last executing test programs: 25m10.512276023s ago: executing program 32 (id=159): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x92000000000101d0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 24m43.500553998s ago: executing program 33 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) (async) socket$packet(0x11, 0x4000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0xd, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) io_setup(0x7, 0x0) (async) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{&(0x7f0000000240)=@qipcrtr, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f00000002c0)=""/2, 0x2}], 0x2, &(0x7f0000000480)=""/122, 0x7a}, 0x6}], 0x1, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f0000000340)=[{{&(0x7f0000000240)=@qipcrtr, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f00000002c0)=""/2, 0x2}], 0x2, &(0x7f0000000480)=""/122, 0x7a}, 0x6}], 0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, 0x0) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 24m20.588248072s ago: executing program 34 (id=216): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$ARCH_MAP_VDSO_32(0x1e, r3, 0x7fff, 0x2002) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = syz_io_uring_setup(0x274d, &(0x7f0000000240)={0x0, 0x140, 0x400, 0x0, 0x329}, &(0x7f00000002c0), &(0x7f0000000300)) r6 = fcntl$getown(r1, 0x9) get_mempolicy(&(0x7f0000000640), &(0x7f0000000680), 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x1c8, 0x13, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@typed={0x11, 0xe7, 0x0, 0x0, @str='.&)^+}*][*)/\x00'}, @nested={0xd7, 0xda, 0x0, 0x1, [@typed={0x8, 0x12a, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x4, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x113, 0x0, 0x0, @u32=0x800}, @generic="82eb5700c90bace99290802dff094d5c5be43734252eb727fb32633b9901e8f7538260a03cc2d71bc591b4d36fb152cedc3dad0bcf4cd4b10948a01fccca8f1596106a3888ae5b3c00c9240c0fa44f0e56c1d6b0e4493eccf5293d5a741edbb79f0de67b295279771780acc9f568813cfb106c5e72103187ebd8d1060379cbf5b8996b48245a62fbeaa7c01521f344ea7cb89f42fa95161d59c94efd54d641ec589a1d7cb4bda5e0135b558e3551b5428a23e3bfbcaf17", @typed={0x4, 0xee}]}, @typed={0x8, 0xe9, 0x0, 0x0, @pid=r6}, @generic="0cc126e216a2ddfd5109ec7cf133e949eb49dee2ad4f9b4b3654ac5e90d1638d0aa353ccc815e2f13b413ca872e985158cc53e7d193723456e6d954caba20b8338b5e08dc48fc555036fa92e55d91773db6e0bcffe90d339ad232c398daaea817c93f0ff7bcafa32e0652e", @generic="a0c4278b822c35f4f67787cb40c3c44ddec19e8157c25ab9336cf4327c24f3d701b7b2ffbe899fc004f4c329efcad0ef7012e1d18b7a054c1fe44579ca2fa81fb4778a54a526c9289cce30410c091abda549"]}, 0x1c8}, 0x1, 0x0, 0x0, 0x8080}, 0x44090) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$SIOCAX25CTLCON(r7, 0x89e9, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, 0x0, 0x0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x40, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_MTU={0x8, 0x4, 0xc8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000884}, 0x20000004) 24m14.968061814s ago: executing program 35 (id=222): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x100000000000000}, 0x0) 24m10.533036439s ago: executing program 36 (id=226): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}, 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) utime(&(0x7f0000000200)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000100)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0xff07, 0x0, 0x0, 0x1ff, 0x0, "5f330000a90100f9"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) 19m4.824249594s ago: executing program 37 (id=529): ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000002c0)=0x4000000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) getrlimit(0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB='D', @ANYRES16=r7, @ANYBLOB="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"], 0x144}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1f8, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x779ca93a61e152dd}, @NLBL_CIPSOV4_A_MLSLVLLST={0x128, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ef43638}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ba043f1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x191d7940}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a0f0c36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c882075}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x162d0b1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31cc0d1c}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3689cad2}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x325410b5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x535f0257}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c465c69}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27fac64f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e1bec34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8db5967}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a3a2791}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55b50147}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a01ae0f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1af8cb9d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76121e07}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x264da52d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12e362cf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd61}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7077}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54e89737}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56eb63c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb61a}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40}, 0x8010) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r8, 0x5607, 0x4) 17m48.637335706s ago: executing program 38 (id=831): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000002100003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000000204000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000, 0x0, @void, @value}, 0x28) 16m14.756118213s ago: executing program 39 (id=1088): io_uring_setup(0x10000, &(0x7f0000000000)={0x0, 0x0, 0x20e0, 0xb, 0x2f4}) (async) r0 = io_uring_setup(0x2c4d, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000a000000bc000480"], 0xec}}, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xa0501, 0x0) ioctl$TCSETSF(r4, 0x541d, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001a000100000000000000000002001000000000000014000008000200640101", @ANYRES32], 0x38}}, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xd, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x48}]}]}, 0x70}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x40840) (async) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd, 0x44}}}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x11) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x78, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x59, 0x33, @beacon={{{}, {}, @broadcast, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x22, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x0, 0x0, 0x0, 0x7}}, @val={0x6, 0x2, 0x8}, @val={0x5, 0x3}, @val={0x25, 0x3, {0x0, 0xb2}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0x1, 0xd, 0x41}}, @val={0x76, 0x6, {0x0, 0x36, 0x15, 0x101}}}}]}, 0x78}}, 0x0) (async, rerun: 64) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r10, 0x58, &(0x7f0000000280)={0x0, 0x0}}, 0x10) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={r11}, 0xc) close(r12) syz_usb_connect(0x2, 0x3f, &(0x7f0000000500)=ANY=[@ANYBLOB="120110012cae9308da040d39dffa0102030109022d0001c94080010904f90403c0da26ff0905091040000300bf09050300ff03050720090512"], 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) r13 = memfd_create(&(0x7f00000002c0)='nl80211\x00', 0x4) signalfd(r13, &(0x7f0000000300)={[0x7]}, 0x8) 9m29.460009s ago: executing program 40 (id=2566): madvise(&(0x7f00003ce000/0x1000)=nil, 0x1000, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f000026c000/0x2000)=nil, 0x2000, 0x9) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x0, 0x4, 0x2, 0x2}}, 0x26) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r1, &(0x7f0000000580)="03", 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) accept4$inet6(r1, 0x0, 0x0, 0x80000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000440)='mmap_lock_acquire_returned\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0) splice(r5, 0x0, r4, 0x0, 0x7f, 0xe) write(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x100010, 0xffffffffffffffff, 0x81362000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x7c528000) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$poke(0x5, r7, &(0x7f0000000080), 0x0) 8m35.90244213s ago: executing program 6 (id=2778): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 8m35.788437044s ago: executing program 6 (id=2779): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f1114f9f407000901000000000000000005000000000800040001000000", 0x24) 8m35.604303558s ago: executing program 6 (id=2781): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r6, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20005810) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r7 = socket(0x11, 0xa, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0xa) sendmsg$can_bcm(r7, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000801) chdir(&(0x7f0000000140)='./file0\x00') ioctl$FS_IOC_GETVERSION(r7, 0x80087601, 0x0) write$rfkill(r1, 0x0, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x202, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) write$proc_mixer(r8, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES64=0x0], 0x2b) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x1c8, 0x260, 0x0, 0x260, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xf6030000, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 8m34.625711569s ago: executing program 6 (id=2785): prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x200000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) syz_emit_ethernet(0x72, &(0x7f0000000640)=ANY=[], 0x0) (async) io_uring_setup(0x8a8, &(0x7f00000005c0)={0x0, 0xd046, 0x100, 0x2, 0x18}) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200]}}}) (async) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) (async) close_range(r4, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r6, &(0x7f00000000c0)=""/44, 0x2c) (async) getdents(r6, &(0x7f0000000040)=""/44, 0x2c) getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYRES8], 0x0) 8m30.662898075s ago: executing program 6 (id=2798): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) ioctl$SNDCTL_SEQ_GETINCOUNT(r2, 0x80045105, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) socket$unix(0x1, 0x1, 0x0) r6 = add_key$user(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000700)="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", 0x13b, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000004c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000300)="d3fcd708de62b3ff27352e6ac172199fa1e1e6363efa801fab66eeefbfe7293b9450f2f0b475486f2ff4ec0e03fb044b18db", 0x32, 0xffffffffffffffff) r8 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000500)="da1103b23d6e9ec7b0960f8a45520fdee8bbafd038af5357cc2bf5969a77a332ef6c7c1a675389b16063696dee3af27a8f971dbce5b93d02d840ee08d2d124e67fa17642c4d99d45aa878237a1663a31f7ef396e4b22348c06000000ac87d8f9f5d19ceb0609e3b019c0a4814a268de5def201eb268f1dfb204aa37d70", 0x7d, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r7, r6, r8}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={'wp384\x00'}}) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="440080001000010400000000000000000000000008cd829a9858ce1479828e0c3c2285b82d57cb71771da6b6d2201c94109af82721e8e326b2f3161cead9885604e49e686c73b1a29a4992b9127039284797526811b3e61f31d553e19757efd874952519ebbcb509be59564e8a121160d9b5bb0c7b84ca876d6eaf2bf59421ef2a3bf233929dc44f4f95021ada0d20adb16528bc9a", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB], 0x44}}, 0x0) 8m29.644803145s ago: executing program 6 (id=2800): r0 = socket(0x10, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @empty}}}}) 8m14.513363865s ago: executing program 41 (id=2800): r0 = socket(0x10, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @empty}}}}) 8m5.664106408s ago: executing program 5 (id=2888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087000100000001fc0200000000000000000000000000000002000000000000070800000001000304000101"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone3(0x0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0), 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) msgget$private(0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x1000, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x0) 8m4.138439103s ago: executing program 5 (id=2891): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000003680)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200035c0, 0x0, 0x0, 0x200035f0, 0x20003620], 0x0, 0x0, &(0x7f00000035c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000a07debbd2251d47700000000000000000000000000000000ffffffff10000000000000000000"]}, 0xde) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r1 = socket(0x840000000002, 0x3, 0xff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) ioprio_set$pid(0x1, 0x0, 0x2000) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@none}]}) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x2200000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002200)=@newtaction={0x894, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x600}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x1ff, 0xe, 0x100, 0x2, 0x5, 0x4, 0x0, 0x9, 0x1, 0xb2, 0x8, 0x0, 0x85e2, 0xfffff000, 0x3, 0xfffff7d3, 0x4, 0x9, 0xa0, 0x7, 0x4, 0x7, 0x400, 0x8, 0x9, 0x3, 0x8, 0x8, 0x6, 0x8e9, 0x7fffffff, 0x3, 0x400, 0x3, 0xb, 0x7, 0x7, 0x0, 0x101, 0x7, 0xd, 0x3ff, 0xaf, 0xe, 0x0, 0x9, 0x8, 0x0, 0x489, 0x9, 0x3, 0xce, 0x3, 0x8, 0x7f7c, 0x80000000, 0x63b, 0x6, 0x400, 0x3, 0x5, 0x4, 0x5aa, 0x3, 0x52b, 0x7, 0xfffffffa, 0x5, 0x8, 0x8, 0xf796, 0x0, 0x5, 0x3ff, 0x29, 0x3c, 0x771c, 0x4, 0x9, 0x9, 0xaffc, 0x6, 0x101, 0x3, 0xea00, 0x100, 0x8, 0x9, 0x4, 0xfffffff3, 0x32, 0xe, 0x7ff, 0x7, 0x0, 0x0, 0x9, 0x9, 0x9, 0x6, 0x81, 0xfff, 0x6, 0xffff0001, 0x4, 0x9, 0x0, 0x8, 0x200, 0xa, 0xbde, 0xe, 0x78500, 0x3, 0x443f4d4f, 0x8, 0x1, 0x800, 0x5, 0x8, 0x8, 0xfe, 0x54b, 0xfffffffe, 0xd91e, 0x1000, 0x6, 0x5, 0xac, 0xf, 0x7, 0x8091, 0xd78, 0x9, 0x9, 0x3, 0x3, 0x26, 0x364b, 0x80, 0x99, 0x1ff, 0x800, 0xc, 0xfaaf, 0x3, 0x6, 0x98ef, 0xa6be, 0x1, 0x2, 0x8, 0xa0000, 0x80000000, 0x1ff, 0xdac, 0x8, 0xe, 0x5, 0x2, 0x2f8c, 0x10000, 0x0, 0x8, 0x8, 0x9a9, 0xffffffff, 0x3, 0x644, 0x1, 0x6, 0x1, 0xb, 0x8, 0x5, 0x8, 0x3, 0x0, 0x3, 0x8000, 0xb8b, 0x9, 0x6, 0xffff0001, 0x10001, 0x8, 0x17b, 0xcb, 0x10001, 0xc9, 0x199, 0x9, 0xf7ee, 0x5, 0x9, 0x9, 0x0, 0x5, 0x5, 0x5, 0x1, 0x4, 0x6, 0x9, 0x0, 0xb, 0xffffffff, 0x0, 0x9, 0x8, 0x8, 0x7, 0x0, 0xba, 0x3, 0x2, 0x7fffffff, 0x68b459d7, 0xff0a, 0x4183, 0x10000, 0x4, 0x0, 0x40, 0x6, 0xfff, 0x5, 0xf, 0x9, 0x40, 0xffffffff, 0x5, 0x4, 0x9, 0x9, 0x80000000, 0x7, 0x1, 0x7f, 0x8, 0xffffc166, 0x2, 0x2, 0x10, 0x1000, 0xc, 0x2726, 0x7fffffff, 0x7, 0x2, 0xffffffff, 0x7fff, 0x8, 0x1, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x10000000, 0x1, 0xdfaa, 0x3, {0x7, 0x0, 0x5, 0x3, 0x6, 0xfff}, {0x5, 0x2, 0x7b, 0x7, 0x8, 0x1}, 0x6, 0xd, 0x10001}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x9, 0xeb2, 0x2e, 0x2, 0x1, 0xc, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x0, 0xfffffffc, 0x8, 0x7ff, 0x8, 0x1b8e, 0xfe, 0x9, 0x7, 0xfffffff2, 0x5, 0x0, 0x1, 0x0, 0x1, 0x5, 0x5, 0x1, 0x5, 0x5, 0x8cf, 0x2f, 0x1829, 0x3, 0x0, 0x6, 0x64c, 0x9, 0x7, 0x2, 0x8, 0x8, 0x7ff, 0x0, 0x1, 0x4, 0x6, 0x542, 0x1, 0x286b6384, 0x9bb5, 0x8000, 0xde8, 0x9, 0x4, 0x2, 0x0, 0x6, 0x5, 0x2, 0x7, 0x7fffffff, 0x1, 0x6, 0x2, 0xbb1f, 0x40, 0x1, 0x8, 0x2, 0xfffffffe, 0x0, 0x3, 0x6, 0x4, 0x79, 0xffffffff, 0x3a, 0x80, 0x4, 0x8, 0x8, 0x6, 0xfffffffd, 0x2, 0x28662100, 0x1, 0xd3fe, 0x8, 0x9, 0x2, 0x4, 0x2, 0x5, 0x9, 0x8, 0x3, 0x564, 0x7fff, 0xc3b6, 0x200, 0x5de6, 0x8, 0x6, 0x800000, 0x1, 0x81, 0x8, 0x6, 0xd, 0x5, 0x7, 0xfffffff9, 0x7, 0x6, 0xfffffffb, 0x2, 0x100, 0x4ba, 0x7b40, 0xfffffff8, 0xc, 0x22, 0x7, 0x5, 0xfff, 0x4, 0xfffffff2, 0x5, 0xffff, 0x5, 0x6, 0x0, 0x0, 0x200, 0x40, 0x9, 0x13e, 0xff, 0x7, 0x7, 0x3, 0x720, 0xffffffff, 0xd, 0x1, 0x4c6a, 0x1, 0xc, 0x6, 0x7f, 0xa3, 0x79, 0x10000, 0x1, 0xc, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0x1, 0x9, 0x9, 0x8, 0x3, 0x5, 0xffff, 0x1, 0xffffff75, 0x8, 0x1, 0x0, 0x400, 0x2, 0x6, 0x6, 0x4, 0x3, 0x3, 0x6, 0x1, 0x2, 0x0, 0x4, 0xcf, 0x5, 0xfffffffe, 0x6, 0x8b, 0x4, 0x2000, 0x7, 0x2, 0x80, 0xc7, 0x7fffffff, 0xca, 0x9, 0x207, 0xd, 0x1, 0x2, 0x3, 0x3e6d, 0x2, 0x2, 0x6, 0x1000, 0x6, 0x5, 0x3, 0x4, 0x0, 0x1ff, 0x3, 0xfffff97b, 0x0, 0x2, 0x401, 0x80000001, 0x3, 0xfffffc00, 0xfdcb, 0x6, 0x0, 0x8, 0xfff, 0x46f, 0x1, 0x4, 0x8, 0x6, 0x7, 0xb, 0x59, 0xe, 0xb6, 0x1, 0x5, 0x3, 0xe444, 0x7, 0x9, 0xd1, 0xa1, 0xf3, 0xff, 0x1000, 0xffffff7f, 0x72a, 0x6]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x40000}, 0x0) lsm_get_self_attr(0x0, &(0x7f0000000040)={0x0, 0x0, 0xb5, 0x95, ""/149}, &(0x7f0000000100)=0xb5, 0x1) socket$kcm(0x29, 0x5, 0x0) syz_clone(0x5e08a57c1e740ecf, &(0x7f0000000480)="4ddc6134f44924353b11790a24596c75735cda57ff83bb1d36768d82e1c0063a463b782dea71d9", 0x27, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="c0f781a06965338bbf52e5219a614117b02c17fcf2ab347f03e1837a2e913dd690a5d3186d333af1abe8eef40e38") openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) 8m1.787492898s ago: executing program 5 (id=2896): socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000074bb0015205bcecf100f449014a7e1f28e314466991fe06e893c5b384087c58fe267bf4577c44051f9334e0aef516298491da07dd823fb9c8950291ff44a67a3d2b6754920bf6236851f385816a886797abf682f9efcae24"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000740), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x9237, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000001cc0)='1', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000180)={r5}) 8m1.636614353s ago: executing program 5 (id=2897): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$caif_seqpacket(0x25, 0x5, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$unix(r1, &(0x7f0000000400)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000200)="26e11c476b5239e4718594d487ac945102d78667b5606cb132334cd32912ef545f9a28704becd0141e08c01aa68c2d0cd9c6bc9cd2790c4b43403de7807923eeea27900bf265250e", 0x48}, {&(0x7f0000000080)="bb592d94a3bfe0d526bf3604a6658cbac28a0c5c", 0x14}, {&(0x7f0000000480)="41357b325d3be012b5c58fb7fda3bdbeb003abe53ec86a540accca781f1c7cd976defe25a586eaae6efbbedc8e64174d54b374e0d062c43ac7284664b44de1dde8e8fe8580a26e0fa049d2e74c755babfd5fecd8b23671917217dfeb90e9c02870e12d9e85d982d2b04b7a7705123d506dd525bad61d5d99d6b2a5510ec577d78dc242e7134094074f01446c5224e6e97a1f56cb7b652fa14ec9272b223b56298d6f4064bf6184c478ef77e529f9993acb4c97b5f0b146b6cbb6a02700efdc", 0xbf}, {&(0x7f0000000280)="eb44e6be41d9ab4e2e584c1acb3e462ae34999646521648a4af307c67f6a7d97c5ec0242307b83366c0597ba8ca04a2ea7949b65b5bc0c1c28f8d81f0e314f23ed504454171d5bfe15f374bf4b54eac8e0fc955b26d83d2ac2", 0x59}, {&(0x7f0000000100)="96141dfa5c5b6caa493e02c40b7481cbb63431bf106bac97fea37a1835a32e11743ebc29b47e61d7b99abf307fc0f2d09211bf4425", 0x35}, {&(0x7f0000000340)="e8d314d1538bc11fb6fb564ca61b1810e53f89", 0x13}], 0x6, &(0x7f00000026c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r2, r4}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r5, r6, r0]}}], 0x50, 0x8000}, 0x6060841) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 8m0.707697517s ago: executing program 5 (id=2900): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x34, 0x1010000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 8m0.020828884s ago: executing program 5 (id=2906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000010c0)=""/4096) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 7m59.710002863s ago: executing program 42 (id=2906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000010c0)=""/4096) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 4m38.78322484s ago: executing program 8 (id=3730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x80}, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shmat(0x0, &(0x7f0000fa4000/0x4000)=nil, 0x0) r8 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) preadv2(r8, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x12c, 0x2, 0x104, 0xbe4e}) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x18121}) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000740)=[{0x6, 0x0, 0x3}]}, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000170a01170000000000c60000000a000003"], 0x14}, 0x1, 0x0, 0x0, 0x4c011}, 0x20000800) 4m37.379152178s ago: executing program 8 (id=3736): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)='7', 0x20}], 0x1}}], 0x1, 0x2c000011) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket(0x10, 0x3, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 4m37.005136665s ago: executing program 8 (id=3741): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '.,\x03\x00\\{t\xca\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0xfa0, 0x932}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}}, 0x801) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m36.878866298s ago: executing program 8 (id=3743): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) syz_open_dev$dri(&(0x7f0000000380), 0x8987, 0x0) (async) syz_open_dev$dri(&(0x7f0000000380), 0x8987, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a01040000000c000000000100000008000a400000000009000100733b0fffbae673892d3dd9809ec2797a30000000000900020073797a3200000000080005400000001f08000340000000ba91c373131fb05b0000000071e32c417515f58f08000c400000004014000000100001"], 0x80}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) getsockname$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, &(0x7f00000002c0)=0x10) (async) getsockname$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, &(0x7f00000002c0)=0x10) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x42, r5}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x42, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0x400]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0xfff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r10, &(0x7f0000000000)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x1f) syz_clone3(&(0x7f0000000780)={0x8a0000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r11 = syz_clone3(&(0x7f0000000780)={0x8a0000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) move_mount(r9, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(r9, &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) (async) mount_setattr(r9, &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) unshare(0x22020400) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r13 = open(&(0x7f0000000080)='./file1\x00', 0x12b842, 0x0) syz_open_procfs$userns(r11, &(0x7f0000000340)) (async) syz_open_procfs$userns(r11, &(0x7f0000000340)) sendfile(r13, r12, 0x0, 0x80000000) 4m36.494218707s ago: executing program 8 (id=3746): socket(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) (async) r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) setsockopt$packet_int(r3, 0x107, 0x12, 0x0, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f0000001500)=[{{&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000000600)=""/106, 