last executing test programs: 12m34.733724853s ago: executing program 32 (id=67): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x3ff, 0x3, 0xfb6}) close_range(r1, r1, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x1, 0x1}, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/pm_wakeup_irq', 0x0, 0x0) timerfd_create(0x0, 0x0) unshare(0x22020400) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x200000000000, 0x1000000000000000, 0x0, 0x7, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=r0], 0x0) 12m31.597796265s ago: executing program 33 (id=81): syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) pipe2$9p(&(0x7f0000000240), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000900ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 12m27.446820172s ago: executing program 34 (id=90): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) splice(0xffffffffffffffff, &(0x7f0000000380)=0x1, r0, &(0x7f0000000400)=0x10, 0x45, 0xa) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f00000001c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000003840)="388b5e31615b80989f76f874e99652ec520bb037176e37db6084cbfa02627d5c9408dc3272ea089d8ef7bdeba8cde90aaa2753bfd82e7ca26c85c343643d7bc2a58f5db350ce45a8e8a70309e8cf6191d9d75303233b5ba03f8f6ebe7df1366a00df567c19cac03b836b55a3ef93c96515961f6edeb8bbb59c02d059d59a8d015602cb0c0b90986fa2f4c433d41df4b3b3b8c611b647591040c6b22219d6a579b1f2a1af42574587c52cfaca74c1f5bcd22f5fcfcbd1cbc17e1b2ddaae50c3de581de77d11d40c3fd078ffdf39c9bbf149cb0d3e54f837eb92bbf4d2ae9281695bdf43a0538dd2d1b7d2f4afff0a0e375fdbd572360b3ef0890e88706090b02c4481f8c7cc35687b5192d811009a7226cce9a73540c8364ec704637adc01a862c6d53f650ca820f646ff81c8bd70df7aebc9df82c606be3db1a7ad3fe5b36cd9792e6ae2fd450e4a52e787f10191cf2c69061b8c3baa67bfd1b0d12607d02b7f1659ade1d3bb766e25fcafaf6f8a951bf0c27697afd66492186b885c64570bc2fd5d0c3486af3cc33f2af2ba3bc1960f82c99650941717bb1ef98864986b36d77f47aa90cecc0f2083857dd010cd90e46f477a78ccc2a056084fbf83da4481081068fa08d950bce77ac747764bd3ff130605748a12436010571303f8a07182905415fc61843da96b1937e96c81acced4257ce32a2cf8ede77fcfc860b3055c7cf46cfcbcbd764c7c92829854ff30141c7b77073972625b857907b79c3847339dc900139aa071334e13d5f27f750e4da5bb445febe66097a135f3ba47005849914b6b51a143f22e01d841c64ae3a62a639c7bccf85504adefd307c3443646b007b8c7377de8bb420636ca25babd5abd7e8ac691c4500a96d6f3f1f6b212ede62924cdf5e882b873f28ad657302a4d61b6ea511ce4630351a949026d56f7b6843c9edf7ce71fdac0ff6221037034fafc0fafd34bcdcb2a6d4eaff144fbc1473890c4c5c394428cfe24c25ef2af17a3a9969f2fd7d8c1950658ea4b211d11d8d45616d2117f1aabb202051b46d815952536491b27b3a9de4eea32cb5a0342272580c6c72c26817280b213799a3c22a9c22fab533bc88e8937ca97bf5c47a5c30f6d3a63f5190e7ea22cfd78e6f066f3387d68d73f6893d85cc50a08a8a111f777a985fee4b279b8324f742aa2b9520e90a86d20dd88ac82e2b81060b227da94d36fe59543982ebe80fe81ac19c3dea96d7cf15ffc78451e0a0a0b9a4402bb65bc8454c92b9e6d7101dcd575bab322f168d2f30350bbef40f6259a37153ce39627dbe555331a2a714da391d1f46ee7c6e3ed42ba6cb891879991b033480a41607912695cb51e884299934b5fa1b485566328533a5c736ba61f178f4abb56062366a6f3ab635e88fe594582dc055cdfa8e7571fac23a6973166d1fc8d80df434c6ca57df3abf680b9fed170af9b6bd0d20c94c74140f9e922c98901d3fd7480a3b2d297a65c15194a70b292de36a81aa4d71672aeed085c6e8ff93f01708762e9838c926539c4a63c4476fdf4742a4ddfcb9d26682911ab669fb21f3c8b56beaf8b84156add9bfff9fe753aa8b5b157eeb14fe7eccfb5fb8943f9053948510a1246367d04f99dea796d1ee0fe19b910090b77c8b3b411ff041237d08fbdba0c6c83b33e45a493ad1d42ce666181f9e30efac356b14d881fd76120ab54152ab598ce9bb57a375474d48ed05cd5ed0664fede03d9fb2105291f188d844111b4a26c8087f54822de2bdf99a9ede67be5a467d951f80f90c661daa7a348f033fd1363e486369c9443805730c8f3fffeb4d9405b1b78c8c07721ed08aec2b5aa5db20863d0598ad58285e8468be7f4821418293951016f7e1eab1fa35bfeb3fc4780effaeee8842d08b30f71941585d9861c871fcca7b919e3a2f426764157f7b65173609264528faa832b19b32cb978ad0080de36d851326b2537c4963597ef5a75675becb3dc05dd349db54071ec2aae44428faf0dbd6d8d76473f7726889f2ab188b29076ac652eca3154876172480fc99c15f0d41ccd511590d5522e19885b8db67edf599a4a7b479fd5e3cdc417f4d32215bffbb1f27d727ede996aa0d7a86c218232cd04998e772afcee023ff534a50a3e738a4503121f210433e002235f7ccb42bea62b2aba38af7e39743c5f1bc4f6502740a35425ca19e9e1fb3b0a40155353c5782de649baba80530e646930b31631b60ab6fd4029a4ffd5d6a34a88387fd02dfd65cd071c046526370310dbef68461a9b0c2bc5391ae06d2296651dd2892d9cbf53af999ca1c59625ddc2c8895d0727d3a44b78cc4cb51b86292df950b25276dc34664cb695ea56756b3f0afe4c7dce9ba0e4624bc397f441e2748c97c7cf2214478113c9babd3c6b9ab2ed0a7d25d8f99fbd11946ae373c3ecc907bf54212a5bb1b8cd4b140510fae4cbe04a3f0665cb285046048a98db1c151621061a5892c4f54fdcf7df9dbe97835ae8b278984ae6821698928a61cc7ec0f901a129be7cb82fd9b02f61ef6b9562fb076e768f9970f4b4499299d0298d8a6714b3939105a178f7c8f958ea45b6e9426f3ef3572cc099330f69d248059520180b9c349d26fe2d942920c24decbb5288efef11d0c83d8d2b2ee1c4a8ae166b01233ed4ee7db62f50ab1c6ae2d36d214b3f5d2ea5a56480cbd086a54f884cd03b75d1ed2d61b2a927d16012d89d0f083e46238a0454e65b52126c59f1e80a71b3c0faf93a6653c8a99871bc58ad7a1b699014b69477db2d2a2308f030ff94635104616a0f8a2a884a413cae1d102c3c99c9879e8afa7b8d1cdd040faa3aa7ea3e4047a52cb941d10584e4b9cb09c847c45a6495c9664f3282c5233657c34737ae0b7064080ff74cb0e1cae711c33fc7cfc29eb71a92998681ef4105b31e841dbe89beec55e933bb6ffbe9677d9deea47e3b36c8528db794f66a47d8f254e68e92ae90c12624315a27aa3a65c14b448a55be16dba7286c023fb34a24f62eefdfb105bb32d076f4674764dd5ffd1ceb7686c5198efc2f210b551ac4064bde0f78616092b1f31dd34bca858b07f85decb500ef8c02a33817b0ea50755fe8ae405a9076c5f3b701b9b3636f16d17f29eb1a4ca3284113d6737e8ee2b2512a7b43df383c1a415354ca8bc7c7c4ce8756dd572bdb626892e32f7601178df2c9a4395a35ea7cda14672ee2d9d273ee6620a5e6f53d8dc574c75a263351487cae0dec3cd45c2233b8deadd0464b7fe172c25ef925b989963c02afb55d454bae5ad5af09ce8e16c0e175435153cc034615ae024ffd08c9c451211183027486814399b204c684558f5a17820771ed4ae49789d840774426290c0da647f2ba349c323f0b3d8cf6e7d458605845b36e153a8f8b90eae61f7b4acb416aa9b1d9fead898aa6538a3959ab949ea718d34e73af4c02c851e7a054e9ddb4b6065b3358d40d8d7e05c19c232929a265acd90a13c34ca401c949808895bcf58fe4e14433bf809694ed3d8a7717bec905c329aa4d9524979c8f1e966abfe7b8d4965c4d6c1456d32718cdfcc88fca458d5647612a668fd8ac78a05975812efbc381f4462c64d6709159a6ef36c82bc79003bfa40da129282855cde813b7aa930bd8f44e3bb0e00725b0fe86249920678bfaf69af369be871149d2552da1ba5d03602e58dbae80bc99408f45aef57d93f31708e62e518b0be1775f2a1a1ef6aa4904cc9523a2a8dec1864ce7a82f3904595628bda1455f7106db002aad0267f1e7d934f474c85913a94f74a40bd034fffddaa49a417b4b772f258ec101ab384c329e831b27660332915aff78617a0d0e0edeb19698191f5118d3c3d877cb5295a4a460242e0af13b83b2ce04b2580cb15cd748bfa431db6c0c1ab357197446dfd55adeeeb19874330ffeefb0475edcba049f1ce75565714389270759fe6cc8e1f577a7bdc11215cf333dee654c2d83e7ae26f10b18ab8dc28bddfccf30499e9e461ee571f6371c6d076191e72a660b751fd39fb81cc307bd5e518c60efb67c50de8c11848cbd0df8e247334f304209e940dd33a14742ce26a38e7e1c0a22bcd7b927685062dc5e7747b5d3815ed2fca47b8f504c76966507d8e63fd57ee531e9b9b79c746bfc1a0f7ad46a16eb8f77ab423ba5383a89765b62a7583d695cf24583ff4f2b1c8414fd7bf6a9e4515cc3ba53a48bce00bef0db73089f26a26e88b3560199e532ca582b8fa4c9aaaccf2baadb5713755fbe9682266ad2494f7e99775a0eb1476d2dbc82bf97530c02ae12eef8a8a9529dfe9b3c84f79e449a251293c15fd274bc62f3ef484ac42a83280e2d8ecf81bb800eb616987cbe76fb092212cc906b25ca984221afc96874e6ef13a3626fc933061acfb9fc26f8fca6121fe00c7b200ccc72962ed52c4d54f0b9fc0aa626ee3bea1b96ba7083a0a9d15e3dcc6b35235f051eb35f7f4a7db4e536ea4ddb78cb76f18c0487cd149de6380966087c6fde8cfd579d8bb8d66d646e9e4cbde3b0518fdd29842c584d2a97b8a6ed7a0b709381e7ba46109cf2ed0633e6f0e55d8be67d7ca78ff675da21c40347070dbf203aae70a99cb162bff04755db72e10a7fbe3b2b923c5f068fcf77ad13c01383104b873db8d13fd19a0fde1a837d9752ffa8f2c2b8a5eba74e5855b83bfb458c7cc4d0b8a1302c96846f00bfa734217272f66a8ddbb40bc20b223bf6d6bdb2d2eef4b0c571493ac8668171ce08ba7fe915501056a6054e3c632081e82dcfe8fe405e7acb7b4edeb7ecd7405a83cd237f286376713eb61f56dd854cc1b89bf1814ee3b04effeac9f75ee9edd65446ebf35c403b0b93e03e3d7b1aaefe83d5316bc1eac1ae0ef90ce85ffbc84d447f86dc1c28fa4f0514fcdc44365c1aebee2b4af434de4dea2266738c9d5ad9c18f2d583f12dac3b5e0ea9e1a0ff729efbea90cc6dc485adb1fd7ab485c7f9600ec829d106db144d5b07498a2956e2d87c42c98a6f3293846a1b73370a6ba0624be034e29488511b41434e72ad8783a0cc90096a12ac577d7b621e15132aab27bf64ee9184bc48fa87da43536aa126f475b8a220b582935e60643af8cb6cf0b21809809e564536e5bf46fa59bafd0ef687f158d9a5cbd3d1228c4e5906f2330fa1cc891a792fc7966b7d3d5563071656d168e83519c1fd8652eff6a1a080975cfe529c1030a63be05168345b6d5e4f7f867127b5f810bd44db59008a6ef009d122737a034f4f1dc7dc7f632e15ba2da6c248b01fc28f56de533ea282a99261516f5955139301ff9e3a492e914356eb9168efa637b9f18f976155f351ccff42e143c9922d83cced55f62edec492f9589fc0968f27b9c6a08e260694b0506040d7a45a8dcea36d053bc72fa045e085f60f49fca74e1aa2f4057c4b127d4310b5f2af2278c7c1ea66d07cd2bfc031536f1b988b66f24c6bb6e2c5adf64267e00ede2286609e04784bb71460dd37f0363e3cc3404a9556da20c409bc60ab479c9546c00d114358d1e76e3fed0133ee5275e2b40a84456784b9daa934e574556ef19998e880179bc2afb8c70f10b8d55fedf3281b818b6b4cfd50840dfe9c627a4ecb2775127cb6fd8b2d99cf1f32828d72e6dfb2577ffafbf6c2b5b7fe20921b625a790a3b365739a34230589c8ae775adeb10877e434e97f1fe4ac9cf0d2010cc3ff018257a4b7ababd9b453da4fcacd780345a85b0c9aeadcce6b4b4ce8117cd90883e5851b75ec6f1dde3dad816121f0fca58f9c11c883bb7522e686a2b9e120f022f70a87bc6de5204263cc36cc5afb1ed4ffed68c579828dde78745882ac36dd3c26c6dcd50b911ea0f282f995ab88b20ec10cfd0a7fcb5d28797d7a3a0a88a2cf832ef1da7e57207582f0e22cb4d61e6d96723efa04f52c04e02246e898a3557a2ac08f1b07f31a4ec9840257c6367424b1945aa2f11102d0207dc15c612060cb8b9e7c0a232bc978e57a9997160d6cc705eb8489adebdb9e8281634c58d24a358dcd0afb282623fe31d5127b87233c3613f550854bff63236fa3d0b7ec29c4daca7aee98a8843568f152c6b7f8042a127de1d9af8bf9616abcf9ca4f67e09f3ae6dd4ffd7767a4c49e2ca78aece9fe9484e2ad11e2d2a308066746a87738e592f7c8cd31c2665f070cfbbc1073f8afeb8573a99fb5e3fa80777f9b2bfa6f38b7f6d829369ad8e47acbc1a4ee0ca93f462fa16347ddedf288ebf788fda225cd5aebac43cd5d3b3d572dd885d99afe276d4464d8211bd61cd29c5721ed8cdfc945f91391e5670cc25800e3377cda522c0be94e874b89334df9b2ef020345a85fdb2e91dbde5e63570fa4a08125402d556474e00b1f1663c78f8299f363ec830d3ddb3a79a2ff90e9abb1c0678aab8312f27ae3455598d2ba7156762c029421b2c4378db17b81d870542efcf9ce971fab7df3802fbe6eb0c41451b8796aa4aa7c7b3a4951b1616495525de521a27ed5dbc5b2e58c0f69a2c323a7a84e5eb09379a247ea55484606d72dd0b5dea08729415d762bb14c50a712fcf8dffcc8d473fa3142292a544b8f984d5bc64969a3fdb5e01203721413694330c7b3d320c8142c25cc4b164fb7facb2f356d59aaed9fcb5cf7fd75c688d35e24decf9267fa8b201f77cb2146073b187f9ed2237ce8aab3c83261d80a67f4ea3bcd5966e3b3b88f52d1c62392dda8d4407cab84ad8bf7b721e72b9b5aa9bc8cd18c1fda8baee2fdd89266bb8a7637d84a8064c6a7390af0a3b01a357e972c94cacdf7a9ff2e00fe3cb309fe4d49b22183f659cdf239094564599230a38c83a991d2ef595beef7ea361b708b52ea3828a98feb508f7710728167bed2fe9c3c0317d3c0327975c80a6892bce1b5358da1f4f8ba23d582ecca8c979870a047a92946d1a06dcbca4c030cd865c459d1850f044ebe96f5cdfe8577131bd8b64dacf955462516b14942389bbd6201ea7bb72ee25c6f3ebf0ac6a8b107795df9215a03d2977b16d1e2d331c224c52e382ce8da6b1f9ae0055fa976a593206ad72a02bc8ffe3afd1eeb2162aaa05c9873e24c6fb5fc7147728df2ffbef3350e0180cf30c03705a927d35852a2ce2bf9f996e713baaa12f8758ad650423d6b88d660920975a1a1525287034feab642ff9d8a5a8595ad057484515a0be88b3b55888196acd373f85c129a98e474f635718e07e4924d3154159989435c5f17278fa1b5b1c8aa43824e3c13844e4dbce160d28e86e8b5d83b4bddfd87bb844cd8127988f0fff76b24bcb7f735b1021a4913f179b8fe5742cb6f04ea75c9f78d0724320a969a61bcc8283ba04a7abfc164cd3a1ae3ff573b68c894862508eb814a716a8c3edad58aabcdee538368f09b5cc2a3fff987d388761c9dfa2430a8eed6127ee03fe5d34a1c62b47859dbb8cebd75b667c34f175548a3a11ca00174ae1370abdd267c3669d0921087b918cb0a0a84c5fc4bff652e91af97c79eb449a043f181ccf50cf28a3c7af300abf5c70d5eb18f127911a747c51e3bfc3bcb824c8f4c6792759552ee14e9273de1acddafaecd323056d6287ff8a6e70a51bacc9f91901b4b94b51f6c0ce0c37c871cefc6d3b105d88efc480f092a88460327fe67f25ff8ff2351b6ad823a79ddfbc46e8e4b255b2ca974f5503817f5c13d990a944aeca0742249d0479c265efcd5ace46718590f6a3240294c0c58a04b12cce17e94626a771efbd3186de13d5c918e9aa862ffa7f82d33d390ae814fda1d1000890cfd094c293f5974f541e6e9fe30090eb230e304ef433492e1122fb3fdd1eed4a773c3636018963d6bfaede4543cbfd7affdec620b09d9a5a7909cd6306a1f456703a61fff1e96e14463926af961d90ece7c1e6aa7602c8c6a41d99c765089e77836dc92cf0810e145e3095c5ee56cdfe4032fb4022b92c33687761a3c9fa012bdb04d0160160e2e28207a3f5cf488f7988b26035f4e5f3165816a9accc9595a4eaa1297e1039dea615cb28b96edde406790e95384b8ffbc21078cd4e9e44fa9e3d3a7f2d97de7eeac4bb18ea5b18f3f05d9f484076f7b245d35afa25834c40bf7b90fc033dd84ac9b496b24996088c3de66f1f060d3d40e644bdfc51715da72badc8897f8259ef84c6678848b1f2b499dfe76c24a808224e4fa2c5cb3f6bd1033e53a7a9e5100fcbb1cb2792dbd9253a1e28ea762b854fe05008013ec3fbe09481a8a2a3de193847295e3203f21067c070a039fa7d2a70dfde15eb69ba24faf204d5c5d4f7bab49ef1fb933782f1f465d2f9d9fe1e65e5985e7ffaa5ed3937f4f90e0563038946256460e303208aaaa9782ac9901c645a0ddbfe718f4a694cbe81a571b1051d99cab5881158f93d7b80cdebd8ca9894b62089d58ed57193a6e8dcf235fe8d6a713a549446d80c693fe771604fdc902fce09594560248715021cf2124883a26dc870421b236be48fa97bdfc929dbc7bed8dd723906f4c98c87b22d766144116805749de28da8986a426981609320bee76d70f4227b51d95b475353d72990c1bc81e4a42f60108975ed56a42506dbac89e0d545b68c5450f3b26b50b59ada235d1c1e0425c12a186e72009ef12b75e10714105c26f01303faa127911572cdf01479c4ee4cb5ce7a4b002e004514ca1830d8c5b1fd2b7046603c7ba2092feb77823ca5372cb54e71daa427d3bf2ec5f0ade3bf3f21d3f9a514d11ad3da2abb897a789046f2ae17acdb462470785ff7c3cde43dd85f5f766197b4feee8708c94ba6a914611f9b7d2c3f81e71bd83258a7b9add9a1c63800d21d950aec5186414d83025000fd3b3f7d068e9acf62483d79a5841096fbb7f0018a34942d09473a15a654eea89ae265c2ad9300c0c2aeacd41d2a15ed6b212bfd92f88f93f08e2aff3dc2223c0d1cc66add5ba4f2ac27a0987402554fae54f35cca3558f7902834b3e743956bf800125ced21a8da7fcba807743350cbf0874287cf9a2fd92870addfc09bea87e46fb215b894710f0d3a2ad61252b967a407e53a5b5e3e71b7ef09da180c9a90e99ff7497baa4a949c7f4b70c7729cad485b793a527f35c076630cdf38e51d1d6125d60a0ce551cb0dd4a7e5fa4a46b6226c683c97dd5afa465d57a2786cd6297b96d27855fd97e8c885273f313ef7845bc588b664347ae5113b45e1edef024a94c9689b8cb70d35b5e192a59790de5e828c7598b9c5103041234d5b036049a8a844b12d7d0b028ff5c3efdecbd6dec43760640969966ff2f6b13c1745478eba24432d952d7a79efe3cd2e5acd371b779c3193eb7cea5db73b2fda0e50f45460631a497306460522117bffe38cc4b5ce62ecc9aee4af4f1f3bb3ed000ce8d13359a91facca291b806c492f853d41801cf336490d5d1be85838adfbe75806f6e8d7c4816b17a1f25388839b83bafd42412d4df0eb0be70b003f66a2988cd586c27e6273e7bc631e26fbfc4403f35941340d8439d0bb3476674ddbc4bc5fcf38837bf0e6a33cc5dda01f0065888b4e1ed344ebdd42a4c1afa118a3fcb96be6662439aa47636a9c183a13e73be3d5ad1e342e8e6e8d6ca79ad750617b1d2e37d7d0fc9a2950eede45988038f71b3f4148a8f82ea648e26be98998cf1f8677d037fe6fa49ca38b50a248355f58f5c52ef944e235254b2a2866cb76251aa15d1d4808a2dbaeaa7a07b9cfff78a97f92718b4018531bc3b79a630e695b81a6487b6d40b0d8bf7731e57011cde887fa3a22c63c548596b2a549cd1c1e97386d576f7d9d29b9911668f20e948fe9367fe9ad46a54dcb115b9060a9828bbd4782d750594a414faaee0ca4c17acbd76e16dbeda17749b0ea3371ec4c3697a9cc149fddd12593cf99f2653c4383a178a1e70f1926ec8b612b32017b47859f18da8d9515ef08634c2558ecff663c205424c43c0883be8fb2e499d2906c8e9d10b664d8e2ba8f69f4987b62ce72a8bc0857655764edfa4d54c6c12e49d88be5d7eb6f78157ab43fda970c368a54b20ebffe40c57f5493c3e86b00d80645c3737b4146d4d7799e1e4ac0a1f2276e1cbd08daa2423b6bca852864687f9a37faf34cd3bcefdc2a3394c98088ceba2a68c2592a4d7d273fa4a114d2290d91e866c309ffdd41b8dcfa7f821ab43d1f39a0e93ce1f59472d719decda50df0c6b949c459e797744e1db9bf874e2791a582cafe8ba0c4579d2ebc371aee8f8d5bb3fd2eb8e77b0fad20fb20695db46c9d6cb87fc73f09562ffac46becdcf71e5d848c219d5ff9fe05f1fea11ccc32e3f3dec0192aac957ae7570c565427213fe7ff9592c2fca199b2db0210f39a910ce0c7688ae124a9be1a16c803a3c543bfd925c07480b4b7249ff869fb240803870be9e78c5b6066bd86e8cf901d1d3bdde62b6d660b796a273ba39e3e0b4bc59cf03059aaaf5f16e3f30b982c8cc83d499d0ebe8e2815f8da1a1c6854be895336c522c833ea5802fe287512524b0272f4b843b327d1dfa22db5159f494dc86d89afda1dc62bffb4fc3b0dcf3f94dd34ec93eaafd5f3ee4f12dc7b89e58d781f15aa86b8c26dc98a090f8e361ccb5af5b204a3fc168021f93fc4dddf94f6821074fd6d81e5b6a311add5d98580b71c02fe29a98b4fa8248668d3bd248e0cf335f92ce20465581d49a734bb4fc9c2686ca38d866a8d50bd73f5c421a84bf13233d60152cb7d00e9c89f4b3a14b30b370c8d49175f0256f5b4878f4fba879da63a70036cc7391677c3c05b7c83cb1656098ece81790066d8f57c9c9f5c0bc565fa2b34124bc18acfa562baea334112a51e56098edd6a610437f9ae72759cb5082afbcc35bab6d59d7d6dc81469cd1b7fa79d1f4108a01f49c02878dca4ecf94748fd597a42731622a5218258e987b44e9063cf735d990762d48c75d91c19f046cf6c4aa097b8a096208a8ea700b259e5e7a94da579f5962ab9563333230fad4419afec7d765540cdaf107f698ef4672f8fb25d64308bd593f4da8ac059179b7b491237da82c831adc8f94fed9be2230ae3fca266a65e5cef8197c4fe6ac717ea0a02364884e62e250501148068b32a80cf9f9a0e8174547be975b0465a8e10bf93a9f9f1872631505be48243ab975484b488048f8e64991065d9c25a2da087594a0d5d9eaaa3ad0c53dcd398e5b032f6a5e22ad9a51ebe3c69683dbd0b36ebb3a20f1d7209ce9f1ac252106686196208b804218cba4b7b9cc20d66220f8dd52f06a386f6dd540085f75711387cb20a25152f18b6d05dec7059d0c51086e4c379db90a4292e0cf82e56c7980df5a8e23d906c6b093ecfdea9704aa6f6fbbf3bbd2caccc05d9545da928d1db45956e121048d1e39fa55834e2fb54361eb2ccbcd4a93f9c6b3a5c7b9a802fe859fffde4d067dd0ce7a086b680c0a574c9d3196a32209e835b391427d6f89125fb1b26120dac1eb6326f05181764c9eee4256f454af5bd0d1be448277629bf5f35c7119a23bdcd4375413f5ac7c92fa1a6c1a89a9a7de16a18f4e671e2b7aa851223e018e3fcc783c81c0b5120f2280e8bd4e6e266cca744e646b5f886cba4a25270066de830fb267c7450c443a24191dafe23cf9c88bb60e", 0x2000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x20, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}}, 0x0) 12m23.158593096s ago: executing program 35 (id=99): mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68) r0 = getpid() r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) close(r1) getsockname(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[], 0x4b4}, 0x1, 0x0, 0x0, 0x4004001}, 0x4004004) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000380)) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@mask_fadd={0x58, 0x114, 0x8, {{0x1ff00000, 0x7}, &(0x7f00000000c0)=0x80000000, &(0x7f0000000240)=0x6, 0x40, 0xfffffffffffffff9, 0x9, 0x2, 0x12, 0xffc}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0xffff}, &(0x7f0000000100)=0x8, &(0x7f0000000200)=0x8000000000000000, 0x4, 0x6, 0xffffffffffffffff, 0x2, 0x2, 0x8}}], 0xb0}, 0x0) r4 = io_uring_setup(0x6331, 0x0) io_uring_enter(r4, 0x0, 0x0, 0x5, 0x0, 0x0) r5 = syz_pidfd_open(0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, 0x0) pidfd_getfd(r1, r4, 0x0) 12m2.182988032s ago: executing program 36 (id=130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x10, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x0, 0x0, 0xfffffffffffffffd], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x1c000000) 11m40.971818224s ago: executing program 37 (id=186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000010a01000000000000000000010000000900010073797a300000000040000000160a01000000000000000000050000000900010063797a30000000000900020073797a31000000001400038008000240000000020800014000000000380000001a0a0101000b000000000000010000000900020073797a3000000000090001"], 0xc0}}, 0x0) (fail_nth: 7) 11m16.720214836s ago: executing program 38 (id=239): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x8, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) ioprio_set$pid(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r5, 0x54, 0x4, 0xf, 0x0, 0x18) 10m50.129188694s ago: executing program 1 (id=305): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0xfeffffff}, 0x4000880) 10m49.822703714s ago: executing program 1 (id=307): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x1) syz_open_dev$sndctrl(0x0, 0x315, 0x11103) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005800)=""/102400, 0x19000) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x9, 0xa, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000057c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) close(r5) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x2931890e, r4}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) 10m48.080864712s ago: executing program 1 (id=311): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000a7ff000000100100000b"], 0x18}}], 0x1, 0x0) 10m47.689136961s ago: executing program 1 (id=314): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0) request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000000580)='*\x00\x00\x00\x00\x00\x000\x00\xa5^y\xa9n\x00\xe3\xa3\x89\x90&)\bT\x91\x14\xba\x190\xb3\x00\x00:\xb2\xbe\x1d\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x03H\x00\x00\x00', 0x0) 10m47.087896682s ago: executing program 1 (id=316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x8010, 0xffffffffffffffff, 0x7005000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x7, 0x10000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000680009032cbd7000000000000a0000000000150018000b000800010001000000b647aa0b1665e917823eefcad9dc90af22e7727a1d60d4aa172b09ba10dcc711b3a7d0f0f8b6911acf56f832c4846ce725a48e83f745a5da93aa606fe23e4cd591dee85bea05f93d082f4e40d6fe0b11e561ee2daa39950ece89a329cf207e97ea14b3ca3790d6b511cca7931129c8a28b7e680d7fbf4ae4adb6e18707d2245914ffb33b667e543877e9dd95b66319197278f053309321a9c7f84d81fb52047b814763a74dbcf3c9cf0d8db84d6284c66b50dca8f0b542a2c50cecb9c9e434fafc0d446b"], 0x24}, 0x1, 0x9f, 0x0, 0x20004002}, 0x40004) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/cpu_byteorder', 0x14ba80, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x4000000006, 0x12) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='host1x_channel_submit_complete\x00', r3}, 0x18) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x14069, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x4}, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGMASK(r6, 0x541b, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x24008802) r7 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x89a2, &(0x7f0000000140)={'geneve0\x00', @ifru_names='wg1\x00'}) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c1c0a98533ebffcb043f72e876d30dc59b400", 0x83, 0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) 10m46.562837974s ago: executing program 1 (id=318): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) 10m30.096702144s ago: executing program 39 (id=318): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) 8m57.630330978s ago: executing program 6 (id=1106): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xcc7}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, @in6={0xa, 0x4e23, 0x0, @remote, 0xfb}, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xffffffff}, @in6={0xa, 0x4e20, 0x5, @mcast1}, @in6={0xa, 0x4e24, 0x1, @mcast1, 0xffffffff}, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5c}, @in6={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf10}, @in6={0xa, 0x4e20, 0x7, @empty, 0xa8}]}, &(0x7f00000002c0)=0x10) pipe(&(0x7f0000000200)) socket(0x2, 0x80805, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000040)={{@host, 0xfffffffd}, @host, 0x0, 0xf, 0x4, 0xfffffffffffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x7}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xe1}, {0x5, 0x1, 0xb, 0x1, 0xa, 