last executing test programs: 20m43.918523667s ago: executing program 0 (id=2993): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x4, 0x1, 0x1}) read$FUSE(r1, &(0x7f0000008440)={0x2020}, 0x2020) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x5800002, 0x8010, r2, 0x0) pwritev2(r2, &(0x7f0000000500)=[{&(0x7f0000000340)='o', 0x1}, {&(0x7f00000011c0)='(', 0x1}], 0x2, 0x1000000, 0x0, 0x0) read$FUSE(r2, &(0x7f0000001200)={0x2020}, 0x2020) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40408c5) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000f140100"], 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f000000280007800c00030040002e2e0000002d0c0004"], 0x3c}}, 0x0) 20m43.289303751s ago: executing program 0 (id=2997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="57bb3c3b2ec58b193b658f9dcffb6b62faf73e6e073fd7", @ANYRES16=r1, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r2, @ANYBLOB="14001d8010000080060005005500000004000400"], 0x30}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x20, 0xf9, 0x7ffc1ff4}]}) preadv(r4, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x67) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x141000, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1e) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x6de, 0x2, 0x2, 0xf}, 'syz0\x00', 0x1}) ioctl$UI_DEV_CREATE(r5, 0x5501) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b0a00fe00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af801a1000000bfa10000000000000701000000feffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 20m42.032129144s ago: executing program 0 (id=3002): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d4c84c6536d2bbbeefd5bd1e4fc81990d77c4e717c2d16be006025040a5f1c651f6397b648d45f1dfcdd689989d909aa63a6d6fe62f2980c5b9f2fdb4d5d40160127c17fa2d8e8776d59640813cdcf294bc2"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, r2, 0x703, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) io_uring_setup(0x4822, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbfc, {0x1}}, 0x14}}, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x400100, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000490}, 0xc) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00'}, 0x18) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e21, 0x5, @local, 0x80000}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 20m41.185648218s ago: executing program 0 (id=3005): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f0000000600)='./file0\x00', 0x0, 0xf941) chdir(&(0x7f00000000c0)='./bus\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffd}, 0xe) listen(r2, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000001340)=',', 0x1, 0x1, &(0x7f0000001400)={0xa, 0x0, 0x0, @mcast1}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095000000000000007c244726b34e0a5b6b405e2f0e29ad0242f8fbeb6154f9e01b529a20fb10462be1cc05b864417820874ef1e621bdc6474b5cf1909b622a14ffa9543db31af79293e74c9da0244407a1e53fbdac802b664faa5c72e05072f957a07365dbb7b3648b9132647f61dd6fade3899bada3e9c09a4d0ed4a676305512b2edd9697a6ae34ae46b0d8bff7aba7cddce65aa3c54a81887e725facce94ce2374fecd77acf8cd22753801304fd28d4a79e6018742be32212cc89"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x18) 20m39.984821062s ago: executing program 0 (id=3011): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioperm(0x0, 0x6, 0x10000) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x108) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0xff0f}}], 0x1, 0x40012000, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000540)=""/162) 20m39.55257258s ago: executing program 0 (id=3014): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) connect$unix(r3, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200400c0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) syz_open_dev$midi(&(0x7f0000000040), 0x7733, 0x10280) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r7, &(0x7f0000000000)=""/27, 0x1b, 0x0, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x2000000200, 0x7) 20m39.493331723s ago: executing program 32 (id=3014): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) connect$unix(r3, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200400c0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) syz_open_dev$midi(&(0x7f0000000040), 0x7733, 0x10280) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r7, &(0x7f0000000000)=""/27, 0x1b, 0x0, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x2000000200, 0x7) 11m48.977078016s ago: executing program 5 (id=4273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00002a2000/0x4000)=nil, 0x4000, 0xb635773f04ebbeee, 0x110, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x92a8, 0x0, 0x32}, 0x9c) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0x6, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='H', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xffffffff, @loopback}, 0xffffffffffffffac) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/14, @ANYRES16=r2, @ANYBLOB="0db9fc3aa87780c7ce48e8b7373b297355376764ca314e5defac6c", @ANYRESOCT=r0, @ANYBLOB="c3340605c513a13b5ec6fdfeaccb0cfb40d18ac73be57ec5fa88cb00de5f23b9f4eef1334364414dd637f10f"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020007dcc74dbd7a478b19e8c04afd0021f98ed031a64cf44c68cb8f3dc5b58124a23afbd081a2ae6c1e21a46e6e4d5"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000040)='ext4_lazy_itable_init\x00', r4, 0x0, 0x2}, 0x18) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f00000005c0)=0x80000001, 0x4) sendto$inet(r7, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r7, &(0x7f0000000180)="8a", 0x1, 0xc8c0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 11m46.961062134s ago: executing program 5 (id=4276): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) pipe(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mkdir(0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, 0x0, 0x4000001) inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x10000082) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0x8, 0x7, 0x0, 0x4014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff000000002c0012800b00010067656e65766500001c000280050009000000000005000a0000000000050004000800000008000a00", @ANYRES32], 0x54}}, 0x0) 11m42.037064193s ago: executing program 5 (id=4287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00002a2000/0x4000)=nil, 0x4000, 0xb635773f04ebbeee, 0x110, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x92a8, 0x0, 0x32}, 0x9c) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0x6, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='H', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xffffffff, @loopback}, 0xffffffffffffffac) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/14, @ANYRES16=r2, @ANYBLOB="0db9fc3aa87780c7ce48e8b7373b297355376764ca314e5defac6c", @ANYRESOCT=r0, @ANYBLOB="c3340605c513a13b5ec6fdfeaccb0cfb40d18ac73be57ec5fa88cb00de5f23b9f4eef1334364414dd637f10f"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xf, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020007dcc74dbd7a478b19e8c04afd0021f98ed031a64cf44c68cb8f3dc5b58124a23afbd081a2ae6c1e21a46e6e4d5"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000040)='ext4_lazy_itable_init\x00', r4, 0x0, 0x2}, 0x18) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f00000005c0)=0x80000001, 0x4) sendto$inet(r7, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r7, &(0x7f0000000180)="8a", 0x1, 0xc8c0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 11m40.506764453s ago: executing program 5 (id=4290): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x2, 0x40488e4) syz_open_procfs(0x0, &(0x7f0000001240)='gid_map\x00') mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=within_size']) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) 11m36.875607571s ago: executing program 5 (id=4301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00002a2000/0x4000)=nil, 0x4000, 0xb635773f04ebbeee, 0x110, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0x6, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='H', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xffffffff, @loopback}, 0xffffffffffffffac) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/14, @ANYRES16=r2, @ANYBLOB="0db9fc3aa87780c7ce48e8b7373b297355376764ca314e5defac6c", @ANYRESOCT=r0, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES8=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020007dcc74dbd7a478b19e8c04afd0021f98ed031a64cf44c68cb8f3dc5b58124a23afbd081a2ae6c1e21a46e6e4d5b7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000040)='ext4_lazy_itable_init\x00', r4, 0x0, 0x2}, 0x18) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f00000005c0)=0x80000001, 0x4) sendto$inet(r7, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) 11m34.960662016s ago: executing program 5 (id=4304): r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r2, 0x0) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast]}, 0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) open(0x0, 0x143042, 0xe2) 11m18.22230457s ago: executing program 33 (id=4304): r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r2, 0x0) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast]}, 0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) open(0x0, 0x143042, 0xe2) 26.786582905s ago: executing program 3 (id=6069): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) read$watch_queue(r3, &(0x7f0000000040)=""/202, 0xca) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, r0, 0xb6f69000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x47, &(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRESOCT=r2, @ANYRES64=r1, @ANYRES64=r7, @ANYRES16=r1], &(0x7f0000000180)='syzkaller\x00', 0xa, 0xd4, &(0x7f0000000500)=""/212, 0x0, 0x8, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.dequeue\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[]}, 0x78) write$binfmt_script(r8, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 16.912131455s ago: executing program 2 (id=6094): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x600000b, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) unshare(0x22020600) unshare(0x2a020400) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 15.091620962s ago: executing program 2 (id=6098): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x2, 0x1, 0x0, 0x8001, @vifc_lcl_ifindex=r2, @multicast2}, 0x10) (fail_nth: 2) 14.584734617s ago: executing program 2 (id=6101): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) socket$kcm(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x14, r6, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) 12.837641892s ago: executing program 2 (id=6102): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2482ac861b82b520}, 0x20) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001910000004000800000028"], 0x28}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000011c0)=@newlink={0xe0, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0xac, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x9c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0xc554}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x6}}]}, @IFLA_VLAN_INGRESS_QOS={0x64, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb22, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x806, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80, 0x6}}]}]}}}, @IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}]}, @IFLA_MASTER={0x8}]}, 0xe0}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x4) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8100}, 0x4801) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r10, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB], 0x84}}, 0x20000000) syz_usb_connect(0x5, 0x24, &(0x7f0000001240)={{0x12, 0x1, 0x201, 0x8, 0xc9, 0x5d, 0x10, 0x2040, 0x721e, 0x5e2b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x6, 0x60, 0x9, [{{0x9, 0x4, 0x5d, 0x6a, 0x0, 0x1, 0x1, 0x1a}}]}}]}}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) 11.999719478s ago: executing program 1 (id=6106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) read$watch_queue(r3, &(0x7f0000000040)=""/202, 0xca) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, r0, 0xb6f69000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x47, &(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRESOCT=r2, @ANYRES64=r1, @ANYRES64=r7, @ANYRES16=r1], &(0x7f0000000180)='syzkaller\x00', 0xa, 0xd4, &(0x7f0000000500)=""/212, 0x0, 0x8, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.dequeue\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[]}, 0x78) write$binfmt_script(r8, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 10.316102809s ago: executing program 1 (id=6110): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x2, 0x40040) close(0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="99d31c2a80aac4fcc53894fdacc78944713a75915f9452bdcc2e5ecd9193bf5c05fd30ce9aa2321661fea94af84925efa0705f7d5daf108a6684dfa678e5106162e92eec89583d3a14c0dbb96845d63137361407636deb877033f3d12fbc916d871b49235a5b20998878b7838b8dbf945bd9dd171bab58824b7264778d7389e5823b", &(0x7f0000000100)=@udp6=r2, 0x4}, 0x20) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r3, r3], 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x141, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r4}, 0x27) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000000000)=0x30) ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000180)={0xf9, 0x2, &(0x7f0000000440)}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000340)={&(0x7f0000000400), 0x8}) 9.488942063s ago: executing program 6 (id=6112): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x1f8, 0x30, 0x1, 0x0, 0x0, {}, [{0x1e4, 0x1, [@m_skbedit={0x80, 0x11, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0x4b, 0x6, "e97a4e77d048d7bc5d19feaaca5507df968b8e39b85b0454fb7d5797e2f95f092a190cb7660ff815ac4eccb2f5ddd96044c8d9ae4724ac0df3176c2b685a672d9ffb6d1a28d1a0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x160, 0x1a, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1000000, 0xfffffffc, 0x8, 0x41, 0x8000}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x105, 0x6, "652629e9380615f6d7ffc956f5464d27ec067c65a2bc87741dcc3ea4231f67896d381faedcd1c9dacf101250af7b031f72f279918104a8cf3d7f65b800a31f9aaa8ede5061469f3be5893ddcda6ded33f800dfeada138da89c60600aeb837209d889c13e5225879dbb0d20bc56c5d5ffae9d8b924d2e6b8a77d51781a683ed7115eff5794a3ceef502dded0bff122bc9729f7b2c6c7c37417fd9db054fe9b799086389ef7a31d70c572ef3ed2f4d53c0d23fb730d3cab4f398f3a17ef69dca46b7b9a56b46c6125cc1b10009de80923ab6f4895d5fbf65f2a248d1a77cff835973e9c0e4346ce84800"/257}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$ttyS3(0xffffff9c, &(0x7f0000000340), 0x40900, 0x0) ioctl$KDENABIO(r1, 0x4b36) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='ufs\x00', 0x18642, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)=@xdp={0x2c, 0x8, r2, 0x38}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="0bc2a715c4db66f6bf13813dc43910f57f643d2eccd3f81376013fced3515fc408ea19fb316e1969a9b34d85ea858b6383cde8fc9be3fabc447d7f1e61c7a9d4e9aa6e79108bc0875f4023c4d9ea1847e9be4e9f2a4a63ee291c648c519487d4ba60f387eddf1afcad0e216eca2220f45f1b812ff528a131c18ff9a40b9ca6385ad3f64f9a686d201f4db2732d88b24b170b8d2bc513a51ee18acf4aea1b4ddc81d48b397e1f358b8c", 0xa9}], 0x1, &(0x7f0000000240)=[@txtime={{0x18, 0x1, 0x3d, 0xb}}], 0x18}, 0x24000cc1) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = fanotify_init(0x8, 0x1000) fanotify_mark(r6, 0x7c, 0x50000008, r5, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x30314742, 0x0, 0x0, [{0x1}], 0x0, 0x0, 0x0, 0x0, 0x1}}) syz_usb_connect(0x2, 0xfffffffffffffe02, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c01}}, {0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}]}) socket$nl_generic(0x10, 0x3, 0x10) 9.453321819s ago: executing program 2 (id=6113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) gettid() r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000000f06030000000000000000000a00000805000100070000000600"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000200)={0xa000000a}) finit_module(r5, 0x0, 0x0) 8.000862788s ago: executing program 2 (id=6114): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000040)={0x40, 0x17, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 7.601313595s ago: executing program 4 (id=6115): r0 = socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xa, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800004bffffffff7fffff0091ffe800d9c08a09000004009500000001000000"], &(0x7f0000000400)='GPL\x00', 0xffffffff, 0x1b, &(0x7f0000000440)=""/27, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x5, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000840)=[{0x0, 0x5, 0x9}, {0x4, 0x5, 0x8, 0x5}, {0x0, 0x3, 0x1}, {0x5, 0x5, 0xe, 0xa}], 0x10, 0x4, @void, @value}, 0x94) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000003240)=[{{&(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000700)="e96ee30f43be3630e6526bbf7548644cfd683fff849477c2786284c5f8bd1ce7f6c414b281d7031120344c8d0258aeef78f10e17329419b63924786390e036c182636abd532add87655f76af31c0a31353206fabdec52e16889610590319677574f44c2d51f005355b335a3a262bc0975ca408ebf6ed48bbfaaae6359c39c5efd476f589633bc4027e47c898ebde541e6404eb98395c976d25bd81ff4a03175be1aeba2819f9d4c05cc6234c170bbcf0f1bba731e75ccac715233393f5a25baa0f438af126e2fe9a", 0xc8}], 0x1, &(0x7f0000001080)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r0, r5, r5, r5]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x20, 0x1, 0x1, [r5, r5, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee00}}}], 0x108, 0x24000054}}, {{&(0x7f00000011c0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000023c0)=[{&(0x7f0000001240)}, {&(0x7f0000001280)="185759eb84b7dcb9c0575d855afa187dee7b33244c7cd531466d90489834520f7ee03f615b40dface2b3ee401628f7763927255af622a55fa77d826f5448055c4bd79aeba98c1fd8936e3fca205969a315491ed74905ce3b1e4ea122e083cb6d5b94343a797ab83a6cf2b6aed4393427f6d71b638b58ed49a5ce5e680fa9b71d7920a3f0efc396015a284cad212e7eca21f496ff089cfde366cf7700743f228b02ef08e4cc195e7a2a2dd3bc4901d3859275f30708a046addf95d531e51447f6e407da61d6fa6fa79f3d0b58cd1a4df42968a90f6605a21e8f75c687ddcf2739fb2d454928693dd344a547736ac36bf7", 0xf0}, {&(0x7f0000001380)="8e56a3eb6c891d7b914a35b7fa87b54c3ef758127f11ee16e66eec6cd8454b67c44abf0ded90b0fa51f8acb61dd1e2830f8838f42097cf647a8b", 