0x6a}, {&(0x7f0000000680)=""/199, 0xc7}], 0x5, &(0x7f0000000800)=""/194, 0xc2}, 0x6}, {{&(0x7f0000000900)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000980)=""/108, 0x6c}, {&(0x7f0000000a00)=""/110, 0x6e}, {&(0x7f0000000a80)=""/254, 0xfe}, {&(0x7f0000000b80)=""/125, 0x7d}], 0x4, &(0x7f0000000300)=""/45, 0x2d}, 0x3ff}, {{&(0x7f0000000c00)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000002940)=""/4106, 0x100a}], 0x1}, 0xfffffff7}, {{&(0x7f0000000cc0)=@nfc, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000d40)=""/28, 0x1c}, {&(0x7f0000000d80)=""/3, 0x3}, {&(0x7f0000000dc0)=""/201, 0xc9}, {&(0x7f0000000ec0)=""/214, 0xd6}, {&(0x7f0000000fc0)=""/41, 0x29}, {&(0x7f0000001000)=""/125, 0x7d}, {&(0x7f0000001080)=""/231, 0xe7}, {&(0x7f0000001180)=""/23, 0x17}, {&(0x7f00000011c0)=""/213, 0xd5}], 0x9, &(0x7f0000001380)=""/82, 0x52}, 0x7ef0}, {{&(0x7f0000001400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001480)}], 0x1}, 0x4}], 0x5, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x39, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) (async) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r5, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20005810) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x30044041) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) (rerun: 64) chdir(&(0x7f0000000140)='./file0\x00') (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async, rerun: 64) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async, rerun: 64) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0xbcaf6d6423002d8f, &(0x7f0000000000)={@rand_addr=0x64010101, @broadcast, @local}, 0xc) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) socket(0x2c, 0x4, 0x8000cab) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000000)={'lo\x00'}) 4m34.731059713s ago: executing program 8 (id=3761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4m34.730981045s ago: executing program 43 (id=3761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3m8.08234963s ago: executing program 9 (id=4094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000ffff000000000a28000000000a01030000000000000000030000000900010073797a3000000000080002400000000728000000000a01040000000000000000030000000900010073797a30000000000800024000000007"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0) 3m7.903685265s ago: executing program 9 (id=4096): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 32) r1 = syz_io_uring_setup(0x3b67, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000180)=0x0) (async, rerun: 32) syz_io_uring_setup(0x48bf, &(0x7f0000000280), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) (async) iopl(0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) (async) write$P9_RVERSION(r0, 0x0, 0x15) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1}) 3m7.17929534s ago: executing program 9 (id=4099): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e23, @broadcast}, {0x0, @random="9705000000e8"}, 0x6a, {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e20, @empty}, {0x6, @multicast}, 0xde9e193c92a470a8, {0x2, 0x4e22, @broadcast}, 'sit0\x00'}) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000800)="240000001e005f031420654400000000000000030100000001000800080008c01300ff00", 0x24) 3m3.490888455s ago: executing program 9 (id=4111): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000100)=""/77, 0x7}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x10, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') (async) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000100)=""/77, 0x7}) (async) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) 3m3.241919862s ago: executing program 9 (id=4113): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x2) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x15) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102400, 0x19000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000040420f00b7030000001e00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x200002d0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) 3m1.634519538s ago: executing program 9 (id=4122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0xfffffff5}, 0x0) 3m1.39779108s ago: executing program 44 (id=4122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0xfffffff5}, 0x0) 2m43.889850748s ago: executing program 2 (id=4173): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x40000) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000040)=""/104) open_by_handle_at(r0, &(0x7f00000000c0)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xfa, 0x2}, 0x8001, 0x2}}, 0x440) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000100)=0x4, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x8000) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000180)) sendto(0xffffffffffffffff, &(0x7f0000000240)="ad20afc38b8f2397c80f9f0515d6f2b8821aba025e5f12799bafee442321527ec4cc8dc5c1b58edbf95cbedf209367d3a94da5bf529c393326d26b7e341c332507ca471c7318ed2787821f812b0a959e6e6f1147e19321eb16a68ae583f8afa45e6c85a5ea55fee6780326e5ec6a894b432cfc", 0x73, 0x8040, &(0x7f00000002c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}, 0x4}}, 0x80) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000380)={@any, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000003c0)='htcp\x00', 0x5) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000400)='.pending_reads\x00', 0xe08c0, 0x23) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000440)=0x8000000) r4 = accept4(r3, &(0x7f0000000480)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000500)=0x80, 0x80000) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000540)=0x100000000) r5 = fcntl$getown(r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) r8 = getegid() sendmmsg$unix(r3, &(0x7f0000000800)=[{{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000600)="0860dd0eeb6f8549ac803564b34b30edb60159fff271aab52d5d3f685fa763241ea8323458849c20628da4c713d6e7df70c76c12c437a5f857d7aa9eb504d4b42f5f4c09169763fef3831ba07a14a069c9b4c43c2be10a523b08dbcf1843409c8dc1e5dc92d75ac79c390caa4d953bf2e2588fabbf3bf28f2376f5080ffa01737f820e81c4b4ab43a0fe7960ddc73b57f85c472d3d071e63eb1b324fb830a0749e3c0360fc5e43bcb2beb08ad4d89ef700ac80c64eb8894f5f6ab517f434", 0xbe}, {&(0x7f00000006c0)="c8a20a46281986a8a3623665c93371112ffca2ddc834b608ece0469627ae0b99524479f36971c69311bf3866deece100e108e7b7ffb69a38ee82371040a84a615f3d45acd0036260dcea0e17c466d0fad9c42d9bde6bd8f7f4f3965b", 0x5c}], 0x2, &(0x7f00000007c0)=[@rights={{0x1c, 0x1, 0x1, [r1, r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}], 0x40, 0x1}}], 0x1, 0x4000000) getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000840), &(0x7f0000000880)=0x4) sysinfo(&(0x7f00000008c0)=""/148) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x8c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000041}, 0x800) r9 = syz_open_dev$dri(&(0x7f0000000b00), 0x2, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000b40)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000b80)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01064c2, &(0x7f0000000bc0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000c00)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000c40)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000c80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000cc0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r9, 0xc02864c3, &(0x7f0000000d40)={&(0x7f0000000d00)=[r10, r11, r12, r13, r14, r15, r16], 0x2, 0x7, 0x4}) 2m43.472882296s ago: executing program 2 (id=4176): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x12, r3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_G_TUNER(r6, 0xc054561d, &(0x7f00000003c0)={0xfffff52e, "81b19b49abe22389ca855e5463581126e7590f31b4dd9537855357859bcae140", 0x1, 0x4, 0x7a, 0x2, 0x4, 0x0, 0xffff7fff, 0x7}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000380)) r8 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1f8, 0x0, 0x5002004a, 0x10030000, 0x0, 0xc2030000, 0x160, 0x3c8, 0x3c8, 0x160, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @local, 0x0, 0x0, 'veth0_to_team\x00', 'lo\x00'}, 0x60, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x2, 0x3, 0x2, 0x2]}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$TIOCEXCL(r0, 0x540c) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$BATADV_CMD_SET_VLAN(r9, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="00042abd7000ffdbdf251200000008002b000400000005002900010000000a0009000180c2000001000008000b000c00000008000600", @ANYRES32=r12, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 2m41.427458775s ago: executing program 2 (id=4181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$ttys(0xc, 0x2, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000000021010000000000000000000000000a1c000000120a0000000000000000000000000000080004400000000014c8df1fe089d6d31889e21e0000000010000000000a4a255dddf4420e1d24d3e543aaa62504b55e4a16a2fe874d297781266f850e4b21dd5b51122c66083981c28362f96650c9044ffa70a598"], 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000090000000300000001000013020000000300"/51], 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r7 = geteuid() mount$pvfs2(&(0x7f00000001c0), &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x804080, &(0x7f0000000380)={[{'/(!-W)]%]^+)'}, {'/dev/ptmx\x00'}, {'GPL\x00'}, {'{'}, {'[}{'}, {}, {}], [{@euid_eq={'euid', 0x3d, r7}}]}) write$9p(r6, &(0x7f00000000c0), 0x0) ioctl$TCSETS(r5, 0x89f0, &(0x7f0000000100)={0x8000001, 0x1, 0x6, 0x0, 0x0, "bb40af00008000"}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="5400000002060b000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000000c000780060004"], 0x54}}, 0x0) 2m39.336084923s ago: executing program 2 (id=4185): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r3 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x5429, 0x10100, 0xfffffffe, 0x1000}, &(0x7f00000000c0), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1868, &(0x7f0000000140), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_usb_connect(0x2, 0x5a, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0x4c, 0xb6, 0xe8, 0x10, 0x10c5, 0x819a, 0x9591, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x6, 0x6, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x5, 0x1, 0x400, 0x6, 0x7, 0x1}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x4, 0xc4, 0xf}}, {{0x9, 0x5, 0xf, 0xc, 0x200, 0x1, 0x1, 0x10}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x19, 0x0, 0x3}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x24, 0x86, 0x7}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0x6, 0x7, 0x8}}]}}]}}]}}, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000580)={0x53, 0x0, 0x6, 0x60, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000340)='\n\v\x00\b\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000200)=0x64cc, 0x12) close(r2) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$binfmt_script(r0, &(0x7f0000000180), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000180)='./bus\x00', 0x0) mkdirat(r7, &(0x7f0000000200)='./bus/file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./bus/file0/../file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x9801) fchdir(r8) close_range(r8, 0xffffffffffffffff, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r9, 0x40049366, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2m37.950668406s ago: executing program 2 (id=4188): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xa5}], {0x95, 0x0, 0x0, 0x18000000}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m37.146489145s ago: executing program 2 (id=4196): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x454, 0x108, 0x1f4, 0xffffffff, 0x1f4, 0x108, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@local, @multicast2, 0x0, 0x0, 'veth1_to_team\x00', 'dvmrp0\x00'}, 0xac030000, 0xc0, 0x108, 0x0, {}, [@common=@inet=@dscp={{0x24}, {0xf1}}, @common=@unspec=@connmark={{0x2c}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @icmp_id=0x64, @port=0x4e23}}}, {{@uncond, 0x0, 0xb8, 0xec, 0x0, {}, [@common=@unspec=@state={{0x24}}, @common=@inet=@set2={{0x24}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @empty, @port=0xfffd, @gre_key}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'ip6gretap0\x00'}, 0x0, 0x9c, 0xd0, 0x0, {}, [@common=@inet=@esp={{0x2c}, {[0x4d5, 0x4d3]}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id, @port=0x3}}}}, {{@uncond, 0x0, 0xc8, 0xfc, 0x0, {}, [@common=@addrtype={{0x2c}}, @common=@addrtype={{0x2c}, {0x541, 0x2, 0x0, 0x1}}]}, @SNAT0={0x34}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4b0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="001b005e013dd6ae657200160000f6ae001b00"]) r2 = socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0xe2e1d000) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x8000008) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0) r3 = getpid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x73}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x4010) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 2m36.837117115s ago: executing program 45 (id=4196): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x454, 0x108, 0x1f4, 0xffffffff, 0x1f4, 0x108, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@local, @multicast2, 0x0, 0x0, 'veth1_to_team\x00', 'dvmrp0\x00'}, 0xac030000, 0xc0, 0x108, 0x0, {}, [@common=@inet=@dscp={{0x24}, {0xf1}}, @common=@unspec=@connmark={{0x2c}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @icmp_id=0x64, @port=0x4e23}}}, {{@uncond, 0x0, 0xb8, 0xec, 0x0, {}, [@common=@unspec=@state={{0x24}}, @common=@inet=@set2={{0x24}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @empty, @port=0xfffd, @gre_key}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'ip6gretap0\x00'}, 0x0, 0x9c, 0xd0, 0x0, {}, [@common=@inet=@esp={{0x2c}, {[0x4d5, 0x4d3]}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id, @port=0x3}}}}, {{@uncond, 0x0, 0xc8, 0xfc, 0x0, {}, [@common=@addrtype={{0x2c}}, @common=@addrtype={{0x2c}, {0x541, 0x2, 0x0, 0x1}}]}, @SNAT0={0x34}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4b0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="001b005e013dd6ae657200160000f6ae001b00"]) r2 = socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0xe2e1d000) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x8000008) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0) r3 = getpid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x73}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x4010) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 11.960608683s ago: executing program 3 (id=4752): r0 = syz_open_procfs(0x0, &(0x7f0000002bc0)='net/protocols\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000120379000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000300)={0x8001, 0x100, 0x1, 'queue0\x00', 0x6}) ptrace$ARCH_SHSTK_LOCK(0x1e, r2, 0x1, 0x5003) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}]}, &(0x7f0000000100)=0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x615, 0x1, 0x4, 0xa, 0x9}, 0x9c) pread64(r0, &(0x7f0000002e40)=""/180, 0xb4, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) 7.49039122s ago: executing program 3 (id=4772): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002a000900000000000400002c00000000"], 0x14}, 0x1, 0x3000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0x38}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, 0x0, 0x0, 0x0}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f0000000100)=0xcd) r2 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@getae={0x6c, 0x1f, 0x10, 0x70bd28, 0x25dfdbff, {{@in6=@remote, 0x4d2, 0x2, 0x6c}, @in6=@empty, 0x881f, 0x3501}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x41}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xd}, @etimer_thresh={0x8, 0xc, 0x400}, @proto={0x5, 0x19, 0x32}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYRES8=r3, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES64], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000000000000001000000000000000000000000000000000000000000000000000000000200000000000200000000400000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0xc4}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x800000}) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x2, 0x6, 0x5b8, 0x1e8, 0x328, 0x418, 0xd0, 0xd0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@mcast1, @mcast2, [], [], 'pimreg0\x00', 'macvtap0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@dev, @empty, [], [0xff000000], 'veth0_to_team\x00', 'macvlan0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0x5, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}, 0x9, 0xff}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [], [], 'veth0_to_hsr\x00', 'geneve0\x00'}, 0x0, 0x118, 0x140, 0x48000000, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffe]}}, @common=@mh={{0x28}, {"2704"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) 6.348408922s ago: executing program 0 (id=4780): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4, @ANYBLOB="08001f0004"], 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 5.417426182s ago: executing program 0 (id=4785): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) r2 = epoll_create(0x6) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000000)={"8add00", 0x0, 0x7, 0x5, 0xfc, 0x0, "000000000100000000000000000081", "643aa6bf", "47c7c4a9", "031ee100", ["5a4845ea00f3ffffff00", "275f27336448602a55bae850", "dd67e9214703de770202fce4", "4973dce60c23eb4573635a16"]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000300)=0x9, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x6, 0x0, 0x4, 0x400, 0xfffffff0, {0x0, 0xea60}, {0x4, 0x0, 0x6, 0x40, 0x1, 0x9, "e4d5e1ec"}, 0x7, 0x2, {&(0x7f00000000c0)=[{0x9, 0x2, {&(0x7f0000000040)}, 0xffff}, {0x5, 0x2993, {&(0x7f0000000080)}}]}, 0x3, 0x0, r1}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$netlink(r5, 0x10e, 0x3, &(0x7f0000000400)=""/252, &(0x7f0000000500)=0xfc) 5.250866825s ago: executing program 4 (id=4786): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x81}, 0x8) chmod(&(0x7f0000000080)='./file0\x00', 0x4a) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0xffffff80, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}]}, 0xa0}}, 0x0) 5.250484862s ago: executing program 1 (id=4788): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x258, 0x4c, 0x1a, 0x0, 0x73, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@private2, @dev, [], [], 'veth1_macvtap\x00', 'veth0_macvtap\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7e, 0x61, 0x8a, 0x8, 0x458, 0x7003, 0x7a1a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc1, 0x9, 0x40}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, &(0x7f0000000f00)={0x0, 0x0, 0x1, 'd'}, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 5.203094547s ago: executing program 0 (id=4789): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x14, {{0x29, 0x0, 0x8000000, @private2}}}, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') lseek(r1, 0x20141, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x6, 0x19, 0xec, &(0x7f00000005c0)}) 4.491154076s ago: executing program 0 (id=4791): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7b1, &(0x7f0000000080)={{@local, 0x200000}, @host, 0xa, 0x0, 0x0, 0x0, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x228200, 0x0) fgetxattr(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="6f8f782e5b2700"], &(0x7f0000000300)=""/157, 0x9d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='tlb_flush\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000120018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='contention_end\x00', r3}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af21, &(0x7f00000001c0)={0x0, r6}) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ppoll(&(0x7f0000000400)=[{r3, 0x2}, {r5, 0x604}, {0xffffffffffffffff, 0x22}, {0xffffffffffffffff, 0x400}, {r7, 0x200}], 0x5, &(0x7f0000000480)={r8, r9+60000000}, &(0x7f00000004c0)={[0x3]}, 0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4.314969447s ago: executing program 4 (id=4792): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffffc, 0x0, 0x0, 0x1, 0x4, "f996ff109a04000000008000"}) 3.745119949s ago: executing program 3 (id=4793): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x2db0, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '.,\x03\x00\\{t\xca\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x1000, 0x10000000, 0xfa0, 0x932}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x2d14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9, 0x7}}, @TCA_FW_POLICE={0x870, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x10000000, 0x9c, 0x200, 0x4, {0x6, 0x2, 0x1, 0x2, 0x1000, 0xe63}, {0x7, 0x1, 0x6, 0x0, 0xfff9, 0xc}, 0x3, 0x1, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xc, 0x2, 0x1, 0x9, 0x9, 0x8, 0x9, 0x8, 0x7, 0x51, 0x9, 0x6b24, 0x3, 0x100, 0x10000, 0x8001, 0x0, 0xfa, 0x7, 0x100, 0x9a, 0x5, 0x1, 0x5, 0x357, 0x7, 0xb, 0x4, 0x280000, 0xffff, 0x6, 0x6, 0x100, 0x80000001, 0x4, 0x6, 0x1, 0xc18, 0x7, 0x0, 0xd, 0x5, 0x8, 0x80000001, 0x8c, 0x2, 0xfffffff8, 0x70, 0x4ddc, 0x2, 0x7f, 0x5, 0x9, 0x31, 0x8, 0x6, 0x5, 0x401, 0xfff, 0x7ff, 0x6, 0x4, 0x8, 0x9, 0x0, 0x3, 0x7, 0x9, 0x4, 0xae, 0x1, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0xff, 0xd, 0xffffffff, 0x2, 0x80000001, 0x7, 0x5, 0x8, 0x2, 0x0, 0xe, 0xc72, 0xa, 0x7, 0x4, 0x1, 0x6, 0x2004, 0x7, 0x0, 0x0, 0x6, 0xc, 0x4, 0x0, 0xfffffffc, 0x5, 0xfffffff8, 0x8, 0x3, 0x10000, 0x13c, 0x3fc0, 0x5, 0x80, 0x2, 0x1, 0x5b70, 0x2, 0x6, 0x7ff, 0x7fffffff, 0x50, 0x9, 0xc57f, 0x4, 0xa19, 0xdb, 0x1, 0x8000, 0x40025eb, 0x2e, 0x7fffffff, 0x9, 0x4, 0x8, 0x5, 0x9, 0x1, 0x3, 0x3, 0x6, 0xfffffc01, 0x9, 0xfff, 0x1, 0x7, 0x7, 0x2, 0x10001, 0x0, 0x9, 0x4, 0x18, 0x5, 0x3, 0x10, 0x10, 0x7, 0x8000, 0x1000, 0xffff3323, 0x3f7, 0x6, 0x80000001, 0x8, 0x3, 0x6, 0x6, 0x3, 0x1, 0xf6, 0xd3, 0xffff, 0x5, 0x7, 0x57, 0x10001, 0x2, 0x1ff, 0x705, 0x2, 0x8, 0x7, 0x9844, 0x9, 0x72bb, 0x3ff, 0xfffffff7, 0x52, 0x7, 0x3, 0x5, 0x10000, 0x6c14, 0x7, 0x200, 0xb, 0xae1, 0x6, 0x2, 0x8, 0x10, 0x9, 0x4, 0x3, 0x5, 0x7, 0x2, 0x7, 0x2, 0x9, 0xc, 0x5, 0x2, 0xfffffff7, 0x8e, 0x821, 0x5, 0x4, 0x1, 0x6, 0x40, 0x3, 0xe47, 0x6, 0xe5d, 0x4, 0x2, 0x7f, 0x0, 0xbdf, 0x4, 0x60000000, 0x9, 0xbd, 0x8d3, 0xd, 0xfffff33b, 0x5b4, 0x4, 0x10000, 0x4, 0xee9, 0xd, 0x1, 0x3, 0xc, 0xe63, 0x64a5, 0x41b, 0x9, 0xff, 0x2, 0xffffffff, 0x2539, 0x1065, 0x7, 0x15]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xaba, 0x0, 0x9, 0xe3b, 0x5, 0x67, 0x4, 0x1, 0x1, 0xd, 0x2, 0x4, 0x2, 0x30000000, 0x0, 0x6, 0xb0, 0xd, 0x6, 0x800, 0x81, 0x7, 0x530, 0x200, 0xfffffffb, 0x1, 0x5, 0x3, 0x2f9b, 0x5, 0x9, 0x1000, 0x76b7, 0x40, 0x0, 0x6, 0x7, 0x5f, 0x3, 0xffffffff, 0x9, 0xa9, 0x80000000, 0xc, 0x10, 0x865, 0x2, 0x1, 0x4, 0x7f, 0x180000, 0x3ff, 0x0, 0x9a2, 0x101, 0x40, 0x8, 0x2, 0x5, 0x4800, 0x80000001, 0x8, 0x53, 0x2, 0x9, 0x6, 0xee04, 0x8001, 0x0, 0x1, 0x8, 0x0, 0x80000000, 0x1, 0x7, 0xfff, 0xf26, 0x0, 0x8000, 0x8, 0x25a, 0x0, 0xfff, 0x6, 0x9, 0x40, 0x82d, 0xa2b, 0x3, 0x6, 0x6, 0x6, 0x8, 0x5, 0xcfd, 0x9, 0x9, 0x9, 0x2, 0x1, 0x3, 0x34, 0x1, 0x556e, 0x3, 0x3, 0x6, 0x5, 0xffff, 0x8, 0x0, 0x7fffffff, 0x1000, 0xfffffffd, 0x4cc6, 0x10, 0x574f, 0x2, 0x1, 0x0, 0x92fe, 0x100, 0x8000, 0x322, 0x6, 0xf4, 0x7fff, 0x8, 0x0, 0x8, 0x3, 0x5d6643a0, 0x2, 0x867e, 0x9, 0x1000, 0x0, 0x5, 0xff, 0x0, 0x5c4a, 0x9, 0x6, 0x4, 0x520, 0xfffffff9, 0x0, 0x4, 0x400, 0x7f, 0x8, 0x7, 0x6, 0x1, 0xaf1, 0x6, 