0xfff8}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000180)={{@host}, 0x400, 0x8f, 0x2, 0x4}) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5c, 0x80, 0x0, 0x89}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8m56.437163852s ago: executing program 6 (id=1110): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='J', 0x1, 0x4008084, 0x0, 0x0) 8m56.420538715s ago: executing program 6 (id=1111): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x4020400) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], 0x20) 8m56.096234695s ago: executing program 6 (id=1118): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) splice(0xffffffffffffffff, &(0x7f0000000380)=0x1, r0, &(0x7f0000000400)=0x10, 0x45, 0xa) rseq(0x0, 0x0, 0x1, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000040)) r1 = syz_open_dev$sndctrl(&(0x7f0000001780), 0xb, 0x101001) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x700, 0x7800, 0x295, 0x1, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x68, 0x0, 0x1d, 0x2f, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x18, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x21, 0x2, [{0x6, 0xb, "1ea91b8f76cfe9c76a"}, {0x5, 0x10, "626adf385d9d7bd21aa6e70c80d4"}]}, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x6, [{@private=0xa010100, 0x5}, {@private=0xa010102, 0x5}]}, @timestamp={0x44, 0xc, 0xf8, 0x0, 0x8, [0x5fa2, 0x0]}]}}}}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x905891, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x212f4d1, 0x0) mount$9p_xen(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x24000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa0100fe}, @typed={0x4, 0x10}]}]}]}, 0x2c}}, 0x0) 8m52.869174425s ago: executing program 6 (id=1134): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='J', 0x1, 0x4008084, 0x0, 0x0) 8m52.568403494s ago: executing program 6 (id=1137): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m52.001546327s ago: executing program 40 (id=1137): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m0.848316233s ago: executing program 5 (id=1312): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r3, &(0x7f0000000000)='./file1\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 7m59.682981733s ago: executing program 5 (id=1314): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1cb, 0x38f}, 0x0, 0x0, 0xb7, 0xda, 0x2, 0x2, 0x8, 0xfffe, 0x101a, 0xd7df}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$vim2m(0x0, 0x6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000700)={0x6, 0xe118, 0x2, {0x2, @vbi={0x88, 0x2969, 0xfff, 0x34343452, [0xae6b, 0x3], [0x0, 0x7ff], 0x13a}}, 0x6}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r2 = eventfd(0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x1ff) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2000) close_range(r1, 0xffffffffffffffff, 0x0) 7m58.400322737s ago: executing program 5 (id=1318): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 7m57.907141066s ago: executing program 5 (id=1322): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001300)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcd946929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000100)={0x2, 0x0, @local}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) 7m57.369329672s ago: executing program 5 (id=1325): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) r1 = socket$inet(0x2, 0xa, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r4, 0x29, 0x3e, &(0x7f00000005c0)=0x7ffe, 0x4) r5 = accept4(r0, 0x0, 0x0, 0x81800) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r8, @ANYBLOB="60c000000800000024001280110001006272696467655f736c617665000000000c0005"], 0x44}, 0x1, 0x0, 0x0, 0x95}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f0000000000)=@getchain={0x2c, 0x66, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x5, 0xc}, {0x9}, {0x3}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r5, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000800)=""/58, 0x3a}], 0x2}, 0xfffffffc}], 0x1, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r9, 0x8800000) read$FUSE(r9, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) 7m55.828411299s ago: executing program 5 (id=1332): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0x821, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m55.503166545s ago: executing program 41 (id=1332): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0x821, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m34.86827682s ago: executing program 4 (id=2116): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x10000000}, {}, 0x20, 0x0, 0x1}}, 0xb8}}, 0x0) 4m34.750178457s ago: executing program 4 (id=2117): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x88) lseek(r0, 0x0, 0x0) 4m34.575043745s ago: executing program 4 (id=2120): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) sendfile(0xffffffffffffffff, r0, 0x0, 0x3a) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0xc8, 0x8, 0x1b0, 0x5803, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @empty, [], [], 'nicvf0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x82000000003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000040)={0x0, 0x56595559, 0x2, @stepwise={0x8, 0x8, 0x7ff, 0x4, 0xaeae, 0x84a}}) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, 0x0, 0x3, 0x2) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2716, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000c00000027f1a0000f7000000000000"], 0x48) 4m31.27948657s ago: executing program 4 (id=2134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x1e0) mkdirat(r1, &(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r2, &(0x7f00000004c0)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/204}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/8}, {&(0x7f0000000300)=""/74}, {&(0x7f0000000380)=""/45}], 0x0, &(0x7f0000000440)=""/72}, 0x6}], 0x40000000000012f, 0x832b, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) (async) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x409c884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@private1, @in=@loopback, 0x4e23, 0x8, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x21}, {0x4266, 0xa, 0x95, 0x0, 0x80, 0x8, 0x80000001, 0x1f5}, {0x7424, 0x800, 0x4, 0x401}, 0x2, 0x6e6bb5, 0x1, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d2, 0x32}, 0x2, @in=@multicast1, 0x0, 0x4, 0x2, 0x4, 0x2, 0xfffffff9, 0x2}}, 0xe8) sendto$inet6(r3, &(0x7f0000003240)="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", 0x55a, 0x6d91fb6106d8d10c, 0x0, 0x0) (async) sendto$inet6(r3, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r6, 0x0) (async) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r7, 0x0, 0xc1000004, &(0x7f00000000c0)) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) (async) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r8, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) (async) r9 = dup(r8) connect$802154_dgram(r9, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14) 4m31.029151577s ago: executing program 4 (id=2136): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x1, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000081000040"]) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x80000003, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000040300000000000000080001000100000008000a0000000000080005"], 0x30}}, 0x0) 4m30.751692716s ago: executing program 4 (id=2140): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="200000006800e9780000000000000000020000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40004880) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102377, 0x18fe9) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) (rerun: 64) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 4m29.945946005s ago: executing program 42 (id=2140): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="200000006800e9780000000000000000020000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40004880) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102377, 0x18fe9) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) (rerun: 64) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 3m5.542135871s ago: executing program 8 (id=2432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}}, 0x0) 3m4.595031407s ago: executing program 8 (id=2434): gettid() ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = mq_open(&(0x7f0000000280)='eth0\x00', 0x42, 0x0, 0x0) ftruncate(r0, 0x1000000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x6, 0x6, 0x8000, 0x6}, 0x1c) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES8=r3, @ANYRESDEC], 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) prlimit64(0x0, 0x3, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0xfff) syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000aabb86dd60083ff200280600fe8000000000816a698c126eb724293bd3761e000000000000000000bbfe800000000000be63ff09c58afc96abc96086e454d3394870ee32facbe4d1dc3baa56304f91c4a02772c7f12ea5acf77e82d717d30d0ec47117c10d545cad831d8e284f2c8357f32e06594b709bfd4a18b876a8bc509e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c20004907800091d12fb6b9acd8f4e1c92833a2f1e90339d182202"], 0x0) read$msr(r4, &(0x7f0000000a00)=""/102384, 0x18ff0) syz_open_dev$dri(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r6 = syz_open_dev$amidi(&(0x7f00000001c0), 0xc0000, 0x101004) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000240)={0x1, 0x1, 0xba90, 0x0, 0x7}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) 3m1.152419789s ago: executing program 8 (id=2448): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x66, 0x66, 0x9, [@volatile={0x7, 0x0, 0x0, 0x9, 0x2}, @datasec={0x2b, 0x2, 0x0, 0xf, 0x2, [{0x1, 0x9, 0x7}, {0x5, 0x2, 0x5}], "eab2"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x1}}, @enum={0xc, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x2}, {0xf, 0x14000000}]}]}, {0x0, [0x5f, 0x30, 0x5f, 0x0, 0x61, 0x5f, 0x5f]}}, 0x0, 0x89, 0x0, 0x1, 0x4, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="c482e90b193efb0f380a20e3f066baa10066edc4a1796e13c74424008300c0fec744240200000000c7442406000000000f011c24660f3882b2faffffff66baf80cb8046e2c8def66bafc0cb819f9cf0aef0f225b", 0x54}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0x2, 0x0, [{0x3, 0xfffffffd, 0xf8b, [0x2, 0x8, 0x0, 0x3, 0x9, 0x1bd, 0x7, 0x3]}, {0x2b, 0x8, 0x800, [0x7fffffff, 0x4, 0x1, 0x1ff, 0x2, 0x4, 0x9, 0x80000001]}]}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0xa, 0x81, 0x0, 0x9, 0x1, 0x5, 0x80, 0x41, 0x4, [0x8, 0x4, 0xe18, 0x972d, 0x3, 0x7, 0x6, 0x4]}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@fd={0x6, 0x2, 0x4, 0x10000, 0x7, {0x0, 0x2710}, {0x1, 0x2, 0x9f, 0x9, 0x7, 0x10, "958131d4"}, 0x8, 0x4, {}, 0x8001}) 2m59.235251639s ago: executing program 8 (id=2455): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x211, 0x0, 0x0, 0xd8, 0xd8, 0xd8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x3, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'gre0\x00'}, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@socket0={{0x20}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [0xff00]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 2m58.632157658s ago: executing program 8 (id=2459): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001}, {0x0, 0xe21, 0x1}}}}}, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x95, 0x35, 0x40, 0x5ac, 0x242, 0x7028, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x3, 0xac, 0x2}}]}}]}}, 0x0) shutdown(r0, 0x1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f0000000180)={0xa, 0x4622, 0x1000000080000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdr={{0x18, 0x29, 0x3b, {0x3b, 0x0, 0x2}}}], 0x18}, 0x84) 2m56.237139196s ago: executing program 8 (id=2466): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 2m39.289694661s ago: executing program 43 (id=2466): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 12.336881107s ago: executing program 3 (id=3050): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000014140702"], 0x18}}, 0x4010010) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) close(r1) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r4, &(0x7f0000000940)=ANY=[], 0xff2e) write(r4, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20004000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, 0x0, &(0x7f0000000040)) ptrace(0x10, r5) ptrace$setregs(0x1a, r5, 0xfffffffffffffffd, 0x0) ptrace$cont(0x9, r5, 0x80002001, 0x1) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "7d66d50de7658999", "e96a8be2a7045801d322b6291da39579", ')u0x0, &(0x7f0000000200)=0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) renameat2(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f00000001c0)='./file0/file0\x00', 0x4) 9.12725031s ago: executing program 7 (id=3061): r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) write$smackfs_netlabel(r0, &(0x7f00000001c0)=ANY=[], 0x6c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000340)=0x200800, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r3, 0xffffffffffffffff, 0xb, 0x0, @void}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000600)={0x0, 0x49, 0xa}, &(0x7f00000007c0)=ANY=[@ANYBLOB="656e0200000000000000686173683d7368613235362d676500"/69], &(0x7f0000000840)="aed2ff2a5c3189209230ecebcaa9f0be6dd4a8af69cd5d0601ac179210d227c19ab7abeec3ed4369b044e22cf919ca8014d6ccf41b6098f674bf2f8083ad38b81d25b8062fe43eb481", &(0x7f0000000640)=""/10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x3c) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x40000000000000, 0x3ff, 0x0, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r8, 0xc0844123, &(0x7f0000000240)={0x0, 0x0}) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="5c00000013006bcd9e3fe3dc4e48aa31086b870341008a90510c1bc7c12d0000040014000d000a0010000080cb81a71c00009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938835e786a6d0bdd775150e4509c5d2997f1d9853", 0x62}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 7.399497766s ago: executing program 9 (id=3065): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000100000000000000001000008500000087000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="0000fffffffffffffffe51229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 7.273222215s ago: executing program 3 (id=3066): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000080)={0x0, 0x0, 'client1\x00', 0x7, "861425b875923aea", "273ade7e8b0ff494999be2fdb30f75fef2d6fce161cf38627e479a275e8b32bc", 0x40, 0x5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'pimreg\x00'}) r1 = syz_clone(0x8001200, &(0x7f0000000180)="104efaeffeef28a6fcbed40517510a83a063f67079dbf548e08ea765ffacb87047c6fe7b5221fe1c6a407bdc0d4a52740daca50f1e902c3cc5cde7061a0ae56d76981795dc14cc2562701a7e56a36758226d82ad990c98202056edbf33a73a916342260cee3b10cac8d07722010cfebdc10564e9196d5eab9fd27484", 0x7c, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="691020195a47de596716dbb0245996c108d97d2c91430e366b6905c505985e11fd8eb271211aa4ef95138a622fa807ad59877ef2fcf2915dfaa90a712424117306117e9a1d88a00d5865fad684869f3eb2451453342e0bba9b5e3aabef035e51d1c40c528f6d9a3ea4bf15dc82ef1fd26c31dc8ec7108616cc51b33269592831fc958a94b8542b8eed8a08111b17ce5ac48de2e3d38ab8e91e998d0e2b25b3e31687a87cc6ce018dfff3d81df9285c3f191fec5af7329f3f94cc6e49aeaff721a6f00c89541fdf9a242287ee4d81235aeb96421b993dd17d31452a9930930be860f48533ed636015e715bb19546d3b27f2c2349fd6fa4e1ea5feb1e2323774e4c4b491efb23779bf3a7eb93684e1038ccea719c85e2a2ac855f9350ce8ee8bd74bfd7ccb53675af85efc05ac47b4fd8d6c7b324d519d60c4db55641129e539c6630e32a0bb049fa9749e091849708f1e4021844b175f913baef3844d59090ec789d9cd34874ed1fe46a292d8c02f3fd6a20e903625ef67b0fd3aafc71c51e0e77fbf8dc333e5aed89508d7c75722cebb6be71cceb4e08f090c799afca5b4b3b057789d57e1c660b4cb8069c570aa6c4e0b7513db38be4accd3826dcbf051ef0af4a43d4cd7db86e967923618671e39961caa6d821b87ca4c69c235cb6178e76ad7fbe43c0a982cfa232e04ff9f48e4166b01577ca3663e565dc7a3637f5419f4973a89321a281b4c3a0f3e2dbe4081c659d16037fed1c7a5fcff4ca03d9eebe9fa4440305e3a3ff7eeb86a508b3e92f22f6e6bff79ed73f3197e53f26b7b5b381ecfbe595a3fd9708fa326db342af138832513968ad572fd5414717e9ca59ef92e603ade92f5b8f85189a3a9a6f0ca16a107055e7796843c684b6798701f413c655480b151cadffcc4879dde6f23fe396efdb289b5c443a982a079fceb6996d5cdea823a5654eee86e07501e8245f265f66ccbd185ec80fc13052c59c9cefc3d1317c8a249d3fdef8be95eefbb10245c3cd133055d5df1533b1ac49f719050362ba63f26d74615b8d771d450e330d2acf8b9dfb7c7c3824b94b13c2f24522bfb9e147d1d4ba5f43e4a36e49c8cdb94331383948064b968b018a859eddcb56128b7665bb556dd6becc883ee9a2261f9d67f3d5fda6e30b7703c19529be39727f3e7b5a15963da025b08d598a860a6a24dfa536f9453a85d7f6f40865912a80fb5ec1514c5ce0395ac7b0e4af55fa0316ca147299809bdbd0df287968c9831c716131ed259c6d28fe2396ef7af4c6dadadb898a2d24fb18eba522999c6c4a8e96248a09e6e8e546db7478cb9c26c7b87d6f651359999e8909cdbf354aa27900c7c3ec3a1531f57ebc69ea6ddec8808a59e4ca34eee92b084fa2a3ab07a419cf7a31bc99466ea0b36875b12e21cc2404cbb1e4775f306664f2232716d7a0596e12a249510c17d27784dcbfd76acda91a13770b1efb5dc9571c7c0b802d5ee7be688d850d06b5ceba3cf434ec0c10b164b7dd224e8773d212ad5affd4e4f1209ccd0d263796a729b2bdb9f4018f1e3c7ae93f43e3245c0a2306022ac3817fc7a9a3987838689bd6ff4978eae6d4499946f68874d4c129795a991acc8af88944a892bb1e27887d348b4acc65cd722cb2a24f7857f1d4b463ac5a8618d60632ba7a6cc7d76f1fd1129221d5e7804cdf1b5e06c875b3728430052c2cbb90a55680a75b637312fc78f52e0e1267e9cfb9af2a7ae83442218e9a3945312063e4d0cc9450bf3cd55a0b871ad4882c7191f9d40d665a1cd534a2b2db4b828d50fce86591619a6a081cc48f44ebe29828ff0bff8fbd796f06695adfd238b53f856407bd6cfb44f38533888d985fdb11fa8bde512d7235a0b552dc94d3edeea08ee32525c4d7724114bbfbd53da0146844e3280e5b5c489b21b412df4e6bf8cdb703d440fc24ca7715b7deab4e17b960749c4f390aeaebd1c04ea4326200d40e89b4afafbbc27cee203a3f0038271159a62d1e98d21096811bce6b78bb9f1c518f8babaf21e0bac26d881254895ce7df935c10acef5a11fec0b45a66fa8915ee4d11776006bcd829c21052bd9adcdd016ae69f6997716fe60ca38854c60d369bd0a342d6208bbcc569ee9eb7886cdc10ab68abbba77fda3969fa551472c00721b8edec786a21e063f3be19f98e5fc44e1987b490e300c6adb3a1bb4d9902ab17e2db680cc743a9b374385ed98c4c23131e5df4920751c579e26e5e90cd3af38619ae959dcb6f2ecef71403900d499f1cc25b1739e176bbf9a0551260d750c72b4fe54c86110da5999739869a541b2bd03874acfe54632fe962738125c7ca23398dd373fda1986ff8d8860d5e7f6645c01aaa76146798f4cb75940c41ad8326f63ea75dab55df46de27b2e82e2665831de09db826885124ade6b982456a9b87ab511313ca5077d25a576c8b59b06373fcc296bace669f21acfaeb89bd56b5a967f9f42b380c528f877e79d8139f9262f40e0d55f52598d3aeaa1e423b121e85a226de1326286f4749593b0ce74658a7976e98094a8f32a793e687fe1f15bb1b54f360086bec4673d9aa3c96d95bbb7a84e79c7a9287af87fbd502d2981ecd6c9707ef1a98e2b68e9ad3ede579755557752803729304257c040399c6eedb8fd6e009aab0a89b8bd0b40674e4575cc9f8f02a4bd4cc438a6cabf2f20968c3195aa134302209e99956b51cfb01198592dc1dc56c24917fd739255ba52ae14c5e16c4a34fc03aebd9ea0977717949f1c1eb6bd966a5b9079e7a68823a92269a2f333a21b4dea44b42c84a65c564c05d23fbfc37a05c1eb54c59a2990baefd6a8471fda162466680d38d51d729fbb1e4680f5f95089d0d5892e39b45d9f293a2bbe3e27fa9ac87d5e06b4126bc72db87f9ee18fe478b02803a5e17fda391f7606c36f4a8e6080ff7576c69a4494598fbf2bc864b82d99fed5c3c708d32816cd682475b383a729b1e3464f1da63ca6b04eade080fa3aab208ccffe895290258397c771063048becc4e4897fc21d93553e9fdde067ce4b93a962299455c1c27d69f7e1dbcb92589c1ffd3de0e451cb95b4f62c68ff38d2396baf1339237b9bce448918e5bc5b09eff0aea620496f35283adb6ad91fba79b1a1a7c38a6e89e2509ab8fd3b4125ecb6b6ad38019218c4e641c5ff6bbecea323177b2c3abde6fb2c8a705d89cfabae0da715352238a66a1e53a0448c981786adff75af02e5e37b99350b5e4df6e2b3e2dc9f711b5e3e08290925c9c48037c024d90a8e520aa8f1dd670fa54f3c1201eb7a6284b574890d426ad458f98b53a46eaf290457553e069c4e955ab67a66cad5f26cd3aafa654620ff398645589e2f9833f1d30f002caedc798a9cf4e622d9d31150064923a20048a0e103e5a86c4f1b2f6c887ff7b03ca91049f4c150603a37ea2d4bd3c0ec9b1e28e48cc9784624d04ba7e912f3b6f9da53119d245819c1b4ffea39e72708f50123ac0e30f93efe0e157ca2b9ca104e10b801bb6483d063153d825bd9ff42e13f1a83a9177725e2304123492b03ab81980fac6733abe0d89ccc7e304935bef070cf569e22f5f44d1de4e04a90d75397a66c7a74e7cc68527287d98f16746f2d6d5b207737a4ac9bbb815707f355e06492483c6feb895eec1b77a154e4176f695ef1630bdcef9830b727d4052dc1137667d6dcd20a6bc1ca35423c7adb7140efeaf44de4efcf07741368e6082984fcf8e8dcd32c05ff051605889f4309cb82f826c667a39b3c71256a0d7f6803fcc59970a4e7d5bccba07c36628bd63cb93d59289bdcc030542a00178416adc906524961a0603fb4f3eae14304a099b386be21fec531299cd7f2dbda81efd2cf1029612e7daabc6135851bc2f2aeec64c75d758cb085f21332df640c776726b1abb1c05b36fc6f74a9cfc2022d8f143d8cdf41369e2c05667c7e1a343bdfb753c4c18d44f9d84c5a8dffe44dbc9b1083f01c7bc271c75394a24619f41a5b63fda066bfc816485bb85d91635268b9589a1c2ad6b65847a81eba3c81f386a3ec12cb029bf3df5eecdb888d95d7dc6cf63dd42b21da181b697a21f27fc9aae13f60ceecea14f6529bebd272fa50b2d9f156678d15f21ea6a7ac3dcf29ff0006e14db2cd606f367ba6efbd4e5c9fcc9234ec8cfa0804450de16110701f1b6f66d33b6abfc997bdf6834aa71ef0027467b1982e5c7348ab36b5984323831534e7bfa9d0258aab8962360fbfb1d5fd3a983906611062120f819064cd84903b2f7b1ed424f40685d6a55742836d074e29b33ae7ae36dff93fb3c5d7bade900daa169207e476a9a4482b505d803e330a2e75c6de6cb9c2b0f0f81935897c0df9ba6f44daa43e3d23c43d3bd765056b4786663553408195ca4bcf6fc2ee4fc1a475a1e46c459dc2d652cf8b53ff82c94e61b6fd11d1cb735b4a6d81e2cfd5ab8ac8170ddd916bd18e448d0335d27464f79339f7b3cffc5a45356d8a30887e3e7ba7badd5746dc1f6e3e7e9220fb29daa19054fb08bd1c1c61c232489677ee058473d1cff5f00351dee127085d32daa55157da42548c4aaabde5a2e642421b3268e88c9136951745501bc74ca49d69290ba477f17b2cd85c51133d0d6270d51bd37ca29c25cc0a811709e53e6c1539cb02c705a7c8017e1ca252a6d5ab6c83749b54c78c4149f7a880597f68b9c29c11a4be43ca28c616757ed561c838505c18b4fa0144d6f7cde8406bbd695ecaa53ef09896c40c3819caedb9b6506eb6c911e2aead27d11500ecdcb6bb341982a051ff3389df713b86c461025835f7c219c6f52e191ab1d36f007d3386c80fd2a4135815d8aafdfa0d2e5355a811b58bfc787f52f737a81a7fb4609d9125e7d1fbc09734f054f9722d8277a5d69d4c5d8d1d61457c67c60b590febc0bf0dd1241db5d1e17a0f942121ed79fa5aa13a4fa2945042873b1141766f9110718eb8c53c6be542e9e308c3ab1953f6c3638a63b758391295c5a4488d4782ccca1cbab0dd74e875a18f191fc41ed614eb464edc24552a799a410287db15da98e5e18cba6c85f903166faa9dbd3043b71f07bbed55a1568c7dedaa5e50b20ed10b7177fa2649435d2307b5e759eff7c1fc1226d35ae06e6ba77af9003e9f91931108d3cbce174b95e994c607e4fa1c808c92fee822bdfc05c591c3f7e52b1c9c62b5b6260523e57ae4f7777ba61ff1754ccc418bd09dddb76aa34f3c2730f280917f86cae7440ee5885a7829b03a003ffd54143793a03649296c9a8744f3e537312a9cdf26cb8f28329e49818ea45a594291cda6cfa88df8ff4790f002b031f6fd8083bea4aa379a4a4afb0d9bbba50e9ab2173703b803a0203139d4d31947d288f46ea44e68f88e0d9e82c054ef09c515509498b651e8ba35a77f1c71a3000d2d3879197185acf4cbeecd5d2298fb7d8f382397fcd57e75945cf4c1e30d5c0b03b39525066155de7df91a82aaa1d53bee7df24d1609b5e5e948c3c07870e9dcf05837609e6da774137f8c771cd0f23868bc756730597c13223aeebdb075538bf936558b09c76c4fdffe57ea7d53f08e54ab06124eca1df6bfbbef3563f67baede9b86f6cad126748b66db68f704fab8e0f0365fdcc9e2bc0d596f89068cf0bb7406e6b48992d3c028aa98115ba6063d6d28fcb6a61bf9a832f471a8920bd7d111427461ba27be5693ed41ae2e6605da18a30c702723fd3ec1e2657ac20c493634828402f7aafd040519b357575abf2e7fd551ebb1afae74f5c399dbd040afc8c2e684a25e884352c9c") tkill(r1, 0x3f) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000001280)={0xf9, 0x10001, 0x0, 'queue1\x00', 