0x3a}, {&(0x7f00000013c0)="fd726be4dfc9d0617a93bcd5cf265680e1d67ff3261d059703d98fec0b751e255b61e9e03473f0fb196f235b770a5b47b78463a2ef011c86443821b8d516020d7bc1fe201c3d46fd9e29f95109536d42aaa85566aab76aa298fdb7a206acb704a6510955e20641517a68cd3500c34577ca7cf9f04fc44819065b157daed7b39644cdb581a16deab5c3224b67770bf38c5bdbbed17a8fb4318d69ee6e6e33d60084f76c0be31b0425cd2084ef11aab68a2b0f028172913f1a110504f7a83a836c2861e90a18832fbde966111403bae1ef1559ccfdeda9827aad43660e75b2dda8e055d931cbea190be6ea826e3eb95ae1f08d92ecd5746832725505647c0b0ad0af0d37babc0b031f9a3a1bb9fd0a301b3888fc3dc2f8d720ee987d25d405c54b32daad8b1e6b32f1e71c498fa2d166377db54c6e98102db05276f57d558f884ac3eba9b01fc53362f4d581b9ec282681eeba235960fce928b18c690f7a01c9a769d0034c88501711201b6d0ceb0c0902dc403cb3e201ded4bfb932ed8f69675ac1e85343f51e006668a77df60079450e2a78082ffc59a757a87ad120a0ac33ea63773e492a67d85affecd2fe172550502028e85bce791c5e4e1acea61d8f74d87fc20e0a1e6f74a5e988057837cac6855b3046b52376fd5aeabd225b16d63f74640861d59e3357621083744b23bda9c2b0bbb6b02c3b92b948f1434f888cae84499a9df9f17792f7a838dde233a44405fef4565f23f9df47c5e2ad867c680108f9721653e1ae64603e6a2ac85b8bff4d007e18a4e331ea43e0fd03b87c0eaaab83e47a972ea6febd604dc8ed290bad5a2d46fa32e814e6ca3158500ccbc0e623f4599f0222315d64bb6e623935d082aa7de9c329698ee71aebb00879810a316563c5217026d2fdf744e314a9f8ebb11edf248b434412a4449f895f530c0287c0d02998256c42574680a1cbda730defde92b9dde900940a7157b68ed8abcf29f6a12a7dca610fca96c61b50ce6963073f5478b25ecf66897a01fe05b350ea610a5310b2e7230d2cc17c36249a6709639b4f23dadb645364e4cbfef2e27ffabd2eba1cc699cb30615fd9cde054fa3f17da934b1b108b3192a4fdad30851db7106c67e7fe6fe252b6c8aed7f7b1405e581661c57004fd642812a4a579a07a3834dfa2dab0e48efd3cd12e626c4272d6ef9a3915d14f0c96d9701366b145f834db5c676400b63eeb3481044d124d17fbdc1eabf09762fbfa524cfc3994373efb1bb4852a75e2959b80ce373540aa4ae741af1ab033b9805482506d39616a398035740a89d4ab097875991920424c7b3383757bf482f921556b09d3e9b146db3cb559ae9605663a17a62b8dc4c27ae4b4d10537dddd5fcc3fe48a50f909df38d1bec828a8bba87ccfcdf1227ff5062d95f98c835b3fae41ca65d53b4e56c4479bf4c6128e6c05433cad64d19efd0908cf4ade56a2779512e78faf7aa773fee46e17969ca2553980ffd77b2d02266750e43d6b9dad9c22e6e0aca085d1320d8780d3bd1fc29a0f3854c6389518f19c5d24fbe49b588adc2020b685c271b2f5ce205b3934d70fc2c79f8d81a9f049e5e93d3ada51bdc324b01d33f963b1d48fb61903d690c2437810605a90b62701efc23d481c329ece581380df60cc3aeebcb9f593c493944861607f12e39d36278b75e6da63bb05bcbdc0ef42a7f2692c0e0c625677ce1af7a52a7eb926783522e7165ee7324271c06ef5213292db953d4484161a35cb584e0431c937296e65a301cbe9ef9eedb4eb00ba21146c7a81d20208b456c9b51b81abf19811e5770729c9d23779877ff0776d9a4eae041b6076a8d832c5ec08d46dd9a5dd7e56caca76dd62ecae6c0e4f0124a0097ad87a33b67651b1ef907c4f94bf3012a229d6aa6b9a17eb1b23e0fa9eff629d39923787fb70961b52b50062f2560d81809052a3c6ac34e5faef8450e79af459438a2ed975679cf9aaa1c14f2ca67666e6e1d05a6314ee0e30659b01c640dc3872fe352fc77c28f61debf7e2825d5650510ec3387c6092a98fcdda64e454f839ef254a4f7b20bf514242c7bcbcfaa8f47146f404b74409e9800268657df29f7dcbb6600c6c60e331126c5cb853550a75f069c71b40882bc6c534e5ff12cf59b41aa562cfcfdc82015efa27c260f4782fba2e8cbdce4e358c29d1be3815a2015ca2e4ce294e05068790271d8457b18440793bc9deda5b5daa38fccae63439198968ce4fd4aaaeae20b5d614caf87df46dfb9c586f39e30c4a3d72ecbbfed58a95e8de772d6eb3350bb12eb14cffe23c10010a303591033fe1f9a95878f7043d9c31fa38c6a2aa1b4c7c9791da8a679acbd5718d5541c64bd964474e5e72128723066bb20268ea94c1cb4f273610ff95a271071726cc25a023dbb84481bfa37e0dd61480752e4a81eee2c4a5ea27abf386ba98159334645df92b94ff8be06c17dbedd4f8c9946d5d0dbf11c5acde8d52fa0d81dd62fc2f9e2c4e440a2b1167d5e9d5bda4b5d7fa7dbf8a58c92d61724e6b97b7db8a5b45c35d6419ffe47f20e4bbd6ad98b9cbdbb08c04f8ecb5dd4021ba831a1af1106463eeb9d399ddf34cd3b7d255d106225f7178df035518ea660351b2d634f2d576979ebea28b00cbb39e08d9761e2a7242986214f28e6d67ef6e9b7a60e6a0f740eaae92311e29b99930ea141d6aa7de6a3505ce027dc5529ce2bbf3fcc5aea40497cab98ae792ff2a7115a350a444cb92773a69e096e21da2252a4cdd161e9c7fd5b0e4ab4ac635729cce35a98f13966341f3d9db1a36d7cd25fe9d29b7462262307cdd66148c851b053711e9728bfad05d079bede42c3257d2fdbcbe2f5bdd827c8d725b128cedbac6c4f943b1a5df2426bb1745278d8967b827f899f620166aa30d8c65bdad8259ac3e91e20756aa1b97069f2cd6bbde27155502cbb24ffed5c4318e6d5e69a77dbdec71e3278752f396755b168bed33fdc1c4219a70128e4e2536acc50267e8431a1df615a603cf5877f598e664ebf543e359366633ed79a7cec134d32aa310684b1080498934a5fdc77bd6b0b575da3edaaa26defb45023c146d0298e8b2ff6b264a8a42d06f5c53244ca1ce55e010f3976cb2fcc0de28d8ddb5ac569c94b7a8380e08c40a84d1d28a87de95f849a872829dd965de2016d6443b9c3154113a156956f9d6f05af13eafac136e419ff41fe7daa89e3eb35146a9c24fe94b563fb97ad9696fc19746724347dd9992228b825d38cc116a7ecb7f4701745bc7e73107758f3b780e246b975885d1314fe55975df66d7a6753bbb0714c39a9fb7b627f603032afb9546bd5be2844254193cf7fa78ca6e4f4623b6f020e4ba66429c5509e79782c550470c0b0eaf8f76f363da36afb2d5d29f024992b6dc0f98cae40cdaffba07ce20ffc82933d3ba208808e33123ce2b9a3b9a9808ec814e6f8da9c1aef5adfff7e41ea473b4f47157b1d31803bdd821be35a6e5f4f2e3ee2ccf2093affb71e2d1273221c03af2a73ac304842544b36eef6401c4bc801db8fdbeb1e3d95c97ba430cbd8a4cdb123d1af7a6ae1cd15d52be84945e88086837fb0140c965348b2a4de30a46c98012a2e6cb69f964e4c7b67f8d5e171c2327f32760c895275192e15b2401e10c7321dd8e919eb4560613b8f3bf31879c1335ece6bed4015eacf0504932700b180fafb07ecbe90efaf4c0c15a5772c839e954df55e006f6bdbe720e20f42547dcac3729e1f4cb040d30df3078e566b2af189b144d2375bd86744094dc28491de1995508e553a80c21300186b91e1ed48d5ac240188a3086a01e94b253218d8e2f7d4797da5cc1a6837316476f09736dc9aa60ba74be99173321b3eec7c205fe5dea8ac95317c464760932d815bea0d9f0826fc5d2ddd46dd036c4fcf7230aff8c3757cd6e7399efbe838275b6880ff99fbaddab26ccf712d4675ca0222ee1e783d4a9378cdb113361d2e787eb2c0be2237e2d693f7b83113173ec8bc1045f30a2a402bdeb71083a18c52af8c07b3ad725470f5331a0ccb41eac00e9a84db06f364827a42d85b3f4e939558f8ffc84b7b4db5f99fcd50ba388d35e2f82f19de50b81c6ee72786b8954f58b83799ec0a58fde2093f0c925d3799d6b573f9d51fe0a34eacd64337dea9ced4be70a18e45132a433f5bf9c7b9f0f245afc1bffdb7ab6119d165a54812aff6b8ce4f876d87eae1338aeda77b1ca8d1af5db97b7157e7b793ad6add899d0c6e6f7858ec90c97b539f9239438249e63311000f81586ca0dc33c8f4edbc105919f615f3891bc12ec0e86c65b173548e56b837a5ad42d83ad942b345cfae5facfad881ad5c813d5da67c3d506ad6ec12fd2b4b8ae1d4dcb1d1626682d44ffa956e5e1dbefc2c91bb0bf5cff7c9d55e297b0806e057d0687b238852a4ad74ee9867bffbf6d3dab38779f8023a66d4f19297464a37299434e37c77d456465ce6f87508adebde009ba093375ee4e3a0e93dae6d6e6a77a7fcc18b0bbaf258f7d7cd98d555f167024ed124020d18b3835db978c3d95197b23fd61e255b2c1a9aa7593d0e5b4538ec715630af1f3f6614b3ee9717aadd81ebeb42ae53d19a2a57bbffb6c4a6ec1fe69c497168d87fa22951f45067bd4aed7e7ed310a41df763d4445ce64b7c91f17e91325cf04541a7e6261242651b580c61feb9033a560231cbdb8bbfcb3f383cd41f62d0e4f9ff3f611181c829b50dddac770c0653117edca11e5ca61aaca764ef63d4d8cdbf94601b1cfdf1be2d8fff9c25553078ccb72158d1366192636f71476a64190e3acf642e92350e21b22ed4f252f0d20d60cfeb8a1b0eb10fb4fcf7d7c67cd6531bdc0e87700e374db4be21c10ab5e0bf0605f5774265805df9762e252a5142803ec4ff1449b29da76feacc7df5b3539e44e563f2d1e14ed1ccd929e32d8d8c07b5187cc4d3348f20068a6f174d39729f9636b62ea9f3475f4f34b99c34e934b792de2c778f55d67c4890b12fc74f982e3f2ba770d310c91ed85ec922919916500017bf1dc546a2961d2c8fb91a025c2e55ea89ba961cdb00a4a2c5844ceffc8e180d8d5e64bd2b1d84bab984cbc6f67e5fc778cc6d8ff1308291ae9727caaba88c54f11697416da62a3dffc1903008a1c2ad50706426e417a1a6abc0cae64d9cee7e3a75e727fe994810a2497233b6cc440a6db3db9d0d9fdf0eb0125ff96d0f6ddba6d79d082a0c8a96c1c499a7df4cd5e01bf91cde5c450cb0eab38c16abb0a6dfeb5390cd7d873e414686905de9a524ec39edbca162899e43c58ff57fbb55d8abca658569278908e67d5ec6aa05505e0b6553cd483d2d0bd48afac7d060c17489e79f6c5860b5b9c6ecb66dbff4efa9ebd60435283b3c6dbfa30000fb41a536f2aef53a5be4a26070010908afbe617c1ab2666702550ddb4619011f4ab17b6dcc0f3da93d2475de268ea0d6fb43ce284255495e1b71d209a49155de4d3fdefdf1f0cab0bdf7ae7b70101d6a387ec99fe02945738d9cea381bac9103ed305de36a937692b68c0f6fae08aa79de2093af204a1601a6f32dc174e4c1ac5318a0cb836b8f4593c6c2adbcbb272e564c8e7e3a7cb5343312d6a3ef8635a972659ed135fb28e71e8c79d50c4d0018bc9f7877d828bc8a026fd0e6af88b0faa95c2464890adc12cad324a863361870d78d1c25b425d5643668dc85f0ce33cbacfd113c5c82d561f495f1eb2da595b0a88f76d779f13a04eca65a2bd7ec0717a03023a4a9001fb6c2cf9b172a2d98b36489968aaae", 0x1000}], 0x4, &(0x7f00000025c0)=[@rights={{0x1c, 0x1, 0x1, [r0, r2, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0xa8, 0x20000040}}, {{&(0x7f0000002680)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000002700)="c376ed1d219b01", 0x7}], 0x1, 0x0, 0x0, 0x4}}, {{&(0x7f0000002780)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002800)="30b6955cd77f352f8a6325416a41db1f886d3ff4002b7dc8346ca4effb3d1a133c7b476aad959e242c8748244a13078b761c380908101c852f6b07e9372b73c8a547eba3d676a3bd6f7fa2cdf0cce3d52fc9ab404c6782b17538e0dcc69c82c6fc5b02d4fbf4b082ca7ee462cc74628bcec088e37f342be3688eaeddddecf4d49a7b656b8cd2ff8d2fe40f8f899a81931cd4df0273427dad4e1ca43ed37ba3666512206e774572d182f8d1aa875177760dae5c0abdcc56900d877fc50c6b97373811bee15767b45dfe62a50e8df7672deb", 0xd1}, {&(0x7f0000002900)="1fbeec4e33fbc37a115ab60a10ad210efa371bb87d2a2b99b9a5d8048855d38424f8fb42db545a7ba3f64080eb838668d3bef85cac18e068698b8777d40cc61c5ac0c564b48461751b13d5004f27cf622e1fe8c0cb17ec", 0x57}, {&(0x7f0000002980)="59032268ec6b92abbd6c076ae38aae63da13db977735996acd616c2e8a1ad4053292e545f511da369b51af7c9153eac24dac4bedb41818d7931704e54f7200eff35a16e6fbd1fc7963ba99c197f4fadf8e8f1a40b3956b02f4560163d15ebd4a7495a3d6fff23206f798f537845a65890e2a7d00d2f82828f0b7479d92a471cbc23c71fe982a39b9b62203ca9de1a7d1837ce8", 0x93}, {&(0x7f0000002a40)="2dad18b46d34c1edc9c4de2511ec1e19b847c914c5feefda9cd8c1fb3297ec2e9af5d6f51cd718270c15a9bcc5d500dde4d9260290499ecc340094f9b9fc87514001058a49925ff82de5602d5c35fde34c52569e854ddef05dba37aa0466a87e79cc8fbabb2ee7bcd0260104ebc8124eba8eee63ab6921f984969a1d7a0f860e06948dc036b9bc3ed2242de6a0bdbad7b06e23abe69c571f5b7ad763487aa1cc900f6525b4d4bdfb94c5e2d5198ae2b443959fc784a9d54baf1b032fd55d51a8679b9d8f41e2e6e108026a05ab524abca5888823c2094c088931131adc8e79d669d6c4661798047427485f3df328411e60abda66ef2779", 0xf7}, {&(0x7f0000002b40)="92be9774d2941eea3c81a1e82d6a55095c523c7043ca2b599180431c129edabd9979a07757aaebb7d5f9f9d58e78741e6cded0129a5f7117a32512c115eca3b07c0ecfe543772356aaa9fa61f3251eac77a2a71507451e96921212c9576c64c41d983e1a16544b01b054012a5b6ce7c4e8224a13bdc73c651bc3b67fa9f917873011b20dd70d85d5466b8dd603db9f5c9a23724d93ab0602d6691490345f3413a5186a27258d96a8cbd0c3c704c0abe2f1ab700f97fc8d55741aaa1649d90e69c632fde9ed10d32c566bdf71fe9ede081e2598c1c9e4532407a4f9256c9544e215459c2387e32773eaf4524c24200ebcc3f860d2", 0xf4}, {&(0x7f0000002c40)="052873e2a9ebee3774f4ab2b", 0xc}, {&(0x7f0000002c80)="f5f4c3df4b3f9a7a48334ea8a59245cf0d81a4d54338dc2849e4987793f006afcd1faf93e3147bcfe94f523c4fa06a8ab0e350cb307d2ff3018349e9dea20bc28861ceeac2a46586b765eced0c670f7d31d979ae7398429bf7", 0x59}, {&(0x7f0000002d00)="02f30c35f3374bff46d3b6213142e92f845c33cf9c14157553f004f744a8c01bba374158bd135b379acea6b60fc044f6e7b2ebbbe6acd7d6b52ca338db3356541ffa9fd4ac0c8c1ffb748962459540014e670a71dfed47501da2b7627be28c", 0x5f}], 0x8, &(0x7f0000002e40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x1c, 0x1, 0x1, [r0, r4, 0xffffffffffffffff]}}], 0xa0, 0x10}}, {{&(0x7f0000002f00)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000002f80)="c6e519c831d35c887244cbed66f40be492390e7b67ce5680f6bd736c3f79682be04262e0352bb2cae1f62c197e8b9a4f9f9123188c7bd921ad4f56f728c18ae34de161e699040b01aaa5cf414ce813942712e2e8051c9c35e2c7d7f04a7dfcedbb5228225355662bb7acbd13b2cfb5d324ca2e98c4c86d47aacb3328f4946c3809fefd519ce0b5fd8559077897d323c4ac082ca3c00d02dc2c8eef0564b674dcda4e1a4c18168093577b02a0906feed8fe310e4b16", 0xb5}, {&(0x7f0000000e00)="a3d44b94af75d0aafa0b1496a486861cb693563ec4bf92286323c9d4ed6bd83243a7184bf45326c4f385e0d9fb79536111b2f6cfbc879c9ad579c7b3887e62974862d4a36451c639b9d13a6a5a68bc7096cf8255e45a772ce1ff322f2b0bf49164d14a65669197ad45e468fd04c0b940b0e6e893a4dd7e41df273ad4fa2e6722c4885d87a620dfef4071fd04c51fb4f70170ef7605c7482f8b5cf4069f223fef8a5fedff5866aa5317db", 0xaa}, {&(0x7f0000003100)="8223991ee7faae77b453bc6118303b31fe4ba309dae68cd446bb6414fc29df6129ba267054aa48f5d28a09d9c33932f39a69b100a1c0935aab46da5a96f2c4fcbb1f0c8fb3390bddb682c81fdc477752b95210d8757f4d7c86f7dac623868e6e04c87f08f51999105d28aed450319ea295bcc1c158dfdd6eed19c46e0385eb4f46b21827cd9d81de15231f24e34be7a4bad09264698ecd5caf854fa9bad5d76fe0df90699537fd277f41c935311e131d5d73b4a1e653e6a34ad8f9c7fb21b3954892401c294a638e2aa4677ed3e0080e9797f8", 0xd3}], 0x3, 0x0, 0x0, 0x8005}}], 0x5, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1fffffffffffff8a, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(0x0, 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001000000000000000000000000ac141400000000000000000000000000000000000000000000000000000000007fc70e0c60c1c8433f307e86550d1dd2e7e599482c15fcdd1d9efeba8e272089dd9ee57d8117b31a26d2e1591250fc57c11332aa5b1274e0435427f4ffae3e00"/127, @ANYRES16=r6, @ANYRES32=0x0, @ANYRES16], 0xac}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b00010069703667726500008300028006000f0000000000080005000000000008001400000000000800040000000000080013"], 0x64}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000000)=0x1f, 0x4) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r9, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/21, 0x15}}], 0x1, 0x2, 0x0) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xc, 0xb, 0x200, &(0x7f0000000880)="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"}) 7.188325207s ago: executing program 1 (id=6116): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a800080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002000000240004802000018007000100"], 0x80}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xf}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffa0}]}, 0x2c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d526ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca6", 0x5f}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="460a00000000000079105e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.857941696s ago: executing program 3 (id=6077): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x10132) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) io_submit(r1, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$lock(r4, 0x11, &(0x7f0000000080)={0x1, 0x2, 0xae, 0x3}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getpgrp(0x0) 6.590434944s ago: executing program 3 (id=6117): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') unshare(0x44070480) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000380)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r1, 0x0, 0x1) creat(&(0x7f00000003c0)='./bus\x00', 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000001c0)=0x0) fcntl$setown(r2, 0x8, r4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000021010000000000000001000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) 6.407130298s ago: executing program 3 (id=6118): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x4008c001, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.232732153s ago: executing program 4 (id=6119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) read$watch_queue(r3, &(0x7f0000000040)=""/202, 0xca) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, r0, 0xb6f69000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x47, &(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRESOCT=r2, @ANYRES64=r1, @ANYRES64=r7, @ANYRES16=r1], &(0x7f0000000180)='syzkaller\x00', 0xa, 0xd4, &(0x7f0000000500)=""/212, 0x0, 0x8, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.dequeue\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[]}, 0x78) write$binfmt_script(r8, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 6.007672175s ago: executing program 6 (id=6120): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0xf42, 0x4) sendto$packet(r0, &(0x7f00000000c0), 0x0, 0x28000000, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}]}, 0x34}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 6.007173793s ago: executing program 1 (id=6121): syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000388d0020410e4d53bd850102feff0902120001000000000904"], 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8802, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x7e0c000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x4, 0x1ff, 0x1, 'queue0\x00', 0x5}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, 0x2, 0x8a2}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}]}, 0x2c}}, 0x84) 5.928862369s ago: executing program 6 (id=6122): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2482ac861b82b520}, 0x20) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001910000004000800000028"], 0x28}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000011c0)=@newlink={0xe0, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0xac, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x9c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0xc554}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x6}}]}, @IFLA_VLAN_INGRESS_QOS={0x64, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb22, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x806, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80, 0x6}}]}]}}}, @IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}]}, @IFLA_MASTER={0x8}]}, 0xe0}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x4) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8100}, 0x4801) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r10, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB], 0x84}}, 0x20000000) syz_usb_connect(0x5, 0x24, &(0x7f0000001240)={{0x12, 0x1, 0x201, 0x8, 0xc9, 0x5d, 0x10, 0x2040, 0x721e, 0x5e2b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x6, 0x60, 0x9, [{{0x9, 0x4, 0x5d, 0x6a, 0x0, 0x1, 0x1, 0x1a}}]}}]}}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) 5.184389029s ago: executing program 4 (id=6123): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) (rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, '@-#\\,##'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) r5 