0x4, 0x977, 0x8, 0x401, 0xffff, 0x6, 0x4, 0x7f, 0x80, 0xfff, 0xffffffff, 0x80000000, 0x400, 0x10000, 0x8, 0xcb0, 0x7, 0xffffffff, 0x7, 0x0, 0xa9e5, 0xd, 0x4, 0x371e, 0x1fbe, 0x2, 0x7, 0x8, 0xb67, 0xb, 0x3ffc, 0x6, 0x5, 0x2a89, 0x3781, 0x2, 0xffffffff, 0x8, 0x40, 0xf3d, 0x1ff, 0x7, 0x0, 0x2f, 0x8, 0x5, 0x8, 0x40, 0x3, 0x9, 0x81, 0xb, 0x1, 0x3ff, 0x1, 0x7, 0x5, 0x8001, 0x401, 0x5, 0x4, 0x3, 0x3fc, 0xe, 0x41, 0x7, 0x3, 0xeb3, 0x4, 0x5, 0x8, 0xa, 0x9, 0x1ff, 0x2, 0xffffffff, 0xfffffff8, 0x0, 0x2, 0x1, 0xfd, 0xd, 0x8, 0xf, 0x7b62f0d2, 0x401, 0x5, 0xa8, 0x1ffe00, 0x4, 0xb, 0x4, 0x6, 0x3, 0x396, 0x4, 0x8, 0x8, 0xfffff127, 0x401]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_ACT={0x2490, 0x4, [@m_connmark={0xb8, 0xc, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0x800, 0x5, 0x138c, 0x9}, 0xa}}]}, {0x6a, 0x6, "ca0085af59621b6add63ab5fd1d6361743cb423577cbbcd98dc6cc68fac406fd6acba125fdb1a8061ecd23c3a1efae14db64da994e7d1cad6b2dc83b718ada31967dec40c48d6c66cd77db83540b9bd037b6ba11244d4a7a9bbf071a50e6db9acba052243cbe"}, {0xc, 0x7, {0xfff245999b7e6c0c, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x1a0, 0x1a, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x2, 0x4, 0x5d3, 0x2}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xe, 0x0, 0x3, 0x1}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xfc, 0x3, 0x0, 0x8}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1e3, 0x0, 0x4, 0x1800000, 0x7fffffff}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff7, 0x1ff, 0x7, 0x7, 0xfffffffe}, 0x7b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xffff8001, 0xc, 0x0, 0x1}, 0x64}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x5, 0x4, 0x5, 0x7fffffff}, 0x7b}}]}, {0xaf, 0x6, "7397592385abc3cc2780ecc7a342a7f6dda2ae239ba5ad856ff7921fda3e7db747c9f4c5e717b77a35b65081c61a970bcaacb11cb16cae7576a3709aa7bcfab3faf5bc4910aaa6d4888cbb5e87b79514e014e4e6b9e165f6ddbb35516183d8dcdcefdb11d39e85e35badfb4986148fb0b6774b8cd6bb6fe2cee9ff2a0bdd00cadf48218e3a15673ca8a5952231a4fe6941412e7ef0819cbc4d642b9fb37eedc145e7ed75c71fd4e76bc55e"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_nat={0x107c, 0x2, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffe, 0xe, 0x5, 0x1, 0x9}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff9, 0x7ff, 0x6, 0x3, 0xffffffff}, @empty, @loopback, 0xff000000}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0x6c, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5ed7}]}, {0x36, 0x6, "542361ef6b5ed9477fdb7177e0e1c54bb2f8adf9005f38a6adb7880e177627e7ecb76b46fd6e7a60695aebfe9f6a585be3ce"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0x1058, 0x11, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xd, 0x6, 0x5, 0x9, 0x7f}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0xf4, 0x20, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xb6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x7, 0x4, 0x4, 0x40}, 0x4}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x731, 0x1000000f, 0x0, 0x8}, 0x3}}]}, {0x85, 0x6, "ca88842c1f7d67bbac53e3c0daa211e19fa07adfe13ffb7a01633304a3561c95b050930b3ae6cb73b204f9d051ef41f00f42144d92a7c0d9f9a62004ae1710a9e2770611174df5758a1ee09e2433d5c09cb7ced09c66374aa7ed2d49783aeeb06f9bb1a8e52e1d2c15d5aec73528f08c337fd865fc2dc8c31370660af366d1d6c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2db0}}, 0x801) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.679780394s ago: executing program 4 (id=4794): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7d}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x222, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000380)="3ec159e9269edca726b9f24bb8e6b9b8b4214ebd3752fffc0100000000", 0x1d) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='pids.current\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b70, &(0x7f0000000000)=ANY=[]) lstat(0x0, &(0x7f0000000240)) shmget$private(0x0, 0x4000, 0x6, &(0x7f00004bd000/0x4000)=nil) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x23, &(0x7f0000000300)=ANY=[@ANYRESOCT=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) shmat(0x0, &(0x7f00000ca000/0x4000)=nil, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000640)='qrtr_ns_server_add\x00', 0xffffffffffffffff, 0x0, 0x800004}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e24, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x0, 0x0, @rand_addr, 0x3}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_open_dev$ttys(0xc, 0x2, 0x0) 3.529762516s ago: executing program 0 (id=4795): socket$tipc(0x1e, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x6, '\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x4000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x33565348, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6}}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000001700)=0x4) 3.509064351s ago: executing program 4 (id=4796): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) syz_open_dev$tty1(0xc, 0x4, 0x3) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) 3.508097979s ago: executing program 3 (id=4797): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000001020061198c0000000000950000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.365499671s ago: executing program 3 (id=4799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(r1, &(0x7f0000000680)=[{{&(0x7f00000001c0)=@phonet, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000380)=""/57, 0x39}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f00000003c0)=""/26, 0x1a}], 0x4, &(0x7f0000000580)=""/247, 0xf7}, 0x5}], 0x1, 0x42, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000480)={r2, 0x0, 0x1, "f7"}, 0x9) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "532504849d8e69b3", "da639176881aba1e909ecce2c2e5b7be", "8be0969a", "f4c47b8868c88023"}, 0x28) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1458c2, 0x0) (async) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r5 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) (rerun: 64) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x200, 0x2, &(0x7f0000000880)="d40b"}], 0x2}) sendfile(r3, r4, 0x0, 0x15) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r7, 0xffffffffffffff96, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0, 0x64, 0x0, 0xfffffffffffffd71, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x0, 0x0}}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r8) 2.768728315s ago: executing program 4 (id=4800): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010101}}, 0x80, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000580)="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", 0xef0}, {&(0x7f0000001580)="592ab8662ef9d4181611b3a9ddcb1bc1599c8c02a1f27903b41b2a94ac7c1e638088c8c5a80d2ce3750e0391d2144a39995218cb1947cbda9980ca7dc41436a2f3b092c0df28d9ce006aa756bc6e99bba6e6396f20dcd1f4105fd861e16a9b5953eed9963d3ddf696f8dbc432a1d9e26249d8f43b2e17627fbfb0d861c1ce32016a542fa0d4460c6d5ac5b38700f135c7186213d82", 0x95}, {&(0x7f0000001640)="79141d450f5eb79d98808cf546b95196c9cae040a398ef58851e98655b68e6439cc849e5bc827035d56f3b0dfc31e4dbe892326a40ebe4d382fe39494bffa5fd10d7c9fd", 0x44}], 0x4, &(0x7f0000001700)}, 0x40400a0) bind$llc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x20, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x14}], {0x14}}, 0xa4}}, 0x0) 2.734232362s ago: executing program 3 (id=4801): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfef"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000300), 0x4) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222300000017df6b9ce90bfa9e274a07f8ff00002b849f9173a3"], 0x0}, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3c, &(0x7f0000000180)=[{0x0, 0x80}, {0x1, 0x1}]}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 2.678939377s ago: executing program 7 (id=4802): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) 2.465094526s ago: executing program 0 (id=4803): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, 0x0, 0x0, 0x28, 0x2, 0x64, 0x2}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 2.403022012s ago: executing program 7 (id=4804): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffffc, 0x0, 0x0, 0x1, 0x4, "f996ff109a04000000008000"}) 1.642774756s ago: executing program 4 (id=4805): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7b1, &(0x7f0000000080)={{@local, 0x200000}, @host, 0xa, 0x0, 0x0, 0x0, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x228200, 0x0) fgetxattr(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="6f8f782e5b2700"], &(0x7f0000000300)=""/157, 0x9d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='tlb_flush\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000120018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='contention_end\x00', r3}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af21, &(0x7f00000001c0)={0x0, r6}) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ppoll(&(0x7f0000000400)=[{r3, 0x2}, {r5, 0x604}, {0xffffffffffffffff, 0x22}, {0xffffffffffffffff, 0x400}, {r7, 0x200}], 0x5, &(0x7f0000000480)={r8, r9+60000000}, &(0x7f00000004c0)={[0x3]}, 0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.620464401s ago: executing program 1 (id=4806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90c24fc60100c064014ae4718053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000580)=[@acquire={0x40046304}], 0x0, 0x0, 0x0}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01030000000000000000010000000900010073797a3000000000080002400000000428000000000a010400000000000000000100000008000240000000060900010073797a30"], 0x78}}, 0x0) 1.487988823s ago: executing program 1 (id=4807): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x200000, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@private1, 0x2000000, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r2, 0x4}}]}, 0x144}}, 0x0) 1.364631407s ago: executing program 1 (id=4808): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000002c0)={0x0, 0x0, "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"}) creat(&(0x7f0000000340)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_open_dev$sndmidi(&(0x7f0000000000), 0x3, 0x220000) r7 = socket(0x40000000015, 0x5, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1c00}}, {@max_read={'max_read', 0x3d, 0xffffffff7fffffff}}, {@allow_other}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x100}}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0x44bbfd74}}, {@default_permissions}], [{@subj_type={'subj_type', 0x3d, '#-'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0xe, 0x44, 0x0, 0x0, 0x8000002, 0x0, 0x0, 0xffffffff, 0x7, 0x0}) 1.305968104s ago: executing program 7 (id=4809): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000140000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) 1.19995647s ago: executing program 1 (id=4810): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000001000)={0xffffffff, 0x63f, 0x2, 0x0, 0xb, "0e80706e6c06a79874342a0e0d13343972d01f"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) sendmmsg$inet6(r1, &(0x7f0000000900)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00', 0x9}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000200)="1f2688d9aedc8807edb4a3eb4c9f092626c35a90d892436d89df66f7474daaa66923413c3a9285d1ef6344", 0x2b}, {&(0x7f0000000240)="e5f622375875c43ce1ad9ea090cefccf65dad73f75290699e33f47de81de9eccd267833b2cabaf479d0d558026e65ab75cc26640d9dd833b7a03ebd9363234b7611b8af074404ab3662f653eb7f97cf7affdeab46778ab11cca57ec39e2eddba6a38437b11b2d609c404d7c45e7def4134a3f0253d6adb29ceafa338527eb9a69632943d8fa10af1e8d699f1e398f04c1d065ceef0e354d4768e93944918ef9b7d39285b8519a754bed75e51eb03525c6dfb", 0xb2}, {&(0x7f0000000300)="96ed7cfeb00abfde9107dac0dfbbe2c6dc75e084f5725aa6a62ef32038b88923f2cd97683fb9c2f38abc51e9cb7f0fda85035da69036bb9070428311c8208b50d6e496bc8e06dddaa8567ecda9a28418bee3fe86020838473726fb2a8989c8bea33de8923531a74cc4a61b4c3c721c52b022463883e67c16ba5782b56b10b65960433fb38864964c0bafb846c7895e619da5a5f8266a1b37c9bc2b77f66fec21877c6405864b4f1e354d7e85e3caeb8c3806ba204d4902b13e697f476b6ce143dae2ae863b47e7c40526454f2677dfc531a42feba0d06de3f531", 0xda}], 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000000290000003e0000000300000000000000f80000000000000029000000370000001d1b00000000000005020001c91000000000000000000000000000000000c910ff01000000000000000000000000000104ac54a2b3301464606bd7f7c9c08df5aded32ae4555162dd652e961168e52961fce66a82fb07382dd3a7421a0cce50d0b50d7d815a42f242e052eae7fe586259abbfe7c0c25b1fe1e26c493ef086a682c5b881dcfee040c3f4556f6f947e54f03e22c0be08d376b8d88d81da565583e2e753fcccc8293eb34293d934b07ed3afc76476b62fbf5008caa4e25388968625a61a8db2f6a4732f286ac3d67cb8e93595a5fb0eacb9a9c2f2a76e88aae0001000502f00000000088000000000000002900000039000000010e000600000000fc000000000000000000000000000000fe8000000000000000000000000000bbfc02000000010001000000000000000000000000000000000000ffff7f000001fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000000000000000000000000001"], 0x198}}, {{&(0x7f0000000600)={0xa, 0x4e23, 0x1f2a, @local, 0x701af617}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000000640)="b1d2c6d10a136b20cddd12ceb1087372d924232f320d697f884769bd122ec83a93f3563932cb20c14acdb74e045324be4852211b169296cc", 0x38}, {&(0x7f0000000680)="3b4b3ccf27dd8d3619a5e87fa24e19a4df9bb5f078bbf7e795", 0x19}, {&(0x7f00000006c0)="ad6586636dd203ef4c7a1b0d7a6f23e56e18faf3fc8317e2fa4bdcd611ffb128a9a4b97e0f43e55853ec57b68f817f72", 0x30}, {&(0x7f0000000700)="1a3131ac53870e5569e6239dd38f0b6a4e9c6c15", 0x14}, {&(0x7f0000000740)="06c313ee57156a9a8e7b4a08b4574a5a3b3cbff37e0c096062eb7ebcf261b866cffffc56b837ae1cb12f0ec5a8057b542add103c65ca81f7fd3aaa1398631ba66a25321359d9a7700b739cc0998b5601c85ab2f3fb4115", 0x57}], 0x6, &(0x7f0000000840)=[@pktinfo={{0x24, 0x29, 0x32, {@private0}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x87, 0xc, 0x2, 0x1, 0x0, [@local, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}]}}}], 0xb8}}], 0x2, 0xc001) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000a40)={0xa10000, 0xf501, 0x2, r1, 0x0, &(0x7f0000000a00)={0x990a95, 0xa, '\x00', @value=0xadb2}}) 1.137124891s ago: executing program 7 (id=4811): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000680)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r2, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) 1.08135891s ago: executing program 7 (id=4812): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/54, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000002c0)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000005c0)={0x1, 0x0, [{0x1000, 0x0, 0x0}]}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) getrlimit(0x3, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b12020000000000280012800b00010067656e657665000018000280060005004e"], 0x58}}, 0x0) 12.085298ms ago: executing program 7 (id=4813): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000040000000000000", 0x1c) recvmmsg(r3, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}) 0s ago: executing program 1 (id=4814): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000580), 0xa00000000000000, &(0x7f0000000740)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[], [{@smackfshat={'smackfshat', 0x3d, 'vxfs\x00'}}]}}) kernel console output (not intermixed with test programs): [ 1466.428247][T13290] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.503928][ T9] usb 4-1: USB disconnect, device number 15 [ 1466.709593][T13290] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.871892][T13290] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.949569][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.957529][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.138400][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.147490][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.383741][T13290] erspan0: left allmulticast mode [ 1467.399117][T13290] erspan0: left promiscuous mode [ 1467.410866][T13290] bridge0: port 3(erspan0) entered disabled state [ 1467.442549][T13290] bridge_slave_1: left allmulticast mode [ 1467.449111][T13290] bridge_slave_1: left promiscuous mode [ 1467.454960][T13290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.475503][T13290] bridge_slave_0: left allmulticast mode [ 1467.484721][T13290] bridge_slave_0: left promiscuous mode [ 1467.501944][T13290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.738950][T18416] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1467.845223][T20078] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 1467.978228][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1468.764811][T18416] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1468.787479][T18416] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1468.850401][T18416] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1468.898083][T18416] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.957288][T18416] usb 5-1: Product: syz [ 1468.961635][T18416] usb 5-1: Manufacturer: syz [ 1468.991990][T18416] usb 5-1: SerialNumber: syz [ 1469.010274][T18416] usb 5-1: config 0 descriptor?? [ 1469.032911][T20089] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1469.077582][T20089] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1469.291775][T20089] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1469.320264][T20089] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1469.879526][T13290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.908097][T13290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.934494][T13290] bond0 (unregistering): Released all slaves [ 1469.957217][T20087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4080'. [ 1469.974782][T20087] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 1469.985235][T20087] erspan1: entered promiscuous mode [ 1470.001293][T20087] erspan1: entered allmulticast mode [ 1470.073508][T20104] tap0: tun_chr_ioctl cmd 2147767507 [ 1470.188418][T18416] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1470.266755][T18416] dm9601 5-1:0.0 eth13: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 54:01:47:1e:47:20 [ 1470.351540][T18416] usb 5-1: USB disconnect, device number 62 [ 1470.477935][T18416] dm9601 5-1:0.0 eth13: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 1470.507723][ T6512] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1471.716801][T20139] FAULT_INJECTION: forcing a failure. [ 1471.716801][T20139] name failslab, interval 1, probability 0, space 0, times 0 [ 1471.749276][T20139] CPU: 0 UID: 0 PID: 20139 Comm: syz.3.4095 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1471.760105][T20139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1471.770201][T20139] Call Trace: [ 1471.773524][T20139] [ 1471.776484][T20139] dump_stack_lvl+0x241/0x360 [ 1471.781223][T20139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1471.786467][T20139] ? __pfx__printk+0x10/0x10 [ 1471.791115][T20139] ? __kmalloc_node_track_caller_noprof+0xb2/0x440 [ 1471.797663][T20139] ? __pfx___might_resched+0x10/0x10 [ 1471.803003][T20139] ? __asan_memset+0x23/0x50 [ 1471.807661][T20139] should_fail_ex+0x3b0/0x4e0 [ 1471.812408][T20139] should_failslab+0xac/0x100 [ 1471.817131][T20139] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 1471.823497][T20139] ? p9_client_create+0x325/0x1180 [ 1471.828659][T20139] kstrdup+0x3a/0x80 [ 1471.832605][T20139] p9_client_create+0x325/0x1180 [ 1471.837609][T20139] ? __pfx_p9_client_create+0x10/0x10 [ 1471.843025][T20139] ? __asan_memset+0x23/0x50 [ 1471.847656][T20139] ? lockdep_init_map_type+0xa1/0x910 [ 1471.853075][T20139] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1471.858933][T20139] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1471.864851][T20139] ? __raw_spin_lock_init+0x45/0x100 [ 1471.870194][T20139] v9fs_session_init+0x1e4/0x1b80 [ 1471.875289][T20139] ? __pfx_v9fs_session_init+0x10/0x10 [ 1471.880859][T20139] ? __kasan_kmalloc+0x98/0xb0 [ 1471.885669][T20139] ? v9fs_mount+0xb2/0xa90 [ 1471.890100][T20139] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 1471.895674][T20139] v9fs_mount+0xd5/0xa90 [ 1471.899927][T20139] ? kasan_quarantine_put+0xdc/0x230 [ 1471.905229][T20139] ? lockdep_hardirqs_on+0x99/0x150 [ 1471.910441][T20139] ? __pfx_v9fs_mount+0x10/0x10 [ 1471.915324][T20139] ? smack_sb_eat_lsm_opts+0x4b6/0x6a0 [ 1471.920797][T20139] ? kfree+0x1a0/0x440 [ 1471.924884][T20139] legacy_get_tree+0xee/0x190 [ 1471.929568][T20139] ? __pfx_v9fs_mount+0x10/0x10 [ 1471.934440][T20139] vfs_get_tree+0x90/0x2b0 [ 1471.938862][T20139] do_new_mount+0x2be/0xb40 [ 1471.943375][T20139] ? __pfx_do_new_mount+0x10/0x10 [ 1471.948408][T20139] __se_sys_mount+0x2d6/0x3c0 [ 1471.953094][T20139] ? __pfx___se_sys_mount+0x10/0x10 [ 1471.958309][T20139] ? do_syscall_64+0x100/0x230 [ 1471.963108][T20139] ? __x64_sys_mount+0x20/0xc0 [ 1471.967885][T20139] do_syscall_64+0xf3/0x230 [ 1471.972393][T20139] ? clear_bhb_loop+0x35/0x90 [ 1471.977083][T20139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.982976][T20139] RIP: 0033:0x7fc654b7e719 [ 1471.987410][T20139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1472.007038][T20139] RSP: 002b:00007fc655a01038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1472.015472][T20139] RAX: ffffffffffffffda RBX: 00007fc654d35f80 RCX: 00007fc654b7e719 [ 1472.023487][T20139] RDX: 0000000020000580 RSI: 0000000020000500 RDI: 00000000200004c0 [ 1472.031461][T20139] RBP: 00007fc655a01090 R08: 0000000020000740 R09: 0000000000000000 [ 1472.039433][T20139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1472.047400][T20139] R13: 0000000000000000 R14: 00007fc654d35f80 R15: 00007ffd714d3718 [ 1472.055385][T20139] [ 1472.058538][ C0] vkms_vblank_simulate: vblank timer overrun [ 1472.127483][T20141] bridge0: port 3(erspan0) entered blocking state [ 1472.134248][T20141] bridge0: port 3(erspan0) entered disabled state [ 1472.141135][T20141] erspan0: entered allmulticast mode [ 1472.147784][T20141] erspan0: entered promiscuous mode [ 1472.153468][T20141] bridge0: port 3(erspan0) entered blocking state [ 1472.160016][T20141] bridge0: port 3(erspan0) entered forwarding state [ 1472.170726][T20141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4093'. [ 1472.567921][ T5837] Bluetooth: hci0: command tx timeout [ 1472.582973][T13290] hsr_slave_0: left promiscuous mode [ 1472.589671][T13290] hsr_slave_1: left promiscuous mode [ 1472.595890][T13290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1472.603832][T13290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1472.621635][T13290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1472.629360][T13290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1472.676365][T13290] veth1_macvtap: left promiscuous mode [ 1472.682396][T13290] veth0_macvtap: left promiscuous mode [ 1472.688160][T13290] veth1_vlan: left promiscuous mode [ 1472.693668][T13290] veth0_vlan: left promiscuous mode [ 1472.939514][T20160] kernel profiling enabled (shift: 63) [ 1472.955718][T20160] profiling shift: 63 too large [ 1473.021392][T20164] kernel profiling enabled (shift: 6) [ 1474.378999][T13290] team0 (unregistering): Port device team_slave_1 removed [ 1474.548881][T13290] team0 (unregistering): Port device team_slave_0 removed [ 1476.367861][T20197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4110'. [ 1477.499565][T20214] loop2: detected capacity change from 0 to 524287999 [ 1477.506985][ C1] blk_print_req_error: 7 callbacks suppressed [ 1477.507015][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1477.522323][ C1] buffer_io_error: 7 callbacks