0x6}) r2 = fcntl$dupfd(r0, 0x406, r0) open(&(0x7f0000001340)='./file0\x00', 0x121000, 0x108) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x48, 0x0, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xffff58ca}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xa9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}]}, 0x48}}, 0x1) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) (async) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000001600)={@rc={0x1f, @none, 0x2}, {&(0x7f00000014c0)=""/241, 0xf1}, &(0x7f00000015c0), 0x57}, 0xa0) (async) ppoll(&(0x7f00000016c0)=[{r0, 0x7074}, {r0, 0xa2}, {0xffffffffffffffff, 0x402c}], 0x3, &(0x7f0000001700), &(0x7f0000001740)={[0x45ac]}, 0x8) syz_usb_connect$cdc_ecm(0x0, 0x60, &(0x7f0000001780)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x5, 0x80, 0x7b, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x4, {{0xb, 0x24, 0x6, 0x0, 0x0, "a2a1c923ed1d"}, {0x5, 0x24, 0x0, 0xbc}, {0xd, 0x24, 0xf, 0x1, 0xffffc5d5, 0x8001, 0x5}, [@acm={0x4, 0x24, 0x2, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x7f, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x2, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000001a80)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x310, 0xf, 0x5, 0x8, 0x20, 0xff}, 0x1a8, &(0x7f0000001840)={0x5, 0xf, 0x1a8, 0x4, [@generic={0xa3, 0x10, 0x1, "80bcb34df02477c0923152fec08f8415705fb4df7923d40b3242de4e4a5acc8488816c6b32666ac150b97523ce9c94e7851996265b8e41563fac35523f2b2e7369cc58a748f806d750d627ee78528d5e849fa0a85b81677a9b6fd7060d62ffd89f571310dad7155cfc4079e002779f2bd697dbe4d755759907dd2f404dfc734d900f0bca8b1eb99b588ecf2f26a157a4fd45be7f4544bc626c0627644c3787b5"}, @generic={0xa7, 0x10, 0x2, "a65ce5edfdb8f16064942bbd76f2a5934c8f2e2e452738c0638d663a935a12fd33980bc3dc8053fc6ac03652ef640c27303ebeef6df44b915e59b8c537456732d7332da405d3635c022ec134c8a8fb94330400953760d54d0ca6d1268579de61b8f78b5659c907aa58ca93e032401df5b222d085944e81937fe5f9abbeb56635a38bd57f10a5a8f048f126f70ead9a4803b6c36f3353505d068baa626de6024fd54fe02a"}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x3, 0x0, 0x9, [0x0, 0x3f00, 0xffc02e, 0x30, 0xc000]}, @generic={0x39, 0x10, 0x3, "111eca4f4c5e2e1e8409a35be83ca00f4e97eb3f0e04de32873a2c074c4ab5535fd9b84c915366f6b96017bbc88069c3aefebacf5242"}]}, 0x2, [{0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x419}}]}) (async) epoll_create1(0x80000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001ac0)={'netdevsim0\x00', 0x0}) (async) recvmmsg$unix(r2, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001b00)}], 0x1, &(0x7f0000001b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000001c00), 0x6e, &(0x7f0000002100)=[{&(0x7f0000001c80)=""/230, 0xe6}, {&(0x7f0000001d80)=""/97, 0x61}, {&(0x7f0000001e00)=""/134, 0x86}, {&(0x7f0000001ec0)=""/121, 0x79}, {&(0x7f0000001f40)}, {&(0x7f0000001f80)=""/83, 0x53}, {&(0x7f0000002000)=""/121, 0x79}, {&(0x7f0000002080)=""/124, 0x7c}], 0x8, &(0x7f0000002180)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000002200), 0x6e, &(0x7f0000003400)=[{&(0x7f0000002280)=""/143, 0x8f}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/176, 0xb0}], 0x3, &(0x7f0000003440)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003540)=""/198, 0xc6}, {&(0x7f0000003640)=""/252, 0xfc}, {&(0x7f0000003740)=""/252, 0xfc}, {&(0x7f0000003840)=""/6, 0x6}, {&(0x7f0000003880)=""/49, 0x31}, {&(0x7f00000038c0)=""/131, 0x83}, {&(0x7f0000003980)=""/169, 0xa9}, {&(0x7f0000003a40)}, {&(0x7f0000003a80)=""/221, 0xdd}, {&(0x7f0000003b80)=""/243, 0xf3}], 0xa, &(0x7f0000003d40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/19, 0x13}, {&(0x7f0000003e80)=""/17, 0x11}, {&(0x7f0000003ec0)=""/127, 0x7f}, {&(0x7f0000003f40)=""/158, 0x9e}], 0x4, &(0x7f0000004040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000004100), 0x6e, &(0x7f0000004380)=[{&(0x7f0000004180)=""/204, 0xcc}, {&(0x7f0000004280)=""/77, 0x4d}, {&(0x7f0000004300)=""/126, 0x7e}], 0x3, &(0x7f00000043c0)=[@cred={{0x1c}}], 0x20}}], 0x6, 0x0, 0x0) (async) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000004580), 0x40040, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000045c0)={@private2, 0x36, r3}) (async) mount(&(0x7f0000004600)=@filename='./file0\x00', &(0x7f0000004640)='./file0\x00', &(0x7f0000004680)='cifs\x00', 0x0, &(0x7f00000046c0)='netdevsim0\x00') (async) setsockopt$packet_int(r4, 0x107, 0x10, &(0x7f0000004700)=0x9, 0x4) (async) inotify_add_watch(r5, &(0x7f0000004740)='./file0\x00', 0x1000000) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000004780), 0x2, 0x0) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000047c0), 0xc0, 0x0) sendmsg$AUDIT_TTY_GET(r8, &(0x7f00000048c0)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004880)={&(0x7f0000004840)={0x10, 0x3f8, 0x300, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x400c040}, 0x800) (async) r9 = add_key$keyring(&(0x7f0000004a00), &(0x7f0000004a40)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000004900), &(0x7f0000004940)={'fscrypt:', @desc2}, &(0x7f0000004980)={0x0, "d1c20e8be5a4c2baa5e7cf814a15d79ed6992152896f9ad1c4605c284cb4b15e0b66dbfa8cf22c1c95bd3a163f9c5d3c5ed21686f6713d64f42ff2e47ebda004", 0x10}, 0x48, r9) (async) timer_create(0x2, &(0x7f0000004a80)={0x0, 0xc, 0x1, @tid=r6}, &(0x7f0000004ac0)=0x0) timer_settime(r10, 0x1, &(0x7f0000004b00)={{0x0, 0x989680}}, &(0x7f0000004b40)) 7.202297232s ago: executing program 9 (id=3069): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x6281, &(0x7f0000000080)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x409c884, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="0d0ad7c36d6617110e434332d6", 0xd, 0x6d91fb6106d8d10c, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x20300000, 0x0, 0xf4ff, 0x0, 0x0, 0x0) 6.86367554s ago: executing program 3 (id=3072): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd29, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e22}}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000"], 0x7c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000f00)}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, &(0x7f0000019180)={[&(0x7f00000191c0)='\xa2\xbc\xb4\xd0t\xee\xb5\xbe\xc6\xa1\n\xb7\x91\xa9YG\xc0M\x93-\xaf\xba\x88L\xb8Qwf\xae\xe9 \x0fH\xee\v\x90Q\xb8\xf7\f\xddP}\x15)\x9e\xdd\x11\x87#\x89>\x1a\xc2sH\xcc[y\xcd\x94\xa0\xd9\x105\b\xc2\xfe\x91\x88U\x1d\xc4\xa5\xe9]\x959%\xd3\xc9\xc3\xa9\xda\xd3\x17al_\x1f\xab\x01Xg\x0fb\x91\x97|\x04e37\xd9E\xaaH2\\\x7f0\xac\x8dA7\x1c\xfa\x82v\xce\xf4^\x87\xa6\x99}\x8aW4\'#\xc8\xab*\x004j\xb9\xfbRK(\xb0\xeb(k}\x81H\xc7\x7fz9q\xed\x8adU\x0f\xdf\x9b>\xb3V\x0f\xca\xf3j\xa7K|`\xa9\xcf>\xdd9\x94\xee\t\xc9(\xc5O+\x99\xce\x81\x7f\x8dGc\x88_:\x97\xcf\t\x18\xedpo\xc6/\xefq&v\xb28\xbc]B\\CQi\xfdg|\xb4\xba\xe7\xdc-g\x1a\xe4B\xbf\x03eu\xbfC\xbb\x15\xb1\xaa\xad,a\r\xc8\xc1!\x1f\x88r\x19\x913\x0e*\x17|\xdddZ\r\xfd\\\x9eG\xba\xad\xc1\x87a\x96p\xc3\xdd3\x86\xd5\xe7gx:\xfd\x1c\fI2\xc7\x11\xbc\x17\xc3X\xfa8\x9aA6\x8eE\xb6\x02\x89(Z)\xa0\xd053\xa8T\x02\xc45\x1c&\xc4\xbb-\xba\x80\xa9\xb5\xec0U\xe0\x101r/|\x1eg>cu\xb2\x98\xfc\xe7\xab\xc2\x91[\x1fb\xfa\'&\xf8\xf9\x10\xd6\xab\x1e\xed\xc0\x14\x8f\x9b\x17!!\'9h[\x06\xa8\x83\xed\xc2\xc4\xd3\xc5|\xc3\x905\xcf3L\xb9kCz\x00@\x11(!\xcef\x8a\x82\xc0a\xe8\xf3hB\xd4\x1b\x98X\xc8,)\xff\xda\xb9\x15\x01\xd4\xe1\xdf3b\xd6t=\t<\x80Z\"\x84\x13\xd3\xa5\x15W\xc0\xc9\x18s\x820gq\x98\xe5E\bs\x8bn5\xc58\xcc\xbe\xdc\x86\x0e'], 0xf4ff}) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @dev}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @random="3df4f6c591c9", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast2}, @info_reply}}}}, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000190001008000385f304a00001c140000fe000001df"], 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) 6.16572337s ago: executing program 9 (id=3073): io_setup(0x5fb, &(0x7f0000000040)) 5.636747855s ago: executing program 0 (id=3075): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x8, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x0) 5.505118272s ago: executing program 3 (id=3076): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00') dup(r2) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010400000000ef0000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r4], 0x54}}, 0x0) 5.491310272s ago: executing program 2 (id=3077): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, 0x9, 0x6, 0x21f, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='#%::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<+\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[\a\x00\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce5<\x0e\xd25\fo\x8f^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x9, 0x0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x24, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x6, 0x3, 0x3, 0x40, 0x1}, @generic={0x3, 0x5, 0xb, 0x800, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x0, 0x0, 0x4, 0x5, 0xfffffffffffffffc, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x8, 0xd8, &(0x7f00000005c0)=""/216, 0x41000, 0x4, '\x00', r6, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000007c0)=[{0x5, 0x3, 0x1, 0x4}, {0x1, 0x5, 0xe, 0x1}], 0x10, 0x876a, @void, @value}, 0x94) fcntl$setpipe(r3, 0x407, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x600000, 0x0) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000900), r1) socket$nl_crypto(0x10, 0x3, 0x15) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000940), 0x2001, 0x0) linkat(r10, &(0x7f0000000980)='./file0\x00', 0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', 0x0) r11 = syz_clone(0x10000000, &(0x7f0000000a00)="ae6ef41eda64b072eaad811c794f59a44172b61a7ed44a3db15e2af11231be640025daf79498070b61fc37d0bf0648b4d4402dfeaa526e01536af4bb974077b0f37d9af07d8ebea0b4342ae497760475b818e4bbefb8fa6814469043e90d76d861291215f86a9bc9d0828de8c486b2e60e8991dde8c81b2767e70c6ed717fe416c694a962fb65e8073f066a14346", 0x8e, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="665fa18e669d42a1064f021f65bb15a6642513ba5d4694d53d978e8b5217897dc798a43211497b2c208ee0089ac449016b787ac8225ea6763f7f623fd8e5f13347036fd9486d244172c3d3113b38f91d2b4667be7b1e0555e5bd46777db00293288b58bc4ed694b47b11cb5250a6c5ca779d5d92bd73b86da3fd9559fa40b5ef1e64f6") sched_setscheduler(r11, 0x0, &(0x7f0000000c00)=0x2) socket$netlink(0x10, 0x3, 0xa027dfc27121f335) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000c40)) connect$inet(r10, &(0x7f0000000c80)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000cc0)={r8, r10, 0x9, 0x0, @void}, 0x10) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0) timer_create(0x2, &(0x7f0000000d00)={0x0, 0x12, 0x4, @tid=r11}, &(0x7f0000000d40)) chdir(&(0x7f0000000d80)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), &(0x7f0000000e40)="2543bc7d7842caa9", 0x8, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r10, 0x84, 0xf, &(0x7f0000000e80)={0x0, @in6={{0xa, 0x4e24, 0x3, @loopback}}, 0x4, 0x7, 0x8000000, 0x1, 0x9}, &(0x7f0000000f40)=0x98) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f0000000f80)={r12, 0x6, 0xa, [0xf6, 0x40, 0x2, 0x400, 0x2, 0x49, 0x4, 0x800, 0x5, 0xd4]}, &(0x7f0000000fc0)=0x1c) sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x78, r9, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x80) 5.345027763s ago: executing program 0 (id=3079): io_uring_enter(0xffffffffffffffff, 0x353, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) close(r0) getsockname(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20008881) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000380)) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) modify_ldt$write(0x1, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/85}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) 5.343098216s ago: executing program 2 (id=3080): ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9}) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$UHID_CREATE2(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 5.12767944s ago: executing program 7 (id=3081): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) splice(r2, 0x0, r0, 0x0, 0x408cd, 0x100000000000000) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xfffffe3e) 5.083745775s ago: executing program 9 (id=3082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000070000000400000021000000c10000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000e000000000000000081000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r0}, 0x38) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYBLOB], 0x24}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000000000)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)='&', 0x1}, {0x0, 0x4000}], 0x2}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYRESOCT=r6], 0x98}}, 0x0) 5.039989046s ago: executing program 2 (id=3083): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, 0x0) r6 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e) splice(r2, 0x0, r6, 0x0, 0x39000, 0x0) connect$rxrpc(r4, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}, 0x24) splice(r3, 0x0, r1, 0x0, 0x408cd, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000180)) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xfffffe3e) 4.650846998s ago: executing program 3 (id=3084): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.596829617s ago: executing program 0 (id=3085): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x41414270, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x10002, 0x2, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000140)=0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000540)={0x18, 0x0, 0x0, {0x1347f88d}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000200001000000000000fdffff8000000000000000000000000825617ea4b167c5c7000d"], 0x38}, 0x1, 0x0, 0x0, 0x20000020}, 0xc0c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = fspick(r2, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000300)='./file0\x00', 0x80, 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000240)=',:\x00', &(0x7f0000000280)='./file0\x00', r7) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xeb) 3.8912401s ago: executing program 9 (id=3086): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) splice(r2, 0x0, r0, 0x0, 0x408cd, 0x0) (fail_nth: 5) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xfffffe3e) 3.802435491s ago: executing program 0 (id=3087): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYBLOB="05c557006bad6f3151", @ANYRESHEX=0x0, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r7, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) sendmmsg(r7, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, '/'}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) r8 = getpid() sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) 3.712971599s ago: executing program 7 (id=3088): bpf$BPF_GET_PROG_INFO(0x21, &(0x7f0000000840)={0xffffffffffffffff, 0x300, 0x0}, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x5, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020", 0x5, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$SIOCAX25CTLCON(r2, 0x89e8, 0x0) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) r4 = getpid() madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x40901, 0x0) write$FUSE_INIT(r6, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1, 0x20000200, 0xfff, 0x10, 0x9, 0x0, 0x0, 0x0, 0x10, 0x9}}, 0x50) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000100)=[@acquire_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x20b, 0x1}, @fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x100a}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x400}], 0x1000, 0x0, &(0x7f0000000880)="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"}) 3.707143058s ago: executing program 3 (id=3089): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x401, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000780), &(0x7f0000000980)=[{0x1, 0x0, 0xf, 0x1}, {0x0, 0x0, 0x6}, {0x0, 0x2, 0x0, 0x7}, {0x0, 0x3, 0x6}, {0x0, 0x0, 0x5, 0x5}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe4, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x19, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}}, 0x400000000000000) 3.673616867s ago: executing program 2 (id=3090): r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x4, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff8, 0x4) (async) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e20, 0xfffffffd, @private1, 0x7}, 0x1c) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (rerun: 32) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) (async, rerun: 64) fcntl$lock(r5, 0x7, &(0x7f00000006c0)) (rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) r7 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) (async, rerun: 64) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async, rerun: 64) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f00000009c0)=0x8, 0x4) (async, rerun: 64) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x10008, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x6000200c}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000800)={0xa0000006}) (async) epoll_pwait(r0, &(0x7f0000000140)=[{}, {}], 0x2, 0x400, 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0xa8, 0xec, 0x9, 0x2, 0x8, "9d11b94f2250c7aefbe8cc3f5ead08138bdb3c", 0x6, 0xc651}) 2.754170374s ago: executing program 0 (id=3091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4000000}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0xfffffd10, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000fff0000004e21e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 2.257135337s ago: executing program 2 (id=3092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 1.658843397s ago: executing program 9 (id=3093): io_setup(0x5fb, &(0x7f0000000040)) 1.624303504s ago: executing program 2 (id=3094): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000001b80)={0x2020}, 0x2020) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000080)) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) bind$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x1, @none, 0x0, 0x1}, 0x72) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x0, 0x0, 0x1002], [0x0, 0x0, 0x0, 0x80]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 1.484439674s ago: executing program 0 (id=3095): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b///o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)='&', 0x1}, {0x0, 0x4000}], 0x2}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYRESOCT=r6], 0x98}}, 0x0) kernel console output (not intermixed with test programs): 565.447643][T12454] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 565.450423][T12462] syz_tun: entered promiscuous mode [ 565.456449][ T6557] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 565.475542][ T6557] usb-storage 1-1:1.0: USB Mass Storage device detected [ 565.505183][ T6557] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 565.513085][T12462] vlan0: entered promiscuous mode [ 565.513672][ T6557] scsi host1: usb-storage 1-1:1.0 [ 565.530219][T12462] syz_tun: left promiscuous mode [ 566.511063][ T58] rc_core: IR keymap rc-snapstream-firefly not found [ 566.518692][ T58] Registered IR keymap rc-empty [ 566.527002][ T58] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 566.538211][ T58] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 566.556197][ T58] input: syz syz mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input31 [ 566.575183][ T58] usb 3-1: USB disconnect, device number 30 [ 566.581275][ C1] ati_remote 3-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 567.610061][T12502] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2062'. [ 567.646105][T12502] vlan2: entered promiscuous mode [ 567.651297][T12502] dummy0: entered promiscuous mode [ 567.730068][T12502] dummy0: left promiscuous mode [ 567.826560][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'. [ 569.274953][ T6557] usb 1-1: USB disconnect, device number 17 [ 570.680362][ T25] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 571.772996][T12556] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2076'. [ 571.784061][T12556] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2076'. [ 571.796432][T12556] veth1_vlan: left promiscuous mode [ 571.809027][T12556] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2076'. [ 574.358251][T12585] fuse: Bad value for 'rootmode' [ 574.562736][T12591] program syz.4.2089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.201691][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 575.201709][ T29] audit: type=1326 audit(1738547990.023:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12601 comm="syz.4.2092" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81deb8cda9 code=0x0 [ 576.051878][ T29] audit: type=1326 audit(1738547990.809:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12614 comm="syz.8.2097" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a5758cda9 code=0x0 [ 576.788041][T12630] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 577.167171][T12638] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2103'. [ 577.660613][T12644] UBIFS error (pid: 12644): cannot open "syztnl2", error -22 [ 578.538279][T12627] Bluetooth: hci0: command 0x0406 tx timeout [ 579.114982][ T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 579.307925][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 579.618723][ T25] usb 1-1: config 1 interface 0 altsetting 226 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 579.826548][ T25] usb 1-1: config 1 interface 0 has no altsetting 0 [ 579.858958][ T25] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.40 [ 579.870592][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.879309][ T25] usb 1-1: Product: syz [ 579.883845][ T25] usb 1-1: Manufacturer: syz [ 579.894199][ T25] usb 1-1: SerialNumber: syz [ 580.415865][ T25] usbhid 1-1:1.0: can't add hid device: -71 [ 580.428779][ T25] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 580.482654][ T25] usb 1-1: USB disconnect, device number 18 [ 581.798317][ T5870] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 581.958581][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 581.967130][ T5870] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 581.990955][ T5870] usb 3-1: config 0 has no interface number 0 [ 582.020198][ T5870] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 582.040034][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.070550][ T5870] usb 3-1: Product: syz [ 582.085774][ T5870] usb 3-1: Manufacturer: syz [ 582.095509][ T5870] usb 3-1: SerialNumber: syz [ 582.123816][ T5870] usb 3-1: config 0 descriptor?? [ 582.136836][ T5870] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 582.149350][ T5870] pctv452e: pctv452e_power_ctrl: 1 [ 582.149350][ T5870] [ 582.179562][ T5870] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 582.179562][ T5870] [ 582.193952][ T974] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 582.215987][ T5870] dvb-usb: bulk message failed: -22 (5/0) [ 582.233854][ T5870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 582.244964][ T5870] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 