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x314, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x128, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14d8bac1}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16ef09c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76ab9286}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d63ecd9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11c29189}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d059a3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xacc71f2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x83c8831}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e7ffb8d}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62cb67ec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbeb28a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52dd1152}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xee3386c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b790651}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49cd5c56}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a837045}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1acf96f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27767fbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38f15c7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64da8392}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79403a3c}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x10c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x663bb781}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7056b0b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46581b92}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e795852}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe2ca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x16a3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbc5b94a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1613}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee29}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29a6149d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6de0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd219}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3dbc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14ccd888}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4150}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2df21382}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57d334c2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69e1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x274a82fa}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9731}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x655d2774}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29ea}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c7577f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3368}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4783}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51c1e866}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x784b}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x44, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57774cce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63d8bba6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d2d5a6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6284faf5}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fd16d2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}]}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x20004090}, 0x40000) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r7, 0x10, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040840}, 0x20000015) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r8, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r1, 0xa02, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x405c010) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r1, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x24048015) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000a00)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x1}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4481}, 0x4000080) (async, rerun: 32) sendmmsg(r5, &(0x7f00000048c0)=[{{&(0x7f0000000b00)=@l2={0x1f, 0x3, @any, 0x8, 0x2}, 0x80, &(0x7f0000000b80)}}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000000bc0)="7fe280034a06375bcaf3b41ed889d41cbf80face846411d888195f8c980d1e5e55245804df7b6bf417390fe75eb54cee23b5867d517ca0a289aa", 0x3a}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="be0dc3c65febd3d9e617f2fe70f6baaa5a3b9641be2f1f2b057efdd14d7c88ce86cbcdd40e5a3e302048360a831c6901af105a21d15e30cd2e2963daa499f31805e7ca9a72782f418e6d9972ea667c26579fa2eb9f2987490ea9b6f1ea21d5aded58", 0x62}, {&(0x7f0000001c80)="851f23c9977f85214afc64974cad88d822c02129904363e9019d9bd0799414876529f2018109d81c8c7258dea5d16d62db77a4f586c6e9961b375f2d2ddfb2eec095abff0e0f583ddf515b120df82194e4c9c9b302570ee71573a520b669e552377c470074db996d4287954581646b26317d5737a78d05d470857790068377b810a88f571a766bef57a120e059702fc105840f2499295a449a9284196fcb521aa287830a878beec75f9133b9ac6c843ff50f72773d2a8f97d2929778efc4c81bbdc823296de5eeeb492d49277a726576a738ec57be0eb9cc", 0xd8}, {&(0x7f0000001d80)="03de0ada79ec5e7237ba075fa3045469b3429811a06dcac44030533eafa69dfeee0dfa56259ed566f985adbdd86360079379fa42d6c3b1982a4099c7e944dd05abf6bc5792abb6cae46dea22b6fe5ed91ba73025964eabe0168f28416c11aabc1f03df7958a496e854c4322aa21cb80073dddc6a2b1bedd60c653442b9bb043086e1c86c26b1520b69fdf7f06454e380364e1f7c822a25f3f5b152781fee8ab69cf5928212", 0xa5}, {&(0x7f0000001e40)="41f70ae1a1c14da37cc85423807461dd38c9ad37b47fad444676190950970581cb4bb58a796cc6efb326ad440b50096bbb7fed1b86", 0x35}, {&(0x7f0000001e80)="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", 0x1000}, {&(0x7f0000002e80)="37e4bdaba7662779da6df4d5f21ab6621b4c64c76b16b308b79793db9cc276c95845978ee5b42fbab651783954716bc314c270ce8d26f3a882f142640a4d0d861844b7068e64179a1c846fd0ce366115d2c65d", 0x53}, {&(0x7f0000002f00)="4e34d3d212fa2e9fc38f3fd3bfcc831515d073b7d668165e3a0aeb0d6d56d90da078126b9d7cf78271494f2b4f48715e6dd28e56b93919de265e3f3b85d86c971977121bba6cf530c5679e812900851e049e5fbb1d3db717a764f3c34adeddd50963a57c76c9523c1a639696136388e5be9618bc9c5e41fc9fe4f9eb27f797722fa4bbd6fce9f2372ea88517919056ad492379c23d051c9b7cb9c93c06d137604a838b3e29ebac9dc9ce0e131f4a69d4e583593d56c116950b37b1ccef8175f841617ac38a9c46b6a7bd3566ddd7578cf8c11a671937b67bda1ccf335add3e93d65acaa907efb83bdfebb3ed6d09e11d71e8b47628065be4770905ba0b9c65bbdd1c4d9d6b7117b4a00f5738b89b74233359e796ce03cc93e9ceab4ee27990b72d23a8aaa6f9e01284a73f452c9f6495a61b621efa1e2b5ae33d4fe4386bc1749fc7de78ee0446f3af3bcfa3e994cfa17c75b259f74a74d046bc7c3b66680794e8d79e8ee6e9893c0003a7a80aec09867df4e91b6f4f0793d89da571fdf60fdf10e8b3e4a371d42e6faf4b1180f3913aa876a13826e710d96fb2b2cbdf14c8a857250acbd2b453f49f5af938052e4b108a9a279c5327928fb897fefb350cf3854496ec851138dd667ec9e148f0cd8200b9ee7ff5ed0f16caef118c3ad504415e1c846cc5b7ef332b11f7c9ce9528426ee0ab328be6eb438a63817b17d4f3af895793e0453456bbca38aeeec365b2028d34b78941725d8bcd17bb5bbb0024b1282cebf17a716ac5435d421343dcc82dbf71e37521e3fa6b4bd69869b013bac5573e290da582046b39e0fb8106ebc7cfd90ebb4b4e49bd3aa80881022de3dcaa1dd54f48c55326e9385f868f3c07ea7e1c655b8f74f7fc48c347ec1014fee3f9a9ff9060869867d279dd27c8f4b96f557db29f3e6d1dbc50fb8dafebd0eaec8aaab2bb915ba51c17d6410e33dbcc6432cc46b7e028098accfb59931e4416e20354742f179e66a564adf34e2e125fbef2b21b5c5289e353347c4a78b4083f8840b1a575c57bdee047447275291eca2cb28a829646aacbd48bb0e4da34cfa0cd888cf16bea5c7793890c5971949a613dc7940db0d136074bebc601e97add45dbab43efaf7b14deb914338b4c22389258b1a9e947530ab227e5a0602d766e201b5b04193b8c7c119b364a378a85d6b9f5d8373ff3a035abdde8e243e6b58da35182adf55c59b7bf6071dab760babbc85700dd77bde616c820bad3060bd472b597a1ab400e06366ed70fcd6a86313db36279a0c562ae5aa4c4c1b5b62c0c015f7ae3f44491182d7164b0ff365d52d465b98d0720651489a519ed5d92be499a44d3f91ba3e545c71192c7ccfe003c29301f6980495d4b87ee6e393c4a98bf2c086f9d039acf40f6fab881a42c958a34fcd1c3e82846adec63efb9b7f72441083292d40ab08c61195e1ec82b0bde1239fdebde122719083d83092241a4586dc9a654c30b2af936e26fe4b16a8fe3326baac8db65326ea46923f58304441886f73dd4b6cd2e560d0af9e553f69729fc0c9663893caf4cc7736854269acbb2a159c9687f2fca2038d58c66a8209031aa1b40a6deb6647f9ecb144b2e8996131cbadf7a7f2dc9683757808e6317151a4fb13ae357138fb62fe930d922e665d43644f879b9b7c9d207305f0ffda2b13833f8c82f53f2b090df61eaab0cb981398a35b10fd76357682a68b08e514de322fa5184c3f05e7633593dc45a560eb80f143a0d2ac96811a9e4e3eec0e71664138d799b5ded50a2d83c5eb24ab30f5318667521877b75a4b9a253087ac5fac52b000d6d655e1bc190b46aa32a1921be2922281c014052423eb86fe3e8b7158fd26acd879907df687d821a35a461fce343eb72f4ea7a81daf8ea83496b39f6796d365023ef5e39647500d8de859638d1ccf99cd91ff07ba799a83e06f1617f0b604c039791fc8cdf9b573f20772daa0a0b0ef0f6ebeacd65e0937d85297eb9d5b84bae12902469741c72ea7f662ec3448b886fcc96e7714e1c33418567235970ebaaf039d0b0f9aa6a08b30e47f2408966c5d7494adc494e09479fc25c86c4193bf4538db1ed4e203d7ef2886a615858b894b0e9266f316c7c69c714d427c095e94dc89d86ca8ecbbf0388a8b0769e437114edf47e5232e2bb05adc2634aea6ca6eccc2faf8e9bdab943476cf5d857b90fc545e1678002000758c6fd6af71822fb535348868289af8ec6a6dd1d2502ae4ffe733c259ca1aea9737dd2b7488e926d78e843b7d3a2c888e44d720222301bba7669e2f7fa0ec5c68e5ff7a7b0a116e306f687b7321794b0d72c48293205d77929f3585a9c2785167ec624d2e1bc8d3c77b9b8d2511c3c0a49b772082dc3d15bb08883c95e52c081276cd0d25dc6ed40971fd256d297be16909c96ac01ef0c11457459b9ff7b19e33f941ab66882723382067d270141c8ecd55ceaf0e51dd735f6d4cd0ddeb7b65894ff81ec827772a869ce934139fee89c669aa137ba8d95cc2e4542573e9460d2ef6298a55227d67769dc1c487002c2c11cf059cf1ccb23f7dc9ddb0612e5040521f3d6be43bc7ab3614a09d2c5f7355a451c205379af273636607d12ef93329371b467c4338a153bc999d129763f7aea0726c785c69ca6f9e39a6fbe2d775c6adbecc838fde85c1cc8e4ce4113bb9f7a30318911c96fcb390c22f8c80975564d1fbb15ff3fc1d74246b18c5f3905a40830b36a86cec40079af6ba333542b14268d9223abffa73108acd378e102c2c7c05a05f2660b2e92e6dc713fc2d179316655968df72b0d4f5815dc055545df1670235f0b4760738e802379f267f467215c695a8669aabad622e40965f17752d329421465afafc603fa1736647bb2881a1bddec01c4912a7840bc6816f350e8fe6986feaa8ae6dc8e9c4fb227f991be0c0a61df4ce0933506184b694fc955332382f8aa5e38169c740e634b70780332749f2259f048140e9975fed3e747a1ba52361c1a65de6377fb2a28bd18235b58fa8098ca891170334393c51249fe5a0830a0b248e2a090b6f82161a94b4f4313c3f7402e9c8129eb6a1e8c55a97a51b9031cf3fcd83a01ed11d5b583d72900e8ae1886026bb31461327961f22277d51cb4f974009545dc1b61a7718ecb72f0c888551f51ada207221199dc642871da662908939dc0c0fc0386794c6d37a27ccbf594364732ed04edb0053adc4c438430716b14db63b32d7c1686ab67d2c34437d4fa9612e7c2769c079a1aea8c3712709eaab7739803b49d3cbdb41521166e6acb3dfda1b4130d590f11a3cdda293b5aabe1674cd031fd6b6afdec18762d800c8bb7827996e0b08844deddf78caa76ebceda39c391aad5a9dac8ba402b25dc028d4299b5c0b8063aef6407450688261e1a1770f299a5dd932b1f31a1195ce35f0d52938906255c0a6a596c6a7b1147796d0814618116305121a07f0967980d834d75d15bc10cc41728da6f86ad4e687bd3b63e4e88324fbb5a1613d0b150ef32868fe53d38932e3837298b40d0de2e8f42b987a9627612d25b1ebcd42c32e630b348c3a99dff82d345cd2bd8cc71a821d42548a1ce00b204665f70dd0fa06f9957fffe3787625a5e84c2592449d5860bf72e008879f2f10982e40c59ac5eb143d7f441456ac41003f65199ba6b66f685dbee9d09e815879cd9338a9535ce905db7143bedb67aebd38d4f06510aed805436cecce72945a7b3835b1542723e329107acc73a8822d44de99730d1337c0eda6b13404440a69495d73e172f3f984732297cf7bcd22ddbe4ac7688806b6f8f06e205fcf2c21cc2d119cea4dce37f43bb18906204a99624cac620746651085260ba6a8f36392483c042519787a909a763fb6b81c75ff866924e1f285ccf0b581fd239d7c8ddc94a265a99d3d69013f2f28782e7242a8b617cf1e873654f7eecea4ca7459ce49fec93a9fb500302cd5957395a28b454e361e57dc8519355e5bc2392ccff937d647dbc05f6512496399d0f61177fad2b801403a25f4935ca86c4db4c6b91020567c8977d42bed15de832ec191236cff6ec0337a21310d6d9baff02c8cbf09ea1e3f7025939b6d9154e24554fcde1b3aa9fe2ae4e9d45a27985afd13cbe205f3e3cbf100b9ead52e8a2e6d91868b4f5584effa4a67a0cf1587af3f21390c8c7eed09846e1998fffaeeb7b1bbe647f92d272a506b0f6c530865a6a12965153f3ae7f3fff9281619f8c2d0adfa254204fef405e732449979e10d027c27b6b5e1b6d3d8c91b27fc142b8b26a667266c2deee3ad3b47fc6044fe7d78c60fb9be4693b5bdd831d70f2dbfd5d023a5f1d0206a8a9b6156d1981fd526a492c0d77a8b1e6a49ebcfb919902e4441743b378093826ab9db5e691372103c5c9dfc9e9c0e2233d5370215e347568b1b7782310142f01873b0e64a81b8b42050a061262b305d0a8f16a9713f1207748535701c6037701fc417cc4b35d00ae9b5a1c834f555aa59ca965925af6f2002ac986c57e038b244e40b661a45818b9de27c1c8b5719d0bdfead9d7310f41c0e8d7aa074f7d7e42daa42695e7eb9aed2e40b2e98b4ca8d879252961c538386fb9eb71bf5d8cdb1583cd2996c352951b9a0875f3e39860f683d535b13b78d7365702503e72273148482139083a002cb248b94d6b6e5884fbb00bec8224a3e7ce2b92a5f05d9f8eff6025a3a491d744e34fbdbca4ee543c2b2b69f86705a02b06f9ce44988f3f08aa4c36eddc24ed680e3c64ea7c8a41e70170d1f74eb968c735f5b75162b00eeb6d85ba445995c383f4549c031f69acf8ceed1be509b5ac1d599c5d43603a1607e8328e6f32e8a64705336ce624015a80db7fb8477215d8f4394babbc3303fd81daba9f4bc5db8fc179c50515f1568009f2ece5bdf82076b601ebca41d4ff85688a0e178dede808e8fbbfeaa076f7ed1f6139dcfe604cc000e812848f7fca3ef748bb2774c6a767b1bd1e8a2830dfbdca18d593d8c743163b37027420dea7d9f0aff6277bb0be2dd051294a15e006391501e18e02d2973aae182d6378b1eb012af7a0b6bbe348552a41393d28f643514e0d3f5fb82506306371ee2f6010c43e437c8a9f8e42ffa4b0fb2ebc49aff7aaad4537dde96c9d66a61b79a3d6503f683021d52551be52094f9fc255b2ec461a49464b09d7b44b70c1e0f68efb21226f54a1840389fe8ab3fe88a2c96abb09ecfdab86ee8900cbeb8a8b1d761f5f2e39802b78349fd8aa37dbba032b74a5f3e521bf2d2bc1aaf951f773303e2926068681912dfa4a6614abb9bc0bf1dca3870455117c79aea0df087f314f17ec66796fef1ba3b6a0b1bd4c6f9c432e07dfd524e393f120bacebd9968dc87a54fa6346ae119588cf57d205ccf195ec43dd55045e5d09acfffadbfffedb929d451655e857cf0a50824eabd3128dd58e04c03fd93daa41dca18811b80c5e32dabfd86831f66d1db68f67c789b4cfe79642244a92534c751c051cabad6da08fd7ffabbd728f3f56670e6246dca18eed5c60f45a8c464e12dc1a7756139d77b316745108cd419a96cefae698c9054109eb233ea765e9a800b7d6a8f9fb6baf856e662fafa119649e273cbadee33f9c7ef07f3aaa0153af1fd70825940726cd172548e25b4de53a7797184566e7d464c0f335d92d2ff546fac1203ff12310556194e5217ba8fec889febab9746260db29d353bedc0f94b6ed4eb29b68ab286bb47ff620bdd56ff9e323ce6965e7f122ee29d97a6273d5ccdfe168415f3d75ebae4a098", 0x1000}, {&(0x7f0000003f00)="cff4e827bde7b5a8faada3c94a49527de7b6cca36870abbe1a3a61e85f1641f4db95cc9190bfe9cd3ee36e55dbdc434d373c65b3303a92b3d34e729943c91d9ad42aeecd700ff78b270452135f01f5ed29d48469437d5e1be246514d77fa46d3bb0498e9a4efcb8c7b10b95a5d8961dbe258092514b49aef014340fec3f728b9db251f99bf693350b1e8b49f9659a4a857cd27cbe06914944e726ac6583213d0370f164e2ed56290112e272541d43ffe259eb05126d0c72f", 0xb8}], 0xa, &(0x7f0000004080)=[{0x20, 0x112, 0x0, "8eb211b9a71f840a5b03b73a737728ec"}, {0x38, 0x114, 0x200, "c4a273c3d3ed666c89e6bca555f0fe152dc9f4e6dfe856f2426c0bc39d2ca8cf8ac7497c99"}, {0xc8, 0x103, 0x9, "c94b6d96c79cef34da4ac49030c3b942998a6c6c5525bd1a5a5d6969c8343b2588ccb687604e5951a9c589bdfc104624668fc85b31509762cc3212af6f930f026a6efaee7a300ee44451d8a478be8771ddcfdca85300af86f83b269e51758d2077d9ceb06ac070906fa8bcb6e1e1a8c8adbdc1ffa18c4fe6ed7ba862426c1c5c802ce571637a400d58af67ae5b6e82979dbe3e0def4d332d832439790b00f677b164d1bec4900f3a0b43956c35cea958a7"}], 0x120}}, {{&(0x7f00000041c0)=@x25, 0x80, &(0x7f0000004580)=[{&(0x7f0000004240)="0df5cbde9da8ac56ddc4b0446c090f8e827e056d99001de642d6daab7c99a2331d67357f6133233525cc04465937dfdd75e1593444a58f9f4e4b545c2ea20276c99e969c81187b9ccb488fcac703acb8ffd8fdae2e396837182e0dc3fde7777f007df0bd05b06d759522e0d843d5a25dcb74a58b3bc4bb099c1dbecd6b7f8b622064234da3f265a64d712427f51cb1d2aaecca4bdef75395b7d52fd80991e81a23eecb3c6e27a9734419ffbec9c15a2386b5936a69b6446a5f70538dae74ddfd9792242edf051270f13a333f23356015eb2c6006f0876ff955805a066812abc3c7b0505bab6b2227818b4e691674d5", 0xef}, {&(0x7f0000004340)="52d4b27c494d76ae8f1c8a4ac49ef3f697a98bb1b1b6a21255a2625f80fab2051d85b9c2c8451647f800f654bdaf25dc22adc56728e9c7acea6ffaef04688b4f7a06b6714a7164fb2e9557875e041e4921575ae356e1c51e1384bb6b7d0dcc49a0be3d5a8bb1ad59faa1846f2330c25bdbb4e9a1", 0x74}, {&(0x7f00000043c0)="90b0df75281134146aa432e3c953e039690f4645ccbc5e022165a4a0688daff07c0614", 0x23}, {&(0x7f0000004400)="9726be91cc1c2db9ae23e632d2bb5ec97115ca2d7c152a64ea5c54c464b35355784ae6a80dd5f99416c96ad61919272ac3ecbaf0b9f2366dcbcbaec9a53774fd9bfaa7d949956fce6ea241d1960c55480f847e3b63715e825d74858e3f4ab9eb503c8537c2397b48ca7b823ad562519b73c32601734c8b4bfab8361f208c32077a7fd49e5f564872b1582f623c90dd07e23d1f217a05e6a739a991870658a6bc6c0a935eb94b83a535d914df17f31e287e748c46f1b81a420936f40a68a19b1ccb3aecf37affeb71b59c787f2fc4b75a8a0297283e66eab169765d9e67aa93fda5afc7c875b50788f467fe", 0xeb}, {&(0x7f0000004500)="175b2e9c4ae9056606ff79ac3eaf697e24a931405c56a94a3007dcfa45d935b6c225b535bc5b12e598ca84f7b3b1fad56716c84a13785cb67d627d186a17c24c2ad356f63ba4adbe426e2939a94319eebb84f53891452b7dad3f0ae8897b3524c3d61e001ef57c3cfb161cdfc669c6b2bd28f2fc4fca1a5ac4", 0x79}], 0x5, &(0x7f0000004600)=[{0xd8, 0x10c, 0x7, "a6eae2ee8de47a400496bc75212856906a2a90f6aa6b0bc4cd9469309e0da4037e6469b963eb8c6f8571f0f2f30e9d25120275e0fcb90497ef180469831c5bee0a256dab27c1287df68cc88fd9f2c660f96e0268b9b7c51195b3663910c2d1967e2bb0a213c8f11ae18e44b20c90201ce1002f30c7b16e5e94bc67432282d1758eddddf14fa0516e351c7d7fe77e16509f76b0786374dbd306f0dd29c87b61b4b08ca011ccfb0dc994a034d0f1ffd67a996d714a78def1543569f998d92325c862fd"}, {0x80, 0x6, 0xcd49, "87771123a89349ef88e5aa1a87179d35e6940b5c2f86ef9e3ce4105afddc91ea12aaf5a93902129925257c2f3dbc2acbdf45beae508ef70811eb26ac1ef4e615979f7ef9b7f7ba945a2bc07f61db191082a1975bc15835b0fb4191052b46e6ee98ee33d75ba5bc227bdbb9007771"}, {0xc0, 0x119, 0x80, "0354a509541d27856e3827a9fbfddf48273c53fff33aac85b9fc20efd6e59dc7bae1b9e46031ecc79e61fa422b2dabbf9627ef2bb29b22c8a868d9583974b73a78d44db6e18bc0128313ca648069615345fbf473c50809bab8b9ae577f4475a20da863b46edbb39bfd56ad457a3d8d4bfabed3882715e1831edac1d57c59fec9669e48a1ec9b7d69865b768448f6c3a4478cfb32a99fd48d768bd0e642b26dad8fdb5ae36d477f179b"}, {0xa0, 0x102, 0x5, "b937a4d0ab747aa0ecb40c6e8c3b4579513586815da73bc7bba6ba543cbf7ca3599993d3da0ea832603ad38215b0b6b8f321458d30e0a1444bd46ad5bf18af05493c632a93044fb6220f83d43903acfdc63c645b5c65be05f8e0e014157c1292adcbfa070a74fb1ca2e900939cbe4864a9905e643c7b64682cb4a47a07f859ee5ee7df955680024d86b1b09f9cb18935"}], 0x2b8}}], 0x3, 0x0) (rerun: 32) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000049c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000004a80)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004a40)={&(0x7f0000004a00)={0x30, r11, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x30}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x30}}, 0x10) (async, rerun: 64) r12 = socket$kcm(0x29, 0x5, 0x0) (rerun: 64) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r13, &(0x7f0000004bc0)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004b80)={&(0x7f0000004b00)={0x80, r11, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x80}}, 0x4000004) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000004c00)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r14, 0xc00c642e, &(0x7f0000004c40)={0x0, 0x0, r12}) r15 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000004c80), 0xb1d354800909df78, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r15, 0xc01064b3, &(0x7f0000004cc0)) (async) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r16, &(0x7f0000004fc0)={&(0x7f0000004d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004f80)={&(0x7f0000004d40)={0x238, r11, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xb570, 0x13}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0xbb, 0x5b, "c2d5eb3fb2dc066db6553b97010a45e2b29287c8d8ec3e97d9e6dd9bae8071cd9d7e2dbe7149098a1b3b9da81e7581e48587593e0f59abaacfc33b03fa829add2a06d52ac1e496e3929fad14795056d272f3b7552e8cb865f4a00d973da82f368d2daab859dc0bd41345c44743e09cdc899108b36fffbb126cdc397613d218e5ffb78d7d678f0599ef37e4ea459ce06ff5084b36e74fa3a2f7d140ced7e51a81873dd0845e7e65cbe0ae4058bcc094707016edd30dd40c"}, @NL80211_ATTR_FRAME_MATCH={0x91, 0x5b, "34a713be05fa6ca7ceec2f7b84c62c5f7a629b6b2fef33a6ef8b2c02e4ee57044aa642181cf4277fb5762ad3758f91972641b0279993e80ac7cd5f7056b29eb0f7e395760dba6e9e3ec7979629f692270715a8e7f6e601a6bf662887cdd0b3f25ce041aaa5109a09fc1a49a95c2ff320b45a707957c8d00948a06046b35871c847dd644ac37b1ec8df54711204"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_MATCH={0xb0, 0x5b, "3732fde57e9f6377275c07c933f5a3bcc1187d3a5e6bb1ddf164e68914d92a3c4d9de0d0f1c41072a25799891547a9a02b479751106aaebaec35ced1d16ec182538d0551532d6df5fa1872aaeaab1bba35db54db110d58bd81fdd97a9e89499ac2405455fd510d4dc6d3df19f8ac80406978c5bb114f1d663287c544f7e7af0b6dfc4ec9768a068e01c1c4b5399172c9b15f766a2ff91209deb344e5ec950bc8f5d3c19f6aa2f8819f6f9ac6"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x238}, 