suppressed [ 1477.522338][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1477.537481][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1477.546713][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1477.556464][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1477.565691][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1477.789266][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1477.798536][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1477.823550][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1477.832763][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1477.842612][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1477.851830][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1477.860243][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1477.869505][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1477.878075][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1477.887289][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1477.895245][T20214] ldm_validate_partition_table(): Disk read failed. [ 1477.903205][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1477.912409][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1477.920511][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1477.929754][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1477.939735][T20214] Dev loop2: unable to read RDB block 0 [ 1477.946596][T20214] loop2: unable to read partition table [ 1477.952490][T20214] loop_reread_partitions: partition scan of loop2 (3 xC) failed (rc=-5) [ 1478.093166][T13581] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1478.248814][T13581] usb 4-1: Using ep0 maxpacket: 8 [ 1478.255737][T13581] usb 4-1: config 1 interface 0 altsetting 20 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1478.430889][T13581] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1478.458266][T13581] usb 4-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 1478.468690][T13581] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.476741][T13581] usb 4-1: Product: syz [ 1478.482367][T20230] Cannot find add_set index 0 as target [ 1478.493383][T13581] usb 4-1: Manufacturer: syz [ 1478.498556][T18416] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1478.526524][T13581] usb 4-1: SerialNumber: syz [ 1478.553041][T13581] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input37 [ 1478.610890][T13290] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.648714][T18416] usb 3-1: Using ep0 maxpacket: 32 [ 1478.676277][T18416] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.696551][T18416] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1478.716100][T18416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.755271][T18416] usb 3-1: Product: syz [ 1478.772178][T18416] usb 3-1: Manufacturer: syz [ 1478.791090][T18416] usb 3-1: SerialNumber: syz [ 1478.803219][T13290] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.818982][T18416] usb 3-1: config 0 descriptor?? [ 1478.839171][ T5190] bcm5974 4-1:1.0: could not read from device [ 1478.848580][T18416] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1478.855592][ T5190] bcm5974 4-1:1.0: could not read from device [ 1478.864285][T13581] usb 4-1: USB disconnect, device number 16 [ 1478.907523][ T5190] bcm5974 4-1:1.0: could not read from device [ 1478.958024][ T5190] bcm5974 4-1:1.0: could not read from device [ 1479.025803][T13290] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.140593][T14970] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1479.152050][T14970] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1479.185931][T14970] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1479.216708][T14970] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1479.461057][T14970] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1479.497440][T14970] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1479.550148][T13290] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.591951][T20242] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4126'. [ 1479.847104][T18416] gspca_sunplus: reg_r err -71 [ 1480.175635][T13290] erspan0: left allmulticast mode [ 1480.198915][T13290] erspan0: left promiscuous mode [ 1480.205190][T13290] bridge0: port 3(erspan0) entered disabled state [ 1480.287846][T13290] bridge_slave_1: left allmulticast mode [ 1480.324616][T13290] bridge_slave_1: left promiscuous mode [ 1480.357271][T13290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.611140][T13290] bridge_slave_0: left allmulticast mode [ 1480.627201][T13290] bridge_slave_0: left promiscuous mode [ 1480.637531][T13290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.849098][ T7149] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1481.469537][ T7149] usb 4-1: Using ep0 maxpacket: 16 [ 1481.591601][ T7149] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1481.609420][T14970] Bluetooth: hci2: command tx timeout [ 1481.692771][ T7149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.725331][ T7149] usb 4-1: Product: syz [ 1481.741136][ T7149] usb 4-1: Manufacturer: syz [ 1481.763213][ T7149] usb 4-1: SerialNumber: syz [ 1481.781666][ T7149] usb 4-1: config 0 descriptor?? [ 1481.814146][ T7149] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 1482.026372][ T7149] usb 4-1: clie_3_5_startup: get config number bad return length: 0 [ 1482.047630][ T7149] visor 4-1:0.0: probe with driver visor failed with error -5 [ 1482.081218][T18416] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1482.092270][T18416] usb 3-1: USB disconnect, device number 16 [ 1482.227924][ T7149] usb 4-1: USB disconnect, device number 17 [ 1483.429149][ T7149] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1483.590358][ T7149] usb 2-1: Using ep0 maxpacket: 16 [ 1483.597767][ T7149] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1483.641584][ T7149] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1483.649510][T13290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1483.663810][ T7149] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1483.689087][T14970] Bluetooth: hci2: command tx timeout [ 1483.707516][ T7149] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1483.728487][T13290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1483.752722][ T7149] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1483.791593][T13290] bond0 (unregistering): Released all slaves [ 1483.844133][ T7149] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1483.853373][ T7149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1483.879422][ T7149] usb 2-1: SerialNumber: syz [ 1483.922908][T20286] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1483.959961][ T7149] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1483.970314][ T7149] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 1484.230156][T20286] tipc: Can't bind to reserved service type 0 [ 1484.248500][T20234] chnl_net:caif_netlink_parms(): no params data found [ 1484.293061][T14325] usb 2-1: USB disconnect, device number 29 [ 1484.315420][T20301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4143'. [ 1484.412576][T14970] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1484.421751][T14970] Bluetooth: hci3: Injecting HCI hardware error event [ 1484.433030][T14970] Bluetooth: hci3: hardware error 0x00 [ 1484.572007][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.578552][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.809801][T20309] tmpfs: Bad value for 'mpol' [ 1485.772945][ T5834] Bluetooth: hci2: command tx timeout [ 1485.945435][T20234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.959592][T20234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.966903][T20234] bridge_slave_0: entered allmulticast mode [ 1486.096092][T20234] bridge_slave_0: entered promiscuous mode [ 1486.225278][T20234] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.247390][T20234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.297610][T20234] bridge_slave_1: entered allmulticast mode [ 1486.334385][T20234] bridge_slave_1: entered promiscuous mode [ 1486.505202][T20234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1486.547639][T20234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1486.586811][T13290] hsr_slave_0: left promiscuous mode [ 1486.608263][T13290] hsr_slave_1: left promiscuous mode [ 1486.615845][T13290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1486.628286][T13290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1486.645137][T13290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1486.656513][T13290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1486.675012][T14970] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1486.717731][T13290] veth1_macvtap: left promiscuous mode [ 1486.727788][T13290] veth0_macvtap: left promiscuous mode [ 1486.746094][T13290] veth1_vlan: left promiscuous mode [ 1486.752672][T13290] veth0_vlan: left promiscuous mode [ 1487.859258][T14970] Bluetooth: hci2: command tx timeout [ 1488.011025][ T7149] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1488.290143][ T7149] usb 5-1: Using ep0 maxpacket: 16 [ 1488.417820][ T7149] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1488.482407][ T7149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.519666][ T7149] usb 5-1: Product: syz [ 1488.523912][ T7149] usb 5-1: Manufacturer: syz [ 1488.528555][ T7149] usb 5-1: SerialNumber: syz [ 1488.535523][ T7149] usb 5-1: config 0 descriptor?? [ 1488.544804][ T7149] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1488.861157][T20349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4156'. [ 1489.209166][T13290] team0 (unregistering): Port device team_slave_1 removed [ 1489.269360][T13290] team0 (unregistering): Port device team_slave_0 removed [ 1490.095825][T20234] team0: Port device team_slave_0 added [ 1490.105432][T20234] team0: Port device team_slave_1 added [ 1490.168157][T20234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1490.184908][T20234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1490.268045][T20234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1490.345616][T20234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1490.393342][T20234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1490.420608][T20234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1490.749289][ T9] usb 5-1: USB disconnect, device number 63 [ 1491.891369][T20234] hsr_slave_0: entered promiscuous mode [ 1491.917595][T20234] hsr_slave_1: entered promiscuous mode [ 1493.570891][T20382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4166'. [ 1494.334655][T20234] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.317994][T14325] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1495.482105][T14325] usb 2-1: Using ep0 maxpacket: 16 [ 1495.490745][T14325] usb 2-1: config 222 has an invalid interface number: 39 but max is 0 [ 1495.507148][T14325] usb 2-1: config 222 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.538126][T14325] usb 2-1: config 222 has no interface number 0 [ 1495.549133][T20234] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.570080][T14325] usb 2-1: config 222 interface 39 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1495.606531][T14325] usb 2-1: config 222 interface 39 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1495.645774][T14325] usb 2-1: config 222 interface 39 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1495.667952][T14325] usb 2-1: config 222 interface 39 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1495.725497][T14325] usb 2-1: config 222 interface 39 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1495.760650][T14325] usb 2-1: config 222 interface 39 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1495.784303][T14325] usb 2-1: New USB device found, idVendor=066f, idProduct=8000, bcdDevice= 0.01 [ 1495.802966][T20234] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.814505][T14325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.827293][T14325] usb 2-1: Product: syz [ 1495.832114][T14325] usb 2-1: Manufacturer: syz [ 1495.836894][T14325] usb 2-1: SerialNumber: syz [ 1495.853682][T20391] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1496.098496][T20412] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4169'. [ 1496.135982][T20412] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4169'. [ 1496.159041][T20234] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.361452][T20419] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4174'. [ 1497.614489][T14325] usb-storage 2-1:222.39: USB Mass Storage device detected [ 1497.662834][T14325] usb-storage 2-1:222.39: Quirks match for vid 066f pid 8000: 10 [ 1498.008844][T20234] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1498.025817][T14325] usb 2-1: USB disconnect, device number 30 [ 1498.113771][T20234] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1498.184108][T20234] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1498.274368][T20234] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1499.297255][T20446] FAULT_INJECTION: forcing a failure. [ 1499.297255][T20446] name failslab, interval 1, probability 0, space 0, times 0 [ 1499.412458][T20446] CPU: 0 UID: 0 PID: 20446 Comm: syz.1.4183 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1499.423325][T20446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1499.433423][T20446] Call Trace: [ 1499.436741][T20446] [ 1499.439707][T20446] dump_stack_lvl+0x241/0x360 [ 1499.444450][T20446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1499.449722][T20446] ? __wake_up_klogd+0xcc/0x110 [ 1499.454638][T20446] ? dump_stack+0x9/0x20 [ 1499.458958][T20446] should_fail_ex+0x3b0/0x4e0 [ 1499.463701][T20446] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1499.469494][T20446] should_failslab+0xac/0x100 [ 1499.474240][T20446] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1499.480032][T20446] __kmalloc_noprof+0xd8/0x400 [ 1499.484864][T20446] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1499.490498][T20446] tomoyo_path_number_perm+0x23a/0x880 [ 1499.496041][T20446] ? tomoyo_path_number_perm+0x208/0x880 [ 1499.501733][T20446] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1499.507781][T20446] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1499.514809][T20446] ? rcu_read_unlock_special+0x497/0x570 [ 1499.520536][T20446] ? __rcu_read_unlock+0xa1/0x110 [ 1499.525638][T20446] ? __fget_files+0x29/0x470 [ 1499.530266][T20446] ? __fget_files+0x3f3/0x470 [ 1499.534973][T20446] security_file_ioctl+0xc6/0x2a0 [ 1499.540024][T20446] __se_sys_ioctl+0x47/0x170 [ 1499.544638][T20446] do_syscall_64+0xf3/0x230 [ 1499.549187][T20446] ? clear_bhb_loop+0x35/0x90 [ 1499.553892][T20446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.559803][T20446] RIP: 0033:0x7f4eaeb7e719 [ 1499.564236][T20446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1499.583885][T20446] RSP: 002b:00007f4eaf95f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1499.592324][T20446] RAX: ffffffffffffffda RBX: 00007f4eaed36058 RCX: 00007f4eaeb7e719 [ 1499.600310][T20446] RDX: 0000000020000000 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1499.608316][T20446] RBP: 00007f4eaf95f090 R08: 0000000000000000 R09: 0000000000000000 [ 1499.616325][T20446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1499.624320][T20446] R13: 0000000000000000 R14: 00007f4eaed36058 R15: 00007ffeda7fe8e8 [ 1499.632325][T20446] [ 1499.641065][T20446] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1499.661377][T13581] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1499.935020][ T2911] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1500.151772][T20234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1500.180761][T20234] 8021q: adding VLAN 0 to HW filter on device team0 [ 1500.203792][T15263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.211002][T15263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1500.220864][T15263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.228120][T15263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1500.304633][T13581] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1500.316757][T13581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1500.326791][T20234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1500.327810][T13581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1500.348165][T13581] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1500.361300][T13581] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1500.370438][T13581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.372515][T14325] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1500.397025][T13581] usb 4-1: config 0 descriptor?? [ 1500.543968][T14325] usb 5-1: config 246 has an invalid interface number: 166 but max is 0 [ 1500.553051][T14325] usb 5-1: config 246 has no interface number 0 [ 1500.559411][T14325] usb 5-1: config 246 interface 166 altsetting 118 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 1500.607253][T14325] usb 5-1: config 246 interface 166 altsetting 118 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1500.641539][ T5883] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1500.657385][ C1] sd 0:0:1:0: [sda] tag#4057 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1500.668001][ C1] sd 0:0:1:0: [sda] tag#4057 CDB: Write(6) 0a 0b 00 08 00 00 [ 1500.676159][ C1] sd 0:0:1:0: [sda] tag#4058 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1500.686699][ C1] sd 0:0:1:0: [sda] tag#4058 CDB: Write(6) 0a 0b 00 08 00 00 [ 1500.694283][ C1] sd 0:0:1:0: [sda] tag#4059 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1500.704743][ C1] sd 0:0:1:0: [sda] tag#4059 CDB: Write(6) 0a 0b 00 08 00 00 [ 1500.712280][ C1] sd 0:0:1:0: [sda] tag#4060 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1500.722740][ C1] sd 0:0:1:0: [sda] tag#4060 CDB: Write(6) 0a 0b 00 08 00 00 [ 1500.730253][ C1] sd 0:0:1:0: [sda] tag#4061 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1500.740735][ C1] sd 0:0:1:0: [sda] tag#4061 CDB: Write(6) 0a 0b 00 08 00 00 [ 1500.748337][ C1] sd 0:0:1:0: [sda] tag#4062 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1500.758774][ C1] sd 0:0:1:0: [sda] tag#4062 CDB: Write(6) 0a 0b 00 08 00 00 [ 1500.766319][ C1] sd 0:0:1:0: [sda] tag#4063 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1500.776756][ C1] sd 0:0:1:0: [sda] tag#4063 CDB: Write(6) 0a 0b 00 08 00 00 [ 1500.784279][ C1] sd 0:0:1:0: [sda] tag#4064 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1500.794730][ C1] sd 0:0:1:0: [sda] tag#4064 CDB: Write(6) 0a 0b 00 08 00 00 [ 1500.802300][ C1] sd 0:0:1:0: [sda] tag#4065 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1500.812776][ C1] sd 0:0:1:0: [sda] tag#4065 CDB: Write(6) 0a 0b 00 08 00 00 [ 1500.820263][ C1] sd 0:0:1:0: [sda] tag#4066 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1500.830719][ C1] sd 0:0:1:0: [sda] tag#4066 CDB: Write(6) 0a 0b 00 08 00 00 [ 1500.840385][T14325] usb 5-1: config 246 interface 166 has no altsetting 0 [ 1500.905366][T20442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.927275][T20234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1500.935132][T20442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.027087][T14325] usb 5-1: string descriptor 0 read error: -71 [ 1501.033865][T14325] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 1501.056925][T14325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.111930][T14325] usb 5-1: can't set config #246, error -71 [ 1501.171004][T14325] usb 5-1: USB disconnect, device number 64 [ 1501.287953][T20234] veth0_vlan: entered promiscuous mode [ 1501.317930][T13581] usbhid 4-1:0.0: can't add hid device: -71 [ 1501.324733][T13581] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1501.340852][T20234] veth1_vlan: entered promiscuous mode [ 1501.346900][T13581] usb 4-1: USB disconnect, device number 18 [ 1501.399476][T20234] veth0_macvtap: entered promiscuous mode [ 1501.414095][T20234] veth1_macvtap: entered promiscuous mode [ 1501.457996][T20234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1501.469956][T20234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.480518][T20234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1501.492145][T20234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.503081][T20234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1501.517942][T20234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.528277][T20234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1501.540339][T20234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.571428][T20234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1501.582217][T20234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.592356][T20234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1501.603288][T20234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.615515][T20234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1501.626227][T20234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.636357][T20234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1501.667377][T20234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.690372][T20234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1501.716841][T20234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.727676][T20234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.739041][T20234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.750479][T20234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.780924][T20234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.797496][T20234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.810395][T20234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.831293][T20234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.852165][T20234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.870773][T20234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.891318][T20234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.917183][T20234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.934046][T20234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.950997][T20234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.964923][T20234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.975590][T20234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1502.045013][T20234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1502.208298][T20490] tipc: Started in network mode [ 1502.237444][T20490] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1502.252545][T20490] tipc: Enabled bearer , priority 0 [ 1502.274560][T20234] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.286709][T20234] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.299169][T20234] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.332060][T20234] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.374169][T20488] netlink: 'syz.4.4195': attribute type 10 has an invalid length. [ 1502.383927][T20486] xt_ecn: cannot match TCP bits for non-tcp packets [ 1502.617354][ T9764] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.037201][ T9764] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.442758][T13581] tipc: Node number set to 11578026 [ 1503.972117][ T9764] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.004133][ T25] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1504.038019][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1504.054292][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1504.064685][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1504.084515][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1504.111680][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1504.120983][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1504.213923][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.227954][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.479254][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1505.196313][ T25] usb 5-1: config 36 has an invalid interface number: 19 but max is 0 [ 1505.325335][ T25] usb 5-1: config 36 has an invalid interface number: 4 but max is 0 [ 1505.339239][ T25] usb 5-1: config 36 has 2 interfaces, different from the descriptor's value: 1 [ 1505.348884][ T25] usb 5-1: config 36 has no interface number 0 [ 1505.355687][ T25] usb 5-1: config 36 has no interface number 1 [ 1505.362713][ T25] usb 5-1: config 36 interface 19 altsetting 9 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1505.374861][ T25] usb 5-1: config 36 interface 19 altsetting 9 endpoint 0x8D has invalid maxpacket 59391, setting to 1024 [ 1505.386553][ T25] usb 5-1: config 36 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1505.400414][ T25] usb 5-1: too many endpoints for config 36 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 1505.412855][ T25] usb 5-1: config 36 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 1505.433157][ T25] usb 5-1: config 36 interface 4 altsetting 131 endpoint 0xC has invalid maxpacket 37478, setting to 1024 [ 1505.461786][ T25] usb 5-1: config 36 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 1024 [ 1505.491348][ T9764] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.512770][ T25] usb 5-1: config 36 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 1505.576048][ T25] usb 5-1: config 36 interface 19 has no altsetting 0 [ 1505.601986][ T25] usb 5-1: config 36 interface 4 has no altsetting 0 [ 1505.630255][T20530] netlink: 'syz.3.4208': attribute type 29 has an invalid length. [ 1505.665042][T13290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.679621][ T25] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=53.f5 [ 1505.693212][T13290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.712064][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.752617][T20529] netlink: 'syz.3.4208': attribute type 29 has an invalid length. [ 1505.773834][T20530] netlink: 500 bytes leftover after parsing attributes in process `syz.3.4208'. [ 1505.816419][ T25] usb 5-1: Product: syz [ 1505.831959][ T25] usb 5-1: Manufacturer: syz [ 1505.837446][ T25] usb 5-1: SerialNumber: syz [ 1505.910717][T20503] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1506.037695][ T25] pl2303 5-1:36.19: required endpoints missing [ 1506.094259][ T25] pl2303 5-1:36.4: pl2303 converter detected [ 1506.136229][ T25] pl2303 5-1:36.4: unknown device type, please report to linux-usb@vger.kernel.org [ 1506.174708][ T5834] Bluetooth: hci4: command tx timeout [ 1506.336503][ T25] usb 5-1: USB disconnect, device number 65 [ 1506.429136][ T9764] erspan0: left allmulticast mode [ 1506.476440][ T9764] erspan0: left promiscuous mode [ 1506.497411][ T9764] bridge0: port 3(erspan0) entered disabled state [ 1506.531014][ T9764] bridge_slave_1: left allmulticast mode [ 1506.552498][ T9764] bridge_slave_1: left promiscuous mode [ 1506.560207][ T9764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.966278][ T9764] bridge_slave_0: left allmulticast mode [ 1506.997124][ T9764] bridge_slave_0: left promiscuous mode [ 1507.087557][ T9764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.573716][ T29] audit: type=1400 audit(1731682272.576:520): lsm=SMACK fn=smack_inode_set_acl action=denied subject="w" object="_" requested=w pid=20551 comm="syz.3.4215" name="98" dev="tmpfs" ino=514 [ 1507.758765][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.806021][T20563] openvswitch: netlink: Actions may not be safe on all matching packets [ 1508.061869][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.142422][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.252731][T14970] Bluetooth: hci4: command tx timeout [ 1508.719291][ T9764] bond0 (unregistering): left promiscuous mode [ 1508.725803][ T9764] bond_slave_0: left promiscuous mode [ 1508.731555][ T9764] bond_slave_1: left promiscuous mode [ 1508.743394][ T9764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.760302][ T9764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1508.772500][ T9764] bond0 (unregistering): Released all slaves [ 1508.824502][T20512] chnl_net:caif_netlink_parms(): no params data found [ 1508.888815][T20555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4216'. [ 1509.134029][T20571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4220'. [ 1509.174375][T20571] vlan2: entered promiscuous mode [ 1509.184265][T20571] macvlan0: entered promiscuous mode [ 1509.218174][T20571] macvlan0: left promiscuous mode [ 1509.443214][T20512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.451512][T20512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.464314][T20512] bridge_slave_0: entered allmulticast mode [ 1509.480389][T20512] bridge_slave_0: entered promiscuous mode [ 1509.595216][T20512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.606358][T20512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.616018][T20512] bridge_slave_1: entered allmulticast mode [ 1509.624506][T20512] bridge_slave_1: entered promiscuous mode [ 1509.662950][T20512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1509.684289][T20512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1509.849007][T13581] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1510.014443][T13581] usb 2-1: Using ep0 maxpacket: 32 [ 1510.022411][T13581] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1510.130741][T20512] team0: Port device team_slave_0 added [ 1510.151559][T20512] team0: Port device team_slave_1 added [ 1510.154814][T13581] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1510.166287][T13581] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1510.179170][T13581] usb 2-1: config 1 has no interface number 0 [ 1510.187685][T13581] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1510.201133][T13581] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1510.216327][T13581] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1510.228040][T13581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.255013][T13581] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1510.279271][ T9764] team0: left promiscuous mode [ 1510.289171][ T9764] team_slave_0: left promiscuous mode [ 1510.316666][ T9764] team_slave_1: left promiscuous mode [ 1510.332476][T14970] Bluetooth: hci4: command tx timeout [ 1510.365359][ T9764] hsr_slave_0: left promiscuous mode [ 1510.552695][ T9764] hsr_slave_1: left promiscuous mode [ 1510.614500][ T9764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1510.644410][ T9764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1510.677856][ T9764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1510.702508][ T9764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1510.832479][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1510.897431][ T9764] veth1_macvtap: left promiscuous mode [ 1510.933089][ T9764] veth0_macvtap: left promiscuous mode [ 1510.962433][ T9764] veth1_vlan: left promiscuous mode [ 1510.967940][ T9764] veth0_vlan: left promiscuous mode [ 1511.459444][T13581] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1511.742259][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1511.787719][ T25] usb 2-1: USB disconnect, device number 31 [ 1511.797346][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1511.806676][ T25] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1511.807462][ T9] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1511.824650][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.835406][ T9] usb 5-1: config 0 descriptor?? [ 1512.270150][T14970] Bluetooth: hci0: command 0x0406 tx timeout [ 1512.328211][ T9] hid-multitouch 0003:1FD2:6007.001C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 1512.424987][ T5834] Bluetooth: hci4: command tx timeout [ 1513.871151][ T9764] team0 (unregistering): Port device team_slave_1 removed [ 1513.957091][ T9764] team0 (unregistering): Port device team_slave_0 removed [ 1515.078560][T20595] ip6gretap1: entered promiscuous mode [ 1515.086960][T20595] ip6gretap1: entered allmulticast mode [ 1515.107945][T20512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1515.145329][T20512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1515.187617][ T9] usb 5-1: USB disconnect, device number 66 [ 1515.201514][T20512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1515.245260][T20512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1515.252303][T20512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1515.326025][T20512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1515.624041][T20512] hsr_slave_0: entered promiscuous mode [ 1515.749681][T20512] hsr_slave_1: entered promiscuous mode [ 1515.841762][T20512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1515.868357][T20512] Cannot create hsr debugfs directory [ 1516.170424][T20646] bridge0: port 3(erspan0) entered blocking state [ 1516.177172][T20646] bridge0: port 3(erspan0) entered disabled state [ 1516.184067][T20646] erspan0: entered allmulticast mode [ 1516.190895][T20646] erspan0: entered promiscuous mode [ 1516.196879][T20646] bridge0: port 3(erspan0) entered blocking state [ 1516.203532][T20646] bridge0: port 3(erspan0) entered forwarding state [ 1516.628689][T20655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4246'. [ 1516.638220][T20655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4246'. [ 1516.652039][T20655] netlink: 332 bytes leftover after parsing attributes in process `syz.4.4246'. [ 1516.757215][T20657] input: syz0 as /devices/virtual/input/input38 [ 1517.993888][T20673] netlink: 'syz.1.4252': attribute type 4 has an invalid length. [ 1518.054425][T20673] rdma_rxe: rxe_newlink: failed to add lo [ 1518.333447][ T5883] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1518.535110][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 1518.625162][ T5883] usb 5-1: config 0 has no interfaces? [ 1518.741832][T20512] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1518.794022][ T5883] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1518.851613][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.866029][ T5883] usb 5-1: Product: syz [ 1518.906238][ T5883] usb 5-1: Manufacturer: syz [ 1518.913888][T20512] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1518.921690][ T5883] usb 5-1: SerialNumber: syz [ 1518.956271][T20512] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1518.976916][ T5883] usb 5-1: config 0 descriptor?? [ 1519.045009][T20512] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1519.332650][T13581] usb 5-1: USB disconnect, device number 67 [ 1519.350659][T20512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.440113][T20512] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.507053][ T7473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.514655][ T7473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.565069][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.572651][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.696900][T20512] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1519.724216][T20512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1520.914131][T20512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.042695][T20512] veth0_vlan: entered promiscuous mode [ 1521.117684][T20512] veth1_vlan: entered promiscuous mode [ 1521.660951][T20721] cgroup: none used incorrectly [ 1521.673106][T20512] veth0_macvtap: entered promiscuous mode [ 1521.745960][T20512] veth1_macvtap: entered promiscuous mode [ 1521.937716][T20512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1521.949606][T20512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.960746][T20512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1521.972149][T20512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.983141][T20512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1521.995663][T20512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.006384][T20512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1522.048971][T20512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.059235][T20512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1522.070155][T20512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.080789][T20512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1522.091694][T20512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.103035][T20512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1522.114321][T20512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.124736][T20512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1522.135577][T20512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.151596][T20512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1522.172998][T20512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.184439][T20512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.194519][T20512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.205948][T20512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.216449][T20512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.227324][T20512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.237584][T20512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.248304][T20512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.258969][T20512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.269863][T20512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.280075][T20512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.290965][T20512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.301805][T20512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.312973][T20512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.323037][T20512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.334331][T20512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.345840][T20512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1522.357224][T20512] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.366438][T20512] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.375419][T20512] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.384414][T20512] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.443364][T20721] orangefs_mount: mount request failed with -4 [ 1522.503892][T20718] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4268'. [ 1522.733177][T15263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1522.754887][T15263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1522.859806][ T9764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1522.868502][ T9764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.490394][T20740] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 1523.788772][T20751] netlink: 'syz.3.4275': attribute type 18 has an invalid length. [ 1523.808629][T20751] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1523.817577][T20751] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1523.826506][T20751] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1523.835349][T20751] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1523.954993][T20751] ALSA: mixer_oss: invalid OSS volume '' [ 1524.010764][ T29] audit: type=1326 audit(1731682288.984:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20750 comm="syz.3.4275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc654b7e719 code=0x0 [ 1524.454872][ T25] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1524.641247][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.662442][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1524.688911][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 1524.696654][T20762] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4279'. [ 1524.704046][ T25] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1524.724102][ T25] usb 1-1: Manufacturer: syz [ 1524.745356][ T25] usb 1-1: bad CDC descriptors [ 1524.814991][ T6512] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1524.955142][ T25] usb 1-1: USB disconnect, device number 46 [ 1524.995684][ T6512] usb 5-1: Using ep0 maxpacket: 16 [ 1525.004317][ T6512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1525.024314][ T6512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1525.044118][ T6512] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1525.062676][ T6512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.085205][ T6512] usb 5-1: config 0 descriptor?? [ 1526.506697][ T6512] usbhid 5-1:0.0: can't add hid device: -71 [ 1526.512894][ T6512] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1526.525776][ T6512] usb 5-1: USB disconnect, device number 68 [ 1529.085806][T20808] No such timeout policy "syz0" [ 1531.538252][ T2945] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1531.787700][T20822] netlink: 272 bytes leftover after parsing attributes in process `syz.0.4299'. [ 1532.128646][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1532.408068][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 1532.474577][ T25] usb 4-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1532.484132][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.492342][ T25] usb 4-1: Product: syz [ 1532.496802][ T25] usb 4-1: Manufacturer: syz [ 1532.501580][ T25] usb 4-1: SerialNumber: syz [ 1532.510184][ T25] usb 4-1: config 0 descriptor?? [ 1532.611929][ T25] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1533.301375][T20841] --map-set only usable from mangle table [ 1534.610682][T20853] Cannot find add_set index 0 as target [ 1534.911069][T14325] usb 4-1: USB disconnect, device number 19 [ 1535.736427][T20862] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1535.771689][T20862] hsr0: entered promiscuous mode [ 1536.070408][T20872] netlink: set zone limit has 8 unknown bytes [ 1536.505622][T20874] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1536.835572][ T6512] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1537.009099][ T6512] usb 4-1: Using ep0 maxpacket: 16 [ 1537.162309][ T6512] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1537.171802][ T6512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.180058][ T6512] usb 4-1: Product: syz [ 1537.184401][ T6512] usb 4-1: Manufacturer: syz [ 1537.204850][ T6512] usb 4-1: SerialNumber: syz [ 1537.280882][ T6512] usb 4-1: config 0 descriptor?? [ 1537.963630][T20888] msdos: Unknown parameter ')' [ 1538.009273][ T6512] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1538.024790][T20888] tmpfs: Invalid uid '0x00000000ffffffff' [ 1538.160415][T20892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1538.196325][T20893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1538.636865][ T6512] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 1539.263216][T20902] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4322'. [ 1539.672023][ T9] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1539.765414][T14325] usb 4-1: USB disconnect, device number 20 [ 1542.227224][ T6512] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1542.392158][T20920] random: crng reseeded on system resumption [ 1542.786427][ T6512] usb 2-1: Using ep0 maxpacket: 16 [ 1542.854184][ T6512] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1542.907954][ T6512] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.913100][ T9] usb 5-1: unable to read config index 0 descriptor/all [ 1542.923759][ T9] usb 5-1: can't read configurations, error -71 [ 1542.951807][ T6512] usb 2-1: Product: syz [ 1542.980476][ T6512] usb 2-1: Manufacturer: syz [ 1543.005011][ T6512] usb 2-1: SerialNumber: syz [ 1543.029771][ T6512] usb 2-1: config 0 descriptor?? [ 1543.049099][ T6512] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1544.255604][T13581] usb 2-1: USB disconnect, device number 32 [ 1545.590694][T20960] bridge0: port 3(erspan0) entered blocking state [ 1545.597562][T20960] bridge0: port 3(erspan0) entered disabled state [ 1545.604380][T20960] erspan0: entered allmulticast mode [ 1545.611063][T20960] erspan0: entered promiscuous mode [ 1545.616899][T20960] bridge0: port 3(erspan0) entered blocking state [ 1545.623430][T20960] bridge0: port 3(erspan0) entered forwarding state [ 1545.648440][T20943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4334'. [ 1546.103960][T20962] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4339'. [ 1546.105355][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.120413][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.744537][T20970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1546.960464][T13581] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1547.704579][T13581] usb 2-1: Using ep0 maxpacket: 8 [ 1547.734839][T13581] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1547.743360][T13581] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1548.324318][T13581] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1548.336352][T13581] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1548.347904][T13581] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1548.363517][T13581] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1548.366881][ T6512] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1548.371467][T13581] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1548.394169][T13581] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1548.426136][T13581] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1548.506985][T13581] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1548.545715][T13581] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1548.580154][T13581] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1548.914436][ T6512] usb 4-1: Using ep0 maxpacket: 16 [ 1549.018026][T13581] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1549.031956][T13581] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1549.052850][T13581] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1549.514619][T13581] usb 2-1: string descriptor 0 read error: -22 [ 1549.521349][T13581] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1549.522777][ T6512] usb 4-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1549.539127][T13581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.549191][ T6512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.671448][ T6512] usb 4-1: Product: syz [ 1549.676904][ T6512] usb 4-1: Manufacturer: syz [ 1549.684096][ T6512] usb 4-1: SerialNumber: syz [ 1549.747407][ T6512] usb 4-1: config 0 descriptor?? [ 1549.829646][T20993] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1549.869622][ T6512] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1549.873249][T13581] usb 2-1: can't set config #168, error -71 [ 1549.906141][T13581] usb 2-1: USB disconnect, device number 33 [ 1551.223124][ T6512] usb 4-1: USB disconnect, device number 21 [ 1552.655667][T21021] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4356'. [ 1554.697667][T21053] netlink: 'syz.7.4363': attribute type 13 has an invalid length. [ 1554.798269][T21056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4366'. [ 1555.732147][T21056] vlan2: entered promiscuous mode [ 1555.737260][T21056] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1555.977826][ T6512] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1556.147894][ T6512] usb 