582.245354][T12718] vlan0: entered promiscuous mode [ 582.254018][ T5870] usb 3-1: media controller created [ 582.254708][ T5870] dvb-usb: bulk message failed: -22 (8/0) [ 582.280785][ T5870] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 582.291938][T12718] team0: Port device vlan0 added [ 582.298483][ T5870] dvb-usb: MAC address reading failed. [ 582.330256][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 582.354172][ T974] usb 4-1: device descriptor read/64, error -71 [ 582.461084][ T5870] DVB: Unable to find symbol stb0899_attach() [ 582.467285][ T5870] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 582.546612][ T5870] rc_core: IR keymap rc-tt-1500 not found [ 582.552378][ T5870] Registered IR keymap rc-empty [ 582.568720][ T5870] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 582.581656][ T5870] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input33 [ 582.594215][ T5870] dvb-usb: schedule remote query interval to 100 msecs. [ 582.602166][ T5870] pctv452e: pctv452e_power_ctrl: 0 [ 582.602166][ T5870] [ 582.609484][ T5870] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 582.620775][ T5870] usb 3-1: USB disconnect, device number 32 [ 582.627956][ T974] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 582.817714][ T974] usb 4-1: device descriptor read/64, error -71 [ 582.882045][ T6188] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.082309][ T974] usb usb4-port1: attempt power cycle [ 583.278150][ T5870] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 583.334738][ T6188] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.401663][ T6188] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.517798][ T6188] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.550222][T12737] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2144'. [ 583.626320][ T974] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 583.660709][ T974] usb 4-1: device descriptor read/8, error -71 [ 583.671241][T12737] 9pnet_fd: Insufficient options for proto=fd [ 584.654829][ T6188] bridge_slave_1: left allmulticast mode [ 584.660631][ T6188] bridge_slave_1: left promiscuous mode [ 584.677866][ T6188] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.718266][ T974] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 584.835062][ T974] usb 4-1: device descriptor read/8, error -71 [ 584.867051][ T6188] bridge_slave_0: left allmulticast mode [ 584.872850][ T6188] bridge_slave_0: left promiscuous mode [ 584.909789][ T6188] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.006126][T12627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 585.016285][T12627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 585.026173][T12627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 585.036976][T12627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 585.044901][T12627] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 585.053165][T12627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 585.096927][ T974] usb usb4-port1: unable to enumerate USB device [ 587.027255][ T974] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 587.144234][T12772] SET target dimension over the limit! [ 587.266401][T12627] Bluetooth: hci0: command tx timeout [ 587.357476][ T974] usb 4-1: Using ep0 maxpacket: 32 [ 587.412005][ T974] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 587.485644][ T974] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 587.522239][ T974] usb 4-1: config 0 has no interface number 0 [ 587.533036][ T974] usb 4-1: config 0 interface 230 altsetting 14 endpoint 0x1 has invalid maxpacket 2048, setting to 64 [ 587.562589][ T974] usb 4-1: config 0 interface 230 altsetting 14 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 587.574068][ T974] usb 4-1: config 0 interface 230 altsetting 14 has a duplicate endpoint with address 0x9, skipping [ 587.597547][ T974] usb 4-1: config 0 interface 230 altsetting 14 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 587.633835][ T974] usb 4-1: config 0 interface 230 altsetting 14 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 587.645724][ T974] usb 4-1: config 0 interface 230 has no altsetting 0 [ 587.672385][ T974] usb 4-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=c7.15 [ 587.704134][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.732575][ T974] usb 4-1: config 0 descriptor?? [ 587.957763][ T974] usb 4-1: string descriptor 0 read error: -71 [ 587.972409][ T974] ch341 4-1:0.230: ch341-uart converter detected [ 587.990207][ T974] usb 4-1: failed to receive control message: -71 [ 587.996759][ T974] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 588.025905][ T6188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.038268][ T974] usb 4-1: USB disconnect, device number 27 [ 588.044702][ T6188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.058322][ T6188] bond0 (unregistering): Released all slaves [ 588.061285][ T974] ch341 4-1:0.230: device disconnected [ 588.085619][ T6188] bond1 (unregistering): Released all slaves [ 588.176676][T12750] lo speed is unknown, defaulting to 1000 [ 588.247535][ T6188] fþ²¹¥‰!: left promiscuous mode [ 588.865477][ T5870] IPVS: starting estimator thread 0... [ 588.924324][T12750] chnl_net:caif_netlink_parms(): no params data found [ 588.982412][T12793] IPVS: using max 26 ests per chain, 62400 per kthread [ 589.116516][ T6188] hsr_slave_0: left promiscuous mode [ 589.141605][ T6188] hsr_slave_1: left promiscuous mode [ 589.167230][ T6188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.203794][ T6188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.226158][ T6188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.247528][ T6188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.308803][ T6188] veth1_macvtap: left promiscuous mode [ 589.321442][ T6188] veth0_macvtap: left promiscuous mode [ 589.327199][ T6188] veth1_vlan: left promiscuous mode [ 589.333466][ T6188] veth0_vlan: left promiscuous mode [ 589.485187][T12627] Bluetooth: hci0: command tx timeout [ 591.688796][ T6188] team0 (unregistering): Port device team_slave_1 removed [ 591.701920][T12815] netlink: 'syz.0.2163': attribute type 10 has an invalid length. [ 591.708696][T12627] Bluetooth: hci0: command tx timeout [ 591.793146][ T6188] team0 (unregistering): Port device team_slave_0 removed [ 592.740269][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 592.807633][T12750] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.825483][T12750] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.837559][T12750] bridge_slave_0: entered allmulticast mode [ 592.849374][T12750] bridge_slave_0: entered promiscuous mode [ 592.861516][T12750] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.873375][T12750] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.880756][T12750] bridge_slave_1: entered allmulticast mode [ 592.896325][T12750] bridge_slave_1: entered promiscuous mode [ 592.904624][T12836] FAULT_INJECTION: forcing a failure. [ 592.904624][T12836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.944876][T12836] CPU: 1 UID: 0 PID: 12836 Comm: syz.3.2169 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 592.944905][T12836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 592.944918][T12836] Call Trace: [ 592.944925][T12836] [ 592.944934][T12836] dump_stack_lvl+0x241/0x360 [ 592.944975][T12836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.945007][T12836] ? __pfx__printk+0x10/0x10 [ 592.945036][T12836] ? __pfx_lock_release+0x10/0x10 [ 592.945068][T12836] should_fail_ex+0x40a/0x550 [ 592.945093][T12836] _copy_from_user+0x2d/0xb0 [ 592.945112][T12836] move_addr_to_kernel+0x82/0x150 [ 592.945137][T12836] copy_msghdr_from_user+0x43e/0x680 [ 592.945160][T12836] ? __pfx___might_resched+0x10/0x10 [ 592.945184][T12836] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 592.945205][T12836] ? __fget_files+0x2a/0x410 [ 592.945234][T12836] ? __sys_sendmmsg+0x392/0x720 [ 592.945263][T12836] ? __might_fault+0xaa/0x120 [ 592.945296][T12836] __sys_sendmmsg+0x32b/0x720 [ 592.945336][T12836] ? __pfx___sys_sendmmsg+0x10/0x10 [ 592.945377][T12836] ? __pfx_lock_release+0x10/0x10 [ 592.945399][T12836] ? kstrtouint_from_user+0x128/0x190 [ 592.945446][T12836] ? ksys_write+0x22a/0x2b0 [ 592.945477][T12836] ? __pfx_lock_release+0x10/0x10 [ 592.945513][T12836] ? sb_end_write+0xe9/0x1c0 [ 592.945538][T12836] ? vfs_write+0x7fa/0xd10 [ 592.945569][T12836] ? __mutex_unlock_slowpath+0x227/0x800 [ 592.945622][T12836] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 592.945649][T12836] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 592.945675][T12836] ? do_syscall_64+0x100/0x230 [ 592.945703][T12836] __x64_sys_sendmmsg+0xa0/0xb0 [ 592.945735][T12836] do_syscall_64+0xf3/0x230 [ 592.945760][T12836] ? clear_bhb_loop+0x35/0x90 [ 592.945807][T12836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.945829][T12836] RIP: 0033:0x7fb0ebf8cda9 [ 592.945844][T12836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.945858][T12836] RSP: 002b:00007fb0ece3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 592.945876][T12836] RAX: ffffffffffffffda RBX: 00007fb0ec1a5fa0 RCX: 00007fb0ebf8cda9 [ 592.945887][T12836] RDX: 0000000000000002 RSI: 0000000020000c80 RDI: 0000000000000003 [ 592.945897][T12836] RBP: 00007fb0ece3d090 R08: 0000000000000000 R09: 0000000000000000 [ 592.945907][T12836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.945916][T12836] R13: 0000000000000000 R14: 00007fb0ec1a5fa0 R15: 00007ffc6cb761f8 [ 592.945939][T12836] [ 593.274955][T12750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.582567][T12750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.592911][T12843] tipc: Enabling of bearer rejected, failed to enable media [ 593.603805][T12843] netlink: 'syz.3.2171': attribute type 4 has an invalid length. [ 593.933826][ T5837] Bluetooth: hci0: command tx timeout [ 594.275075][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 594.475501][ T974] lo speed is unknown, defaulting to 1000 [ 594.846152][T12750] team0: Port device team_slave_0 added [ 594.969080][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 594.996555][T12856] FAULT_INJECTION: forcing a failure. [ 594.996555][T12856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.004307][T12750] team0: Port device team_slave_1 added [ 595.759148][T12856] CPU: 0 UID: 0 PID: 12856 Comm: syz.3.2175 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 595.759179][T12856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 595.759191][T12856] Call Trace: [ 595.759198][T12856] [ 595.759207][T12856] dump_stack_lvl+0x241/0x360 [ 595.759245][T12856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.759277][T12856] ? __pfx__printk+0x10/0x10 [ 595.759306][T12856] ? kvm_arch_vcpu_load+0x68c/0x910 [ 595.759327][T12856] ? __pfx_lock_release+0x10/0x10 [ 595.759365][T12856] should_fail_ex+0x40a/0x550 [ 595.759387][T12856] ? kvm_arch_vcpu_ioctl+0x476/0x2a30 [ 595.759409][T12856] _copy_from_user+0x2d/0xb0 [ 595.759428][T12856] kvm_arch_vcpu_ioctl+0x4d2/0x2a30 [ 595.759451][T12856] ? validate_chain+0x11e/0x5920 [ 595.759482][T12856] ? __pfx_lock_acquire+0x10/0x10 [ 595.759507][T12856] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 595.759529][T12856] ? __pfx_lock_release+0x10/0x10 [ 595.759562][T12856] ? unwind_next_frame+0x18e6/0x22d0 [ 595.759592][T12856] ? preempt_count_add+0x93/0x190 [ 595.759613][T12856] ? __pfx_validate_chain+0x10/0x10 [ 595.759640][T12856] ? 0xffffffffa0001af0 [ 595.759659][T12856] ? is_bpf_text_address+0x285/0x2a0 [ 595.759682][T12856] ? is_bpf_text_address+0x26/0x2a0 [ 595.759706][T12856] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 595.759729][T12856] ? kernel_text_address+0xa7/0xe0 [ 595.759758][T12856] ? __kernel_text_address+0xd/0x40 [ 595.759786][T12856] ? unwind_get_return_address+0x4d/0x90 [ 595.759813][T12856] ? arch_stack_walk+0xfd/0x150 [ 595.759853][T12856] ? stack_trace_save+0x118/0x1d0 [ 595.759877][T12856] ? mark_lock+0x9a/0x360 [ 595.759907][T12856] ? __lock_acquire+0x1397/0x2100 [ 595.759952][T12856] ? tomoyo_path_number_perm+0x679/0x860 [ 595.759997][T12856] ? __mutex_trylock_common+0x183/0x2e0 [ 595.760026][T12856] ? __pfx___might_resched+0x10/0x10 [ 595.760049][T12856] ? __pfx___mutex_trylock_common+0x10/0x10 [ 595.760080][T12856] ? rcu_is_watching+0x15/0xb0 [ 595.760108][T12856] ? trace_contention_end+0x3c/0x120 [ 595.760135][T12856] ? __mutex_lock+0x397/0x1010 [ 595.760162][T12856] ? tomoyo_path_number_perm+0x679/0x860 [ 595.760191][T12856] ? kvm_vcpu_ioctl+0x23d/0x1020 [ 595.760220][T12856] ? __pfx___mutex_lock+0x10/0x10 [ 595.760242][T12856] ? tomoyo_path_number_perm+0x6f9/0x860 [ 595.760274][T12856] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 595.760305][T12856] kvm_vcpu_ioctl+0x7b5/0x1020 [ 595.760338][T12856] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 595.760373][T12856] ? smack_file_ioctl+0x353/0x3a0 [ 595.760399][T12856] ? __pfx_smack_file_ioctl+0x10/0x10 [ 595.760428][T12856] ? __fget_files+0x2a/0x410 [ 595.760455][T12856] ? __fget_files+0x2a/0x410 [ 595.760482][T12856] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 595.760512][T12856] __se_sys_ioctl+0xf5/0x170 [ 595.760548][T12856] do_syscall_64+0xf3/0x230 [ 595.760572][T12856] ? clear_bhb_loop+0x35/0x90 [ 595.760601][T12856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.760624][T12856] RIP: 0033:0x7fb0ebf8cda9 [ 595.760640][T12856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.760655][T12856] RSP: 002b:00007fb0ece3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.760674][T12856] RAX: ffffffffffffffda RBX: 00007fb0ec1a5fa0 RCX: 00007fb0ebf8cda9 [ 595.760687][T12856] RDX: 0000000020000500 RSI: 000000004008ae89 RDI: 0000000000000005 [ 595.760698][T12856] RBP: 00007fb0ece3d090 R08: 0000000000000000 R09: 0000000000000000 [ 595.760709][T12856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.760719][T12856] R13: 0000000000000000 R14: 00007fb0ec1a5fa0 R15: 00007ffc6cb761f8 [ 595.760745][T12856] [ 596.300666][T12864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2177'. [ 596.553898][T12750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.598329][T12750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.635344][T12750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.652670][T12867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2178'. [ 596.664861][T12750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.678738][T12750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.745612][T12750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.856968][T12750] hsr_slave_0: entered promiscuous mode [ 596.867072][T12750] hsr_slave_1: entered promiscuous mode [ 596.873969][T12750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 596.882011][T12750] Cannot create hsr debugfs directory [ 596.891818][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2181'. [ 596.960318][T12869] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 597.128813][ T5903] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 597.311980][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 597.327408][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 597.345853][ T5903] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 597.362490][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 597.388423][ T5903] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 597.410917][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.427384][ T5903] usb 3-1: Product: syz [ 597.433768][ T5903] usb 3-1: Manufacturer: syz [ 597.439753][ T5903] usb 3-1: SerialNumber: syz [ 597.464759][ T5903] usb 3-1: config 0 descriptor?? [ 597.488102][ T5903] redrat3 3-1:0.0: Couldn't find all endpoints [ 597.666188][T12880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2184'. [ 597.727427][ T5869] usb 3-1: USB disconnect, device number 33 [ 597.794925][T12750] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 597.837494][T12750] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 597.882130][T12750] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 597.892035][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2185'. [ 598.444607][T12750] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 598.577818][T12750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.601592][T12750] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.663442][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.670732][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.720809][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.728003][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.872022][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2186'. [ 599.789587][T12750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.855656][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2190'. [ 599.869584][T12905] macvlan0: entered allmulticast mode [ 599.875067][T12905] veth1_vlan: entered allmulticast mode [ 599.989553][T12905] veth1_vlan: left allmulticast mode [ 600.025298][T12911] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2192'. [ 600.158802][T12905] macvlan0 (unregistering): left allmulticast mode [ 600.414440][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2195'. [ 600.602821][T12918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2194'. [ 601.076647][T12750] veth0_vlan: entered promiscuous mode [ 601.129438][T12750] veth1_vlan: entered promiscuous mode [ 602.085300][T12750] veth0_macvtap: entered promiscuous mode [ 602.626727][T12750] veth1_macvtap: entered promiscuous mode [ 602.751359][T12750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.768380][T12750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.781241][T12750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.799130][T12750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.810940][T12750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.828851][T12750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.843787][T12750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.865902][T12750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.877630][T12750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.888819][T12750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.907004][T12750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.946285][T12750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.977427][T12750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.998328][T12750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.017453][T12750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.162268][T12750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.193844][T12750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.204663][T12750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.216477][T12750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.222302][ T6557] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 603.227343][T12750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.245348][T12750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.308805][T12750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.348171][T12750] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.382501][T12750] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.391287][T12750] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.404371][ T6557] usb 4-1: Using ep0 maxpacket: 8 [ 603.435311][ T6557] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 603.436236][T12750] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.458622][ T6557] usb 4-1: config 1 interface 0 has no altsetting 0 [ 603.497462][ T6557] usb 4-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 603.528842][ T6557] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.547817][ T6557] usb 4-1: Product: â°‰ [ 603.552306][ T6557] usb 4-1: Manufacturer: á Œ [ 603.562561][ T6557] usb 4-1: SerialNumber: syz [ 603.589362][T12965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2206'. [ 603.686478][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.731778][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.006095][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.029149][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.053703][ T6557] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input34 [ 604.191042][ T5180] bcm5974 4-1:1.0: could not read from device [ 604.211373][ T5180] bcm5974 4-1:1.0: could not read from device [ 604.655526][ T6557] usb 4-1: USB disconnect, device number 28 [ 604.660346][ T5180] bcm5974 4-1:1.0: could not read from device [ 605.973955][T12992] FAULT_INJECTION: forcing a failure. [ 605.973955][T12992] name failslab, interval 1, probability 0, space 0, times 0 [ 605.974219][T12992] CPU: 0 UID: 0 PID: 12992 Comm: syz.0.2212 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 605.974244][T12992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 605.974258][T12992] Call Trace: [ 605.974265][T12992] [ 605.974274][T12992] dump_stack_lvl+0x241/0x360 [ 605.974317][T12992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.974351][T12992] ? __pfx__printk+0x10/0x10 [ 605.974383][T12992] ? __kmalloc_noprof+0xb5/0x4c0 [ 605.974411][T12992] ? __pfx___might_resched+0x10/0x10 [ 605.974439][T12992] should_fail_ex+0x40a/0x550 [ 605.974469][T12992] should_failslab+0xac/0x100 [ 605.974497][T12992] __kmalloc_noprof+0xdd/0x4c0 [ 605.974522][T12992] ? drm_atomic_add_affected_planes+0x33f/0x3b0 [ 605.974545][T12992] ? vkms_crtc_atomic_check+0x3e9/0x7a0 [ 605.974574][T12992] vkms_crtc_atomic_check+0x3e9/0x7a0 [ 605.974611][T12992] drm_atomic_helper_check_planes+0x569/0x7e0 [ 605.974648][T12992] drm_atomic_helper_check+0xb4/0x190 [ 605.974668][T12992] ? __pfx_vkms_atomic_check+0x10/0x10 [ 605.974703][T12992] drm_atomic_check_only+0x1589/0x2ef0 [ 605.974751][T12992] drm_atomic_commit+0x1b2/0x2f0 [ 605.974778][T12992] ? __pfx_drm_atomic_commit+0x10/0x10 [ 605.974800][T12992] ? __pfx___drm_printfn_info+0x10/0x10 [ 605.974855][T12992] drm_client_modeset_commit_atomic+0x670/0x7d0 [ 605.974902][T12992] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 605.974961][T12992] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 605.975003][T12992] drm_client_modeset_commit_locked+0xe0/0x520 [ 605.975042][T12992] drm_fb_helper_pan_display+0x3e8/0xc20 [ 605.975071][T12992] ? fbcon_modechanged+0x824/0x1200 [ 605.975107][T12992] fb_pan_display+0x3a3/0x680 [ 605.975139][T12992] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 605.975172][T12992] bit_update_start+0x4d/0x1c0 [ 605.975203][T12992] fbcon_modechanged+0xb7b/0x1200 [ 605.975244][T12992] do_fb_ioctl+0x71b/0x7b0 [ 605.975279][T12992] ? __pfx_do_fb_ioctl+0x10/0x10 [ 605.975338][T12992] ? __asan_memset+0x23/0x50 [ 605.975370][T12992] ? smack_file_ioctl+0x29e/0x3a0 [ 605.975401][T12992] ? __pfx_smack_file_ioctl+0x10/0x10 [ 605.975436][T12992] ? __fget_files+0x2a/0x410 [ 605.975469][T12992] ? __fget_files+0x2a/0x410 [ 605.975503][T12992] ? __pfx_fb_ioctl+0x10/0x10 [ 605.975536][T12992] __se_sys_ioctl+0xf5/0x170 [ 605.975573][T12992] do_syscall_64+0xf3/0x230 [ 605.975601][T12992] ? clear_bhb_loop+0x35/0x90 [ 605.975635][T12992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.975663][T12992] RIP: 0033:0x7f494db8cda9 [ 