0x1, 0x0, 0x0, 0x41}, 0x4c040) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x2c, 0x2, 0x6, 0x401, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x840) (rerun: 64) 5.148503323s ago: executing program 4 (id=6124): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@assoc={0x18, 0x117, 0x4, 0xe1}], 0x18, 0x20000080}, 0x4000) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x23, &(0x7f00000001c0)={&(0x7f00000001c0)=ANY=[], 0x12f4}}, 0x240000c4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x4800003a, r5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000200)=ANY=[], 0x118) recvmmsg(r1, &(0x7f0000007680)=[{{0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000000)=""/11, 0x3}, {&(0x7f0000000080)=""/79, 0x4f}], 0x3, 0x0, 0x46}, 0x9}], 0x1, 0x12100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de8500000004000000", @ANYRES32=r8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/60, 0x3c}], 0x1}, 0x0) 4.099738586s ago: executing program 1 (id=6125): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bf900000000000000701000000feffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6f) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x64, &(0x7f0000000640)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x2a, 0x2f, 0x0, @empty, @mcast2, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8}, {"4fb59db2f27cdb20b6dfbe21877f232da46a3c161cc6"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) prlimit64(r2, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6, &(0x7f00000001c0)=0xffffffffffffffff, 0x80, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84080) ioctl$TIOCGETD(r6, 0x5424, &(0x7f0000000180)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x1) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x2) ioctl$TCXONC(r7, 0x4b3a, 0x0) 4.083249513s ago: executing program 3 (id=6126): io_uring_setup(0x9, &(0x7f00000002c0)={0x0, 0x2d7d, 0x0, 0xffffffff}) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206050000000000000000"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a8682"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030301010000000000000000000000000c000200"], 0x20}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0x0, 0x3, 0x0, 0x0, 0x9}, 0xc) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) pread64(r0, &(0x7f0000000380)=""/83, 0x53, 0x3) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000500)={@empty}, &(0x7f0000000540)=0x14) sendmmsg$inet(r6, &(0x7f00000007c0), 0x0, 0x40488e4) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=within_size']) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) 4.080451524s ago: executing program 4 (id=6127): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x10132) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) io_submit(r1, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$lock(r4, 0x11, &(0x7f0000000080)={0x1, 0x2, 0xae, 0x3}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getpgrp(0x0) 2.398892299s ago: executing program 3 (id=6129): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x18, r4, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) keyctl$clear(0x7, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r7, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 2.284572081s ago: executing program 6 (id=6130): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x0, 0xd24c}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="5800000000000000290000003900000004020201"], 0x58}, 0x24004800) 2.240378848s ago: executing program 4 (id=6131): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x1f8, 0x30, 0x1, 0x0, 0x0, {}, [{0x1e4, 0x1, [@m_skbedit={0x80, 0x11, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0x4b, 0x6, "e97a4e77d048d7bc5d19feaaca5507df968b8e39b85b0454fb7d5797e2f95f092a190cb7660ff815ac4eccb2f5ddd96044c8d9ae4724ac0df3176c2b685a672d9ffb6d1a28d1a0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x160, 0x1a, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1000000, 0xfffffffc, 0x8, 0x41, 0x8000}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x105, 0x6, "652629e9380615f6d7ffc956f5464d27ec067c65a2bc87741dcc3ea4231f67896d381faedcd1c9dacf101250af7b031f72f279918104a8cf3d7f65b800a31f9aaa8ede5061469f3be5893ddcda6ded33f800dfeada138da89c60600aeb837209d889c13e5225879dbb0d20bc56c5d5ffae9d8b924d2e6b8a77d51781a683ed7115eff5794a3ceef502dded0bff122bc9729f7b2c6c7c37417fd9db054fe9b799086389ef7a31d70c572ef3ed2f4d53c0d23fb730d3cab4f398f3a17ef69dca46b7b9a56b46c6125cc1b10009de80923ab6f4895d5fbf65f2a248d1a77cff835973e9c0e4346ce84800"/257}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$ttyS3(0xffffff9c, &(0x7f0000000340), 0x40900, 0x0) ioctl$KDENABIO(r1, 0x4b36) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='ufs\x00', 0x18642, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)=@xdp={0x2c, 0x8, r2, 0x38}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="0bc2a715c4db66f6bf13813dc43910f57f643d2eccd3f81376013fced3515fc408ea19fb316e1969a9b34d85ea858b6383cde8fc9be3fabc447d7f1e61c7a9d4e9aa6e79108bc0875f4023c4d9ea1847e9be4e9f2a4a63ee291c648c519487d4ba60f387eddf1afcad0e216eca2220f45f1b812ff528a131c18ff9a40b9ca6385ad3f64f9a686d201f4db2732d88b24b170b8d2bc513a51ee18acf4aea1b4ddc81d48b397e1f358b8c", 0xa9}], 0x1, &(0x7f0000000240)=[@txtime={{0x18, 0x1, 0x3d, 0xb}}], 0x18}, 0x24000cc1) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = fanotify_init(0x8, 0x1000) fanotify_mark(r6, 0x7c, 0x50000008, r5, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x30314742, 0x0, 0x0, [{0x1}], 0x0, 0x0, 0x0, 0x0, 0x1}}) syz_usb_connect(0x2, 0xfffffffffffffe02, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c01}}, {0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}]}) socket$nl_generic(0x10, 0x3, 0x10) 1.155036584s ago: executing program 6 (id=6132): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a800080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002000000240004802000018007000100"], 0x80}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xf}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffa0}]}, 0x2c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d526ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca6", 0x5f}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="460a00000000000079105e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 699.051221ms ago: executing program 1 (id=6133): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20044840) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x840, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x488000, 0x0) fchdir(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') fspick(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x1) socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000240)=0x214) ioctl$TCSETAF(r2, 0x5402, &(0x7f0000000300)={0xe1e, 0x3, 0xffff, 0x0, 0x5, "fafd0001000000dd"}) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000000)={0x4, 0x2, 0x0, 0x8001, 0x16, "7297477fe0d91204"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) getpid() socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000002200)=ANY=[@ANYRESOCT=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='mm_page_free\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x16}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x48, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x0, 0x0]}, {}, {}, {0xa888, 0x88be, 0x81000000}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x4}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) r7 = io_uring_setup(0x79af, &(0x7f0000001240)={0x0, 0x2875}) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r7, 0xffffffffffffffff, 0x200000000000000) 0s ago: executing program 6 (id=6134): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r3, 0x401) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) ustat(0xfffffffeffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8=r7], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000140)={0x16f, @time={0xd511}}) kernel console output (not intermixed with test programs): escriptor or descriptor too short [ 2102.320532][ T47] usb 3-1: not running at top speed; connect to a high speed hub [ 2102.331516][ T47] usb 3-1: config 81 has an invalid interface number: 159 but max is 0 [ 2102.340903][ T47] usb 3-1: config 81 has no interface number 0 [ 2102.415638][ T47] usb 3-1: config 81 interface 159 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2102.461147][ T47] usb 3-1: config 81 interface 159 has no altsetting 0 [ 2102.480288][T27114] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5808'. [ 2102.498449][ T47] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=fb.61 [ 2102.524845][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2102.554982][ T47] usb 3-1: Product: syz [ 2102.576469][ T47] usb 3-1: Manufacturer: syz [ 2102.589592][ T47] usb 3-1: SerialNumber: syz [ 2102.643792][T27096] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2102.721217][T27118] usb usb8: usbfs: process 27118 (syz.6.5810) did not claim interface 0 before use [ 2102.767527][T27118] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2102.785193][T27118] overlayfs: failed to set xattr on upper [ 2102.802475][T27118] overlayfs: ...falling back to redirect_dir=nofollow. [ 2102.835062][T27118] overlayfs: ...falling back to index=off. [ 2102.857330][T27118] overlayfs: ...falling back to uuid=null. [ 2102.876131][ T47] kobil_sct 3-1:81.159: KOBIL USB smart card terminal converter detected [ 2102.902133][T27121] FAULT_INJECTION: forcing a failure. [ 2102.902133][T27121] name failslab, interval 1, probability 0, space 0, times 0 [ 2102.903921][ T47] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2102.925733][T27121] CPU: 0 UID: 0 PID: 27121 Comm: syz.4.5812 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 2102.936536][T27121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2102.946621][T27121] Call Trace: [ 2102.949918][T27121] [ 2102.952862][T27121] dump_stack_lvl+0x241/0x360 [ 2102.954198][ T47] usb 3-1: USB disconnect, device number 21 [ 2102.957552][T27121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2102.957581][T27121] ? __pfx__printk+0x10/0x10 [ 2102.957605][T27121] ? fs_reclaim_acquire+0x93/0x130 [ 2102.957628][T27121] ? __pfx___might_resched+0x10/0x10 [ 2102.957652][T27121] ? dynamic_dname+0x141/0x1b0 [ 2102.957679][T27121] should_fail_ex+0x3b0/0x4e0 [ 2102.957702][T27121] should_failslab+0xac/0x100 [ 2102.957725][T27121] __kmalloc_noprof+0xdd/0x4c0 [ 2102.957745][T27121] ? tomoyo_encode+0x26f/0x540 [ 2102.957772][T27121] tomoyo_encode+0x26f/0x540 [ 2102.957794][T27121] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 2103.017519][T27121] tomoyo_realpath_from_path+0x59e/0x5e0 [ 2103.023171][T27121] tomoyo_path_number_perm+0x236/0x860 [ 2103.028635][T27121] ? __lock_acquire+0x1397/0x2100 [ 2103.033659][T27121] ? tomoyo_path_number_perm+0x206/0x860 [ 2103.039291][T27121] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2103.045296][T27121] ? __fget_files+0x2a/0x410 [ 2103.049889][T27121] ? __fget_files+0x2a/0x410 [ 2103.054482][T27121] security_file_ioctl+0xc6/0x2a0 [ 2103.059524][T27121] __se_sys_ioctl+0x46/0x170 [ 2103.064137][T27121] do_syscall_64+0xf3/0x230 [ 2103.068649][T27121] ? clear_bhb_loop+0x35/0x90 [ 2103.073335][T27121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2103.079239][T27121] RIP: 0033:0x7ff81897fed9 [ 2103.083655][T27121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2103.103356][T27121] RSP: 002b:00007ff819830058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2103.111774][T27121] RAX: ffffffffffffffda RBX: 00007ff818b45fa0 RCX: 00007ff81897fed9 [ 2103.119746][T27121] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 2103.127714][T27121] RBP: 00007ff8198300a0 R08: 0000000000000000 R09: 0000000000000000 [ 2103.135679][T27121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2103.143645][T27121] R13: 0000000000000000 R14: 00007ff818b45fa0 R15: 00007ffd5d10d468 [ 2103.151628][T27121] [ 2103.178705][T27117] ALSA: mixer_oss: invalid OSS volume '' [ 2103.189821][T27121] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2103.196115][ T47] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2103.233214][ T47] kobil_sct 3-1:81.159: device disconnected [ 2103.308939][T26312] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 2103.670219][T27133] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2103.676795][T26312] usb 2-1: config 4 has an invalid interface number: 231 but max is 0 [ 2103.690416][T26312] usb 2-1: config 4 has no interface number 0 [ 2103.702372][T26312] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2104.361532][T26312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2104.369732][T26312] usb 2-1: Product: syz [ 2104.373939][T26312] usb 2-1: Manufacturer: syz [ 2104.378680][T26312] usb 2-1: SerialNumber: syz [ 2104.389038][T26312] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 2104.712160][T27142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5817'. [ 2104.961722][T26312] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2105.040432][T26312] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 2105.375312][T26312] usb 2-1: USB disconnect, device number 55 [ 2106.313514][T27156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5821'. [ 2106.371540][T27156] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5821'. [ 2106.946727][T27167] netlink: 'syz.3.5825': attribute type 39 has an invalid length. [ 2106.982167][T27168] ufs: You didn't specify the type of your ufs filesystem [ 2106.982167][T27168] [ 2106.982167][T27168] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 2106.982167][T27168] [ 2106.982167][T27168] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 2107.092329][T27168] ufs: ufstype=old is supported read-only [ 2107.116237][T27168] ufs: ufs_fill_super(): bad magic number [ 2107.934231][T27174] FAULT_INJECTION: forcing a failure. [ 2107.934231][T27174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2108.070233][T27174] CPU: 1 UID: 0 PID: 27174 Comm: syz.6.5827 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 2108.081052][T27174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2108.091130][T27174] Call Trace: [ 2108.094433][T27174] [ 2108.097390][T27174] dump_stack_lvl+0x241/0x360 [ 2108.102078][T27174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2108.107273][T27174] ? __pfx__printk+0x10/0x10 [ 2108.111879][T27174] ? snprintf+0xda/0x120 [ 2108.116154][T27174] should_fail_ex+0x3b0/0x4e0 [ 2108.120865][T27174] _copy_to_user+0x31/0xb0 [ 2108.125309][T27174] simple_read_from_buffer+0xca/0x150 [ 2108.130712][T27174] proc_fail_nth_read+0x1e9/0x250 [ 2108.135771][T27174] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2108.141329][T27174] ? rw_verify_area+0x55e/0x6f0 [ 2108.146180][T27174] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2108.151718][T27174] vfs_read+0x1fc/0xb70 [ 2108.155876][T27174] ? __pfx___mutex_lock+0x10/0x10 [ 2108.160902][T27174] ? __pfx_vfs_read+0x10/0x10 [ 2108.165585][T27174] ? __fget_files+0x2a/0x410 [ 2108.170170][T27174] ? __fget_files+0x395/0x410 [ 2108.174842][T27174] ? __fget_files+0x2a/0x410 [ 2108.179438][T27174] ksys_read+0x18f/0x2b0 [ 2108.183693][T27174] ? __pfx_ksys_read+0x10/0x10 [ 2108.188466][T27174] ? do_syscall_64+0x100/0x230 [ 2108.193233][T27174] ? do_syscall_64+0xb6/0x230 [ 2108.197908][T27174] do_syscall_64+0xf3/0x230 [ 2108.202415][T27174] ? clear_bhb_loop+0x35/0x90 [ 2108.207087][T27174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2108.212980][T27174] RIP: 0033:0x7f9bceb7e8ec [ 2108.217397][T27174] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2108.236999][T27174] RSP: 002b:00007f9bcf936050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2108.245424][T27174] RAX: ffffffffffffffda RBX: 00007f9bced45fa0 RCX: 00007f9bceb7e8ec [ 2108.253393][T27174] RDX: 000000000000000f RSI: 00007f9bcf9360b0 RDI: 0000000000000004 [ 2108.261359][T27174] RBP: 00007f9bcf9360a0 R08: 0000000000000000 R09: 0000000000000000 [ 2108.269333][T27174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2108.277296][T27174] R13: 0000000000000000 R14: 00007f9bced45fa0 R15: 00007ffe299a9ca8 [ 2108.285275][T27174] [ 2108.424355][T27188] FAULT_INJECTION: forcing a failure. [ 2108.424355][T27188] name failslab, interval 1, probability 0, space 0, times 0 [ 2108.448062][T27188] CPU: 0 UID: 0 PID: 27188 Comm: syz.3.5832 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 2108.458880][T27188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2108.468953][T27188] Call Trace: [ 2108.472243][T27188] [ 2108.475171][T27188] dump_stack_lvl+0x241/0x360 [ 2108.479853][T27188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2108.485058][T27188] ? __pfx__printk+0x10/0x10 [ 2108.489649][T27188] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 2108.495554][T27188] ? __pfx___might_resched+0x10/0x10 [ 2108.500907][T27188] should_fail_ex+0x3b0/0x4e0 [ 2108.505598][T27188] should_failslab+0xac/0x100 [ 2108.510280][T27188] ? __get_vm_area_node+0x132/0x2d0 [ 2108.515481][T27188] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 2108.521208][T27188] __get_vm_area_node+0x132/0x2d0 [ 2108.526244][T27188] __vmalloc_node_range_noprof+0x344/0x1380 [ 2108.532145][T27188] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 2108.537705][T27188] ? mark_lock+0x9a/0x360 [ 2108.542059][T27188] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2108.548396][T27188] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 2108.553937][T27188] __vmalloc_noprof+0x79/0x90 [ 2108.558620][T27188] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 2108.564167][T27188] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 2108.569535][T27188] ? bpf_prog_alloc+0x28/0x1b0 [ 2108.574299][T27188] bpf_prog_alloc+0x3a/0x1b0 [ 2108.578883][T27188] bpf_prog_load+0x7f7/0x20f0 [ 2108.583586][T27188] ? __pfx_bpf_prog_load+0x10/0x10 [ 2108.588701][T27188] ? __pfx___might_resched+0x10/0x10 [ 2108.594006][T27188] ? __might_fault+0xc6/0x120 [ 2108.598697][T27188] __sys_bpf+0x4ee/0x810 [ 2108.602943][T27188] ? __pfx___sys_bpf+0x10/0x10 [ 2108.607717][T27188] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2108.613699][T27188] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2108.620027][T27188] ? do_syscall_64+0x100/0x230 [ 2108.624799][T27188] __x64_sys_bpf+0x7c/0x90 [ 2108.629650][T27188] do_syscall_64+0xf3/0x230 [ 2108.634153][T27188] ? clear_bhb_loop+0x35/0x90 [ 2108.638827][T27188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2108.644733][T27188] RIP: 0033:0x7fd65837fed9 [ 2108.649146][T27188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2108.668755][T27188] RSP: 002b:00007fd659164058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2108.677168][T27188] RAX: ffffffffffffffda RBX: 00007fd658545fa0 RCX: 00007fd65837fed9 [ 2108.685152][T27188] RDX: 0000000000000090 RSI: 0000000020000840 RDI: 0000000000000005 [ 2108.693132][T27188] RBP: 