][T20187] ? widen_string+0x3a/0x310 [ 1532.287785][T20187] ? string+0x26a/0x2b0 [ 1532.291933][T20187] ? bdev_name+0x2b1/0x3c0 [ 1532.296353][T20187] ? mark_lock+0x9a/0x360 [ 1532.301110][T20187] __lock_acquire+0x1397/0x2100 [ 1532.305959][T20187] lock_acquire+0x1ed/0x550 [ 1532.310453][T20187] ? __might_fault+0xaa/0x120 [ 1532.315154][T20187] ? __pfx_lock_acquire+0x10/0x10 [ 1532.320175][T20187] ? __pfx___might_resched+0x10/0x10 [ 1532.325460][T20187] ? snprintf+0xda/0x120 [ 1532.329694][T20187] ? __pfx___mutex_lock+0x10/0x10 [ 1532.334715][T20187] ? blk_trace_ioctl+0xec/0x9a0 [ 1532.339559][T20187] ? __pfx_snprintf+0x10/0x10 [ 1532.344236][T20187] ? __might_fault+0xaa/0x120 [ 1532.348913][T20187] __might_fault+0xc6/0x120 [ 1532.353427][T20187] ? __might_fault+0xaa/0x120 [ 1532.358102][T20187] _copy_from_user+0x2a/0xc0 [ 1532.362693][T20187] blk_trace_ioctl+0x1ad/0x9a0 [ 1532.367466][T20187] ? tomoyo_path_number_perm+0x6f9/0x860 [ 1532.373104][T20187] ? tomoyo_path_number_perm+0x206/0x860 [ 1532.378734][T20187] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1532.384015][T20187] ? smack_log+0x123/0x540 [ 1532.388455][T20187] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1532.394431][T20187] ? __pfx_smack_log+0x10/0x10 [ 1532.399198][T20187] ? smk_access+0x4ab/0x4e0 [ 1532.403718][T20187] ? smack_file_ioctl+0x2f7/0x3a0 [ 1532.408747][T20187] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1532.414122][T20187] ? file_to_blk_mode+0xcc/0x140 [ 1532.419053][T20187] blkdev_ioctl+0x40c/0x6a0 [ 1532.423549][T20187] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1532.428566][T20187] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1532.433584][T20187] __se_sys_ioctl+0xf5/0x170 [ 1532.438179][T20187] do_syscall_64+0xf3/0x230 [ 1532.442683][T20187] ? clear_bhb_loop+0x35/0x90 [ 1532.447353][T20187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.453255][T20187] RIP: 0033:0x7fbab1185d29 [ 1532.457660][T20187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1532.477258][T20187] RSP: 002b:00007fbaaeff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1532.485668][T20187] RAX: ffffffffffffffda RBX: 00007fbab1375fa0 RCX: 00007fbab1185d29 [ 1532.493632][T20187] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000006 [ 1532.501592][T20187] RBP: 00007fbab1201b08 R08: 0000000000000000 R09: 0000000000000000 [ 1532.509553][T20187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1532.517516][T20187] R13: 0000000000000000 R14: 00007fbab1375fa0 R15: 00007ffd1bb6de78 [ 1532.525485][T20187] [ 1532.545477][T20179] base_sock_release(ffff88805a773c00) sk=ffff88805a9cb000 [ 1533.215445][T20194] IPVS: Scheduler module ip_vs_ not found [ 1533.584753][ T5874] usb 2-1: USB disconnect, device number 70