605.975682][T12992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.975711][T12992] RSP: 002b:00007f494ea7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.975732][T12992] RAX: ffffffffffffffda RBX: 00007f494dda6160 RCX: 00007f494db8cda9 [ 605.975745][T12992] RDX: 00000000200001c0 RSI: 0000000000004601 RDI: 0000000000000004 [ 605.975768][T12992] RBP: 00007f494ea7f090 R08: 0000000000000000 R09: 0000000000000000 [ 605.975778][T12992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 605.975789][T12992] R13: 0000000000000000 R14: 00007f494dda6160 R15: 00007ffdd06c7c18 [ 605.975820][T12992] [ 606.666464][T12995] fuse: Bad value for 'user_id' [ 606.672947][T12995] fuse: Bad value for 'user_id' [ 606.768340][T12998] ax25_connect(): syz.2.2215 uses autobind, please contact jreuter@yaina.de [ 606.858395][T12998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2215'. [ 606.867566][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2215'. [ 608.322325][ T5869] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 608.708265][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 608.721086][ T5869] usb 1-1: too many configurations: 84, using maximum allowed: 8 [ 608.783663][T13023] ip6_vti0: entered allmulticast mode [ 608.857307][ T5869] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 608.869954][ T5869] usb 1-1: can't read configurations, error -61 [ 609.080651][ T5869] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 609.753128][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 610.046663][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2225'. [ 610.056698][ T5869] usb 1-1: too many configurations: 84, using maximum allowed: 8 [ 610.149889][ T5869] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 610.218441][ T5869] usb 1-1: can't read configurations, error -61 [ 610.689112][ T5869] usb usb1-port1: attempt power cycle [ 611.219400][T13047] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2229'. [ 611.219905][T13048] netlink: 'syz.8.2229': attribute type 10 has an invalid length. [ 611.236558][T13048] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2229'. [ 611.245679][T13048] batadv0: entered promiscuous mode [ 611.251046][T13048] batadv0: entered allmulticast mode [ 611.259259][T13048] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 611.474010][ T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 611.483909][T13049] dlm: no local IP address has been set [ 611.492702][T13049] dlm: cannot start dlm midcomms -107 [ 611.646401][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 611.696271][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.729397][T13053] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2231'. [ 611.738432][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.738518][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 611.738685][ T25] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 611.818557][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.834588][ T25] usb 3-1: config 0 descriptor?? [ 612.831232][T13068] mkiss: ax0: crc mode is auto. [ 613.600723][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2238'. [ 614.041362][ C1] hrtimer: interrupt took 31412 ns [ 614.611083][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 614.650581][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 614.661187][ T5871] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 614.661618][T13087] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2234'. [ 614.689353][ T25] usb 3-1: USB disconnect, device number 34 [ 614.757519][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2234'. [ 614.823326][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 614.830500][ T5871] usb 4-1: config 7 has an invalid interface number: 46 but max is 0 [ 614.849949][ T5871] usb 4-1: config 7 has no interface number 0 [ 614.870958][ T5871] usb 4-1: config 7 interface 46 has no altsetting 0 [ 614.899941][ T5871] usb 4-1: New USB device found, idVendor=9fdb, idProduct=cfba, bcdDevice=f1.37 [ 614.926302][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.950961][ T5871] usb 4-1: Product: syz [ 614.959903][ T5871] usb 4-1: Manufacturer: syz [ 614.970728][ T5871] usb 4-1: SerialNumber: syz [ 615.212167][T13083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.238739][T13083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.333640][ T5871] usb 4-1: USB disconnect, device number 29 [ 616.580441][T13104] netlink: 'syz.2.2247': attribute type 10 has an invalid length. [ 616.612689][T13104] bond0: (slave bond_slave_0): Releasing backup interface [ 616.803804][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2249'. [ 616.992690][ T5871] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 617.287428][ T5871] usb 4-1: config 129 has an invalid interface number: 19 but max is 0 [ 617.306337][ T5871] usb 4-1: config 129 has no interface number 0 [ 617.319866][ T29] audit: type=1326 audit(1738548029.422:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13111 comm="syz.0.2253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f494db8cda9 code=0x0 [ 617.343194][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2251'. [ 617.532616][ T5871] usb 4-1: config 129 interface 19 altsetting 46 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 617.780939][ T5871] usb 4-1: config 129 interface 19 altsetting 46 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 617.799191][ T5871] usb 4-1: config 129 interface 19 altsetting 46 has a duplicate endpoint with address 0xD, skipping [ 617.900502][ T5871] usb 4-1: config 129 interface 19 altsetting 46 has a duplicate endpoint with address 0x9, skipping [ 617.933427][ T5871] usb 4-1: config 129 interface 19 altsetting 46 has an invalid descriptor for endpoint zero, skipping [ 617.964424][ T5871] usb 4-1: config 129 interface 19 altsetting 46 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 618.128092][ T5871] usb 4-1: config 129 interface 19 altsetting 46 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 618.247563][ T5871] usb 4-1: config 129 interface 19 altsetting 46 has a duplicate endpoint with address 0x7, skipping [ 618.769041][ T5871] usb 4-1: config 129 interface 19 altsetting 46 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 618.949878][ T5871] usb 4-1: config 129 interface 19 altsetting 46 has a duplicate endpoint with address 0xD, skipping [ 618.991311][ T5871] usb 4-1: config 129 interface 19 altsetting 46 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 619.043333][ T5871] usb 4-1: config 129 interface 19 has no altsetting 0 [ 619.531424][ T5871] usb 4-1: New USB device found, idVendor=0403, idProduct=fa10, bcdDevice=73.ab [ 619.547175][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.555326][ T5871] usb 4-1: Product: syz [ 619.657486][ T5871] usb 4-1: Manufacturer: syz [ 619.662143][ T5871] usb 4-1: SerialNumber: syz [ 619.710992][ T5871] usb 4-1: can't set config #129, error -71 [ 620.201506][ T5871] usb 4-1: USB disconnect, device number 30 [ 620.408049][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2260'. [ 620.467739][T13141] x_tables: unsorted underflow at hook 3 [ 620.475008][T13141] tmpfs: Unknown parameter 'usrquotaÿÿÿÿ' [ 620.959090][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2265'. [ 621.097312][ T25] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 621.278642][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 621.326171][T13157] syz.3.2266 (13157): drop_caches: 0 [ 622.082404][ T25] usb 3-1: config 0 interface 0 altsetting 72 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 622.099712][ T25] usb 3-1: config 0 interface 0 altsetting 72 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 622.138544][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 622.155582][ T25] usb 3-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 622.179583][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.196459][ T25] usb 3-1: config 0 descriptor?? [ 622.349557][T13168] netlink: 'syz.3.2268': attribute type 1 has an invalid length. [ 622.357479][T13168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2268'. [ 622.694178][ T25] smartjoyplus 0003:6666:8801.0010: unknown main item tag 0x0 [ 622.731312][ T25] smartjoyplus 0003:6666:8801.0010: unknown main item tag 0x0 [ 622.745918][ T25] smartjoyplus 0003:6666:8801.0010: hidraw0: USB HID v0.09 Device [HID 6666:8801] on usb-dummy_hcd.2-1/input0 [ 622.764572][ T25] smartjoyplus 0003:6666:8801.0010: no output reports found [ 623.944416][T13189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2276'. [ 625.031022][ T5930] usb 3-1: USB disconnect, device number 35 [ 628.031747][ T29] audit: type=1326 audit(1738548038.991:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13235 comm="syz.0.2291" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f494db8cda9 code=0x0 [ 628.203658][T13244] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 628.214959][ T5870] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 628.666329][T13247] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.840142][ T5870] usb 4-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice= e.32 [ 628.869323][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.885109][ T5870] usb 4-1: Product: syz [ 628.895901][ T5870] usb 4-1: Manufacturer: syz [ 628.910215][ T5870] usb 4-1: SerialNumber: syz [ 628.923166][ T5870] usb 4-1: config 0 descriptor?? [ 628.943851][ T5870] pwc: Logitech/Cisco VT Camera webcam detected. [ 629.076152][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2297'. [ 629.176740][T13233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2290'. [ 630.003861][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2290'. [ 630.022007][T13237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.031612][T13237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.154792][ T5870] pwc: Failed to set LED on/off time (-71) [ 630.161348][ T5870] pwc: send_video_command error -71 [ 630.166702][ T5870] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 630.270170][ T5870] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 630.385515][ T5870] usb 4-1: USB disconnect, device number 31 [ 630.924816][T13275] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 630.932577][T13275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.030972][T13279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 631.279987][ T58] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 631.413488][ T25] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 631.422553][T13289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2308'. [ 631.435255][ T58] usb 3-1: device descriptor read/64, error -71 [ 631.591875][ T25] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.634363][ T25] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 631.655608][ T25] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 631.689881][ T25] usb 9-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 631.702968][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.711268][ T25] usb 9-1: Product: syz [ 631.716343][ T58] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 631.730901][ T25] usb 9-1: Manufacturer: syz [ 631.741081][ T25] usb 9-1: SerialNumber: syz [ 631.748569][ T25] usb 9-1: config 0 descriptor?? [ 631.875627][ T58] usb 3-1: device descriptor read/64, error -71 [ 632.002998][ T58] usb usb3-port1: attempt power cycle [ 632.061816][T13283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.074097][T13283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.387333][ T58] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 632.471883][ T5869] usb 9-1: USB disconnect, device number 20 [ 632.480659][ T58] usb 3-1: device descriptor read/8, error -71 [ 632.814402][ T58] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 633.669055][ T5930] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 633.681955][ T58] usb 3-1: device descriptor read/8, error -71 [ 633.808479][ T58] usb usb3-port1: unable to enumerate USB device [ 633.850776][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 633.858272][ T5930] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 633.873044][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 633.891758][ T5930] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 633.904208][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.912548][ T5930] usb 1-1: Product: syz [ 633.917000][ T5930] usb 1-1: Manufacturer: syz [ 633.923258][ T5930] usb 1-1: SerialNumber: syz [ 633.943272][ T5930] usb 1-1: config 0 descriptor?? [ 633.965385][ T5930] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 635.442043][ T5930] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 637.624652][ T5930] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 637.631168][ T5930] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 637.644462][ T5930] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 637.667331][ T5930] em28xx 1-1:0.0: No AC97 audio processor [ 637.902652][ T5930] usb 1-1: USB disconnect, device number 22 [ 638.341618][ T5930] em28xx 1-1:0.0: Disconnecting em28xx [ 638.520051][T13350] netlink: 'syz.0.2328': attribute type 10 has an invalid length. [ 639.057150][T13350] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2328'. [ 639.059420][ T5930] em28xx 1-1:0.0: Freeing device [ 639.171031][T13352] loop6: detected capacity change from 0 to 524287999 [ 639.225853][T13350] team0: Port device geneve0 added [ 640.000207][T13361] geneve2: entered promiscuous mode [ 640.005467][T13361] geneve2: entered allmulticast mode [ 640.796709][T13380] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2336'. [ 643.214124][ T29] audit: type=1326 audit(1738548053.640:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13392 comm="syz.3.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ebf8cda9 code=0x50000 [ 643.257129][ T29] audit: type=1326 audit(1738548053.640:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13392 comm="syz.3.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ebf8cda9 code=0x50000 [ 643.836101][ T29] audit: type=1326 audit(1738548053.640:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13392 comm="syz.3.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ebf8cda9 code=0x50000 [ 643.870116][ T29] audit: type=1326 audit(1738548053.640:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13392 comm="syz.3.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ebf8cda9 code=0x50000 [ 643.892792][ T29] audit: type=1326 audit(1738548053.640:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13392 comm="syz.3.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ebf8cda9 code=0x50000 [ 643.916152][ T29] audit: type=1326 audit(1738548053.640:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13392 comm="syz.3.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ebf8cda9 code=0x50000 [ 643.939210][ T29] audit: type=1326 audit(1738548053.640:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13392 comm="syz.3.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ebf8cda9 code=0x50000 [ 643.961458][ T29] audit: type=1326 audit(1738548053.640:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13392 comm="syz.3.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ebf8cda9 code=0x50000 [ 644.816757][ T29] audit: type=1326 audit(1738548053.640:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13392 comm="syz.3.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ebf8cda9 code=0x50000 [ 644.839445][ T29] audit: type=1326 audit(1738548053.640:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13392 comm="syz.3.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ebf8cda9 code=0x50000 [ 646.043475][T13423] overlayfs: missing 'lowerdir' [ 646.245933][T13429] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2354'. [ 646.263198][T13429] netlink: zone id is out of range [ 646.268606][T13429] netlink: zone id is out of range [ 646.280138][T13429] netlink: zone id is out of range [ 646.285542][T13429] netlink: zone id is out of range [ 646.290669][T13429] netlink: zone id is out of range [ 646.303464][T13429] netlink: zone id is out of range [ 646.311382][T13429] netlink: zone id is out of range [ 646.349722][T13429] netlink: zone id is out of range [ 646.382276][T13429] netlink: zone id is out of range [ 646.400767][T13429] netlink: zone id is out of range [ 648.940409][T13450] overlayfs: workdir and upperdir must reside under the same mount [ 648.972799][T13450] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2361'. [ 648.984840][T13450] netlink: 'syz.7.2361': attribute type 46 has an invalid length. [ 649.198001][T13456] netlink: 'syz.7.2365': attribute type 10 has an invalid length. [ 650.189310][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2370'. [ 650.311443][T12627] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 653.011403][T13485] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 653.018082][T13485] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 653.028989][T13490] siw: device registration error -23 [ 653.073154][T13485] vhci_hcd vhci_hcd.0: Device attached [ 653.117598][T13491] vhci_hcd: connection closed [ 653.123685][ T1108] vhci_hcd: stop threads [ 653.152863][ T1108] vhci_hcd: release socket [ 653.157404][ T1108] vhci_hcd: disconnect device [ 654.371874][T13506] lo speed is unknown, defaulting to 1000 [ 654.437132][T13517] fuse: Unknown parameter '0x000000000000002f0x000000000000002f//' [ 654.783229][ T6557] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 655.039689][ T25] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 655.205957][ T25] usb 1-1: device descriptor read/64, error -71 [ 655.240957][ T6557] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 655.261032][ T6557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.293513][ T6557] usb 3-1: Product: syz [ 655.304281][ T6557] usb 3-1: Manufacturer: syz [ 655.323089][ T6557] usb 3-1: SerialNumber: syz [ 655.340808][ T6557] usb 3-1: config 0 descriptor?? [ 655.467310][ T25] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 655.674593][ T6557] usb 3-1: USB disconnect, device number 40 [ 655.841389][ T25] usb 1-1: device descriptor read/64, error -71 [ 656.209069][ T25] usb usb1-port1: attempt power cycle [ 656.611469][ T25] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 656.996669][ T25] usb 1-1: device descriptor read/8, error -71 [ 657.279642][ T25] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 657.349434][ T25] usb 1-1: device descriptor read/8, error -71 [ 657.466779][ T25] usb usb1-port1: unable to enumerate USB device [ 657.806514][T13559] netlink: 'syz.8.2395': attribute type 1 has an invalid length. [ 657.814574][T13559] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2395'. [ 658.421856][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 658.768530][T13566] usb usb8: usbfs: process 13566 (syz.3.2398) did not claim interface 0 before use [ 663.184755][T13613] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 663.203587][T13612] IPVS: stopping master sync thread 13613 ... [ 664.086743][ T25] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 664.124087][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2415'. [ 664.186271][T13626] ipvlan2: entered promiscuous mode [ 664.297606][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 664.340783][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 664.365060][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 664.378957][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 664.395143][ T25] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 664.414523][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.431063][ T25] usb 3-1: Product: syz [ 664.435344][ T25] usb 3-1: Manufacturer: syz [ 664.448138][ T25] usb 3-1: SerialNumber: syz [ 664.475934][ T25] usb 3-1: config 0 descriptor?? [ 665.956891][ T5870] usb 3-1: USB disconnect, device number 41 [ 667.317016][T13650] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 667.751034][ T5870] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 667.924162][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 667.958237][ T5870] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 668.091459][ T5870] usb 1-1: config 0 has no interface number 0 [ 668.264921][ T5870] usb 1-1: config 0 interface 184 has no altsetting 0 [ 668.607386][ T5870] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 668.616489][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.646345][ T5870] usb 1-1: Product: syz [ 668.661660][ T5870] usb 1-1: Manufacturer: syz [ 668.704820][ T5870] usb 1-1: SerialNumber: syz [ 668.748818][ T5870] usb 1-1: config 0 descriptor?? [ 668.803539][ T5870] smsc75xx v1.0.0 [ 669.043708][T13687] tmpfs: Bad value for 'mode' [ 669.052831][T13687] tmpfs: Bad value for 'mode' [ 669.219040][ T5870] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 669.271348][ T5870] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 669.297704][ T5870] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 669.311711][ T25] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 669.320923][ T5870] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 669.538742][ T25] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 669.586144][ T25] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 669.621119][ T25] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 669.644569][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.679222][ T25] usb 9-1: Product: syz [ 669.699791][ T25] usb 9-1: Manufacturer: syz [ 669.719307][ T25] usb 9-1: SerialNumber: syz [ 669.822882][T13701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.854963][T13701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.880288][ T58] usb 1-1: USB disconnect, device number 27 [ 672.201058][ T25] usb 9-1: 0:2 : does not exist [ 672.215013][ T25] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 672.272991][ T25] usb 9-1: USB disconnect, device number 21 [ 672.397585][T13725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2449'. [ 674.956500][ T58] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 675.493132][T13765] net_ratelimit: 1 callbacks suppressed [ 675.493152][T13765] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 675.512585][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 675.526319][ T58] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 675.544153][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.553295][ T58] usb 4-1: Product: syz [ 675.558497][ T58] usb 4-1: Manufacturer: syz [ 675.564292][ T58] usb 4-1: SerialNumber: syz [ 675.604708][ T58] usb 4-1: config 0 descriptor?? [ 675.678885][ T5870] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 675.733750][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2463'. [ 675.742884][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2463'. [ 675.758619][ T25] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 675.832918][ T5870] usb 3-1: device descriptor read/64, error -71 [ 675.855881][ T58] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 675.944162][ T25] usb 9-1: config 0 has an invalid interface number: 223 but max is 0 [ 675.952860][ T25] usb 9-1: config 0 has no interface number 0 [ 675.962274][ T25] usb 