00007fd6591640a0 R08: 0000000000000000 R09: 0000000000000000 [ 2108.701107][T27188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2108.709085][T27188] R13: 0000000000000000 R14: 00007fd658545fa0 R15: 00007ffd17a71538 [ 2108.717069][T27188] [ 2108.805005][T27188] syz.3.5832: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2108.823492][T27188] CPU: 1 UID: 0 PID: 27188 Comm: syz.3.5832 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 2108.834288][T27188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2108.844362][T27188] Call Trace: [ 2108.847663][T27188] [ 2108.850620][T27188] dump_stack_lvl+0x241/0x360 [ 2108.855329][T27188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2108.860554][T27188] ? __pfx__printk+0x10/0x10 [ 2108.865178][T27188] ? __rcu_read_unlock+0xa1/0x110 [ 2108.870225][T27188] warn_alloc+0x278/0x410 [ 2108.874593][T27188] ? __pfx_warn_alloc+0x10/0x10 [ 2108.879465][T27188] ? __kasan_kmalloc+0x23/0xb0 [ 2108.884251][T27188] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 2108.890257][T27188] ? __get_vm_area_node+0x280/0x2d0 [ 2108.895484][T27188] __vmalloc_node_range_noprof+0x369/0x1380 [ 2108.901406][T27188] ? mark_lock+0x9a/0x360 [ 2108.905781][T27188] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2108.912139][T27188] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 2108.917702][T27188] __vmalloc_noprof+0x79/0x90 [ 2108.922396][T27188] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 2108.927962][T27188] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 2108.933352][T27188] ? bpf_prog_alloc+0x28/0x1b0 [ 2108.938120][T27188] bpf_prog_alloc+0x3a/0x1b0 [ 2108.942707][T27188] bpf_prog_load+0x7f7/0x20f0 [ 2108.947394][T27188] ? __pfx_bpf_prog_load+0x10/0x10 [ 2108.952501][T27188] ? __pfx___might_resched+0x10/0x10 [ 2108.957794][T27188] ? __might_fault+0xc6/0x120 [ 2108.962474][T27188] __sys_bpf+0x4ee/0x810 [ 2108.966714][T27188] ? __pfx___sys_bpf+0x10/0x10 [ 2108.971481][T27188] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2108.977460][T27188] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2108.983781][T27188] ? do_syscall_64+0x100/0x230 [ 2108.988548][T27188] __x64_sys_bpf+0x7c/0x90 [ 2108.992968][T27188] do_syscall_64+0xf3/0x230 [ 2108.997470][T27188] ? clear_bhb_loop+0x35/0x90 [ 2109.002141][T27188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2109.008032][T27188] RIP: 0033:0x7fd65837fed9 [ 2109.012440][T27188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2109.032040][T27188] RSP: 002b:00007fd659164058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2109.040452][T27188] RAX: ffffffffffffffda RBX: 00007fd658545fa0 RCX: 00007fd65837fed9 [ 2109.048418][T27188] RDX: 0000000000000090 RSI: 0000000020000840 RDI: 0000000000000005 [ 2109.056381][T27188] RBP: 00007fd6591640a0 R08: 0000000000000000 R09: 0000000000000000 [ 2109.064351][T27188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2109.072318][T27188] R13: 0000000000000000 R14: 00007fd658545fa0 R15: 00007ffd17a71538 [ 2109.080293][T27188] [ 2109.101906][T27188] Mem-Info: [ 2109.110625][T27188] active_anon:5921 inactive_anon:5301 isolated_anon:0 [ 2109.110625][T27188] active_file:20157 inactive_file:42496 isolated_file:0 [ 2109.110625][T27188] unevictable:768 dirty:454 writeback:0 [ 2109.110625][T27188] slab_reclaimable:7076 slab_unreclaimable:124160 [ 2109.110625][T27188] mapped:31218 shmem:7014 pagetables:1007 [ 2109.110625][T27188] sec_pagetables:0 bounce:0 [ 2109.110625][T27188] kernel_misc_reclaimable:0 [ 2109.110625][T27188] free:1249474 free_pcp:1939 free_cma:0 [ 2109.160727][T27188] Node 0 active_anon:23684kB inactive_anon:21204kB active_file:80276kB inactive_file:169984kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124796kB dirty:1816kB writeback:0kB shmem:26520kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12704kB pagetables:4028kB sec_pagetables:0kB all_unreclaimable? no [ 2109.208114][T27188] Node 1 active_anon:0kB inactive_anon:0kB active_file:352kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2109.242332][T27188] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2109.323974][T27188] lowmem_reserve[]: 0 2465 2466 0 0 [ 2109.392159][T27197] smc: net device wg0 applied user defined pnetid SYZ0 [ 2109.399786][T27197] netlink: 'syz.1.5837': attribute type 39 has an invalid length. [ 2109.435486][T27188] Node 0 DMA32 free:1082068kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:12944kB inactive_anon:21344kB active_file:79500kB inactive_file:169932kB unevictable:1536kB writepending:1784kB present:3129332kB managed:2552832kB mlocked:0kB bounce:0kB free_pcp:11908kB local_pcp:11204kB free_cma:0kB [ 2109.467164][T27188] lowmem_reserve[]: 0 0 0 0 0 [ 2109.472069][T27188] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:776kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2109.499262][T27188] lowmem_reserve[]: 0 0 0 0 0 [ 2109.504145][T27188] Node 1 Normal free:3907316kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:352kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2109.533240][T27188] lowmem_reserve[]: 0 0 0 0 0 [ 2109.537983][T27188] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2109.550729][T27188] Node 0 DMA32: 900*4kB (UME) 591*8kB (UME) 458*16kB (UME) 515*32kB (UME) 304*64kB (UME) 154*128kB (UME) 102*256kB (UME) 67*512kB (UME) 42*1024kB (UM) 19*2048kB (UME) 212*4096kB (UM) = 1081992kB [ 2109.570170][T27188] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2109.582146][T27188] Node 1 Normal: 177*4kB (UME) 66*8kB (UME) 36*16kB (UME) 183*32kB (UE) 80*64kB (UE) 24*128kB (UE) 13*256kB (UM) 8*512kB (UM) 7*1024kB (UME) 5*2048kB (UE) 944*4096kB (M) = 3907316kB [ 2109.600323][T27188] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2109.611101][T27188] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2109.621934][T27188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2109.632710][T27188] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2109.643537][T27188] 66974 total pagecache pages [ 2109.648238][T27188] 2 pages in swap cache [ 2109.654364][T27188] Free swap = 124736kB [ 2109.658519][T27188] Total swap = 124996kB [ 2109.665189][T27188] 2097051 pages RAM [ 2109.668997][T27188] 0 pages HighMem/MovableOnly [ 2109.676001][T27188] 426991 pages reserved [ 2109.680160][T27188] 0 pages cma reserved [ 2109.854508][T27197] smc: removing net device wg0 with user defined pnetid SYZ0 [ 2110.700949][T20602] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2112.090790][T20602] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2112.108307][T20602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.142183][T20602] usb 3-1: config 0 descriptor?? [ 2112.601877][T20602] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 2112.629167][T20602] [drm] Initialized udl on minor 2 [ 2112.638232][ T25] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 2112.732500][T26312] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2112.808203][T20602] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2112.823606][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 2112.853117][T20602] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 2112.861195][ T25] usb 7-1: config 0 has no interfaces? [ 2112.869887][ T25] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2112.885394][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.893748][ T47] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2112.903986][ T47] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 2112.912359][T20602] usb 3-1: USB disconnect, device number 22 [ 2112.929382][ T25] usb 7-1: config 0 descriptor?? [ 2112.963214][T26312] usb 5-1: Using ep0 maxpacket: 8 [ 2112.985007][T26312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2113.017015][T26312] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2113.026117][T26312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2113.074835][T26312] usb 5-1: config 0 descriptor?? [ 2113.241987][T20602] usb 7-1: USB disconnect, device number 44 [ 2113.303274][T26312] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2113.518963][T27229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2113.538542][T27229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2113.575629][T26312] usb 5-1: USB disconnect, device number 35 [ 2113.721701][ T25] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2113.782786][T27245] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5848'. [ 2113.884148][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.906986][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2113.933957][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2113.943549][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.951724][ T25] usb 4-1: Product: syz [ 2113.963176][ T25] usb 4-1: Manufacturer: syz [ 2113.971903][ T25] usb 4-1: SerialNumber: syz [ 2113.987604][ T25] cdc_ether 4-1:1.0: skipping garbage [ 2113.997518][T27247] serio: Serial port ptm0 [ 2113.998645][ T25] usb 4-1: bad CDC descriptors [ 2114.023023][T27250] netlink: 'syz.6.5850': attribute type 39 has an invalid length. [ 2114.281809][T27240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2114.342410][T27240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2114.355105][ T25] usb 4-1: USB disconnect, device number 39 [ 2114.740083][T27255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5852'. [ 2115.225295][T27260] loop6: detected capacity change from 0 to 524287999 [ 2115.519044][T26312] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2115.710530][T26312] usb 4-1: Using ep0 maxpacket: 16 [ 2115.724715][T26312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2115.759922][T26312] usb 4-1: config 0 has an invalid interface number: 93 but max is 0 [ 2115.796286][T26312] usb 4-1: config 0 has no interface number 0 [ 2115.836593][T26312] usb 4-1: config 0 interface 93 has no altsetting 0 [ 2115.887295][T26312] usb 4-1: New USB device found, idVendor=2040, idProduct=721e, bcdDevice=5e.2b [ 2115.903388][T26312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.924074][T26312] usb 4-1: Product: syz [ 2115.928352][T26312] usb 4-1: Manufacturer: syz [ 2115.932967][T26312] usb 4-1: SerialNumber: syz [ 2115.951106][T26312] usb 4-1: config 0 descriptor?? [ 2116.106161][ T974] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 2116.229140][T26312] usb 4-1: unknown interface protocol 0x1a, assuming v1 [ 2116.271330][T26312] usb 4-1: cannot find UAC_HEADER [ 2116.333917][T26312] snd-usb-audio 4-1:0.93: probe with driver snd-usb-audio failed with error -22 [ 2116.375341][ T974] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2116.406332][T26312] usb 4-1: USB disconnect, device number 40 [ 2116.415603][ T974] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2116.463590][ T974] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2116.492475][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2116.565059][ T974] usb 5-1: Product: syz [ 2116.572958][ T974] usb 5-1: Manufacturer: syz [ 2116.600154][ T974] usb 5-1: SerialNumber: syz [ 2116.717195][T27284] ubi0: attaching mtd0 [ 2116.730223][T26369] udevd[26369]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.93/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2116.757936][T27284] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 2116.954150][T27286] netlink: 'syz.2.5860': attribute type 1 has an invalid length. [ 2116.962839][T27286] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5860'. [ 2117.101243][T27293] netlink: 'syz.3.5861': attribute type 39 has an invalid length. [ 2117.746870][ T974] usb 5-1: 0:2 : does not exist [ 2117.769717][ T974] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 2117.887074][ T974] usb 5-1: USB disconnect, device number 36 [ 2118.407891][ T974] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2118.780760][ T25] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 2119.031447][ T25] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 2119.250790][ T974] usb 5-1: config 0 has an invalid interface number: 156 but max is 0 [ 2119.259014][ T974] usb 5-1: config 0 has no interface number 0 [ 2119.265375][ T974] usb 5-1: config 0 interface 156 has no altsetting 0 [ 2119.272351][ T974] usb 5-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 2119.284567][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2119.297977][ T25] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2119.307886][ T25] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2119.315971][ T25] usb 7-1: Manufacturer: syz [ 2119.324708][ T25] usb 7-1: config 0 descriptor?? [ 2119.367762][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2119.431881][ T974] usb 5-1: config 0 descriptor?? [ 2119.431906][ T25] rc_core: IR keymap rc-hauppauge not found [ 2119.443090][ T25] Registered IR keymap rc-empty [ 2119.448644][ T25] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 2119.454862][ T974] hub 5-1:0.156: bad descriptor, ignoring hub [ 2119.466451][ T25] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input77 [ 2119.477000][ T974] hub 5-1:0.156: probe with driver hub failed with error -5 [ 2119.491697][T27319] input: syz0 as /devices/virtual/input/input78 [ 2119.518972][ T974] option 5-1:0.156: GSM modem (1-port) converter detected [ 2119.577661][T26369] udevd[26369]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2119.659593][T27322] netlink: 'syz.1.5870': attribute type 32 has an invalid length. [ 2119.668095][T20602] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2119.780712][T27320] rc rc0: two consecutive events of type space [ 2119.804800][T26313] usb 5-1: USB disconnect, device number 37 [ 2119.811806][T26313] option 5-1:0.156: device disconnected [ 2119.836764][T20602] usb 3-1: Using ep0 maxpacket: 32 [ 2119.848116][T20602] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 2119.879840][T20602] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2119.915048][T20602] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 2119.924932][T20602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.934219][T20602] usb 3-1: Product: syz [ 2119.939178][T20602] usb 3-1: Manufacturer: syz [ 2119.944670][T20602] usb 3-1: SerialNumber: syz [ 2119.955591][T20602] usb 3-1: config 0 descriptor?? [ 2119.963329][T20602] rndis_host 3-1:0.0: skipping garbage [ 2119.970533][T20602] rndis_host 3-1:0.0: skipping garbage [ 2119.977218][T20602] usb 3-1: bad CDC descriptors [ 2119.987430][T20602] cdc_acm 3-1:0.0: skipping garbage [ 2120.003673][T20602] cdc_acm 3-1:0.0: skipping garbage [ 2120.240356][T26313] usb 7-1: USB disconnect, device number 45 acpid: input device has been disconnected, fd 3 [ 2120.906467][T27332] netlink: 'syz.4.5873': attribute type 39 has an invalid length. [ 2121.410178][T27337] serio: Serial port ptm0 [ 2123.590869][T26313] usb 3-1: USB disconnect, device number 23 [ 2125.909679][T27353] ubi0: attaching mtd0 [ 2125.913808][T27353] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 2126.544217][T27382] 9pnet_fd: Insufficient options for proto=fd [ 2127.105447][T27384] smc: net device wg0 applied user defined pnetid SYZ0 [ 2127.117372][T27384] netlink: 'syz.2.5887': attribute type 39 has an invalid length. [ 2127.347791][T27384] smc: removing net device wg0 with user defined pnetid SYZ0 [ 2127.371588][T27391] ufs: You didn't specify the type of your ufs filesystem [ 2127.371588][T27391] [ 2127.371588][T27391] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 2127.371588][T27391] [ 2127.371588][T27391] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 2127.418312][T27391] ufs: ufstype=old is supported read-only [ 2127.434477][T27391] ufs: ufs_fill_super(): bad magic number [ 2127.665681][T27398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5892'. [ 2127.676508][T27398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5892'. [ 2127.737120][T26313] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2127.908621][T26313] usb 2-1: Using ep0 maxpacket: 8 [ 2127.961483][T26313] usb 2-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 2127.991429][T26313] usb 2-1: config 1 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2128.025611][T26313] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2128.297582][T26313] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.13 [ 2128.360368][T26313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2128.443062][T26313] usb 2-1: Product: syz [ 2128.454063][T26313] usb 2-1: Manufacturer: syz [ 2128.458733][T26313] usb 2-1: SerialNumber: syz [ 2128.828589][ T974] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2129.319218][T26313] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 2129.331409][ T974] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2129.340799][T26313] usb 2-1: USB disconnect, device number 56 [ 2129.352494][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2129.377216][ T974] usb 4-1: config 0 descriptor?? [ 2129.982096][ T974] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 2129.991032][ T974] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 2130.027151][ T974] [drm:udl_init] *ERROR* Selecting channel failed [ 2130.039399][ T974] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 2130.046324][ T974] [drm] Initialized udl on minor 2 [ 2130.067579][ T974] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2130.081410][ T974] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 2130.100463][T26313] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2130.116581][T26313] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2130.201225][T26313] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 2130.347888][ T974] usb 4-1: USB disconnect, device number 41 [ 2130.967126][T27435] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5905'. [ 2131.001726][T27432] serio: Serial port ptm0 [ 2131.095285][T27439] ubi0: attaching mtd0 [ 2131.103264][T27439] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 2131.265008][ T974] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 2131.282797][T27442] serio: Serial port ptm1 [ 2131.438119][ T974] usb 5-1: config 4 has an invalid interface number: 231 but max is 0 [ 2131.447586][ T974] usb 5-1: config 4 has no interface number 0 [ 2131.460986][ T974] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2131.483437][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.500085][ T974] usb 5-1: Product: syz [ 2131.508531][ T974] usb 5-1: Manufacturer: syz [ 2131.519235][ T974] usb 5-1: SerialNumber: syz [ 2131.551530][ T974] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 2132.712621][ T974] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2132.758248][ T974] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 2133.077219][ T25] usb 5-1: USB disconnect, device number 38 [ 2133.098423][T27470] netlink: 'syz.3.5916': attribute type 10 has an invalid length. [ 2133.108127][T27470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5916'. [ 2133.143827][T27470] team0: Port device geneve0 added [ 2133.210732][T20602] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 2133.403364][T20602] usb 7-1: Using