5-1: Using ep0 maxpacket: 16 [ 1556.253601][ T6512] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1556.292627][ T6512] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.321279][ T6512] usb 5-1: Product: syz [ 1556.349965][ T6512] usb 5-1: Manufacturer: syz [ 1556.365582][ T6512] usb 5-1: SerialNumber: syz [ 1556.400590][ T6512] usb 5-1: config 0 descriptor?? [ 1556.421313][ T6512] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1556.479626][T21072] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 1557.066643][T21083] loop2: detected capacity change from 0 to 524287999 [ 1557.093892][ C0] blk_print_req_error: 7 callbacks suppressed [ 1557.093957][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1557.109762][ C0] buffer_io_error: 7 callbacks suppressed [ 1557.109793][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1557.251422][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1557.260790][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1557.389820][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1557.399211][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1557.553921][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1557.563460][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1557.700681][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1557.709977][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1557.728283][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1557.737485][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1558.054720][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1558.064228][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1558.072518][T21083] ldm_validate_partition_table(): Disk read failed. [ 1558.091563][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1558.100935][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1558.114164][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1558.123450][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1558.132562][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1558.141868][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1558.351037][T21083] Dev loop2: unable to read RDB block 0 [ 1558.688646][ T7149] usb 5-1: USB disconnect, device number 71 [ 1558.712244][T21083] loop2: unable to read partition table [ 1558.718730][T21083] loop_reread_partitions: partition scan of loop2 (3 xC) failed (rc=-5) [ 1559.399088][T21109] netlink: 'syz.7.4382': attribute type 18 has an invalid length. [ 1559.414844][T21102] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1559.554175][T21102] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1559.624264][T21117] ALSA: mixer_oss: invalid OSS volume '' [ 1559.630821][T21109] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1559.639779][T21109] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1559.648786][T21109] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1559.657574][T21109] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1559.788397][ T29] audit: type=1326 audit(1731682324.780:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21108 comm="syz.7.4382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff65c17e719 code=0x0 [ 1559.915053][T21120] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4384'. [ 1559.936864][T21102] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1559.950781][T21102] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1560.005342][T21102] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1561.338365][T14970] Bluetooth: hci4: command tx timeout [ 1561.468518][T14970] Bluetooth: hci1: command 0x0406 tx timeout [ 1561.685229][T21102] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1561.883873][T21102] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1561.939964][T21102] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1562.345871][T14970] Bluetooth: hci0: command 0x0406 tx timeout [ 1562.632332][T21102] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1562.654537][T21102] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1562.717239][T21102] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1562.839138][T21147] netlink: 'syz.4.4393': attribute type 10 has an invalid length. [ 1562.975393][T21151] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4395'. [ 1563.008458][ T6512] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1563.358830][ T6512] usb 2-1: Using ep0 maxpacket: 16 [ 1563.372269][ T6512] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1563.381588][ T6512] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.389724][ T6512] usb 2-1: Product: syz [ 1563.393912][ T6512] usb 2-1: Manufacturer: syz [ 1563.408658][ T6512] usb 2-1: SerialNumber: syz [ 1563.415493][ T6512] usb 2-1: config 0 descriptor?? [ 1563.424375][ T6512] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1563.759542][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 1563.788882][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 1564.359894][T21163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4396'. [ 1564.426417][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 1564.435263][T21166] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4399'. [ 1564.444965][T21166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4399'. [ 1564.454529][T21166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4399'. [ 1564.752331][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 1564.779842][ T3015] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1564.931985][ T7149] usb 2-1: USB disconnect, device number 34 [ 1565.306951][T21175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4403'. [ 1565.317741][T21175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4403'. [ 1565.327835][T21175] netlink: 4432 bytes leftover after parsing attributes in process `syz.1.4403'. [ 1565.369066][T13581] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1565.528911][T13581] usb 5-1: Using ep0 maxpacket: 8 [ 1565.537878][T13581] usb 5-1: config 0 has an invalid interface number: 61 but max is 0 [ 1565.556977][T13581] usb 5-1: config 0 has an invalid descriptor of length 44, skipping remainder of the config [ 1565.609205][T13581] usb 5-1: config 0 has no interface number 0 [ 1565.626845][T13581] usb 5-1: too many endpoints for config 0 interface 61 altsetting 173: 47, using maximum allowed: 30 [ 1565.650952][T13581] usb 5-1: config 0 interface 61 altsetting 173 has 0 endpoint descriptors, different from the interface descriptor's value: 47 [ 1565.685709][T13581] usb 5-1: config 0 interface 61 has no altsetting 0 [ 1565.696024][T13581] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1565.733522][T13581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.748469][T13581] usb 5-1: config 0 descriptor?? [ 1565.779866][T14970] Bluetooth: hci1: command 0x0406 tx timeout [ 1566.204098][T21169] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1566.292944][T21169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1566.323690][T21169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.381635][T21169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1566.440759][T21169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.497468][T21169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1566.509974][T14970] Bluetooth: hci2: command 0x0c1a tx timeout [ 1566.545093][T21169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.580482][T13581] usb 5-1: string descriptor 0 read error: -71 [ 1566.609822][T13581] usb 5-1: USB disconnect, device number 72 [ 1567.160375][T14970] Bluetooth: hci4: command 0x0c1a tx timeout [ 1568.349218][ T7149] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1568.975989][T14970] Bluetooth: hci2: command 0x0c1a tx timeout [ 1569.049340][ T7149] usb 2-1: Using ep0 maxpacket: 16 [ 1569.062065][ T7149] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1569.079917][ T7149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.109241][ T7149] usb 2-1: Product: syz [ 1569.113491][ T7149] usb 2-1: Manufacturer: syz [ 1569.118143][ T7149] usb 2-1: SerialNumber: syz [ 1569.164916][ T7149] usb 2-1: config 0 descriptor?? [ 1569.234966][T14970] Bluetooth: hci4: command 0x0c1a tx timeout [ 1569.247722][ T7149] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1569.294161][T21228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4420'. [ 1569.305283][T21228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4420'. [ 1569.331700][T21228] netlink: 'syz.3.4420': attribute type 1 has an invalid length. [ 1570.589615][ T7103] usb 2-1: USB disconnect, device number 35 [ 1571.270209][T21262] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4430'. [ 1572.169993][T21275] FAULT_INJECTION: forcing a failure. [ 1572.169993][T21275] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.792035][T21275] CPU: 0 UID: 0 PID: 21275 Comm: syz.4.4434 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1572.803862][T21275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1572.813968][T21275] Call Trace: [ 1572.817458][T21275] [ 1572.820428][T21275] dump_stack_lvl+0x241/0x360 [ 1572.825157][T21275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1572.830396][T21275] ? __pfx__printk+0x10/0x10 [ 1572.835034][T21275] ? fs_reclaim_acquire+0x93/0x130 [ 1572.840194][T21275] ? __pfx___might_resched+0x10/0x10 [ 1572.845525][T21275] should_fail_ex+0x3b0/0x4e0 [ 1572.850246][T21275] ? tomoyo_encode+0x26f/0x540 [ 1572.855059][T21275] should_failslab+0xac/0x100 [ 1572.859789][T21275] ? tomoyo_encode+0x26f/0x540 [ 1572.864771][T21275] __kmalloc_noprof+0xd8/0x400 [ 1572.869710][T21275] tomoyo_encode+0x26f/0x540 [ 1572.874364][T21275] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1572.880066][T21275] tomoyo_path_number_perm+0x23a/0x880 [ 1572.885573][T21275] ? tomoyo_path_number_perm+0x208/0x880 [ 1572.891246][T21275] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1572.897317][T21275] ? __fget_files+0x29/0x470 [ 1572.901968][T21275] ? __fget_files+0x3f3/0x470 [ 1572.906707][T21275] security_file_ioctl+0xc6/0x2a0 [ 1572.911779][T21275] __se_sys_ioctl+0x47/0x170 [ 1572.917018][T21275] do_syscall_64+0xf3/0x230 [ 1572.921570][T21275] ? clear_bhb_loop+0x35/0x90 [ 1572.926285][T21275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.932212][T21275] RIP: 0033:0x7f2ab437e719 [ 1572.936656][T21275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1572.956302][T21275] RSP: 002b:00007f2ab5134038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1572.964759][T21275] RAX: ffffffffffffffda RBX: 00007f2ab4536058 RCX: 00007f2ab437e719 [ 1572.972760][T21275] RDX: 0000000000000004 RSI: 0000000000004b45 RDI: 0000000000000003 [ 1572.980759][T21275] RBP: 00007f2ab5134090 R08: 0000000000000000 R09: 0000000000000000 [ 1572.988755][T21275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1572.996759][T21275] R13: 0000000000000000 R14: 00007f2ab4536058 R15: 00007ffced87d818 [ 1573.004789][T21275] [ 1573.213613][T21275] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1573.439469][T21291] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1574.589984][ T7149] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1575.090032][ T7149] usb 2-1: Using ep0 maxpacket: 16 [ 1575.115902][ T7149] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1575.150210][ T7149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.180522][ T7149] usb 2-1: Product: syz [ 1575.184761][ T7149] usb 2-1: Manufacturer: syz [ 1575.189389][ T7149] usb 2-1: SerialNumber: syz [ 1575.235268][ T7149] usb 2-1: config 0 descriptor?? [ 1575.253898][ T7149] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1575.268747][T21318] ebt_among: dst integrity fail: 200 [ 1576.908301][ T7149] usb 2-1: USB disconnect, device number 36 [ 1577.243243][T21343] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4455'. [ 1577.320643][T21347] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1577.521976][T21349] netlink: 'syz.0.4457': attribute type 18 has an invalid length. [ 1577.535559][T21349] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1577.544502][T21349] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1577.553339][T21349] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1577.562310][T21349] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1577.846712][T21365] netlink: 'syz.1.4461': attribute type 3 has an invalid length. [ 1577.854834][T21365] netlink: 'syz.1.4461': attribute type 1 has an invalid length. [ 1582.213308][T21401] sctp: [Deprecated]: syz.1.4472 (pid 21401) Use of int in max_burst socket option deprecated. [ 1582.213308][T21401] Use struct sctp_assoc_value instead [ 1582.411042][T14325] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1582.590961][T14325] usb 4-1: Using ep0 maxpacket: 16 [ 1582.608473][T14325] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1582.645481][T14325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1582.711513][T14325] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1582.743418][T14325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.951525][T14325] usb 4-1: Product: syz [ 1582.956316][T14325] usb 4-1: Manufacturer: syz [ 1582.961309][T14325] usb 4-1: SerialNumber: syz [ 1582.968281][T14325] usb 4-1: config 0 descriptor?? [ 1582.976371][T14325] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1582.986024][T14325] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1583.899630][T14325] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1584.361156][T14325] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1584.384988][T21428] netlink: 'syz.4.4479': attribute type 18 has an invalid length. [ 1584.401216][T21428] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1584.410093][T21428] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1584.419164][T21428] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1584.428699][T21428] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1585.691346][T14325] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1585.711122][T14325] em28xx 4-1:0.0: No AC97 audio processor [ 1586.028582][T14325] usb 4-1: USB disconnect, device number 22 [ 1586.035642][T14325] em28xx 4-1:0.0: Disconnecting em28xx [ 1586.082518][T14325] em28xx 4-1:0.0: Freeing device [ 1586.095290][T21439] netlink: 'syz.7.4481': attribute type 18 has an invalid length. [ 1586.178863][T21446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4483'. [ 1586.193859][T21446] vlan2: entered promiscuous mode [ 1586.199226][T21446] macvlan0: entered promiscuous mode [ 1586.242961][T21446] macvlan0: left promiscuous mode [ 1586.501515][T14325] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1586.548735][T21458] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4488'. [ 1586.656373][T14325] usb 4-1: Using ep0 maxpacket: 16 [ 1586.672550][T14325] usb 4-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1586.711346][T14325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.740942][T14325] usb 4-1: Product: syz [ 1586.745858][T14325] usb 4-1: Manufacturer: syz [ 1586.750541][T14325] usb 4-1: SerialNumber: syz [ 1586.766048][ T6512] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1586.788766][T14325] usb 4-1: config 0 descriptor?? [ 1586.808373][T14325] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1586.842861][T21469] netlink: 'syz.7.4492': attribute type 18 has an invalid length. [ 1586.932029][ T6512] usb 1-1: device descriptor read/64, error -71 [ 1587.392100][ T6512] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1588.158356][ T6512] usb 1-1: device descriptor read/64, error -71 [ 1588.210200][T21488] FAULT_INJECTION: forcing a failure. [ 1588.210200][T21488] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.223696][T21488] CPU: 0 UID: 0 PID: 21488 Comm: syz.7.4498 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1588.231795][T14325] usb 4-1: USB disconnect, device number 23 [ 1588.234486][T21488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1588.250493][T21488] Call Trace: [ 1588.253807][T21488] [ 1588.256786][T21488] dump_stack_lvl+0x241/0x360 [ 1588.261514][T21488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1588.266759][T21488] ? __pfx__printk+0x10/0x10 [ 1588.271401][T21488] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1588.277423][T21488] ? __pfx___might_resched+0x10/0x10 [ 1588.282758][T21488] should_fail_ex+0x3b0/0x4e0 [ 1588.287467][T21488] should_failslab+0xac/0x100 [ 1588.292163][T21488] ? __alloc_skb+0x1c3/0x440 [ 1588.296774][T21488] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1588.302604][T21488] __alloc_skb+0x1c3/0x440 [ 1588.307044][T21488] ? __pfx___alloc_skb+0x10/0x10 [ 1588.312001][T21488] ? netlink_autobind+0xd6/0x2f0 [ 1588.316952][T21488] ? netlink_autobind+0x2b0/0x2f0 [ 1588.321999][T21488] netlink_sendmsg+0x638/0xcb0 [ 1588.326795][T21488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1588.332109][T21488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1588.337412][T21488] __sock_sendmsg+0x221/0x270 [ 1588.342105][T21488] ____sys_sendmsg+0x52a/0x7e0 [ 1588.346894][T21488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1588.352212][T21488] __sys_sendmsg+0x292/0x380 [ 1588.356823][T21488] ? __pfx___sys_sendmsg+0x10/0x10 [ 1588.361964][T21488] ? __pfx_vfs_write+0x10/0x10 [ 1588.366767][T21488] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1588.373117][T21488] ? do_syscall_64+0x100/0x230 [ 1588.377907][T21488] ? do_syscall_64+0xb6/0x230 [ 1588.382618][T21488] do_syscall_64+0xf3/0x230 [ 1588.387155][T21488] ? clear_bhb_loop+0x35/0x90 [ 1588.391860][T21488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.397776][T21488] RIP: 0033:0x7ff65c17e719 [ 1588.402203][T21488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1588.421825][T21488] RSP: 002b:00007ff65cee2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1588.430287][T21488] RAX: ffffffffffffffda RBX: 00007ff65c335f80 RCX: 00007ff65c17e719 [ 1588.438278][T21488] RDX: 0000000000000000 RSI: 000000002000c2c0 RDI: 0000000000000003 [ 1588.446262][T21488] RBP: 00007ff65cee2090 R08: 0000000000000000 R09: 0000000000000000 [ 1588.454248][T21488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1588.462238][T21488] R13: 0000000000000000 R14: 00007ff65c335f80 R15: 00007ffdaf44b008 [ 1588.470241][T21488] [ 1588.474457][ T6512] usb usb1-port1: attempt power cycle [ 1588.931809][ T7149] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1589.031630][ T6512] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1589.052815][ T6512] usb 1-1: device descriptor read/8, error -71 [ 1589.093870][ T7149] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1589.111612][ T7149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.132925][ T7149] usb 2-1: config 0 descriptor?? [ 1589.139814][ T7149] cp210x 2-1:0.0: cp210x converter detected [ 1589.191889][T14325] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1589.311762][ T6512] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1589.351629][T14325] usb 4-1: Using ep0 maxpacket: 8 [ 1589.361889][ T6512] usb 1-1: device descriptor read/8, error -71 [ 1589.369486][T14325] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1589.391556][T14325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.402139][T14325] usb 4-1: config 0 descriptor?? [ 1589.475846][ T6512] usb usb1-port1: unable to enumerate USB device [ 1589.517375][T21504] netlink: 'syz.4.4505': attribute type 18 has an invalid length. [ 1589.548370][ T7149] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1589.588651][ T7149] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1589.640095][T14325] usb 4-1: string descriptor 0 read error: -71 [ 1589.671749][T14325] usb 4-1: Found UVC 0.00 device (2833:0201) [ 1589.679048][T14325] usb 4-1: No valid video chain found. [ 1589.712756][T14325] usb 4-1: USB disconnect, device number 24 [ 1589.852156][ T7149] usb 2-1: USB disconnect, device number 37 [ 1589.873015][ T7149] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1589.915319][ T7149] cp210x 2-1:0.0: device disconnected [ 1590.540690][T21521] netlink: 'syz.7.4510': attribute type 4 has an invalid length. [ 1590.581414][T21521] rdma_rxe: rxe_newlink: failed to add lo [ 1590.931518][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1591.642760][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1591.753082][ T9] usb 1-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1591.771532][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.887501][ T9] usb 1-1: Product: syz [ 1592.001856][ T9] usb 1-1: Manufacturer: syz [ 1592.006603][ T9] usb 1-1: SerialNumber: syz [ 1592.013751][ T9] usb 1-1: config 0 descriptor?? [ 1592.025880][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1592.083908][T21540] netlink: 'syz.4.4518': attribute type 18 has an invalid length. [ 1592.705996][T21554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4521'. [ 1593.481616][ T9] usb 1-1: USB disconnect, device number 51 [ 1593.627562][T21562] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4525'. [ 1593.637681][T21562] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4525'. [ 1593.712647][T14325] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1594.894612][T14325] usb 5-1: device descriptor read/64, error -71 [ 1596.062490][T14325] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1596.210837][ T7162] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1596.212711][T21583] xt_CT: No such helper "syz0" [ 1596.400260][T21589] netlink: 'syz.0.4533': attribute type 18 has an invalid length. [ 1596.428272][T14325] usb 5-1: device descriptor read/64, error -71 [ 1596.544342][T14325] usb usb5-port1: attempt power cycle [ 1596.735004][T21593] netlink: 'syz.4.4534': attribute type 10 has an invalid length. [ 1597.438712][T21601] blktrace: Concurrent blktraces are not allowed on sg0 [ 1597.774042][ T5883] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1598.060321][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 1598.106326][T21601] relay: one or more items not logged [item size (56) > sub-buffer size (6)] [ 1598.159046][ T5883] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1598.269436][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.277787][ T5883] usb 2-1: Product: syz [ 1598.282103][ T5883] usb 2-1: Manufacturer: syz [ 1598.286910][ T5883] usb 2-1: SerialNumber: syz [ 1598.296321][ T5883] usb 2-1: config 0 descriptor?? [ 1598.355108][ T5883] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1599.729170][ T7103] usb 2-1: USB disconnect, device number 38 [ 1600.147313][T21639] netlink: 'syz.4.4547': attribute type 18 has an invalid length. [ 1600.241275][T21644] netlink: 'syz.3.4548': attribute type 18 has an invalid length. [ 1600.507869][T21648] netlink: 'syz.0.4550': attribute type 18 has an invalid length. [ 1600.780095][T21662] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4553'. [ 1600.822493][T21662] vlan2: entered promiscuous mode [ 1600.841997][T21662] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1601.873229][ T5883] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1602.216194][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 1602.301854][ T5883] usb 1-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1602.311920][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.322127][ T5883] usb 1-1: Product: syz [ 1602.448879][ T5883] usb 1-1: Manufacturer: syz [ 1602.471217][ T5883] usb 1-1: SerialNumber: syz [ 1602.523958][ T5883] usb 1-1: config 0 descriptor?? [ 1602.532327][ T5883] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1602.627030][T21680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4559'. [ 1603.908960][ T5883] usb 1-1: USB disconnect, device number 52 [ 1604.174752][T21705] netlink: 'syz.4.4566': attribute type 18 has an invalid length. [ 1604.853086][T21727] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4573'. [ 1606.963810][T21753] netlink: 'syz.4.4581': attribute type 18 has an invalid length. [ 1607.682355][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.689614][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.697557][T21763] binder: 21754:21763 ioctl c018937e 20000040 returned -22 [ 1608.113921][T21779] openvswitch: netlink: Key type 15892 is out of range max 32 [ 1608.775423][T21777] ax25_connect(): syz.0.4585 uses autobind, please contact jreuter@yaina.de [ 1609.454275][T14325] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1609.774492][T14325] usb 1-1: Using ep0 maxpacket: 32 [ 1610.091326][T14325] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1610.101082][T14325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.297307][T21798] overlayfs: missing 'workdir' [ 1610.581459][T14325] usb 1-1: config 0 descriptor?? [ 1610.598943][T14325] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1610.827945][T21806] Bluetooth: MGMT ver 1.23 [ 1612.174337][ T7149] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1612.321693][T21817] usb usb9: usbfs: process 21817 (syz.3.4601) did not claim interface 0 before use [ 1612.335055][ T7149] usb 2-1: Using ep0 maxpacket: 16 [ 1612.363913][T21819] netlink: 'syz.7.4600': attribute type 18 has an invalid length. [ 1612.378696][ T7149] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1612.388762][ T7149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.408708][ T7149] usb 2-1: Product: syz [ 1612.413026][ T7149] usb 2-1: Manufacturer: syz [ 1612.430352][ T7149] usb 2-1: SerialNumber: syz [ 1612.453444][ T7149] usb 2-1: config 0 descriptor?? [ 1612.476421][ T7149] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1612.565596][T21824] netlink: 'syz.7.4603': attribute type 18 has an invalid length. [ 1612.801091][T14325] gspca_sq930x: ucbus_write failed -71 [ 1612.811554][T14325] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 1612.851704][T14325] usb 1-1: USB disconnect, device number 53 [ 1614.216582][ T7103] usb 2-1: USB disconnect, device number 39 [ 1614.670633][T21846] overlayfs: missing 'workdir' [ 1615.594015][T21862] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.4614'. [ 1616.131505][T18416] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1616.964774][T18416] usb 4-1: Using ep0 maxpacket: 32 [ 1616.982489][T18416] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1617.651902][T18416] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1617.676061][T18416] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1617.690135][T18416] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1617.727201][T18416] usb 4-1: Product: syz [ 1617.731432][T18416] usb 4-1: Manufacturer: syz [ 1617.786661][T18416] hub 4-1:4.0: USB hub found [ 1617.885102][ T25] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1618.744411][T18416] hub 4-1:4.0: 2 ports detected [ 1618.775153][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 1618.799944][ T25] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1618.825351][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.845180][ T25] usb 5-1: Product: syz [ 1618.849378][ T25] usb 5-1: Manufacturer: syz [ 1618.895568][ T25] usb 5-1: SerialNumber: syz [ 1618.920845][T21898] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4625'. [ 1618.943232][ T25] usb 5-1: config 0 descriptor?? [ 1618.971335][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1621.056410][ T6512] usb 5-1: USB disconnect, device number 76 [ 1621.097611][T18416] hub 4-1:4.0: set hub depth failed [ 1621.125801][T18416] usb 4-1: USB disconnect, device number 25 [ 1621.224841][T21910] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4629'. [ 1621.239799][T21902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1623.468558][ T7103] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1623.721596][ T7103] usb 2-1: Using ep0 maxpacket: 16 [ 1623.742676][ T7103] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1623.772837][ T7103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.791360][ T7103] usb 2-1: Product: syz [ 1624.022607][ T7103] usb 2-1: Manufacturer: syz [ 1624.028159][ T7103] usb 2-1: SerialNumber: syz [ 1624.036802][ T7103] usb 2-1: config 0 descriptor?? [ 1624.051709][ T7103] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1626.801880][ T6512] usb 2-1: USB disconnect, device number 40 [ 1628.142461][T21966] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4648'. [ 1629.228548][T20702] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1630.742802][T21994] fuse: Bad value for 'fd' [ 1631.335614][ T7149] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1631.927058][ T7149] usb 4-1: Using ep0 maxpacket: 16 [ 1632.073058][ T7149] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1632.096708][ T7149] usb 4-1: config 0 has no interface number 0 [ 1632.164202][ T7149] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1632.177575][ T7149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.193575][T22011] netlink: 'syz.4.4663': attribute type 18 has an invalid length. [ 1632.205779][ T7149] usb 4-1: Product: syz [ 1632.220592][ T7149] usb 4-1: Manufacturer: syz [ 1632.235078][ T7149] usb 4-1: SerialNumber: syz [ 1632.247618][ T7149] usb 4-1: config 0 descriptor?? [ 1632.602390][T22028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1633.036993][T21997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1633.057374][T21997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1633.305723][T22033] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4670'. [ 1633.378083][T21997] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4658'. [ 1633.402622][T21997] 0: renamed from hsr0 (while UP) [ 1634.029604][T21997] 0: entered promiscuous mode [ 1634.036485][T21997] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 1635.004435][T22053] openvswitch: netlink: Actions may not be safe on all matching packets [ 1635.225951][T18416] usb 4-1: USB disconnect, device number 26 [ 1635.247136][ T7149] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1635.432961][ T7149] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1635.470239][ T7149] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1635.492259][ T7149] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1635.504546][ T7149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.521715][ T7149] usb 5-1: Product: syz [ 1635.536410][ T7149] usb 5-1: Manufacturer: syz [ 1635.541596][ T7149] usb 5-1: SerialNumber: syz [ 1635.578529][ T7149] usb 5-1: config 0 descriptor?? [ 1635.595114][T22048] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1635.621089][T22048] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1636.281006][T22064] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1636.313351][T22048] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1636.360855][T22048] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1636.839142][T22073] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1636.907412][ T7149] Error reading MAC address [ 1637.774489][T22089] netlink: 'syz.0.4686': attribute type 10 has an invalid length. [ 1637.987573][ T7149] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1638.180512][ T7149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1638.213047][ T7149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1638.234068][ T7149] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 1638.257904][ T7149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.280340][ T7149] usb 2-1: config 0 descriptor?? [ 1638.445916][T22099] netlink: 'syz.0.4690': attribute type 18 has an invalid length. [ 1638.459876][T13581] usb 5-1: USB disconnect, device number 77 [ 1638.529435][T22087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1638.581980][T22101] x_tables: duplicate underflow at hook 1 [ 1638.591602][T22087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1638.604259][T22103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1638.694796][T22107] loop5: detected capacity change from 0 to 7 [ 1638.704183][T22107] buffer_io_error: 7 callbacks suppressed [ 1638.704202][T22107] Buffer I/O error on dev loop5, logical block 0, async page read [ 1638.724840][T22107] Buffer I/O error on dev loop5, logical block 0, async page read [ 1638.736428][T22107] Buffer I/O error on dev loop5, logical block 0, async page read [ 1638.747656][T22107] Buffer I/O error on dev loop5, logical block 0, async page read [ 1638.755600][T22107] Buffer I/O error on dev loop5, logical block 0, async page read [ 1638.767704][T22107] Buffer I/O error on dev loop5, logical block 0, async page read [ 1638.775645][T22107] Buffer I/O error on dev loop5, logical block 0, async page read [ 1638.786304][T22107] ldm_validate_partition_table(): Disk read failed. [ 1638.795591][T22107] Buffer I/O error on dev loop5, logical block 0, async page read [ 1638.806701][T22107] Buffer I/O error on dev loop5, logical block 0, async page read [ 1638.815222][T22107] Buffer I/O error on dev loop5, logical block 0, async page read [ 1638.823271][T22107] Dev loop5: unable to read RDB block 0 [ 1638.829357][T22107] loop5: unable to read partition table [ 1638.835190][T22107] loop5: partition table beyond EOD, truncated [ 1638.841494][T22107] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 1638.841494][T22107] ) failed (rc=-5) [ 1638.964503][ T7149] stadia 0003:18D1:9400.001D: unbalanced collection at end of report description [ 1638.999478][ T7149] stadia 0003:18D1:9400.001D: parse failed [ 1639.015700][ T7149] stadia 0003:18D1:9400.001D: probe with driver stadia failed with error -22 [ 1639.997646][ T5883] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1640.102046][T22135] netlink: 'syz.0.4704': attribute type 18 has an invalid length. [ 1640.179279][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 1640.207650][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1640.241468][ T5883] usb 5-1: config 1 has an invalid interface number: 26 but max is 1 [ 1640.260353][ T5883] usb 5-1: config 1 has an invalid interface number: 89 but max is 1 [ 1640.279160][ T5883] usb 5-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 1640.317926][ T5883] usb 5-1: config 1 has no interface number 0 [ 1640.330975][ T5883] usb 5-1: config 1 has no interface number 1 [ 1640.346443][ T5883] usb 5-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1640.363666][ T5883] usb 5-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1640.385757][T22145] netlink: 'syz.0.4708': attribute type 2 has an invalid length. [ 1640.394386][ T5883] usb 5-1: config 1 interface 26 has no altsetting 0 [ 1640.406939][ T5883] usb 5-1: config 1 interface 89 has no altsetting 0 [ 1640.431045][ T5883] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 1640.454789][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.480751][ T5883] usb 5-1: Product: syz [ 1640.493660][ T5883] usb 5-1: SerialNumber: syz [ 1640.806427][T18416] usb 2-1: USB disconnect, device number 41 [ 1640.871193][ T5883] usb 5-1: unknown interface protocol 0x7d, assuming v1 [ 1640.879686][ T5883] usb 5-1: 26:2 : does not exist [ 1640.890617][ T5883] usb 5-1: unknown interface protocol 0x13, assuming v1 [ 1640.909750][ T5883] usb 5-1: 89:2 : does not exist [ 1640.942179][ T5883] usb 5-1: USB disconnect, device number 78 [ 1642.011875][T22172] netlink: 'syz.4.4716': attribute type 18 has an invalid length. [ 1642.154598][T22178] netlink: 'syz.4.4720': attribute type 10 has an invalid length. [ 1642.162937][T22178] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4720'. [ 1642.173893][T22178] bond0: entered promiscuous mode [ 1642.179479][T22178] bond_slave_0: entered promiscuous mode [ 1642.190173][T22178] bond_slave_1: entered promiscuous mode [ 1642.199055][T22178] bridge0: port 4(bond0) entered blocking state [ 1642.211177][T22178] bridge0: port 4(bond0) entered disabled state [ 1642.218241][T22178] bond0: entered allmulticast mode [ 1642.223881][T22178] bond_slave_0: entered allmulticast mode [ 1642.232053][T22183] FAULT_INJECTION: forcing a failure. [ 1642.232053][T22183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1642.245652][T22178] bond_slave_1: entered allmulticast mode [ 1642.254333][T22178] bridge0: port 4(bond0) entered blocking state [ 1642.260807][T22178] bridge0: port 4(bond0) entered forwarding state [ 1642.268119][T22183] CPU: 0 UID: 0 PID: 22183 Comm: syz.1.4722 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1642.278918][T22183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1642.288987][T22183] Call Trace: [ 1642.292275][T22183] [ 1642.295216][T22183] dump_stack_lvl+0x241/0x360 [ 1642.299922][T22183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1642.305140][T22183] ? __pfx__printk+0x10/0x10 [ 1642.309751][T22183] ? snprintf+0xda/0x120 [ 1642.314015][T22183] should_fail_ex+0x3b0/0x4e0 [ 1642.318713][T22183] _copy_to_user+0x31/0xb0 [ 1642.323142][T22183] simple_read_from_buffer+0xca/0x150 [ 1642.328538][T22183] proc_fail_nth_read+0x1e9/0x250 [ 1642.333585][T22183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1642.339162][T22183] ? rw_verify_area+0x55e/0x6f0 [ 1642.344028][T22183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1642.349589][T22183] vfs_read+0x1fc/0xb70 [ 1642.353768][T22183] ? fdget_pos+0x24e/0x320 [ 1642.358204][T22183] ? __pfx_vfs_read+0x10/0x10 [ 1642.362901][T22183] ? __fget_files+0x3f3/0x470 [ 1642.367603][T22183] ? fdget_pos+0x24e/0x320 [ 1642.372050][T22183] ksys_read+0x183/0x2b0 [ 1642.376310][T22183] ? __pfx_ksys_read+0x10/0x10 [ 1642.381093][T22183] ? do_syscall_64+0x100/0x230 [ 1642.385879][T22183] ? do_syscall_64+0xb6/0x230 [ 1642.390600][T22183] do_syscall_64+0xf3/0x230 [ 1642.395123][T22183] ? clear_bhb_loop+0x35/0x90 [ 1642.399820][T22183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.405728][T22183] RIP: 0033:0x7f4eaeb7d15c [ 1642.410157][T22183] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1642.429793][T22183] RSP: 002b:00007f4eaf980030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1642.438230][T22183] RAX: ffffffffffffffda RBX: 00007f4eaed35f80 RCX: 00007f4eaeb7d15c [ 1642.446215][T22183] RDX: 000000000000000f RSI: 00007f4eaf9800a0 RDI: 0000000000000004 [ 1642.454195][T22183] RBP: 00007f4eaf980090 R08: 0000000000000000 R09: 0000000000000000 [ 1642.462178][T22183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1642.470159][T22183] R13: 0000000000000000 R14: 00007f4eaed35f80 R15: 00007ffeda7fe8e8 [ 1642.478156][T22183] [ 1642.481207][ C0] vkms_vblank_simulate: vblank timer overrun [ 1642.577125][T22185] program syz.1.4723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1642.618283][ T5883] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1642.637445][ T7149] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 1642.669425][T14970] Bluetooth: hci0: command 0x0406 tx timeout [ 1642.675680][T22153] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 1643.261506][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 1643.311308][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.342056][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1643.370349][ T7149] usb 5-1: config 0 has an invalid interface number: 72 but max is 0 [ 1643.373793][ T5883] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1643.392173][ T7149] usb 5-1: config 0 has no interface number 0 [ 1643.403996][ T7149] usb 5-1: config 0 interface 72 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1643.405278][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.416919][ T7149] usb 5-1: config 0 interface 72 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1643.434500][ T7149] usb 5-1: config 0 interface 72 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1643.445818][ T7149] usb 5-1: config 0 interface 72 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1643.462061][ T5883] usb 4-1: config 0 descriptor?? [ 1643.468182][ T7149] usb 5-1: config 0 interface 72 altsetting 0 endpoint 0xD has invalid maxpacket 1959, setting to 64 [ 1643.479970][ T5883] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1643.495530][ T7149] usb 5-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 1643.565066][ T7149] usb 5-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1643.578481][ T7149] usb 5-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1643.610629][ T7149] usb 5-1: config 0 interface 72 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1643.628310][ T7149] usb 5-1: config 0 interface 72 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1643.660209][ T7149] usb 5-1: config 0 interface 72 altsetting 0 endpoint 0x5 has invalid maxpacket 495, setting to 64 [ 1643.674314][ T7149] usb 5-1: config 0 interface 72 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1643.696157][ T7149] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=27.f5 [ 1643.710189][ T7149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.711869][T22180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1643.733332][ T7149] usb 5-1: Product: syz [ 1643.738970][T22202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4728'. [ 1643.742195][ T7149] usb 5-1: Manufacturer: syz [ 1643.753587][T22180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1643.778497][ T7149] usb 5-1: SerialNumber: syz [ 1643.791774][ T7149] usb 5-1: config 0 descriptor?? [ 1643.809842][T22182] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1643.860798][T22207] netlink: 'syz.1.4730': attribute type 18 has an invalid length. [ 1643.894262][T22207] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1643.903638][T22207] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1643.912749][T22207] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1643.921780][T22207] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1644.044774][T22178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.054078][T22178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.065990][ T7149] mdc800 5-1:0.72: probe fails -> wrong Interface [ 1644.084482][ T7149] usb 5-1: USB disconnect, device number 79 [ 1644.138469][ T5883] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1644.313538][ T5883] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.324641][ T5883] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1644.334355][ T5883] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1644.351121][ T5883] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1644.373306][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.383095][ T5883] usb 1-1: Product: syz [ 1644.387609][ T5883] usb 1-1: Manufacturer: syz [ 1644.393008][ T5883] usb 1-1: SerialNumber: syz [ 1644.398358][ T7103] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1644.409752][ T5883] usb 1-1: selecting invalid altsetting 1 [ 1644.558176][ T7103] usb 2-1: Using ep0 maxpacket: 16 [ 1644.571345][ T7103] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.587546][ T7103] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1644.616148][ T7103] usb 2-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 1644.626913][T22209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.631635][ T7103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.666904][T22209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.685981][ T7103] usb 2-1: config 0 descriptor?? [ 1644.702171][ T7103] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1645.545791][ T5883] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 1645.547991][T22227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1645.560920][T22227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1645.573236][T22227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1645.582839][T22227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1645.590943][ T5883] usb 1-1: selecting invalid altsetting 1 [ 1645.593024][T22227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1645.605819][ T5883] cdc_ncm 1-1:1.0: bind() failure [ 1645.610524][ T5883] usb 1-1: USB disconnect, device number 54 [ 1645.622637][T18416] usb 4-1: USB disconnect, device number 27 [ 1645.631357][T22227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1646.358769][ T7103] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1646.528920][ T7103] usb 5-1: Using ep0 maxpacket: 32 [ 1646.553200][ T7103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1646.586564][ T7103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1646.615735][ T7103] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1646.636103][ T7103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.682982][ T7103] usb 5-1: config 0 descriptor?? [ 1646.701942][ T7103] hub 5-1:0.0: USB hub found [ 1646.922959][T22240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1646.946970][T22240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1646.973248][ T7103] hub 5-1:0.0: 2 ports detected [ 1647.303592][ T5883] usb 2-1: USB disconnect, device number 42 [ 1647.412539][T22260] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4749'. [ 1647.478664][T13581] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1647.496697][T22262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4750'. [ 1647.523989][T22262] vlan2: entered promiscuous mode [ 1647.538855][T22262] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1647.649798][T13581] usb 1-1: Using ep0 maxpacket: 32 [ 1647.660206][T13581] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1647.679090][T13581] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1647.697818][T13581] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1647.724552][T13581] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.805511][T22269] loop2: detected capacity change from 0 to 524287999 [ 1647.816461][ C1] blk_print_req_error: 7 callbacks suppressed [ 1647.816486][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1647.831966][ C1] buffer_io_error: 4 callbacks suppressed [ 1647.831986][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1647.856407][T13581] usb 1-1: config 0 descriptor?? [ 1647.879387][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1647.888765][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1647.900490][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1647.909760][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1647.918101][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1647.927456][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1647.936710][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1647.946073][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1647.956241][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1647.965515][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1647.978437][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1647.987670][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1647.999844][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1648.009178][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1648.019391][ T7103] usb 5-1: USB disconnect, device number 80 [ 1648.033668][T22269] ldm_validate_partition_table(): Disk read failed. [ 1648.041749][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1648.051073][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1648.066302][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1648.075719][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1648.327756][T22269] Dev