9-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice=70.28 [ 675.971459][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.980099][ T25] usb 9-1: Product: syz [ 675.984834][ T25] usb 9-1: Manufacturer: syz [ 675.989628][ T25] usb 9-1: SerialNumber: syz [ 676.010867][ T25] usb 9-1: config 0 descriptor?? [ 676.022436][ T25] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.223/input/input38 [ 676.089598][ T5870] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 676.132195][ T6557] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 676.228392][ T5870] usb 3-1: device descriptor read/64, error -71 [ 676.240105][ T25] usb 9-1: USB disconnect, device number 22 [ 676.246408][ T5180] bcm5974 9-1:0.223: could not read from device [ 676.294702][ T6557] usb 1-1: Using ep0 maxpacket: 32 [ 676.307221][ T6557] usb 1-1: config 9 has an invalid interface number: 230 but max is 0 [ 676.316293][ T6557] usb 1-1: config 9 has no interface number 0 [ 676.322880][ T6557] usb 1-1: config 9 interface 230 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 676.335138][ T6557] usb 1-1: config 9 interface 230 has no altsetting 0 [ 676.346490][ T5870] usb usb3-port1: attempt power cycle [ 676.353525][ T6557] usb 1-1: New USB device found, idVendor=157e, idProduct=3006, bcdDevice=27.4a [ 676.363995][ T6557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.372278][ T6557] usb 1-1: Product: syz [ 676.376952][ T6557] usb 1-1: Manufacturer: syz [ 676.381908][ T6557] usb 1-1: SerialNumber: syz [ 676.808268][ T5870] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 676.864450][ T6557] usb 1-1: Could not find all expected endpoints [ 677.102310][ T6557] usb 1-1: USB disconnect, device number 28 [ 677.117263][ T5870] usb 3-1: device descriptor read/8, error -71 [ 677.136437][ T58] gspca_sunplus: reg_w_riv err -71 [ 677.152478][ T58] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 677.171676][ T58] usb 4-1: USB disconnect, device number 32 [ 677.383078][ T5870] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 677.415835][ T5870] usb 3-1: device descriptor read/8, error -71 [ 677.582982][ T5870] usb usb3-port1: unable to enumerate USB device [ 680.055317][T13809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2474'. [ 682.213033][T13829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2484'. [ 682.321786][T13829] lo speed is unknown, defaulting to 1000 [ 684.503995][T13836] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2485'. [ 684.675676][ T29] kauditd_printk_skb: 2060 callbacks suppressed [ 684.675698][ T29] audit: type=1804 audit(1738548092.431:2223): pid=13837 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.2486" name="/newroot/158/bus/bus" dev="overlay" ino=860 res=1 errno=0 [ 684.704935][T13837] Invalid ELF header len 8 [ 684.872057][T13841] xt_ecn: cannot match TCP bits for non-tcp packets [ 684.894202][T13840] xt_hashlimit: max too large, truncated to 1048576 [ 684.917707][T13841] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 684.943214][T13840] Cannot find set identified by id 0 to match [ 685.716777][T13857] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 689.449850][T13883] netlink: 'syz.0.2499': attribute type 10 has an invalid length. [ 690.115686][ T6557] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 690.289037][ T6557] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 690.297298][ T6557] usb 4-1: can't read configurations, error -22 [ 690.436410][ T6557] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 691.217847][ T6557] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 691.264482][ T6557] usb 4-1: can't read configurations, error -22 [ 691.309903][ T6557] usb usb4-port1: attempt power cycle [ 691.826031][ T6557] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 691.850705][ T6557] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 691.864521][ T6557] usb 4-1: can't read configurations, error -22 [ 692.649180][ T6557] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 692.706567][ T6557] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 692.735474][ T6557] usb 4-1: can't read configurations, error -22 [ 692.758183][ T6557] usb usb4-port1: unable to enumerate USB device [ 694.463180][T13935] FAULT_INJECTION: forcing a failure. [ 694.463180][T13935] name failslab, interval 1, probability 0, space 0, times 0 [ 694.519998][T13935] CPU: 1 UID: 0 PID: 13935 Comm: syz.2.2515 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 694.520026][T13935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 694.520037][T13935] Call Trace: [ 694.520044][T13935] [ 694.520051][T13935] dump_stack_lvl+0x241/0x360 [ 694.520089][T13935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 694.520117][T13935] ? __pfx__printk+0x10/0x10 [ 694.520147][T13935] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 694.520190][T13935] ? __pfx___might_resched+0x10/0x10 [ 694.520216][T13935] should_fail_ex+0x40a/0x550 [ 694.520246][T13935] should_failslab+0xac/0x100 [ 694.520289][T13935] kmem_cache_alloc_node_noprof+0x77/0x380 [ 694.520318][T13935] ? __alloc_skb+0x1c3/0x440 [ 694.520352][T13935] __alloc_skb+0x1c3/0x440 [ 694.520398][T13935] ? __pfx___alloc_skb+0x10/0x10 [ 694.520430][T13935] ? netlink_autobind+0xd6/0x2f0 [ 694.520450][T13935] ? netlink_autobind+0x2b0/0x2f0 [ 694.520475][T13935] netlink_sendmsg+0x638/0xcb0 [ 694.520520][T13935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.520566][T13935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.520597][T13935] __sock_sendmsg+0x221/0x270 [ 694.520626][T13935] ____sys_sendmsg+0x52a/0x7e0 [ 694.520668][T13935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 694.520698][T13935] ? __fget_files+0x2a/0x410 [ 694.520729][T13935] ? __fget_files+0x2a/0x410 [ 694.520766][T13935] __sys_sendmsg+0x269/0x350 [ 694.520804][T13935] ? __pfx___sys_sendmsg+0x10/0x10 [ 694.520851][T13935] ? do_sys_openat2+0x17a/0x1d0 [ 694.520906][T13935] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 694.520936][T13935] ? do_syscall_64+0x100/0x230 [ 694.520968][T13935] ? do_syscall_64+0xb6/0x230 [ 694.520998][T13935] do_syscall_64+0xf3/0x230 [ 694.521025][T13935] ? clear_bhb_loop+0x35/0x90 [ 694.521059][T13935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.521087][T13935] RIP: 0033:0x7fa71f38cda9 [ 694.521107][T13935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.521125][T13935] RSP: 002b:00007fa720180038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.521148][T13935] RAX: ffffffffffffffda RBX: 00007fa71f5a5fa0 RCX: 00007fa71f38cda9 [ 694.521163][T13935] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 694.521176][T13935] RBP: 00007fa720180090 R08: 0000000000000000 R09: 0000000000000000 [ 694.521189][T13935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.521201][T13935] R13: 0000000000000000 R14: 00007fa71f5a5fa0 R15: 00007fffe9698518 [ 694.521231][T13935] [ 694.781299][ C1] vkms_vblank_simulate: vblank timer overrun [ 694.913580][T13941] netlink: 'syz.7.2517': attribute type 21 has an invalid length. [ 694.921757][T13941] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2517'. [ 694.932032][T13941] netlink: 'syz.7.2517': attribute type 4 has an invalid length. [ 694.967750][T13943] syz.0.2516 (13943): drop_caches: 0 [ 695.045357][T13941] netlink: 'syz.7.2517': attribute type 3 has an invalid length. [ 695.054092][T13941] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2517'. [ 695.256067][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 695.320106][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 695.368832][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 695.460530][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 695.508467][ T5837] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 695.518030][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 695.611144][T13947] netlink: 'syz.3.2519': attribute type 1 has an invalid length. [ 695.664791][T13942] lo speed is unknown, defaulting to 1000 [ 695.725384][T13950] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2521'. [ 695.774932][T13950] bridge0: port 3(vlan2) entered blocking state [ 695.791309][T13950] bridge0: port 3(vlan2) entered disabled state [ 695.802075][T13950] vlan2: entered allmulticast mode [ 695.815334][T13950] vlan2: left allmulticast mode [ 697.062965][T13972] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2524'. [ 697.212369][T13942] chnl_net:caif_netlink_parms(): no params data found [ 697.708428][T13942] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.728627][T13942] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.736197][T13942] bridge_slave_0: entered allmulticast mode [ 697.745878][T13942] bridge_slave_0: entered promiscuous mode [ 697.755388][T13942] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.762755][ T5837] Bluetooth: hci5: command tx timeout [ 697.769716][T13942] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.777539][T13942] bridge_slave_1: entered allmulticast mode [ 697.787168][T13942] bridge_slave_1: entered promiscuous mode [ 698.498616][T13942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.543771][T14009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2534'. [ 698.550471][T13942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.722057][T13942] team0: Port device team_slave_0 added [ 698.763850][T13942] team0: Port device team_slave_1 added [ 698.894907][T13942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.912378][T13942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.954967][T14013] futex_wake_op: syz.2.2536 tries to shift op by -1; fix this program [ 699.006560][T13942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.019907][ T29] audit: type=1326 audit(1738548105.844:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14012 comm="syz.2.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71f38cda9 code=0x7ffc0000 [ 699.066977][T13942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.146602][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2538'. [ 699.520407][T13942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.575229][T13942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.822819][ T58] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 699.985007][ T5837] Bluetooth: hci5: command tx timeout [ 700.249773][T13942] hsr_slave_0: entered promiscuous mode [ 700.280544][T13942] hsr_slave_1: entered promiscuous mode [ 700.299921][T13942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.313973][T13942] Cannot create hsr debugfs directory [ 700.435640][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.539798][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 700.553559][ T58] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 700.609573][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.658642][ T58] usb 4-1: config 0 descriptor?? [ 701.266472][ T58] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 701.274547][ T58] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 701.369921][ T58] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 701.396904][T13942] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 701.451446][T13942] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 701.502197][T13942] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 701.524487][T13942] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 701.593747][ T58] usb 4-1: USB disconnect, device number 37 [ 701.678890][T13942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.730444][T13942] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.761776][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.769119][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.828248][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.835389][ T5882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.207196][ T5837] Bluetooth: hci5: command tx timeout [ 702.797129][T13942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.048238][T14073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2555'. [ 703.245304][ T58] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 703.832610][ T58] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 703.847619][ T58] usb 3-1: config 0 has no interface number 0 [ 703.854836][ T58] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 703.876322][ T58] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 703.925275][ T58] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 703.927315][T13942] veth0_vlan: entered promiscuous mode [ 703.958229][T13942] veth1_vlan: entered promiscuous mode [ 703.963883][ T58] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 703.963918][ T58] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 704.022162][T13942] veth0_macvtap: entered promiscuous mode [ 704.050319][ T58] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 704.063098][T13942] veth1_macvtap: entered promiscuous mode [ 704.078321][ T58] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 704.087860][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.112895][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.162051][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.191040][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.192062][ T58] usb 3-1: config 0 descriptor?? [ 704.226694][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.250519][T14070] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 704.260133][T14070] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 704.306355][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.319473][ T58] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 704.359732][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.377672][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.388702][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.401945][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.413013][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.425480][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.437871][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.440994][ T5837] Bluetooth: hci5: command tx timeout [ 704.515746][ T5871] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 704.624415][T13942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.640768][T14067] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2553'. [ 705.422943][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 705.430819][ T5871] usb 4-1: config 162 has an invalid interface number: 97 but max is 0 [ 705.439520][ T5871] usb 4-1: config 162 has no interface number 0 [ 705.446387][ T5871] usb 4-1: config 162 interface 97 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 705.458768][ T5871] usb 4-1: config 162 interface 97 has no altsetting 0 [ 705.468751][ T5871] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 705.479257][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.486744][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.501716][ T5871] usb 4-1: Product: syz [ 705.520728][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.523580][ T5871] usb 4-1: Manufacturer: syz [ 705.537180][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.548434][ T5871] usb 4-1: SerialNumber: syz [ 705.571979][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.589113][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.606487][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.617418][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.628696][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.640224][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.650953][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.661345][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.673006][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.697921][T13942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.738564][ T974] usb 3-1: USB disconnect, device number 46 [ 705.747431][T13942] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.757987][ T974] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 705.783533][T13942] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.814419][T13942] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.822702][ T5871] metro_usb 4-1:162.97: Metrologic USB to Serial converter detected [ 705.842022][T13942] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.843681][ T5871] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 705.904405][ T5871] usb 4-1: USB disconnect, device number 38 [ 705.936216][ T5871] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 705.943579][T14098] netlink: 'syz.0.2563': attribute type 6 has an invalid length. [ 705.979241][ T5871] metro_usb 4-1:162.97: device disconnected [ 705.980821][T14098] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2563'. [ 706.022267][T12507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.048356][T12507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.100867][ T5882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.131295][ T5882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.263317][ T6557] IPVS: starting estimator thread 0... [ 706.365295][T14103] IPVS: using max 31 ests per chain, 74400 per kthread [ 706.451836][T14105] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2512'. [ 706.625591][T14109] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2566'. [ 706.720085][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2567'. [ 709.042104][T14132] ip6_vti0: entered allmulticast mode [ 709.420511][T14149] netlink: 'syz.9.2579': attribute type 10 has an invalid length. [ 709.726403][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2583'. [ 710.887591][T14099] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 711.329539][T14099] usb 3-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 711.977937][T14099] usb 3-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 712.003201][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'. [ 712.009912][T14099] usb 3-1: config 1 interface 0 has no altsetting 0 [ 712.026333][T14099] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 712.036566][T14099] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.052629][T14099] usb 3-1: Product: syz [ 712.065903][T14099] usb 3-1: Manufacturer: syz [ 712.081725][T14099] usb 3-1: SerialNumber: syz [ 712.428450][T14189] lo speed is unknown, defaulting to 1000 [ 712.610185][T14196] dlm: no local IP address has been set [ 712.615922][T14196] dlm: cannot start dlm midcomms -107 [ 712.624622][T14099] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 712.870734][T14193] netlink: 'syz.0.2592': attribute type 10 has an invalid length. [ 712.882333][T14099] usb 3-1: USB disconnect, device number 47 [ 712.901971][T14099] usblp0: removed [ 712.911384][T14193] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2592'. [ 712.958748][T14193] batadv0: entered promiscuous mode [ 712.984800][T14193] batadv0: entered allmulticast mode [ 713.001859][T14193] bridge0: port 3(batadv0) entered blocking state [ 713.040623][T14193] bridge0: port 3(batadv0) entered disabled state [ 713.329236][T14205] netlink: 'syz.3.2597': attribute type 178 has an invalid length. [ 713.476833][T14208] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2598'. [ 713.882816][T14209] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2597'. [ 713.888792][ T81] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 713.901635][ T81] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 714.490141][ T58] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 715.430828][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 715.448038][ T58] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.458480][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 715.477719][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 49607, setting to 64 [ 715.505770][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 715.535402][ T58] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 715.556189][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.568012][ T58] usb 3-1: config 0 descriptor?? [ 718.165303][T14099] usb 3-1: USB disconnect, device number 48 [ 718.718599][T14276] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 720.884937][T12627] Bluetooth: hci0: command 0x0406 tx timeout [ 720.894591][T14300] x_tables: unsorted underflow at hook 3 [ 720.968738][T14300] tmpfs: Unknown parameter 'usrquotaÿÿÿÿ' [ 721.519987][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2624'. [ 722.914951][T14319] netlink: 'syz.3.2630': attribute type 2 has an invalid length. [ 722.928499][T14319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2630'. [ 724.186801][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 726.478514][T14353] FAULT_INJECTION: forcing a failure. [ 726.478514][T14353] name failslab, interval 1, probability 0, space 0, times 0 [ 726.538667][T14353] CPU: 1 UID: 0 PID: 14353 Comm: syz.7.2641 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 726.538699][T14353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 726.538712][T14353] Call Trace: [ 726.538720][T14353] [ 726.538729][T14353] dump_stack_lvl+0x241/0x360 [ 726.538770][T14353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 726.538803][T14353] ? __pfx__printk+0x10/0x10 [ 726.538848][T14353] should_fail_ex+0x40a/0x550 [ 726.538876][T14353] should_failslab+0xac/0x100 [ 726.538902][T14353] ? skb_clone+0x20c/0x390 [ 726.538919][T14353] kmem_cache_alloc_noprof+0x70/0x380 [ 726.538951][T14353] skb_clone+0x20c/0x390 [ 726.538974][T14353] __netlink_deliver_tap+0x3cc/0x7f0 [ 726.539018][T14353] ? netlink_deliver_tap+0x2e/0x1b0 [ 726.539047][T14353] netlink_deliver_tap+0x19d/0x1b0 [ 726.539080][T14353] netlink_unicast+0x7c4/0x990 [ 726.539117][T14353] ? __pfx_netlink_unicast+0x10/0x10 [ 726.539142][T14353] ? __virt_addr_valid+0x45f/0x530 [ 726.539173][T14353] ? __phys_addr_symbol+0x2f/0x70 [ 726.539201][T14353] ? __check_object_size+0x47a/0x730 [ 726.539230][T14353] netlink_sendmsg+0x8e4/0xcb0 [ 726.539283][T14353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.539329][T14353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.539359][T14353] __sock_sendmsg+0x221/0x270 [ 726.539387][T14353] ____sys_sendmsg+0x52a/0x7e0 [ 726.539428][T14353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 726.539457][T14353] ? __fget_files+0x2a/0x410 [ 726.539488][T14353] ? __fget_files+0x2a/0x410 [ 726.539535][T14353] __sys_sendmsg+0x269/0x350 [ 726.539570][T14353] ? __pfx___sys_sendmsg+0x10/0x10 [ 726.539614][T14353] ? do_sys_openat2+0x17a/0x1d0 [ 726.539691][T14353] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 726.539731][T14353] ? do_syscall_64+0x100/0x230 [ 726.539760][T14353] ? do_syscall_64+0xb6/0x230 [ 726.539787][T14353] do_syscall_64+0xf3/0x230 [ 726.539812][T14353] ? clear_bhb_loop+0x35/0x90 [ 726.539843][T14353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.539868][T14353] RIP: 0033:0x7feee998cda9 [ 726.539885][T14353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.539919][T14353] RSP: 002b:00007feee77d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.539942][T14353] RAX: ffffffffffffffda RBX: 00007feee9ba6080 RCX: 00007feee998cda9 [ 726.539957][T14353] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 726.539969][T14353] RBP: 