ep0 maxpacket: 8 [ 2133.419304][T20602] usb 7-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 2133.488653][T20602] usb 7-1: config 1 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2133.530381][T20602] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2133.752264][T20602] usb 7-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.13 [ 2133.761749][T20602] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2133.771702][T20602] usb 7-1: Product: syz [ 2133.776676][T20602] usb 7-1: Manufacturer: syz [ 2133.782126][T20602] usb 7-1: SerialNumber: syz [ 2134.132592][T20602] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 2134.219239][T20602] usb 7-1: USB disconnect, device number 46 [ 2134.398107][T26313] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2134.405838][ T974] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 2134.557700][T26313] usb 5-1: device descriptor read/64, error -71 [ 2134.581117][ T974] usb 2-1: config 4 has an invalid interface number: 231 but max is 0 [ 2134.590762][ T974] usb 2-1: config 4 has no interface number 0 [ 2134.599132][ T974] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2134.610020][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2134.622039][ T974] usb 2-1: Product: syz [ 2134.626863][ T974] usb 2-1: Manufacturer: syz [ 2134.643141][ T974] usb 2-1: SerialNumber: syz [ 2134.680705][ T974] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 2135.679704][T26313] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2135.841455][T26313] usb 5-1: device descriptor read/64, error -71 [ 2135.848274][ T974] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2135.858907][ T974] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 2135.984295][T26313] usb usb5-port1: attempt power cycle [ 2136.081163][ T974] usb 2-1: USB disconnect, device number 57 [ 2136.375230][T26313] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2136.424139][T26313] usb 5-1: device descriptor read/8, error -71 [ 2136.492326][T27516] ubi0: attaching mtd0 [ 2136.512849][T27516] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 2137.208805][T26313] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2137.273352][T26313] usb 5-1: device descriptor read/8, error -71 [ 2137.542825][T27533] FAULT_INJECTION: forcing a failure. [ 2137.542825][T27533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2137.556337][T27533] CPU: 1 UID: 0 PID: 27533 Comm: syz.6.5930 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 2137.567125][T27533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2137.577181][T27533] Call Trace: [ 2137.580456][T27533] [ 2137.583388][T27533] dump_stack_lvl+0x241/0x360 [ 2137.588068][T27533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2137.593270][T27533] ? __pfx__printk+0x10/0x10 [ 2137.597859][T27533] ? snprintf+0xda/0x120 [ 2137.602098][T27533] should_fail_ex+0x3b0/0x4e0 [ 2137.606778][T27533] _copy_to_user+0x31/0xb0 [ 2137.611194][T27533] simple_read_from_buffer+0xca/0x150 [ 2137.616569][T27533] proc_fail_nth_read+0x1e9/0x250 [ 2137.621590][T27533] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2137.627142][T27533] ? rw_verify_area+0x55e/0x6f0 [ 2137.631987][T27533] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2137.637530][T27533] vfs_read+0x1fc/0xb70 [ 2137.641690][T27533] ? __pfx___mutex_lock+0x10/0x10 [ 2137.646712][T27533] ? __pfx_vfs_read+0x10/0x10 [ 2137.651392][T27533] ? __fget_files+0x2a/0x410 [ 2137.655980][T27533] ? __fget_files+0x395/0x410 [ 2137.660653][T27533] ? __fget_files+0x2a/0x410 [ 2137.665245][T27533] ksys_read+0x18f/0x2b0 [ 2137.669487][T27533] ? __pfx_ksys_read+0x10/0x10 [ 2137.674248][T27533] ? do_syscall_64+0x100/0x230 [ 2137.679010][T27533] ? do_syscall_64+0xb6/0x230 [ 2137.683685][T27533] do_syscall_64+0xf3/0x230 [ 2137.688186][T27533] ? clear_bhb_loop+0x35/0x90 [ 2137.692873][T27533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2137.698765][T27533] RIP: 0033:0x7f9bceb7e8ec [ 2137.703175][T27533] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2137.722780][T27533] RSP: 002b:00007f9bcf8f4050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2137.731280][T27533] RAX: ffffffffffffffda RBX: 00007f9bced46160 RCX: 00007f9bceb7e8ec [ 2137.739246][T27533] RDX: 000000000000000f RSI: 00007f9bcf8f40b0 RDI: 0000000000000007 [ 2137.747214][T27533] RBP: 00007f9bcf8f40a0 R08: 0000000000000000 R09: 0000000000000000 [ 2137.755177][T27533] R10: 00000000200005c0 R11: 0000000000000246 R12: 0000000000000001 [ 2137.763139][T27533] R13: 0000000000000000 R14: 00007f9bced46160 R15: 00007ffe299a9ca8 [ 2137.771122][T27533] [ 2137.903865][T26313] usb usb5-port1: unable to enumerate USB device [ 2138.183307][T27526] usb usb8: usbfs: process 27526 (syz.4.5929) did not claim interface 8 before use [ 2138.310044][T20602] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 2138.481029][ T25] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2138.492910][T20602] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2138.501228][T20602] usb 2-1: not running at top speed; connect to a high speed hub [ 2139.532154][T20602] usb 2-1: config 81 has an invalid interface number: 159 but max is 0 [ 2139.696088][T20602] usb 2-1: config 81 has no interface number 0 [ 2139.703603][T20602] usb 2-1: config 81 interface 159 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2139.714960][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 2139.730485][ T25] usb 3-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 2139.741297][ T25] usb 3-1: config 1 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2139.759917][T20602] usb 2-1: config 81 interface 159 has no altsetting 0 [ 2139.822891][T20602] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=fb.61 [ 2139.836102][ T25] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2139.850885][T20602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2139.883185][ T25] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.13 [ 2139.898065][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2139.912490][T20602] usb 2-1: Product: syz [ 2139.933516][T20602] usb 2-1: Manufacturer: syz [ 2139.951603][ T25] usb 3-1: Product: syz [ 2139.962866][T20602] usb 2-1: SerialNumber: syz [ 2139.972287][ T25] usb 3-1: Manufacturer: syz [ 2139.984856][ T25] usb 3-1: SerialNumber: syz [ 2139.994370][T27524] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2140.520288][ T25] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 2140.581992][T27562] ufs: You didn't specify the type of your ufs filesystem [ 2140.581992][T27562] [ 2140.581992][T27562] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 2140.581992][T27562] [ 2140.581992][T27562] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 2140.613408][T27562] ufs: ufstype=old is supported read-only [ 2140.619858][T27562] ufs: ufs_fill_super(): bad magic number [ 2140.627773][ T25] usb 3-1: USB disconnect, device number 24 [ 2140.676690][T20602] kobil_sct 2-1:81.159: KOBIL USB smart card terminal converter detected [ 2140.688366][T20602] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2140.709824][T20602] usb 2-1: USB disconnect, device number 58 [ 2140.730695][T20602] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2140.743920][T20602] kobil_sct 2-1:81.159: device disconnected [ 2141.987548][ T47] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2143.046155][ T47] usb 5-1: device descriptor read/64, error -71 [ 2143.201679][T27582] 9pnet_fd: Insufficient options for proto=fd [ 2143.303035][ T47] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2143.484474][ T47] usb 5-1: device descriptor read/64, error -71 [ 2143.676089][T26312] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2143.692621][T27573] serio: Serial port ptm0 [ 2143.775249][ T47] usb usb5-port1: attempt power cycle [ 2143.862047][T26312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2143.873664][T26312] usb 4-1: config 0 has no interfaces? [ 2143.879355][T26312] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2143.892724][T26312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.097813][T26312] usb 4-1: config 0 descriptor?? [ 2144.118740][T27586] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5945'. [ 2144.639675][T27590] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2145.556769][T27600] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5950'. [ 2146.263106][T26312] usb 4-1: USB disconnect, device number 42 [ 2146.481795][T27588] TCP: out of memory -- consider tuning tcp_mem [ 2147.860440][ T47] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2148.027864][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 2148.038489][T27621] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5957'. [ 2148.047827][ T47] usb 3-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 2148.065877][ T47] usb 3-1: config 1 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2148.223787][ T47] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2148.248427][ T47] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.13 [ 2148.262973][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2148.338270][T26312] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2148.511569][T26312] usb 2-1: device descriptor read/64, error -71 [ 2148.941093][ T47] usb 3-1: Product: syz [ 2148.945313][ T47] usb 3-1: Manufacturer: syz [ 2148.950225][ T47] usb 3-1: SerialNumber: syz [ 2149.083811][T27629] serio: Serial port ptm0 [ 2149.332015][T26312] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2150.181489][T26312] usb 2-1: device descriptor read/64, error -71 [ 2150.305753][T26312] usb usb2-port1: attempt power cycle [ 2150.329667][ T47] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 2150.490139][ T47] usb 3-1: USB disconnect, device number 25 [ 2150.807357][T26312] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2150.829468][T26312] usb 2-1: device descriptor read/8, error -71 [ 2150.878512][T27643] serio: Serial port ptm0 [ 2151.107160][T26312] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2151.175733][T26312] usb 2-1: device descriptor read/8, error -71 [ 2151.385841][T27647] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2151.406330][T26312] usb usb2-port1: unable to enumerate USB device [ 2152.366695][ T47] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2152.374975][T20602] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 2152.560548][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2154.258723][T27665] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5970'. [ 2154.913664][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2154.923903][ T47] usb 5-1: config 0 has no interfaces? [ 2154.929430][ T47] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2154.938807][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2154.964369][ T47] usb 5-1: config 0 descriptor?? [ 2154.989544][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2154.996001][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2155.048914][ T47] usb 5-1: can't set config #0, error -71 [ 2155.062276][ T47] usb 5-1: USB disconnect, device number 46 [ 2155.100872][T20602] usb 7-1: unable to read config index 0 descriptor/all [ 2155.108514][T20602] usb 7-1: can't read configurations, error -71 [ 2155.286806][T26312] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2155.582693][T27682] FAULT_INJECTION: forcing a failure. [ 2155.582693][T27682] name failslab, interval 1, probability 0, space 0, times 0 [ 2155.595475][T27682] CPU: 0 UID: 0 PID: 27682 Comm: syz.6.5974 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 2155.606259][T27682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2155.616328][T27682] Call Trace: [ 2155.619630][T27682] [ 2155.622589][T27682] dump_stack_lvl+0x241/0x360 [ 2155.627317][T27682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2155.632538][T27682] ? __pfx__printk+0x10/0x10 [ 2155.637168][T27682] should_fail_ex+0x3b0/0x4e0 [ 2155.641865][T27682] should_failslab+0xac/0x100 [ 2155.646563][T27682] kmem_cache_alloc_node_noprof+0x77/0x380 [ 2155.652391][T27682] ? __alloc_skb+0x1c3/0x440 [ 2155.656996][T27682] ? xfrm_nlmsg_multicast+0x18b/0x1f0 [ 2155.662391][T27682] __alloc_skb+0x1c3/0x440 [ 2155.666826][T27682] ? __pfx___alloc_skb+0x10/0x10 [ 2155.671779][T27682] ? net_generic+0x1f/0x240 [ 2155.676304][T27682] pfkey_send_notify+0x278/0xda0 [ 2155.681264][T27682] ? __pfx_pfkey_send_notify+0x10/0x10 [ 2155.686739][T27682] km_state_notify+0x116/0x1f0 [ 2155.691516][T27682] ? km_state_notify+0x26/0x1f0 [ 2155.696381][T27682] pfkey_flush+0x36a/0x560 [ 2155.700819][T27682] ? __pfx_pfkey_flush+0x10/0x10 [ 2155.705774][T27682] ? pfkey_broadcast+0x45/0x400 [ 2155.710638][T27682] ? pfkey_broadcast+0x3e3/0x400 [ 2155.715604][T27682] pfkey_sendmsg+0xbcc/0x1050 [ 2155.720314][T27682] ? smack_socket_sendmsg+0x178/0x540 [ 2155.725710][T27682] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 2155.730867][T27682] ? __might_fault+0xaa/0x120 [ 2155.735567][T27682] ? __pfx_lock_release+0x10/0x10 [ 2155.740640][T27682] ? __import_iovec+0x590/0x870 [ 2155.745535][T27682] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 2155.750694][T27682] __sock_sendmsg+0x221/0x270 [ 2155.755402][T27682] ____sys_sendmsg+0x52a/0x7e0 [ 2155.760194][T27682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2155.765495][T27682] ? __fget_files+0x2a/0x410 [ 2155.770107][T27682] ? __fget_files+0x2a/0x410 [ 2155.774729][T27682] __sys_sendmsg+0x269/0x350 [ 2155.779339][T27682] ? __pfx_lock_release+0x10/0x10 [ 2155.784383][T27682] ? __pfx___sys_sendmsg+0x10/0x10 [ 2155.789525][T27682] ? __pfx_vfs_write+0x10/0x10 [ 2155.794339][T27682] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2155.800686][T27682] ? do_syscall_64+0x100/0x230 [ 2155.805472][T27682] ? do_syscall_64+0xb6/0x230 [ 2155.810170][T27682] do_syscall_64+0xf3/0x230 [ 2155.814694][T27682] ? clear_bhb_loop+0x35/0x90 [ 2155.819389][T27682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2155.825298][T27682] RIP: 0033:0x7f9bceb7fed9 [ 2155.829728][T27682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2155.849447][T27682] RSP: 002b:00007f9bcf8f4058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2155.857883][T27682] RAX: ffffffffffffffda RBX: 00007f9bced46160 RCX: 00007f9bceb7fed9 [ 2155.865866][T27682] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 2155.873849][T27682] RBP: 00007f9bcf8f40a0 R08: 0000000000000000 R09: 0000000000000000 [ 2155.881833][T27682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2155.889818][T27682] R13: 0000000000000000 R14: 00007f9bced46160 R15: 00007ffe299a9ca8 [ 2155.897825][T27682] [ 2156.422021][T26312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2156.432269][T26312] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2156.441593][T26312] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2156.450662][T26312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2156.888168][T26312] usb 4-1: config 0 descriptor?? [ 2157.243359][ T47] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2157.382087][ T47] usb 5-1: device descriptor read/64, error -71 [ 2157.638825][ T47] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2157.788537][ T47] usb 5-1: device descriptor read/64, error -71 [ 2157.916846][ T47] usb usb5-port1: attempt power cycle [ 2158.244734][T20602] usb 4-1: USB disconnect, device number 43 [ 2158.280414][ T47] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2158.323652][ T47] usb 5-1: device descriptor read/8, error -71 [ 2159.013625][T27709] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5982'. [ 2159.268117][T26313] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 2159.541591][ T47] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2159.573750][ T25] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2159.583938][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2159.600898][ T47] usb 5-1: config 0 has no interfaces? [ 2159.607472][ T47] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2159.621307][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.635601][ T47] usb 5-1: config 0 descriptor?? [ 2159.699279][T26313] usb 3-1: config 4 has an invalid interface number: 231 but max is 0 [ 2159.707981][T26313] usb 3-1: config 4 has no interface number 0 [ 2159.716662][T26313] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2159.726076][T26313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.734254][T26313] usb 3-1: Product: syz [ 2159.737649][ T25] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2159.738595][T26313] usb 3-1: Manufacturer: syz [ 2159.752331][T26313] usb 3-1: SerialNumber: syz [ 2159.759968][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.765161][T26313] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 2159.776746][T20602] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2159.791728][ T25] usb 4-1: config 0 descriptor?? [ 2159.940457][T20602] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2159.950962][T20602] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2159.960259][T20602] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2159.969697][T20602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.981704][T20602] usb 2-1: config 0 descriptor?? [ 2160.343495][T26313] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2160.363796][ T25] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 2160.364631][T26313] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 2160.378360][ T25] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 2160.390946][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 2160.411841][ T25] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 2160.420393][ T25] [drm] Initialized udl on minor 2 [ 2160.426206][ T25] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2160.437369][ T25] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 2160.458962][T20602] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2160.485274][T20602] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 2160.491925][ T25] usb 4-1: USB disconnect, device number 44 [ 2160.589777][ T974] usb 3-1: USB disconnect, device number 26 [ 2160.665220][T26313] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 2160.847791][T26313] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2160.856037][T26313] usb 7-1: not running at top speed; connect to a high speed hub [ 2160.872298][T26313] usb 7-1: config 81 has an invalid interface number: 159 but max is 0 [ 2160.888490][T26313] usb 7-1: config 81 has no interface number 0 [ 2160.894840][T26313] usb 7-1: config 81 interface 159 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2160.920525][T26313] usb 7-1: config 81 interface 159 has no altsetting 0 [ 2160.941032][T26313] usb 7-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=fb.61 [ 2160.960045][T26313] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2160.973993][T26313] usb 7-1: Product: syz [ 2160.978194][T26313] usb 7-1: Manufacturer: syz [ 2160.982816][T26313] usb 7-1: SerialNumber: syz [ 2161.007150][T27723] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 