loop2: unable to read RDB block 0 [ 1648.350710][T22269] loop2: unable to read partition table [ 1648.360975][T22269] loop_reread_partitions: partition scan of loop2 (3 xC) failed (rc=-5) [ 1648.401055][T22271] netlink: 'syz.3.4752': attribute type 6 has an invalid length. [ 1649.592535][T22258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.632839][T22258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.949305][T13581] usbhid 1-1:0.0: can't add hid device: -71 [ 1649.955941][T13581] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1649.967635][T13581] usb 1-1: USB disconnect, device number 55 [ 1649.999492][ T5883] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1650.188844][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 1650.203818][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1650.231020][ T5883] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 1650.249422][ T5883] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.282547][ T5883] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1650.314488][ T5883] usb 5-1: config 128 has no interface number 0 [ 1650.333837][ T5883] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1650.351983][ T5883] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1650.362701][ T5883] usb 5-1: config 128 interface 127 has no altsetting 0 [ 1650.375020][ T5883] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1650.392025][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.416210][ T5883] usb 5-1: Product: syz [ 1650.428132][ T5883] usb 5-1: Manufacturer: syz [ 1650.445508][ T5883] usb 5-1: SerialNumber: syz [ 1650.709956][ T5883] usb 5-1: USB disconnect, device number 81 [ 1652.237181][T22333] usb usb6: usbfs: process 22333 (syz.1.4773) did not claim interface 0 before use [ 1652.250854][ T5841] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1652.949657][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 1652.961187][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1652.982060][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1652.996615][ T5841] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1653.006468][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.018275][ T5841] usb 4-1: config 0 descriptor?? [ 1653.286987][T22357] netlink: 'syz.0.4780': attribute type 1 has an invalid length. [ 1653.567502][T22358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4781'. [ 1653.601047][T22360] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1653.647819][T22360] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 1653.700506][T22362] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 1653.743763][T22362] bond1 (unregistering): Released all slaves [ 1653.840088][T22371] FAULT_INJECTION: forcing a failure. [ 1653.840088][T22371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1653.887155][T22371] CPU: 1 UID: 0 PID: 22371 Comm: syz.4.4783 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1653.898002][T22371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1653.908104][T22371] Call Trace: [ 1653.911424][T22371] [ 1653.914390][T22371] dump_stack_lvl+0x241/0x360 [ 1653.919123][T22371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1653.924375][T22371] ? __pfx__printk+0x10/0x10 [ 1653.929020][T22371] ? __pfx_lock_release+0x10/0x10 [ 1653.934105][T22371] should_fail_ex+0x3b0/0x4e0 [ 1653.938835][T22371] _copy_from_user+0x2f/0xc0 [ 1653.943469][T22371] copy_msghdr_from_user+0xae/0x680 [ 1653.948723][T22371] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1653.954592][T22371] __sys_sendmsg+0x22d/0x380 [ 1653.959235][T22371] ? __pfx___sys_sendmsg+0x10/0x10 [ 1653.964420][T22371] ? __pfx_vfs_write+0x10/0x10 [ 1653.969264][T22371] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1653.975647][T22371] ? do_syscall_64+0x100/0x230 [ 1653.980459][T22371] ? do_syscall_64+0xb6/0x230 [ 1653.985183][T22371] do_syscall_64+0xf3/0x230 [ 1653.990167][T22371] ? clear_bhb_loop+0x35/0x90 [ 1653.994895][T22371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.000834][T22371] RIP: 0033:0x7f2ab437e719 [ 1654.005288][T22371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1654.024945][T22371] RSP: 002b:00007f2ab5155038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1654.033409][T22371] RAX: ffffffffffffffda RBX: 00007f2ab4535f80 RCX: 00007f2ab437e719 [ 1654.041416][T22371] RDX: 0000000004008014 RSI: 0000000020000200 RDI: 0000000000000003 [ 1654.049430][T22371] RBP: 00007f2ab5155090 R08: 0000000000000000 R09: 0000000000000000 [ 1654.057434][T22371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1654.065448][T22371] R13: 0000000000000000 R14: 00007f2ab4535f80 R15: 00007ffced87d818 [ 1654.073476][T22371] [ 1654.145473][ T5841] letsketch 0003:6161:4D15.001E: Device info: Ъ [ 1654.161880][T22375] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 1654.342939][T22382] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1654.894215][T22329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4772'. [ 1654.973070][ T5841] usb 4-1: Max retries (5) exceeded reading string descriptor 201 [ 1654.994225][ T5841] letsketch 0003:6161:4D15.001E: probe with driver letsketch failed with error -71 [ 1655.022758][ T5841] usb 4-1: USB disconnect, device number 28 [ 1655.119555][T13581] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1655.279933][T13581] usb 2-1: Using ep0 maxpacket: 8 [ 1655.301817][T13581] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 1655.319391][T13581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.340008][T13581] usb 2-1: Product: syz [ 1655.344394][T13581] usb 2-1: Manufacturer: syz [ 1655.350006][T13581] usb 2-1: SerialNumber: syz [ 1655.357536][T13581] usb 2-1: config 0 descriptor?? [ 1655.365860][T13581] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 1655.757454][T13581] gspca_sn9c2028: read1 error -32 [ 1655.998634][T13581] gspca_sn9c2028: read1 error -71 [ 1656.014530][T13581] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1656.056006][T13581] usb 2-1: USB disconnect, device number 43 [ 1657.695291][T13581] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1657.918147][T22433] netlink: 'syz.1.4806': attribute type 6 has an invalid length. [ 1657.939680][T22433] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4806'. [ 1657.961260][T22433] binder: 22432:22433 unknown command 5001287 [ 1657.968661][T22433] binder: 22432:22433 ioctl c0306201 20000480 returned -22 [ 1658.000145][T13581] usb 4-1: Using ep0 maxpacket: 16 [ 1658.015640][T13581] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1658.030618][T13581] usb 4-1: config 0 has no interface number 0 [ 1658.047425][T13581] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1658.073199][T13581] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1658.089948][T13581] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1658.110538][T13581] usb 4-1: Product: syz [ 1658.114968][T13581] usb 4-1: SerialNumber: syz [ 1658.124480][T22445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4808'. [ 1658.130051][ T5841] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1658.154347][T13581] usb 4-1: config 0 descriptor?? [ 1658.171905][T13581] cm109 4-1:0.8: invalid payload size 239, expected 4 [ 1658.180974][T13581] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input40 [ 1658.208572][T22446] fuse: blksize only supported for fuseblk [ 1658.228793][T22445] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1658.313111][ T5841] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1658.343387][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.351932][T22450] netlink: 830 bytes leftover after parsing attributes in process `syz.7.4811'. [ 1658.392873][ T5841] usb 1-1: config 0 descriptor?? [ 1658.417909][ T5841] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1658.533527][T22455] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4812'. [ 1658.543197][T22455] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4812'. [ 1658.574861][T22455] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 19968 - 0 [ 1658.584764][T22455] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 19968 - 0 [ 1658.596118][T22455] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 19968 - 0 [ 1658.605408][T22455] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 19968 - 0 [ 1658.616531][T22455] geneve2: entered allmulticast mode [ 1659.454968][ T5841] gspca_sunplus: reg_w_riv err -110 [ 1659.456224][T22427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.470375][T22427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.481675][ T5841] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 1659.512738][ C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1659.513764][ T25] usb 4-1: USB disconnect, device number 29 [ 1659.519731][ C0] ------------[ cut here ]------------ [ 1659.531131][ C0] URB ffff888029e05b00 submitted while active [ 1659.538040][ C0] WARNING: CPU: 0 PID: 15320 at drivers/usb/core/urb.c:379 usb_submit_urb+0x1039/0x1930 [ 1659.547834][ C0] Modules linked in: [ 1659.551775][ C0] CPU: 0 UID: 0 PID: 15320 Comm: syz-executor Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1659.562753][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1659.572853][ C0] RIP: 0010:usb_submit_urb+0x1039/0x1930 [ 1659.579086][ C0] Code: 00 eb 66 e8 99 4b 64 fa e9 79 f0 ff ff e8 8f 4b 64 fa c6 05 3f 12 d5 08 01 90 48 c7 c7 c0 4c b0 8c 4c 89 ee e8 58 41 25 fa 90 <0f> 0b 90 90 e9 40 f0 ff ff e8 69 4b 64 fa eb 12 e8 62 4b 64 fa 41 [ 1659.598754][ C0] RSP: 0018:ffffc900000077a8 EFLAGS: 00010046 [ 1659.604882][ C0] RAX: 5a6dee3b3e736d00 RBX: 0000000000000820 RCX: 0000000000040000 [ 1659.612904][ C0] RDX: ffffc900020d1000 RSI: 00000000000186b5 RDI: 00000000000186b6 [ 1659.620924][ C0] RBP: ffff888029e05b08 R08: ffffffff8155e222 R09: fffffbfff1cf9fd0 [ 1659.628944][ C0] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffff88803439b030 [ 1659.636964][ C0] R13: ffff888029e05b00 R14: dffffc0000000000 R15: ffff88806344c001 [ 1659.644987][ C0] FS: 00005555603da500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1659.653981][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1659.660603][ C0] CR2: 00007f4eaf8656c0 CR3: 0000000063f86000 CR4: 00000000003526f0 [ 1659.668618][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1659.676641][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1659.684655][ C0] Call Trace: [ 1659.687965][ C0] [ 1659.690844][ C0] ? __warn+0x168/0x4e0 [ 1659.695046][ C0] ? usb_submit_urb+0x1039/0x1930 [ 1659.700133][ C0] ? report_bug+0x2b3/0x500 [ 1659.704683][ C0] ? usb_submit_urb+0x1039/0x1930 [ 1659.709768][ C0] ? handle_bug+0x60/0x90 [ 1659.714151][ C0] ? exc_invalid_op+0x1a/0x50 [ 1659.718916][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 1659.724001][ C0] ? __warn_printk+0x292/0x360 [ 1659.728838][ C0] ? usb_submit_urb+0x1039/0x1930 [ 1659.733922][ C0] ? usb_submit_urb+0x1038/0x1930 [ 1659.739003][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1659.744946][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1659.750220][ C0] cm109_urb_irq_callback+0x6cc/0xc30 [ 1659.755655][ C0] __usb_hcd_giveback_urb+0x42c/0x6e0 [ 1659.761086][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1659.767505][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1659.772773][ C0] dummy_timer+0x856/0x4620 [ 1659.777350][ C0] ? debug_object_deactivate+0x2d5/0x390 [ 1659.783209][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1659.788219][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1659.793229][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 1659.798477][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1659.804532][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1659.810302][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 1659.816453][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 1659.821627][ C0] handle_softirqs+0x2c5/0x980 [ 1659.826466][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 1659.831299][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1659.836658][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 1659.841926][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 1659.846588][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1659.851856][ C0] irq_exit_rcu+0x9/0x30 [ 1659.856156][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1659.861833][ C0] [ 1659.864770][ C0] [ 1659.867708][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1659.873720][ C0] RIP: 0010:qlist_free_all+0x71/0x140 [ 1659.879148][ C0] Code: 4c 05 08 f6 c1 01 0f 85 a8 00 00 00 4c 01 e8 66 90 0f b6 48 33 c1 e1 18 81 f9 00 00 00 f5 48 0f 45 c5 48 8b 58 08 4d 8b 34 24 <48> 63 83 c0 00 00 00 49 29 c4 48 89 df 4c 89 e6 e8 4a e5 ff ff 66 [ 1659.898820][ C0] RSP: 0018:ffffc9000f7d7058 EFLAGS: 00000246 [ 1659.904901][ C0] RAX: ffffea000131b380 RBX: ffff888140ab0000 RCX: 00000000f5000000 [ 1659.912881][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1659.920881][ C0] RBP: 0000000000000000 R08: ffffffff8142ffac R09: ffffffff81fbb3ff [ 1659.928905][ C0] R10: dffffc0000000000 R11: fffffbfff2853107 R12: ffff88804c6cef00 [ 1659.936926][ C0] R13: ffffea0000000000 R14: ffff88806d311000 R15: 0000000000000000 [ 1659.944953][ C0] ? qlist_free_all+0x8f/0x140 [ 1659.949787][ C0] ? __phys_addr+0xac/0x170 [ 1659.954348][ C0] ? qlist_free_all+0x3d/0x140 [ 1659.959139][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 1659.964625][ C0] __kasan_slab_alloc+0x23/0x80 [ 1659.969499][ C0] ? ptlock_alloc+0x20/0x70 [ 1659.974034][ C0] kmem_cache_alloc_noprof+0x135/0x2a0 [ 1659.979544][ C0] ptlock_alloc+0x20/0x70 [ 1659.983928][ C0] pte_alloc_one+0xd3/0x610 [ 1659.988495][ C0] ? __pfx_pte_alloc_one+0x10/0x10 [ 1659.993678][ C0] ? copy_pmd_range+0x7b90/0x85f0 [ 1659.998766][ C0] __pte_alloc+0x79/0x3c0 [ 1660.003172][ C0] ? __pfx___pte_alloc+0x10/0x10 [ 1660.008134][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1660.013411][ C0] copy_pmd_range+0x7d87/0x85f0 [ 1660.018346][ C0] ? mas_destroy+0x197c/0x1fe0 [ 1660.023154][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 1660.028404][ C0] ? look_up_lock_class+0x77/0x170 [ 1660.033562][ C0] ? register_lock_class+0x102/0x980 [ 1660.038894][ C0] ? __pfx_mas_destroy+0x10/0x10 [ 1660.043869][ C0] ? mark_lock+0x9a/0x360 [ 1660.048239][ C0] ? __lock_acquire+0x1384/0x2050 [ 1660.053308][ C0] copy_page_range+0x99f/0xe90 [ 1660.058110][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1660.063417][ C0] ? __pfx_up_write+0x10/0x10 [ 1660.068154][ C0] ? __asan_memset+0x23/0x50 [ 1660.072788][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 1660.079607][ C0] ? vma_interval_tree_insert_after+0x259/0x2b0 [ 1660.086355][ C0] copy_mm+0x1117/0x1e80 [ 1660.090678][ C0] ? __pfx_copy_mm+0x10/0x10 [ 1660.095346][ C0] ? __init_rwsem+0x122/0x160 [ 1660.100086][ C0] ? copy_signal+0x52a/0x650 [ 1660.104737][ C0] copy_process+0x1845/0x3d50 [ 1660.109490][ C0] ? copy_process+0x9fa/0x3d50 [ 1660.114314][ C0] ? __lock_acquire+0x1384/0x2050 [ 1660.119412][ C0] ? __pfx_copy_process+0x10/0x10 [ 1660.124526][ C0] kernel_clone+0x223/0x880 [ 1660.129093][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1660.134206][ C0] __x64_sys_clone+0x258/0x2a0 [ 1660.139035][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 1660.144388][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1660.150446][ C0] ? exc_page_fault+0x590/0x8c0 [ 1660.155365][ C0] ? do_syscall_64+0xb6/0x230 [ 1660.160126][ C0] do_syscall_64+0xf3/0x230 [ 1660.164696][ C0] ? clear_bhb_loop+0x35/0x90 [ 1660.169407][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.175336][ C0] RIP: 0033:0x7f4eaeb74f93 [ 1660.179795][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 1660.199442][ C0] RSP: 002b:00007ffeda7feb78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1660.207905][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4eaeb74f93 [ 1660.215954][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1660.223978][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1660.231999][ C0] R10: 00005555603da7d0 R11: 0000000000000246 R12: 0000000000000000 [ 1660.240021][ C0] R13: 0000000000194f05 R14: 0000000000194db0 R15: 00007ffeda7fed00 [ 1660.248060][ C0] [ 1660.251144][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1660.258467][ C0] CPU: 0 UID: 0 PID: 15320 Comm: syz-executor Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1660.269452][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1660.279550][ C0] Call Trace: [ 1660.282871][ C0] [ 1660.285755][ C0] dump_stack_lvl+0x241/0x360 [ 1660.290490][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1660.295751][ C0] ? __pfx__printk+0x10/0x10 [ 1660.300406][ C0] ? vscnprintf+0x5d/0x90 [ 1660.304799][ C0] panic+0x349/0x880 [ 1660.308755][ C0] ? __warn+0x177/0x4e0 [ 1660.312955][ C0] ? __pfx_panic+0x10/0x10 [ 1660.317419][ C0] __warn+0x34b/0x4e0 [ 1660.321428][ C0] ? usb_submit_urb+0x1039/0x1930 [ 1660.326514][ C0] report_bug+0x2b3/0x500 [ 1660.330890][ C0] ? usb_submit_urb+0x1039/0x1930 [ 1660.335980][ C0] handle_bug+0x60/0x90 [ 1660.340197][ C0] exc_invalid_op+0x1a/0x50 [ 1660.344745][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1660.349619][ C0] RIP: 0010:usb_submit_urb+0x1039/0x1930 [ 1660.355293][ C0] Code: 00 eb 66 e8 99 4b 64 fa e9 79 f0 ff ff e8 8f 4b 64 fa c6 05 3f 12 d5 08 01 90 48 c7 c7 c0 4c b0 8c 4c 89 ee e8 58 41 25 fa 90 <0f> 0b 90 90 e9 40 f0 ff ff e8 69 4b 64 fa eb 12 e8 62 4b 64 fa 41 [ 1660.374971][ C0] RSP: 0018:ffffc900000077a8 EFLAGS: 00010046 [ 1660.381098][ C0] RAX: 5a6dee3b3e736d00 RBX: 0000000000000820 RCX: 0000000000040000 [ 1660.389117][ C0] RDX: ffffc900020d1000 RSI: 00000000000186b5 RDI: 00000000000186b6 [ 1660.397118][ C0] RBP: ffff888029e05b08 R08: ffffffff8155e222 R09: fffffbfff1cf9fd0 [ 1660.405125][ C0] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffff88803439b030 [ 1660.413150][ C0] R13: ffff888029e05b00 R14: dffffc0000000000 R15: ffff88806344c001 [ 1660.421178][ C0] ? __warn_printk+0x292/0x360 [ 1660.426048][ C0] ? usb_submit_urb+0x1038/0x1930 [ 1660.431144][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1660.437095][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1660.442368][ C0] cm109_urb_irq_callback+0x6cc/0xc30 [ 1660.447818][ C0] __usb_hcd_giveback_urb+0x42c/0x6e0 [ 1660.453253][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1660.459223][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1660.464504][ C0] dummy_timer+0x856/0x4620 [ 1660.469088][ C0] ? debug_object_deactivate+0x2d5/0x390 [ 1660.474830][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1660.479838][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1660.484836][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 1660.490089][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1660.496159][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1660.501933][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 1660.508071][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 1660.513239][ C0] handle_softirqs+0x2c5/0x980 [ 1660.518101][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 1660.522928][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1660.528278][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 1660.533555][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 1660.538206][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1660.543471][ C0] irq_exit_rcu+0x9/0x30 [ 1660.547765][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1660.553447][ C0] [ 1660.556418][ C0] [ 1660.559388][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1660.565426][ C0] RIP: 0010:qlist_free_all+0x71/0x140 [ 1660.570859][ C0] Code: 4c 05 08 f6 c1 01 0f 85 a8 00 00 00 4c 01 e8 66 90 0f b6 48 33 c1 e1 18 81 f9 00 00 00 f5 48 0f 45 c5 48 8b 58 08 4d 8b 34 24 <48> 63 83 c0 00 00 00 49 29 c4 48 89 df 4c 89 e6 e8 4a e5 ff ff 66 [ 1660.590515][ C0] RSP: 0018:ffffc9000f7d7058 EFLAGS: 00000246 [ 1660.596674][ C0] RAX: ffffea000131b380 RBX: ffff888140ab0000 RCX: 00000000f5000000 [ 1660.604706][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1660.612759][ C0] RBP: 0000000000000000 R08: ffffffff8142ffac R09: ffffffff81fbb3ff [ 1660.620833][ C0] R10: dffffc0000000000 R11: fffffbfff2853107 R12: ffff88804c6cef00 [ 1660.629299][ C0] R13: ffffea0000000000 R14: ffff88806d311000 R15: 0000000000000000 [ 1660.637340][ C0] ? qlist_free_all+0x8f/0x140 [ 1660.642171][ C0] ? __phys_addr+0xac/0x170 [ 1660.646734][ C0] ? qlist_free_all+0x3d/0x140 [ 1660.651560][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 1660.657091][ C0] __kasan_slab_alloc+0x23/0x80 [ 1660.662009][ C0] ? ptlock_alloc+0x20/0x70 [ 1660.666580][ C0] kmem_cache_alloc_noprof+0x135/0x2a0 [ 1660.672183][ C0] ptlock_alloc+0x20/0x70 [ 1660.676593][ C0] pte_alloc_one+0xd3/0x610 [ 1660.681165][ C0] ? __pfx_pte_alloc_one+0x10/0x10 [ 1660.686348][ C0] ? copy_pmd_range+0x7b90/0x85f0 [ 1660.691440][ C0] __pte_alloc+0x79/0x3c0 [ 1660.695936][ C0] ? __pfx___pte_alloc+0x10/0x10 [ 1660.700933][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1660.706195][ C0] copy_pmd_range+0x7d87/0x85f0 [ 1660.711141][ C0] ? mas_destroy+0x197c/0x1fe0 [ 1660.715965][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 1660.721243][ C0] ? look_up_lock_class+0x77/0x170 [ 1660.726446][ C0] ? register_lock_class+0x102/0x980 [ 1660.731811][ C0] ? __pfx_mas_destroy+0x10/0x10 [ 1660.736806][ C0] ? mark_lock+0x9a/0x360 [ 1660.741192][ C0] ? __lock_acquire+0x1384/0x2050 [ 1660.746329][ C0] copy_page_range+0x99f/0xe90 [ 1660.751199][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1660.756589][ C0] ? __pfx_up_write+0x10/0x10 [ 1660.761301][ C0] ? __asan_memset+0x23/0x50 [ 1660.765957][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 1660.772778][ C0] ? vma_interval_tree_insert_after+0x259/0x2b0 [ 1660.779084][ C0] copy_mm+0x1117/0x1e80 [ 1660.783407][ C0] ? __pfx_copy_mm+0x10/0x10 [ 1660.788070][ C0] ? __init_rwsem+0x122/0x160 [ 1660.792816][ C0] ? copy_signal+0x52a/0x650 [ 1660.797474][ C0] copy_process+0x1845/0x3d50 [ 1660.802225][ C0] ? copy_process+0x9fa/0x3d50 [ 1660.807042][ C0] ? __lock_acquire+0x1384/0x2050 [ 1660.812090][ C0] ? __pfx_copy_process+0x10/0x10 [ 1660.817147][ C0] kernel_clone+0x223/0x880 [ 1660.821706][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1660.826814][ C0] __x64_sys_clone+0x258/0x2a0 [ 1660.831641][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 1660.836989][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1660.843038][ C0] ? exc_page_fault+0x590/0x8c0 [ 1660.847957][ C0] ? do_syscall_64+0xb6/0x230 [ 1660.852664][ C0] do_syscall_64+0xf3/0x230 [ 1660.857188][ C0] ? clear_bhb_loop+0x35/0x90 [ 1660.861906][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.867847][ C0] RIP: 0033:0x7f4eaeb74f93 [ 1660.872287][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 1660.891958][ C0] RSP: 002b:00007ffeda7feb78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1660.900437][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4eaeb74f93 [ 1660.908442][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1660.916445][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1660.924469][ C0] R10: 00005555603da7d0 R11: 0000000000000246 R12: 0000000000000000 [ 1660.932489][ C0] R13: 0000000000194f05 R14: 0000000000194db0 R15: 00007ffeda7fed00 [ 1660.940535][ C0] [ 1660.943926][ C0] Kernel Offset: disabled [ 1660.948389][ C0] Rebooting in 86400 seconds..