00007feee77d5090 R08: 0000000000000000 R09: 0000000000000000 [ 726.539982][T14353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.539993][T14353] R13: 0000000000000000 R14: 00007feee9ba6080 R15: 00007ffd57c371d8 [ 726.540025][T14353] [ 726.913938][T14353] openvswitch: netlink: Flow actions attr not present in new flow. [ 727.942958][T14361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2643'. [ 728.227505][ T5829] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 728.380845][ T5829] usb 3-1: device descriptor read/64, error -71 [ 728.609487][T14374] overlayfs: failed to decode file handle (len=11, type=248, flags=0, err=-22) [ 728.644438][ T5829] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 728.656251][T14374] openvswitch: netlink: IP tunnel attribute has 10 unknown bytes. [ 728.837310][ T5829] usb 3-1: device descriptor read/64, error -71 [ 728.982760][ T5829] usb usb3-port1: attempt power cycle [ 729.016838][T14378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2647'. [ 729.041190][ T25] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 729.190056][ T25] usb 10-1: device descriptor read/64, error -71 [ 729.350435][ T5829] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 729.441898][ T5829] usb 3-1: device descriptor read/8, error -71 [ 729.495326][ T25] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 729.938325][ T25] usb 10-1: device descriptor read/64, error -71 [ 730.112543][ T5829] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 730.121343][ T25] usb usb10-port1: attempt power cycle [ 730.152526][ T5829] usb 3-1: device descriptor read/8, error -71 [ 730.289982][ T5829] usb usb3-port1: unable to enumerate USB device [ 730.677141][ T25] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 730.725309][ T25] usb 10-1: device descriptor read/8, error -71 [ 730.998775][ T25] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 731.064892][ T25] usb 10-1: device descriptor read/8, error -71 [ 731.242434][ T25] usb usb10-port1: unable to enumerate USB device [ 731.503200][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2658'. [ 731.900536][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2659'. [ 732.835397][T14426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2663'. [ 735.967726][T14099] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 736.140487][T14099] usb 4-1: device descriptor read/64, error -71 [ 736.619631][T14099] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 736.801385][T14099] usb 4-1: device descriptor read/64, error -71 [ 737.113522][T14470] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 737.176049][T14099] usb usb4-port1: attempt power cycle [ 737.388757][T14474] netlink: 'syz.9.2677': attribute type 4 has an invalid length. [ 737.549733][T14099] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 737.584859][T14099] usb 4-1: device descriptor read/8, error -71 [ 737.849652][T14099] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 738.496288][T14099] usb 4-1: device descriptor read/8, error -71 [ 738.619130][T14099] usb usb4-port1: unable to enumerate USB device [ 738.940032][T14490] overlayfs: invalid redirect ((null)) [ 743.237222][T14383] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 743.525735][T14383] usb 4-1: device descriptor read/64, error -71 [ 743.793590][T14383] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 744.071600][T14383] usb 4-1: device descriptor read/64, error -71 [ 744.386242][T14383] usb usb4-port1: attempt power cycle [ 744.691049][ T25] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 744.900611][T14383] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 744.937564][T14383] usb 4-1: device descriptor read/8, error -71 [ 745.001246][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 745.021349][ T25] usb 10-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 745.055333][T14547] ip6tnl2: entered promiscuous mode [ 745.089869][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.099184][ T25] usb 10-1: Product: syz [ 745.103697][ T25] usb 10-1: Manufacturer: syz [ 745.108767][ T25] usb 10-1: SerialNumber: syz [ 745.136356][ T25] usb 10-1: config 0 descriptor?? [ 745.150431][ T25] hub 10-1:0.0: bad descriptor, ignoring hub [ 745.159585][ T25] hub 10-1:0.0: probe with driver hub failed with error -5 [ 745.216126][T14383] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 745.247466][ T25] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 745.292750][T14383] usb 4-1: device descriptor read/8, error -71 [ 745.507993][T14383] usb usb4-port1: unable to enumerate USB device [ 745.603563][ T5869] usb 10-1: USB disconnect, device number 6 [ 747.992640][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2707'. [ 748.735013][T14583] lo speed is unknown, defaulting to 1000 [ 750.215225][T14605] IPVS: stopping backup sync thread 14607 ... [ 750.215257][T14607] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0 [ 750.283613][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2713'. [ 750.311991][T14601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2713'. [ 751.389453][T14622] ptrace attach of "./syz-executor exec"[7102] was attempted by ""[14622] [ 751.600671][T14635] netlink: 'syz.2.2720': attribute type 4 has an invalid length. [ 752.609410][T14645] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 752.689268][T14646] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.154447][T14654] ax25_connect(): syz.3.2726 uses autobind, please contact jreuter@yaina.de [ 755.381844][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2731'. [ 755.415618][T14667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.444211][T14667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.476230][T14667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.509178][T14672] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 755.538931][T14667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.597417][T14667] bridge0: port 3(batadv0) entered disabled state [ 755.696123][T14667] bridge0: port 3(batadv0) entered disabled state [ 756.033952][T14383] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 756.258496][T14383] usb 10-1: device descriptor read/64, error -71 [ 756.799138][T14683] xt_socket: unknown flags 0x50 [ 756.921444][T14383] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 757.121290][T14383] usb 10-1: device descriptor read/64, error -71 [ 757.243161][T14383] usb usb10-port1: attempt power cycle [ 757.328742][T14702] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2743'. [ 757.391731][ T5869] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 757.575925][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.670643][T14383] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 757.689942][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.707416][T14383] usb 10-1: device descriptor read/8, error -71 [ 758.517988][ T5869] usb 3-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 758.529607][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.539509][ T5869] usb 3-1: config 0 descriptor?? [ 758.971090][T14718] overlay: Unknown parameter 'seclabel' [ 758.982172][T14383] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 759.099592][T14383] usb 10-1: device descriptor read/8, error -71 [ 759.125131][T14721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.286367][T14721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.299225][T14383] usb usb10-port1: unable to enumerate USB device [ 759.422060][T14722] syz_tun: entered promiscuous mode [ 759.449785][T14722] vlan0: entered promiscuous mode [ 759.462740][ T5869] usbhid 3-1:0.0: can't add hid device: -71 [ 759.471080][T14722] syz_tun: left promiscuous mode [ 759.477105][ T5869] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 759.501855][ T5869] usb 3-1: USB disconnect, device number 53 [ 759.669218][T14383] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 759.941817][T14383] usb 1-1: Using ep0 maxpacket: 8 [ 760.153062][T14383] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=1f.cb [ 760.206776][T14383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.227396][T14383] usb 1-1: Product: syz [ 760.231677][T14383] usb 1-1: Manufacturer: syz [ 760.245911][T14383] usb 1-1: SerialNumber: syz [ 760.269514][T14383] usb 1-1: config 0 descriptor?? [ 760.304106][T14383] gm12u320 1-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 760.334163][T14383] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5 [ 760.365345][T14383] usb-storage 1-1:0.0: USB Mass Storage device detected [ 760.401604][T14383] usb-storage 1-1:0.0: device ignored [ 760.553771][T14740] netlink: 'syz.9.2752': attribute type 10 has an invalid length. [ 760.920152][T14740] bond0: (slave bond_slave_0): Releasing backup interface [ 761.924320][T12627] Bluetooth: hci5: command 0x0405 tx timeout [ 762.461672][T14099] usb 1-1: USB disconnect, device number 29 [ 765.366120][T14794] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 766.800159][T14811] openvswitch: netlink: IPv4 tun info is not correct [ 768.531524][ T5829] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 768.691736][ T5829] usb 1-1: device descriptor read/64, error -71 [ 768.970129][ T5829] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 769.130153][ T5829] usb 1-1: device descriptor read/64, error -71 [ 769.286380][ T5829] usb usb1-port1: attempt power cycle [ 769.339013][T14856] team0: Device gtp0 is of different type [ 769.686481][ T5829] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 769.826981][ T5829] usb 1-1: device descriptor read/8, error -71 [ 770.102880][ T5829] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 770.128554][ T5829] usb 1-1: device descriptor read/8, error -71 [ 770.154147][ T5869] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 770.254353][ T5829] usb usb1-port1: unable to enumerate USB device [ 770.441602][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.491331][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.539001][ T5869] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 770.554519][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.678553][ T5869] usb 4-1: config 0 descriptor?? [ 771.392575][ T5869] usb 4-1: string descriptor 0 read error: -22 [ 771.459096][ T5869] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 771.509447][ T5869] letsketch 0003:6161:4D15.0012: probe with driver letsketch failed with error -32 [ 773.348496][ T5829] usb 4-1: USB disconnect, device number 47 [ 775.961225][T14944] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 779.492094][T14974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2831'. [ 779.833369][T14977] netlink: 'syz.9.2832': attribute type 9 has an invalid length. [ 780.682029][T14982] netlink: 'syz.2.2834': attribute type 4 has an invalid length. [ 781.354407][T14994] tmpfs: Bad value for 'huge' [ 782.082741][ T6557] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 782.579687][ T6557] usb 10-1: config 0 has an invalid interface number: 107 but max is 0 [ 782.587998][ T6557] usb 10-1: config 0 has no interface number 0 [ 782.602584][ T6557] usb 10-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 12336, setting to 64 [ 782.623445][ T6557] usb 10-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 782.638558][ T6557] usb 10-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 782.647638][ T6557] usb 10-1: Product: syz [ 782.651903][ T6557] usb 10-1: Manufacturer: syz [ 782.666238][ T6557] usb 10-1: SerialNumber: syz [ 782.732660][ T6557] usb 10-1: config 0 descriptor?? [ 782.910503][ T6557] keyspan 10-1:0.107: Keyspan 4 port adapter converter detected [ 783.295063][ T6557] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 81 [ 783.303937][ T6557] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 1 [ 783.367637][ T6557] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 783.389763][ T6557] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 2 [ 783.429084][ T6557] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 783.438349][ T6557] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 4 [ 783.457574][ T6557] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 783.477075][ T6557] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 6 [ 783.502741][ T6557] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 783.548489][ T6557] usb 10-1: USB disconnect, device number 11 [ 783.588937][ T6557] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 783.615167][ T6557] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 783.646445][ T6557] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 783.675883][ T6557] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 783.738760][ T6557] keyspan 10-1:0.107: device disconnected [ 783.893798][T14099] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 784.054002][T14099] usb 1-1: Using ep0 maxpacket: 16 [ 784.073732][T14099] usb 1-1: config 0 has no interfaces? [ 784.087452][T14099] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 784.116392][T14099] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.151824][T14099] usb 1-1: Product: syz [ 784.173213][T14099] usb 1-1: Manufacturer: syz [ 784.188988][T14099] usb 1-1: SerialNumber: syz [ 784.217102][T14099] usb 1-1: config 0 descriptor?? [ 784.937307][ T5837] Bluetooth: Unexpected continuation frame (len 42) [ 784.937438][T15036] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2851'. [ 784.972840][T15036] netlink: 112 bytes leftover after parsing attributes in process `syz.9.2851'. [ 785.006461][T15036] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2851'. [ 786.010355][T14099] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 786.159961][T14099] usb 4-1: device descriptor read/64, error -71 [ 786.426360][T14099] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 786.664850][T14099] usb 4-1: device descriptor read/64, error -71 [ 786.915827][T14099] usb usb4-port1: attempt power cycle [ 786.951817][ T5871] usb 1-1: USB disconnect, device number 34 [ 787.293458][T14099] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 787.328490][T14099] usb 4-1: device descriptor read/8, error -71 [ 787.678030][T15076] can0: slcan on ttyS3. [ 788.386497][T14099] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 788.426943][T14099] usb 4-1: device descriptor read/8, error -71 [ 788.477467][T15078] "syz.2.2864" (15078) uses obsolete ecb(arc4) skcipher [ 788.554960][T15074] can0 (unregistered): slcan off ttyS3. [ 788.563001][T14099] usb usb4-port1: unable to enumerate USB device [ 788.868996][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2871'. [ 788.908466][T15100] loop8: detected capacity change from 0 to 7 [ 788.929015][T15100] Dev loop8: unable to read RDB block 7 [ 788.934649][T15100] loop8: AHDI p1 p3 p4 [ 788.938908][T15100] loop8: partition table partially beyond EOD, truncated [ 788.982348][T15100] loop8: p1 start 975770946 is beyond EOD, truncated [ 788.989177][T15100] loop8: p3 start 1600350066 is beyond EOD, truncated [ 790.047795][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 792.530654][ T29] audit: type=1804 audit(1738548193.313:2225): pid=15132 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.7.2881" name="/newroot/126/file1" dev="fuse" ino=1 res=1 errno=0 [ 792.579805][ T29] audit: type=1800 audit(1738548193.313:2226): pid=15132 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.2881" name="/" dev="fuse" ino=1 res=0 errno=0 [ 792.638410][ T29] audit: type=1804 audit(1738548193.342:2227): pid=15132 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.7.2881" name="/newroot/126/file1" dev="fuse" ino=1 res=1 errno=0 [ 792.688894][ T6557] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 792.690962][ T29] audit: type=1804 audit(1738548193.342:2228): pid=15132 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.7.2881" name="/newroot/126/file1" dev="fuse" ino=1 res=1 errno=0 [ 792.741723][ T6557] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 793.258285][ T29] audit: type=1800 audit(1738548193.342:2229): pid=15132 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.2881" name="/" dev="fuse" ino=1 res=0 errno=0 [ 793.343983][T14099] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 793.368882][T15151] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2887'. [ 793.490512][T15153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2888'. [ 793.517658][T15153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2888'. [ 793.527929][T14099] usb 4-1: Using ep0 maxpacket: 16 [ 793.543552][T15153] veth0: entered promiscuous mode [ 793.547790][T14099] usb 4-1: config 0 has no interfaces? [ 793.553594][T15153] team0: entered promiscuous mode [ 793.560286][T14099] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 793.563002][T15153] team_slave_0: entered promiscuous mode [ 793.579565][T14099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.582284][T15153] team_slave_1: entered promiscuous mode [ 793.601918][T14099] usb 4-1: config 0 descriptor?? [ 793.664003][T15158] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2890'. [ 793.674247][T15159] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2890'. [ 795.161480][T14099] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 795.920431][ T25] usb 4-1: USB disconnect, device number 52 [ 797.221819][T15176] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 797.320579][T14099] usb 1-1: device descriptor read/64, error -71 [ 800.266095][ T29] audit: type=1800 audit(1738548200.544:2230): pid=15199 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.0.2904" name="/newroot/246/file0" dev="tmpfs" ino=1309 res=0 errno=0 [ 800.332607][ T8] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 800.441573][T15212] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.528152][ T8] usb 10-1: Using ep0 maxpacket: 16 [ 800.537790][ T8] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 800.562655][ T8] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 800.579295][ T8] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 800.619871][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.636748][ T8] usb 10-1: Product: syz [ 800.641050][ T8] usb 10-1: Manufacturer: syz [ 800.656405][ T8] usb 10-1: SerialNumber: syz [ 800.666833][T15212] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.848197][T15212] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.901782][ T8] usb 10-1: 0:2 : does not exist [ 800.924836][ T8] usb 10-1: usbmixer: too many channels (48) in unit 5 [ 801.173059][ T8] usb 10-1: USB disconnect, device number 12 [ 801.655338][ T25] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 801.698036][T15212] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.797033][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 802.966415][ T25] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 802.974798][ T25] usb 3-1: config 0 has no interface number 0 [ 803.069000][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 803.131750][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.188095][ T25] usb 3-1: Product: syz [ 803.203315][T15238] netlink: 'syz.9.2915': attribute type 4 has an invalid length. [ 803.224295][ T25] usb 3-1: Manufacturer: syz [ 803.229354][ T25] usb 3-1: SerialNumber: syz [ 803.240970][T15238] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2915'. [ 803.304345][ T25] usb 3-1: config 0 descriptor?? [ 803.550215][T15212] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.614459][T15221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.623824][T15212] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.639326][T15221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.673667][T15221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.682653][T15221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.691808][T15212] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.746176][ T25] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 803.780143][T15212] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.783745][ T25] usb 3-1: No streaming interface found for terminal 6. [ 803.822598][ T25] usb 3-1: Failed to create links for entity 5 [ 803.844728][ T25] usb 3-1: Failed to register entities (-22). [ 803.873366][ T25] usb 3-1: USB disconnect, device number 54 [ 803.898083][T15252] ip6_vti0: entered allmulticast mode [ 803.994056][T15256] netlink: 'syz.9.2922': attribute type 10 has an invalid length. [ 804.757597][T15265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2924'. [ 806.146054][ T29] audit: type=1326 audit(1738548206.035:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15275 comm="syz.3.2930" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0ebf8cda9 code=0x0 [ 807.535018][T15299] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2934'. [ 807.549518][T15299] netlink: 'syz.7.2934': attribute type 10 has an invalid length. [ 807.557547][T15299] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2934'. [ 807.566735][T15299] batadv0: entered promiscuous mode [ 807.572057][T15299] batadv0: entered allmulticast mode [ 807.581734][T15299] bridge0: port 3(batadv0) entered blocking state [ 807.588662][T15299] bridge0: port 3(batadv0) entered disabled state [ 807.607146][T15299] bridge0: port 3(batadv0) entered blocking state [ 807.613712][T15299] bridge0: port 3(batadv0) entered forwarding state [ 807.995579][ T53] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 808.005003][ T53] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 808.339320][T15307] netlink: 268 bytes leftover after parsing attributes in process `syz.9.2937'. [ 810.480222][T15308] atomic_op ffff88802ad5a198 conn xmit_atomic 0000000000000000 [ 810.606353][T15325] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2943'. [ 811.603537][ T25] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 812.107246][ T5871] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 812.178926][T15349] xt_time: unknown flags 0xc [ 812.212786][T15349] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2946'. [ 812.846762][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 812.896546][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 812.918661][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 813.075452][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 813.268072][ T5871] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 813.472440][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.534708][ T5871] usb 4-1: Product: syz [ 813.539063][ T5871] usb 4-1: Manufacturer: syz [ 813.543830][ T5871] usb 4-1: SerialNumber: syz [ 813.568084][ T5871] usb 4-1: config 0 descriptor?? [ 813.588660][ T5871] iguanair 4-1:0.0: failed to submit urb: -90 [ 813.597041][ T5871] iguanair 4-1:0.0: probe with driver iguanair failed with error -90 [ 815.548996][ T5871] usb 4-1: USB disconnect, device number 53 [ 819.522393][T15426] overlay: ./file0 is not a directory [ 819.602277][T15426] Malformed UNC in devname [ 819.602277][T15426] [ 819.610877][T15426] CIFS: VFS: Malformed UNC in devname [ 820.324810][ T5869] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 820.519668][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 820.595737][T15446] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 