2161.252939][T26313] kobil_sct 7-1:81.159: KOBIL USB smart card terminal converter detected [ 2161.263275][T26313] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2161.284221][T26313] usb 7-1: USB disconnect, device number 49 [ 2161.293813][T26313] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2161.304318][T26313] kobil_sct 7-1:81.159: device disconnected [ 2161.476686][T20602] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2161.643522][T20602] usb 3-1: device descriptor read/64, error -71 [ 2161.904219][T20602] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2162.193075][T20602] usb 3-1: device descriptor read/64, error -71 [ 2162.312703][T20602] usb usb3-port1: attempt power cycle [ 2162.727959][T20602] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2162.845890][T20602] usb 3-1: device descriptor read/8, error -71 [ 2162.915276][T26313] usb 5-1: USB disconnect, device number 50 [ 2162.924158][ T25] usb 2-1: USB disconnect, device number 63 [ 2164.274103][T17835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2164.290604][T17835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2164.302651][T17835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2164.347542][T17835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2164.369759][T27763] netlink: 'syz.1.5997': attribute type 12 has an invalid length. [ 2164.395521][T17835] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2164.403252][T17835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2164.434822][T27765] binder: 27764:27765 ioctl c0306201 0 returned -14 [ 2164.668546][T27775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6000'. [ 2164.688134][T27775] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6000'. [ 2164.721599][T27759] chnl_net:caif_netlink_parms(): no params data found [ 2165.276122][T27759] bridge0: port 1(bridge_slave_0) entered blocking state [ 2165.283404][T27759] bridge0: port 1(bridge_slave_0) entered disabled state [ 2165.290876][T27759] bridge_slave_0: entered allmulticast mode [ 2165.299719][T27759] bridge_slave_0: entered promiscuous mode [ 2165.308474][T27759] bridge0: port 2(bridge_slave_1) entered blocking state [ 2165.315736][T27759] bridge0: port 2(bridge_slave_1) entered disabled state [ 2165.323085][T27759] bridge_slave_1: entered allmulticast mode [ 2165.330460][T27759] bridge_slave_1: entered promiscuous mode [ 2165.406284][T27759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2165.439916][T27759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2165.544016][T27759] team0: Port device team_slave_0 added [ 2165.558320][T27759] team0: Port device team_slave_1 added [ 2166.429248][ T25] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 2166.597536][T17835] Bluetooth: hci2: command tx timeout [ 2166.891211][T27759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2166.907349][T27759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2166.933883][T27759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2166.962780][T27759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2166.969788][T27759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2166.996059][T27759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2167.104272][T27797] serio: Serial port ptm0 [ 2167.105772][T27759] hsr_slave_0: entered promiscuous mode [ 2167.143190][T27759] hsr_slave_1: entered promiscuous mode [ 2167.164250][T27759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2167.171898][T27759] Cannot create hsr debugfs directory [ 2167.217884][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2167.228242][T27801] serio: Serial port ptm1 [ 2167.232676][ T25] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2167.241891][ T25] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2167.284067][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2167.310747][ T25] usb 7-1: config 0 descriptor?? [ 2167.586989][T27759] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.778921][T27759] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2168.104235][T27759] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2168.681333][ T5872] usb 7-1: USB disconnect, device number 50 [ 2168.817496][T17835] Bluetooth: hci2: command tx timeout [ 2168.886895][T27759] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2169.791148][T27759] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2169.798376][ T5872] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 2169.822555][T27759] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2169.850234][T27759] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2169.993379][T27759] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2170.003442][ T5872] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2170.029764][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2170.062689][ T5872] usb 7-1: config 0 descriptor?? [ 2170.065246][T27832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6014'. [ 2170.088937][T27834] usb usb8: usbfs: process 27834 (syz.1.6015) did not claim interface 0 before use [ 2170.098705][T27832] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6014'. [ 2170.113113][T27834] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2170.138032][T27834] overlayfs: failed to set xattr on upper [ 2170.143804][T27834] overlayfs: ...falling back to redirect_dir=nofollow. [ 2170.171121][T27759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2170.190304][T27759] 8021q: adding VLAN 0 to HW filter on device team0 [ 2170.230286][T27759] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2170.240816][T27759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2170.259121][T27834] overlayfs: ...falling back to index=off. [ 2170.265440][T27834] overlayfs: ...falling back to uuid=null. [ 2170.275695][T13045] bridge0: port 1(bridge_slave_0) entered blocking state [ 2170.282815][T13045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2170.292533][T13045] bridge0: port 2(bridge_slave_1) entered blocking state [ 2170.299704][T13045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2170.393939][T26312] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2170.565158][ T5872] usb 7-1: Cannot read MAC address [ 2170.570956][ T5872] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2170.585855][T26312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2170.609964][T26312] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2170.626119][ T5872] usb 7-1: USB disconnect, device number 51 [ 2170.643202][T26312] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2170.696816][T26312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2170.720584][T27759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2170.756154][T26312] usb 4-1: config 0 descriptor?? [ 2170.976070][T27759] veth0_vlan: entered promiscuous mode [ 2171.007769][T27759] veth1_vlan: entered promiscuous mode [ 2171.036884][T17835] Bluetooth: hci2: command tx timeout [ 2171.073333][T27851] 9pnet_fd: Insufficient options for proto=fd [ 2171.084900][T27851] /dev/nullb0: Can't open blockdev [ 2171.090033][T27759] veth0_macvtap: entered promiscuous mode [ 2171.112616][T27759] veth1_macvtap: entered promiscuous mode [ 2171.137436][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2171.176300][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.205107][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2171.222660][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.233179][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2171.247741][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.257574][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2171.275654][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.286508][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2171.307088][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.319417][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2171.338107][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.350720][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2171.365313][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.375143][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2171.387862][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.397938][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2171.408618][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.418467][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2171.429101][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.441463][T27759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2171.452029][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2171.462761][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.472642][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2171.483725][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.493635][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2171.504069][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.516815][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2171.536146][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.539936][T26312] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2171.565114][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2171.576013][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.586798][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2171.597914][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.608386][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2171.619668][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.631635][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2171.643455][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.653309][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2171.671419][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.684601][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2171.695229][ T5872] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 2171.705297][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.717373][T27759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2171.726617][T26312] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2171.737969][T26312] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2171.776002][T26312] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2171.790649][T26312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2171.816586][T26312] usb 3-1: config 0 descriptor?? [ 2171.850396][T27759] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.868921][ T5872] usb 7-1: Using ep0 maxpacket: 16 [ 2171.875873][T27759] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.890073][ T5872] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2171.901591][ T5872] usb 7-1: config 0 has an invalid interface number: 93 but max is 0 [ 2171.920723][T27759] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.929590][T27759] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.961170][ T5872] usb 7-1: config 0 has no interface number 0 [ 2171.984357][ T5872] usb 7-1: config 0 interface 93 has no altsetting 0 [ 2172.012477][ T5872] usb 7-1: New USB device found, idVendor=2040, idProduct=721e, bcdDevice=5e.2b [ 2172.348192][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2172.619226][T17139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2172.642668][T17139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2172.696311][T17139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2172.711189][T17139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2172.731325][ T5872] usb 7-1: Product: syz [ 2172.735648][ T5872] usb 7-1: Manufacturer: syz [ 2172.740268][ T5872] usb 7-1: SerialNumber: syz [ 2172.747616][ T5872] usb 7-1: config 0 descriptor?? [ 2173.259570][T20602] usb 4-1: USB disconnect, device number 45 [ 2173.268594][T17835] Bluetooth: hci2: command tx timeout [ 2173.354319][T21481] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2173.372964][T21481] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2173.383301][T21481] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2173.393132][T21481] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2173.401943][T21481] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2173.411118][T21481] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2173.493817][T26312] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2173.653350][T26312] usb 5-1: Using ep0 maxpacket: 32 [ 2173.662427][T26312] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 2173.671863][T26312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.693383][T26312] usb 5-1: Product: syz [ 2173.715382][T26312] usb 5-1: Manufacturer: syz [ 2173.737178][T26312] usb 5-1: SerialNumber: syz [ 2173.759431][T26312] usb 5-1: config 0 descriptor?? [ 2173.800431][T26312] as10x_usb: device has been detected [ 2173.827206][T26312] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 2173.913332][T26312] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 2174.060515][T26312] as10x_usb: error during firmware upload part1 [ 2174.067366][T26312] Registered device Abilis Systems DVB-Titan [ 2174.076555][T26312] usb 5-1: USB disconnect, device number 51 [ 2174.122628][T26312] Unregistered device Abilis Systems DVB-Titan [ 2174.125384][T26312] as10x_usb: device has been disconnected [ 2174.149495][T27883] chnl_net:caif_netlink_parms(): no params data found [ 2174.298919][T27883] bridge0: port 1(bridge_slave_0) entered blocking state [ 2174.316000][T27883] bridge0: port 1(bridge_slave_0) entered disabled state [ 2174.336547][T27883] bridge_slave_0: entered allmulticast mode [ 2174.356731][T27883] bridge_slave_0: entered promiscuous mode [ 2174.372813][T27883] bridge0: port 2(bridge_slave_1) entered blocking state [ 2174.387377][T27883] bridge0: port 2(bridge_slave_1) entered disabled state [ 2174.412907][T27883] bridge_slave_1: entered allmulticast mode [ 2174.420719][T27883] bridge_slave_1: entered promiscuous mode [ 2174.462423][ T5872] usb 7-1: unknown interface protocol 0x1a, assuming v1 [ 2174.474557][ T5872] usb 7-1: cannot find UAC_HEADER [ 2174.491801][T20602] usb 3-1: USB disconnect, device number 31 [ 2174.517091][ T5872] snd-usb-audio 7-1:0.93: probe with driver snd-usb-audio failed with error -22 [ 2174.536268][T27883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2174.552684][ T5872] usb 7-1: USB disconnect, device number 52 [ 2174.575836][T27883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2174.600275][T27900] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6026'. [ 2174.627091][T27900] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6026'. [ 2174.728458][T27883] team0: Port device team_slave_0 added [ 2174.747063][T27883] team0: Port device team_slave_1 added [ 2174.759550][T27902] serio: Serial port ptm0 [ 2175.015451][T17180] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2175.130108][T27883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2175.146520][T27883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2175.214954][T27883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2175.336736][T17180] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2175.413129][T27883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2175.452376][T27883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2175.513385][T27883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2175.513807][T27911] serio: Serial port ptm0 [ 2175.619294][T17180] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2175.653938][T17835] Bluetooth: hci3: command tx timeout [ 2175.883880][T17180] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2176.315888][T27933] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6036'. [ 2176.903634][T27883] hsr_slave_0: entered promiscuous mode [ 2177.169977][T27883] hsr_slave_1: entered promiscuous mode [ 2177.196434][T27883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2177.213171][T27883] Cannot create hsr debugfs directory [ 2177.588601][T27947] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6041'. [ 2177.598459][T27947] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6041'. [ 2177.769171][ T47] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2177.934249][T17835] Bluetooth: hci3: command tx timeout [ 2177.952427][T17180] erspan0: left allmulticast mode [ 2177.957693][T17180] erspan0: left promiscuous mode [ 2177.967778][T17180] bridge0: port 3(erspan0) entered disabled state [ 2178.000297][T17180] bridge_slave_1: left allmulticast mode [ 2178.121859][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 2178.127277][T17180] bridge_slave_1: left promiscuous mode [ 2178.138013][T17180] bridge0: port 2(bridge_slave_1) entered disabled state [ 2178.156952][ T47] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2178.156985][T17180] bridge_slave_0: left promiscuous mode [ 2178.186410][T17180] bridge0: port 1(bridge_slave_0) entered disabled state [ 2178.231125][ T47] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2178.329944][ T47] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2178.359810][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2178.443874][ T47] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 2178.525227][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2178.565398][ T47] usb 4-1: config 0 descriptor?? [ 2179.878606][ T47] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5010.0011/input/input79 [ 2180.010599][ T47] kye 0003:0458:5010.0011: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 2180.099684][T17835] Bluetooth: hci3: command tx timeout [ 2180.642593][T17180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2180.657337][T26313] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 2181.047640][T17180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2181.066540][ T5872] usb 4-1: USB disconnect, device number 46 [ 2181.074243][T26313] usb 3-1: config 4 has an invalid interface number: 231 but max is 0 [ 2181.082458][T26313] usb 3-1: config 4 has no interface number 0 [ 2181.106495][T17180] bond0 (unregistering): Released all slaves [ 2181.210302][T27972] netlink: 'syz.6.6048': attribute type 39 has an invalid length. [ 2181.216738][T26313] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2181.254393][T26313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2181.262665][T26313] usb 3-1: Product: syz [ 2181.268919][T26313] usb 3-1: Manufacturer: syz [ 2181.273560][T26313] usb 3-1: SerialNumber: syz [ 2181.289367][T26313] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 2181.315451][T17180] : left promiscuous mode [ 2181.453631][T27975] netlink: 'syz.6.6049': attribute type 39 has an invalid length. [ 2181.731247][T26313] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2181.747797][T26313] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 2182.035648][T27981] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6050'. [ 2182.401982][T17835] Bluetooth: hci3: command tx timeout [ 2182.871250][ T25] usb 3-1: USB disconnect, device number 32 [ 2183.281742][T17180] dummy0: left promiscuous mode [ 2183.298138][T17180] batadv_slave_0: left promiscuous mode [ 2183.298242][T27989] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6053'. [ 