820.595737][T15446] program syz.2.2976 not setting count and/or reply_len properly [ 820.692537][ T5869] usb 1-1: config 9 has an invalid interface number: 109 but max is 0 [ 820.817203][ T5869] usb 1-1: config 9 has no interface number 0 [ 820.833929][ T5869] usb 1-1: config 9 interface 109 has no altsetting 0 [ 820.932199][ T5869] usb 1-1: New USB device found, idVendor=0483, idProduct=3746, bcdDevice= c.a1 [ 821.106529][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.302444][ T5869] usb 1-1: Product: syz [ 821.363477][ T5869] usb 1-1: Manufacturer: syz [ 821.425055][ T5869] usb 1-1: SerialNumber: syz [ 821.877988][ T5869] ftdi_sio 1-1:9.109: FTDI USB Serial Device converter detected [ 821.893744][ T5869] ftdi_sio ttyUSB0: unknown device type: 0xca1 [ 821.913068][ T5869] usb 1-1: USB disconnect, device number 38 [ 822.740853][ T5869] ftdi_sio 1-1:9.109: device disconnected [ 823.674464][T15463] netlink: 'syz.3.2983': attribute type 10 has an invalid length. [ 828.102233][T15507] xt_connbytes: Forcing CT accounting to be enabled [ 828.108983][T15507] xt_bpf: check failed: parse error [ 830.258781][ T5870] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 830.366019][T12627] Bluetooth: hci5: command 0x0405 tx timeout [ 830.431739][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.472315][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.520177][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 830.580713][ T5870] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 830.620697][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.708576][ T5870] usb 3-1: config 0 descriptor?? [ 831.826821][ T5870] usbhid 3-1:0.0: can't add hid device: -71 [ 831.833434][ T5870] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 831.950525][ T5870] usb 3-1: USB disconnect, device number 55 [ 832.099387][T15561] FAULT_INJECTION: forcing a failure. [ 832.099387][T15561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 832.126447][T15561] CPU: 0 UID: 0 PID: 15561 Comm: syz.2.3011 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 832.126475][T15561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 832.126488][T15561] Call Trace: [ 832.126496][T15561] [ 832.126505][T15561] dump_stack_lvl+0x241/0x360 [ 832.126543][T15561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 832.126575][T15561] ? __pfx__printk+0x10/0x10 [ 832.126606][T15561] ? __pfx_lock_release+0x10/0x10 [ 832.126640][T15561] should_fail_ex+0x40a/0x550 [ 832.126666][T15561] _copy_from_user+0x2d/0xb0 [ 832.126687][T15561] restore_sigcontext+0xd8/0x7d0 [ 832.126710][T15561] ? __pfx___might_resched+0x10/0x10 [ 832.126733][T15561] ? __might_fault+0xaa/0x120 [ 832.126763][T15561] ? __pfx_restore_sigcontext+0x10/0x10 [ 832.126813][T15561] ? __task_pid_nr_ns+0x28/0x450 [ 832.126847][T15561] __do_sys_rt_sigreturn+0x1b9/0x280 [ 832.126873][T15561] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 832.126897][T15561] ? do_syscall_64+0x100/0x230 [ 832.126926][T15561] ? do_syscall_64+0xb6/0x230 [ 832.126955][T15561] do_syscall_64+0xf3/0x230 [ 832.126980][T15561] ? clear_bhb_loop+0x35/0x90 [ 832.127021][T15561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.127046][T15561] RIP: 0033:0x7fa71f328fa9 [ 832.127063][T15561] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 832.127079][T15561] RSP: 002b:00007fa72017fa80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 832.127098][T15561] RAX: ffffffffffffffda RBX: 00007fa71f5a5fa0 RCX: 00007fa71f328fa9 [ 832.127113][T15561] RDX: 00007fa72017fa80 RSI: 00007fa72017fbb0 RDI: 0000000000000021 [ 832.127125][T15561] RBP: 00007fa720180090 R08: 0000000000000000 R09: 0000000000000000 [ 832.127137][T15561] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 832.127148][T15561] R13: 0000000000000000 R14: 00007fa71f5a5fa0 R15: 00007fffe9698518 [ 832.127176][T15561] [ 833.169098][T15572] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3014'. [ 833.563275][ T5869] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 833.766044][ T5869] usb 4-1: device descriptor read/64, error -71 [ 834.132463][ T5869] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 834.358563][ T5869] usb 4-1: device descriptor read/64, error -71 [ 834.556787][ T5869] usb usb4-port1: attempt power cycle [ 835.582762][ T5869] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 835.660287][ T5869] usb 4-1: device descriptor read/8, error -71 [ 835.999815][ T5869] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 836.025154][ T5869] usb 4-1: device descriptor read/8, error -71 [ 836.192474][ T5869] usb usb4-port1: unable to enumerate USB device [ 836.255098][T15610] netlink: 'syz.7.3024': attribute type 4 has an invalid length. [ 837.309509][T15622] netlink: 'syz.7.3029': attribute type 10 has an invalid length. [ 837.324213][T15625] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3031'. [ 837.341179][T15622] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3029'. [ 837.476014][ T5869] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 837.497805][T15622] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 838.046151][T15637] hub 2-0:1.0: USB hub found [ 838.052878][T15637] hub 2-0:1.0: 1 port detected [ 838.086174][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 838.104626][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 839.095917][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 839.158598][ T5869] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 839.172554][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.184460][ T5869] usb 4-1: Product: syz [ 840.188088][ T5869] usb 4-1: Manufacturer: syz [ 840.208886][ T5869] usb 4-1: SerialNumber: syz [ 840.537348][ T5869] usb 4-1: config 0 descriptor?? [ 840.650403][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3042'. [ 840.776657][ T5869] usb 4-1: can't set config #0, error -71 [ 840.785340][ T5869] usb 4-1: USB disconnect, device number 58 [ 840.916469][T15666] futex_wake_op: syz.2.3045 tries to shift op by 32; fix this program [ 841.169694][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3050'. [ 843.623053][T15706] kvm: Disabled LAPIC found during irq injection [ 843.738768][T15708] FAULT_INJECTION: forcing a failure. [ 843.738768][T15708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.761680][T15708] CPU: 1 UID: 0 PID: 15708 Comm: syz.0.3057 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 843.761706][T15708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 843.761718][T15708] Call Trace: [ 843.761725][T15708] [ 843.761733][T15708] dump_stack_lvl+0x241/0x360 [ 843.761769][T15708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 843.761800][T15708] ? __pfx__printk+0x10/0x10 [ 843.761833][T15708] ? snprintf+0xda/0x120 [ 843.761855][T15708] should_fail_ex+0x40a/0x550 [ 843.761879][T15708] _copy_to_user+0x31/0xb0 [ 843.761899][T15708] simple_read_from_buffer+0xca/0x150 [ 843.761925][T15708] proc_fail_nth_read+0x1e9/0x250 [ 843.761950][T15708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 843.761975][T15708] ? rw_verify_area+0x243/0x630 [ 843.762003][T15708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 843.762026][T15708] vfs_read+0x1f8/0xb40 [ 843.762055][T15708] ? fdget_pos+0x254/0x320 [ 843.762080][T15708] ? __pfx___mutex_lock+0x10/0x10 [ 843.762105][T15708] ? __pfx_vfs_read+0x10/0x10 [ 843.762130][T15708] ? do_sys_openat2+0x17a/0x1d0 [ 843.762162][T15708] ? __fget_files+0x2a/0x410 [ 843.762187][T15708] ? __fget_files+0x395/0x410 [ 843.762209][T15708] ? __fget_files+0x2a/0x410 [ 843.762242][T15708] ksys_read+0x18f/0x2b0 [ 843.762272][T15708] ? __pfx_ksys_read+0x10/0x10 [ 843.762301][T15708] ? do_syscall_64+0x100/0x230 [ 843.762329][T15708] ? do_syscall_64+0xb6/0x230 [ 843.762361][T15708] do_syscall_64+0xf3/0x230 [ 843.762385][T15708] ? clear_bhb_loop+0x35/0x90 [ 843.762415][T15708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.762440][T15708] RIP: 0033:0x7f494db8b7bc [ 843.762456][T15708] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 843.762472][T15708] RSP: 002b:00007f494eac1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 843.762493][T15708] RAX: ffffffffffffffda RBX: 00007f494dda5fa0 RCX: 00007f494db8b7bc [ 843.762507][T15708] RDX: 000000000000000f RSI: 00007f494eac10a0 RDI: 0000000000000005 [ 843.762537][T15708] RBP: 00007f494eac1090 R08: 0000000000000000 R09: 0000000000000000 [ 843.762551][T15708] R10: 0000000020000580 R11: 0000000000000246 R12: 0000000000000001 [ 843.762564][T15708] R13: 0000000000000000 R14: 00007f494dda5fa0 R15: 00007ffdd06c7c18 [ 843.762596][T15708] [ 844.156681][T15713] xt_policy: output policy not valid in PREROUTING and INPUT [ 844.951945][T15724] ./file0: Can't lookup blockdev [ 846.006676][ T29] audit: type=1326 audit(1738548243.329:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.0.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494db8cda9 code=0x7ffc0000 [ 846.011996][T15729] fuse: Unknown parameter 'obj_user' [ 846.044524][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3063'. [ 846.055879][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3063'. [ 846.102350][ T29] audit: type=1326 audit(1738548243.329:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.0.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f494db8cda9 code=0x7ffc0000 [ 846.148505][ T29] audit: type=1326 audit(1738548243.329:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.0.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494db8cda9 code=0x7ffc0000 [ 846.183346][ T29] audit: type=1326 audit(1738548243.329:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.0.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494db8cda9 code=0x7ffc0000 [ 846.208683][ T29] audit: type=1326 audit(1738548243.329:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.0.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f494db8cda9 code=0x7ffc0000 [ 846.231859][ T29] audit: type=1326 audit(1738548243.329:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.0.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494db8cda9 code=0x7ffc0000 [ 846.255373][ T29] audit: type=1326 audit(1738548243.329:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.0.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494db8cda9 code=0x7ffc0000 [ 846.286217][T15741] tipc: Trying to set illegal importance in message [ 846.390348][ T29] audit: type=1326 audit(1738548243.329:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.0.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494db8cda9 code=0x7ffc0000 [ 846.429429][ T29] audit: type=1326 audit(1738548243.329:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.0.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494db8cda9 code=0x7ffc0000 [ 846.494276][ T29] audit: type=1326 audit(1738548243.329:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.0.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f494db8cda9 code=0x7ffc0000 [ 847.388807][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3072'. [ 847.841316][T15764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3075'. [ 848.088370][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3076'. [ 849.133930][T15790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3085'. [ 850.597925][T15802] FAULT_INJECTION: forcing a failure. [ 850.597925][T15802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.629830][T15800] netlink: 10 bytes leftover after parsing attributes in process `syz.7.3088'. [ 850.661630][T15802] CPU: 1 UID: 0 PID: 15802 Comm: syz.9.3086 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 850.661656][T15802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 850.661668][T15802] Call Trace: [ 850.661675][T15802] [ 850.661683][T15802] dump_stack_lvl+0x241/0x360 [ 850.661720][T15802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 850.661749][T15802] ? __pfx__printk+0x10/0x10 [ 850.661779][T15802] ? __pfx_lock_release+0x10/0x10 [ 850.661803][T15802] ? __lock_acquire+0x1397/0x2100 [ 850.661832][T15802] should_fail_ex+0x40a/0x550 [ 850.661857][T15802] _copy_from_user+0x2d/0xb0 [ 850.661875][T15802] kstrtouint_from_user+0xc6/0x190 [ 850.661906][T15802] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 850.661953][T15802] ? __pfx_lock_acquire+0x10/0x10 [ 850.662011][T15802] proc_fail_nth_write+0xaa/0x2d0 [ 850.662036][T15802] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 850.662059][T15802] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 850.662090][T15802] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 850.662117][T15802] vfs_write+0x29f/0xd10 [ 850.662151][T15802] ? fdget_pos+0x254/0x320 [ 850.662184][T15802] ? __mutex_unlock_slowpath+0x227/0x800 [ 850.662216][T15802] ? __pfx_vfs_write+0x10/0x10 [ 850.662252][T15802] ? __fget_files+0x2a/0x410 [ 850.662280][T15802] ? __fget_files+0x395/0x410 [ 850.662306][T15802] ? __fget_files+0x2a/0x410 [ 850.662342][T15802] ksys_write+0x18f/0x2b0 [ 850.662376][T15802] ? __pfx_ksys_write+0x10/0x10 [ 850.662409][T15802] ? do_syscall_64+0x100/0x230 [ 850.662440][T15802] ? do_syscall_64+0xb6/0x230 [ 850.662470][T15802] do_syscall_64+0xf3/0x230 [ 850.662497][T15802] ? clear_bhb_loop+0x35/0x90 [ 850.662531][T15802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.662559][T15802] RIP: 0033:0x7fb9e078b85f [ 850.662577][T15802] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 850.662595][T15802] RSP: 002b:00007fb9e162b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 850.662617][T15802] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb9e078b85f [ 850.662632][T15802] RDX: 0000000000000001 RSI: 00007fb9e162b0a0 RDI: 0000000000000007 [ 850.662645][T15802] RBP: 00007fb9e162b090 R08: 0000000000000000 R09: 0000000000000000 [ 850.662658][T15802] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 850.662670][T15802] R13: 0000000000000001 R14: 00007fb9e09a6080 R15: 00007ffca5777ee8 [ 850.662703][T15802] [ 884.000973][ T24] sched: DL replenish lagged too much [ 964.286763][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 964.293782][ C1] rcu: 0-...!: (0 ticks this GP) idle=ad94/1/0x4000000000000000 softirq=70658/70658 fqs=0 [ 964.305919][ C1] rcu: (detected by 1, t=10505 jiffies, g=77321, q=1830 ncpus=2) [ 964.313781][ C1] Sending NMI from CPU 1 to CPUs 0: [ 964.313825][ C0] NMI backtrace for cpu 0 [ 964.313841][ C0] CPU: 0 UID: 0 PID: 15826 Comm: syz.0.3095 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 964.313861][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 964.313873][ C0] RIP: 0010:mark_lock+0xa2/0x360 [ 964.313905][ C0] Code: 00 8b 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 40 38 2c 94 be 08 00 00 00 e8 36 30 88 00 48 0f a3 1d 7e fb 90 12 <73> 10 48 69 c3 c8 00 00 00 48 8d 98 00 b7 c3 93 eb 68 48 c7 c0 80 [ 964.313920][ C0] RSP: 0018:ffffc900000079c8 EFLAGS: 00000057 [ 964.313937][ C0] RAX: 0000000000000001 RBX: 0000000000000e4f RCX: ffffffff819b3cba [ 964.313949][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942c3a08 [ 964.313961][ C0] RBP: 0000000000000000 R08: ffffffff942c3a0f R09: 1ffffffff2858741 [ 964.313973][ C0] R10: dffffc0000000000 R11: fffffbfff2858742 R12: ffff88807d118ad4 [ 964.313987][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88807d118b18 [ 964.314000][ C0] FS: 00007f494eac16c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 964.314015][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.314028][ C0] CR2: 000000110c2500c2 CR3: 000000007f2ca000 CR4: 00000000003526f0 [ 964.314044][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 964.314055][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 964.314066][ C0] Call Trace: [ 964.314074][ C0] [ 964.314084][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 964.314105][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 964.314129][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 964.314154][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 964.314174][ C0] ? nmi_handle+0x14f/0x5a0 [ 964.314199][ C0] ? nmi_handle+0x2a/0x5a0 [ 964.314223][ C0] ? mark_lock+0xa2/0x360 [ 964.314246][ C0] ? default_do_nmi+0x63/0x160 [ 964.314273][ C0] ? exc_nmi+0x123/0x1f0 [ 964.314299][ C0] ? end_repeat_nmi+0xf/0x53 [ 964.314327][ C0] ? mark_lock+0x9a/0x360 [ 964.314351][ C0] ? mark_lock+0xa2/0x360 [ 964.314374][ C0] ? mark_lock+0xa2/0x360 [ 964.314397][ C0] ? mark_lock+0xa2/0x360 [ 964.314420][ C0] [ 964.314427][ C0] [ 964.314435][ C0] __lock_acquire+0xbc3/0x2100 [ 964.314465][ C0] lock_acquire+0x1ed/0x550 [ 964.314485][ C0] ? advance_sched+0xab/0xca0 [ 964.314511][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 964.314534][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 964.314554][ C0] ? __hrtimer_run_queues+0x477/0xd30 [ 964.314581][ C0] ? __pfx_lock_release+0x10/0x10 [ 964.314605][ C0] ? __pfx_advance_sched+0x10/0x10 [ 964.314621][ C0] _raw_spin_lock+0x2e/0x40 [ 964.314638][ C0] ? advance_sched+0xab/0xca0 [ 964.314654][ C0] advance_sched+0xab/0xca0 [ 964.314671][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 964.314690][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 964.314717][ C0] ? __pfx_advance_sched+0x10/0x10 [ 964.314734][ C0] __hrtimer_run_queues+0x59b/0xd30 [ 964.314768][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 964.314793][ C0] ? handle_softirqs+0x7e0/0x9b0 [ 964.314810][ C0] ? read_tsc+0x9/0x20 [ 964.314827][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 964.314853][ C0] hrtimer_interrupt+0x403/0xa40 [ 964.314888][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 964.314915][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 964.314936][ C0] [ 964.314942][ C0] [ 964.314949][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 964.314975][ C0] RIP: 0010:__genradix_ptr_alloc+0x27f/0x500 [ 964.314995][ C0] Code: b6 fe ff ff e8 a2 ab de fc 48 8b 44 24 20 e9 1c ff ff ff 31 ff 44 89 f6 e8 ce af de fc 45 85 f6 0f 84 10 02 00 00 48 89 1c 24 <83> 7c 24 10 00 b8 02 00 00 00 48 0f 44 44 24 28 48 89 44 24 10 41 [ 964.315010][ C0] RSP: 0018:ffffc9000c487818 EFLAGS: 00000202 [ 964.315025][ C0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffff88807d118000 [ 964.315037][ C0] RDX: ffff88807d118000 RSI: 0000000000000002 RDI: 0000000000000000 [ 964.315048][ C0] RBP: 0000000000000011 R08: ffffffff84e0b0e2 R09: 1ffff11006a049be [ 964.315061][ C0] R10: dffffc0000000000 R11: ffffed1006a049bf R12: ffff88807da44002 [ 964.315075][ C0] R13: 0000000000000015 R14: 0000000000000002 R15: ffff88807da44000 [ 964.315090][ C0] ? __genradix_ptr_alloc+0x272/0x500 [ 964.315111][ C0] ? __genradix_ptr_alloc+0x272/0x500 [ 964.315131][ C0] __genradix_prealloc+0x45/0x90 [ 964.315151][ C0] sctp_stream_init+0x165/0x460 [ 964.315181][ C0] sctp_association_new+0x10c7/0x2400 [ 964.315210][ C0] sctp_connect_new_asoc+0x2d8/0x6c0 [ 964.315235][ C0] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 964.315256][ C0] ? sctp_sendmsg+0xbb9/0x3520 [ 964.315279][ C0] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 964.315301][ C0] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 964.315320][ C0] sctp_sendmsg+0x219a/0x3520 [ 964.315349][ C0] ? __pfx_sctp_sendmsg+0x10/0x10 [ 964.315369][ C0] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 964.315401][ C0] ? futex_wake+0x523/0x5c0 [ 964.315424][ C0] ? inet_sendmsg+0x330/0x390 [ 964.315443][ C0] __sock_sendmsg+0x1a6/0x270 [ 964.315465][ C0] __sys_sendto+0x363/0x4c0 [ 964.315497][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 964.315520][ C0] ? do_futex+0x392/0x560 [ 964.315548][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 964.315571][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 964.315596][ C0] __x64_sys_sendto+0xde/0x100 [ 964.315622][ C0] do_syscall_64+0xf3/0x230 [ 964.315644][ C0] ? clear_bhb_loop+0x35/0x90 [ 964.315670][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.315694][ C0] RIP: 0033:0x7f494db8cda9 [ 964.315710][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 964.315724][ C0] RSP: 002b:00007f494eac1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 964.315741][ C0] RAX: ffffffffffffffda RBX: 00007f494dda5fa0 RCX: 00007f494db8cda9 [ 964.315755][ C0] RDX: 0000000000000001 RSI: 00000000200004c0 RDI: 0000000000000007 [ 964.315766][ C0] RBP: 00007f494dc0e2a0 R08: 0000000020000100 R09: 000000000000001c [ 964.315778][ C0] R10: 0000000000040050 R11: 0000000000000246 R12: 0000000000000000 [ 964.315789][ C0] R13: 0000000000000000 R14: 00007f494dda5fa0 R15: 00007ffdd06c7c18 [ 964.315808][ C0] [ 964.315820][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10504 jiffies! g77321 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 964.947944][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=67161 [ 964.955858][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g77321 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 964.967262][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 964.977246][ C1] rcu: RCU grace-period kthread stack dump: [ 964.983145][ C1] task:rcu_preempt state:I stack:26104 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 964.995100][ C1] Call Trace: [ 964.998395][ C1] [ 965.001352][ C1] __schedule+0x18bc/0x4c40 [ 965.005904][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 965.011867][ C1] ? __pfx___schedule+0x10/0x10 [ 965.016775][ C1] ? __pfx_lock_release+0x10/0x10 [ 965.021850][ C1] ? __pfx___mod_timer+0x10/0x10 [ 965.026809][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 965.033166][ C1] ? schedule+0x90/0x320 [ 965.037430][ C1] schedule+0x14b/0x320 [ 965.041614][ C1] schedule_timeout+0x15a/0x290 [ 965.046483][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 965.051888][ C1] ? __pfx_process_timeout+0x10/0x10 [ 965.057225][ C1] ? prepare_to_swait_event+0x330/0x350 [ 965.062812][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 965.068039][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 965.072919][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 965.078147][ C1] ? rcu_gp_init+0x1256/0x1630 [ 965.082948][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 965.087912][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 965.094099][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 965.099406][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 965.105329][ C1] ? finish_swait+0xd4/0x1e0 [ 965.109948][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 965.115175][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 965.119798][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 965.125025][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 965.130946][ C1] ? __kthread_parkme+0x169/0x1d0 [ 965.136009][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 965.141260][ C1] kthread+0x7a9/0x920 [ 965.145359][ C1] ? __pfx_kthread+0x10/0x10 [ 965.149978][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 965.155209][ C1] ? __pfx_kthread+0x10/0x10 [ 965.159825][ C1] ? __pfx_kthread+0x10/0x10 [ 965.164445][ C1] ? __pfx_kthread+0x10/0x10 [ 965.169062][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 965.174280][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 965.179502][ C1] ? __pfx_kthread+0x10/0x10 [ 965.184118][ C1] ret_from_fork+0x4b/0x80 [ 965.188557][ C1] ? __pfx_kthread+0x10/0x10 [ 965.193175][ C1] ret_from_fork_asm+0x1a/0x30 [ 965.197974][ C1]