2183.403866][T27989] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6053'. [ 2183.422170][T17180] hsr_slave_0: left promiscuous mode [ 2183.438912][T17180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2183.448904][T17180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2183.464592][T17180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2183.502729][T17180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2183.592011][T17180] bridge_slave_0: left allmulticast mode [ 2183.598221][T17180] veth0_macvtap: left promiscuous mode [ 2183.603860][T17180] veth1_vlan: left promiscuous mode [ 2183.609572][T17180] veth0_vlan: left promiscuous mode [ 2184.129163][T17180] pimreg (unregistering): left allmulticast mode [ 2184.337195][T23989] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2184.814718][T23989] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 2184.856868][T23989] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2184.865797][T23989] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2184.899115][T23989] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2184.926052][T23989] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2184.946258][T23989] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2184.972369][T23989] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2185.014085][T23989] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2185.036467][T23989] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2185.063203][T23989] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2185.254136][T23989] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2185.269892][T23989] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2185.280896][T23989] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2185.430255][T23989] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2185.444083][T23989] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2185.474088][T23989] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2185.650509][T23989] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2185.782201][T23989] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2185.846620][T23989] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2185.864928][T23989] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2185.883120][T23989] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2185.972296][T23989] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2186.008245][T23989] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2186.030929][T23989] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2186.075578][T23989] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2186.084685][T23989] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2186.107875][T23989] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2186.116281][T23989] usb 4-1: Product: syz [ 2186.146856][T23989] usb 4-1: Manufacturer: syz [ 2186.173160][T23989] usb 4-1: SerialNumber: syz [ 2186.186656][T23989] usb 4-1: config 0 descriptor?? [ 2186.207119][T23989] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 2186.366543][T17180] team0 (unregistering): Port device team_slave_1 removed [ 2186.424495][T28001] FAULT_INJECTION: forcing a failure. [ 2186.424495][T28001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2186.460480][T28001] CPU: 0 UID: 0 PID: 28001 Comm: syz.3.6056 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 2186.471305][T28001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2186.481376][T28001] Call Trace: [ 2186.484657][T28001] [ 2186.487589][T28001] dump_stack_lvl+0x241/0x360 [ 2186.492272][T28001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2186.497474][T28001] ? __pfx__printk+0x10/0x10 [ 2186.502070][T28001] ? __pfx_lock_release+0x10/0x10 [ 2186.507106][T28001] ? __lock_acquire+0x1397/0x2100 [ 2186.512139][T28001] should_fail_ex+0x3b0/0x4e0 [ 2186.516831][T28001] _copy_from_user+0x2f/0xc0 [ 2186.521438][T28001] kstrtouint_from_user+0xc6/0x190 [ 2186.526562][T28001] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2186.532295][T28001] ? __pfx_lock_acquire+0x10/0x10 [ 2186.537349][T28001] proc_fail_nth_write+0xaa/0x2d0 [ 2186.542376][T28001] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2186.548271][T28001] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2186.553907][T28001] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2186.559538][T28001] vfs_write+0x2a3/0xd30 [ 2186.563788][T28001] ? __pfx_vfs_write+0x10/0x10 [ 2186.568555][T28001] ? __fget_files+0x2a/0x410 [ 2186.573153][T28001] ? __fget_files+0x395/0x410 [ 2186.577840][T28001] ? __fget_files+0x2a/0x410 [ 2186.582440][T28001] ksys_write+0x18f/0x2b0 [ 2186.586774][T28001] ? __pfx_ksys_write+0x10/0x10 [ 2186.591627][T28001] ? do_syscall_64+0x100/0x230 [ 2186.596394][T28001] ? do_syscall_64+0xb6/0x230 [ 2186.601079][T28001] do_syscall_64+0xf3/0x230 [ 2186.605591][T28001] ? clear_bhb_loop+0x35/0x90 [ 2186.610294][T28001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.616204][T28001] RIP: 0033:0x7fd65837e98f [ 2186.621005][T28001] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2186.640623][T28001] RSP: 002b:00007fd659164050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2186.649087][T28001] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd65837e98f [ 2186.657059][T28001] RDX: 0000000000000001 RSI: 00007fd6591640b0 RDI: 0000000000000004 [ 2186.665030][T28001] RBP: 00007fd6591640a0 R08: 0000000000000000 R09: 0000000000000000 [ 2186.672997][T28001] R10: 0000000000000401 R11: 0000000000000293 R12: 0000000000000001 [ 2186.680969][T28001] R13: 0000000000000000 R14: 00007fd658545fa0 R15: 00007ffd17a71538 [ 2186.688968][T28001] [ 2186.696238][T17180] team0 (unregistering): Port device team_slave_0 removed [ 2186.799805][ T25] usb 4-1: USB disconnect, device number 47 [ 2186.814628][ T25] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 2186.861434][T28019] usb usb8: usbfs: process 28019 (syz.3.6061) did not claim interface 0 before use [ 2186.907980][T28019] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2186.915744][T28019] overlayfs: failed to set xattr on upper [ 2186.922635][T28019] overlayfs: ...falling back to redirect_dir=nofollow. [ 2186.929666][T28019] overlayfs: ...falling back to index=off. [ 2186.936229][T28019] overlayfs: ...falling back to uuid=null. [ 2187.460616][T28025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6062'. [ 2188.608847][T27883] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2188.624036][T27883] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2188.672646][T27883] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2188.721329][T27883] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2188.788599][T17180] IPVS: stop unused estimator thread 0... [ 2188.794881][T26313] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2188.885250][T27883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2188.911926][T27883] 8021q: adding VLAN 0 to HW filter on device team0 [ 2188.919805][T20602] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 2188.931794][T13045] bridge0: port 1(bridge_slave_0) entered blocking state [ 2188.938944][T13045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2188.959117][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 2188.966427][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2188.984562][T26313] usb 4-1: Using ep0 maxpacket: 8 [ 2188.992438][T26313] usb 4-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 2189.003074][T26313] usb 4-1: config 1 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2189.030153][T26313] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2189.044718][T26313] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.13 [ 2189.051982][T27883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2189.054386][T26313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2189.072323][T26313] usb 4-1: Product: syz [ 2189.076511][T26313] usb 4-1: Manufacturer: syz [ 2189.081253][T26313] usb 4-1: SerialNumber: syz [ 2189.101792][T20602] usb 7-1: Using ep0 maxpacket: 32 [ 2189.109103][T20602] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2189.133616][T20602] usb 7-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 2189.142714][T20602] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2189.153893][T20602] usb 7-1: config 0 descriptor?? [ 2189.290144][T27883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2189.448250][T27883] veth0_vlan: entered promiscuous mode [ 2189.488082][T27883] veth1_vlan: entered promiscuous mode [ 2189.529893][T20602] cdc_subset 7-1:0.0: probe with driver cdc_subset failed with error -22 [ 2189.555090][T26313] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 2189.569041][T27883] veth0_macvtap: entered promiscuous mode [ 2189.574604][T26313] usb 4-1: USB disconnect, device number 48 [ 2189.578054][T27883] veth1_macvtap: entered promiscuous mode [ 2189.597626][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2189.608758][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.618736][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2189.641155][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.651403][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2189.666679][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.678936][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2189.689889][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.699862][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2189.710889][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.720732][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2189.731455][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.741567][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2189.752947][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.762993][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2189.773909][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.784118][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2189.795430][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.805519][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2189.816347][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.829346][T27883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2189.856884][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2189.880856][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.893740][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2189.910125][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.920186][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2189.931132][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.941143][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2189.954274][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.964631][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2189.975539][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.985729][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2189.996582][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2190.006466][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2190.017200][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2190.028383][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2190.057793][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2190.079507][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2190.097020][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2190.118462][T27883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2190.139771][T27883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2190.151283][T27883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2190.163795][T27883] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2190.172917][T27883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2190.184194][T27883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2190.219356][T27883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2190.458589][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2190.468432][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2190.722341][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2190.917654][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2191.410826][T28054] netlink: 304 bytes leftover after parsing attributes in process `syz.1.6023'. [ 2191.932740][ T974] usb 7-1: USB disconnect, device number 53 [ 2192.215923][T28064] x_tables: ip_tables: osf match: only valid for protocol 6 [ 2193.204283][T28068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6072'. [ 2194.040175][ T974] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2194.047885][T26312] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2194.064970][T28074] serio: Serial port ptm0 [ 2194.225489][ T974] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2194.243578][T26312] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2194.253071][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2194.261441][T26312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2194.279274][ T974] usb 3-1: config 0 descriptor?? [ 2194.298273][T26312] usb 5-1: config 0 descriptor?? [ 2194.543575][T21481] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2194.586838][T21481] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2194.604982][T21481] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2194.614395][T26312] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 2194.625695][T21481] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2194.633961][T26312] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 2194.644214][T21481] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2194.653884][T26312] [drm:udl_init] *ERROR* Selecting channel failed [ 2194.660463][T27762] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2194.678634][T26312] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 2194.704161][ T974] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 2194.712739][ T974] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 2194.724485][T26312] [drm] Initialized udl on minor 2 [ 2194.746167][T26312] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2194.754558][T26312] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2194.761308][ T974] [drm:udl_init] *ERROR* Selecting channel failed [ 2194.774339][T26312] usb 5-1: USB disconnect, device number 52 [ 2194.782994][ T974] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 3 [ 2194.789829][ T974] [drm] Initialized udl on minor 3 [ 2194.795398][T26313] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2194.803414][T26313] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2194.811953][ T974] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2194.820000][ T974] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 2194.904883][ T5872] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2194.913157][ T974] usb 3-1: USB disconnect, device number 33 [ 2194.921700][ T5872] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2194.930042][ T5872] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 2195.195139][T26313] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2195.294821][T28082] chnl_net:caif_netlink_parms(): no params data found [ 2195.365760][T26313] usb 2-1: Using ep0 maxpacket: 8 [ 2195.374069][T26313] usb 2-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 2195.423435][T26313] usb 2-1: config 1 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2195.478691][T28082] bridge0: port 1(bridge_slave_0) entered blocking state [ 2195.481191][T26313] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2195.486120][T28082] bridge0: port 1(bridge_slave_0) entered disabled state [ 2195.516436][T28082] bridge_slave_0: entered allmulticast mode [ 2195.526890][T28100] FAULT_INJECTION: forcing a failure. [ 2195.526890][T28100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2195.541194][T28082] bridge_slave_0: entered promiscuous mode [ 2195.541383][T28101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6081'. [ 2195.547655][T28100] CPU: 1 UID: 0 PID: 28100 Comm: syz.2.6083 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 2195.566911][T28100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2195.569296][T26313] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.13 [ 2195.576971][T28100] Call Trace: [ 2195.576986][T28100] [ 2195.576997][T28100] dump_stack_lvl+0x241/0x360 [ 2195.577028][T28100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2195.596498][T26313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2195.596895][T28100] ? __pfx__printk+0x10/0x10 [ 2195.596926][T28100] ? __pfx_lock_release+0x10/0x10 [ 2195.607668][T28082] bridge0: port 2(bridge_slave_1) entered blocking state [ 2195.610075][T28100] should_fail_ex+0x3b0/0x4e0 [ 2195.631361][T28100] _copy_from_user+0x2f/0xc0 [ 2195.635969][T28100] copy_msghdr_from_user+0xae/0x680 [ 2195.641173][T28100] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2195.646977][T28100] ? __fget_files+0x2a/0x410 [ 2195.651566][T28100] ? __fget_files+0x2a/0x410 [ 2195.656162][T28100] __sys_sendmsg+0x209/0x350 [ 2195.660753][T28100] ? __pfx_lock_release+0x10/0x10 [ 2195.665786][T28100] ? __pfx___sys_sendmsg+0x10/0x10 [ 2195.670903][T28100] ? __pfx_vfs_write+0x10/0x10 [ 2195.675694][T28100] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2195.682017][T28100] ? do_syscall_64+0x100/0x230 [ 2195.686779][T28100] ? do_syscall_64+0xb6/0x230 [ 2195.691456][T28100] do_syscall_64+0xf3/0x230 [ 2195.695956][T28100] ? clear_bhb_loop+0x35/0x90 [ 2195.700632][T28100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2195.706524][T28100] RIP: 0033:0x7f0aaf17fed9 [ 2195.710937][T28100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2195.730541][T28100] RSP: 002b:00007f0aafec1058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2195.738948][T28100] RAX: ffffffffffffffda RBX: 00007f0aaf345fa0 RCX: 00007f0aaf17fed9 [ 2195.746917][T28100] RDX: 0000000000000084 RSI: 0000000020000100 RDI: 0000000000000003 [ 2195.754879][T28100] RBP: 00007f0aafec10a0 R08: 0000000000000000 R09: 0000000000000000 [ 2195.762933][T28100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2195.770907][T28100] R13: 0000000000000000 R14: 00007f0aaf345fa0 R15: 00007ffe529f6ce8 [ 2195.778973][T28100] [ 2195.786059][T26313] usb 2-1: Product: syz [ 2195.790668][T26313] usb 2-1: Manufacturer: syz [ 2195.792011][T28082] bridge0: port 2(bridge_slave_1) entered disabled state [ 2195.796159][T26313] usb 2-1: SerialNumber: syz [ 2195.911199][T28082] bridge_slave_1: entered allmulticast mode [ 2195.919000][T28082] bridge_slave_1: entered promiscuous mode [ 2196.460405][T28110] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6084'. [ 2196.920613][T27762] Bluetooth: hci5: command tx timeout [ 2197.191657][T28086] pimreg: entered allmulticast mode [ 2197.286372][T28082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2197.299651][T28082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2197.351224][T28114] FAULT_INJECTION: forcing a failure. [ 2197.351224][T28114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2197.364427][T28114] CPU: 0 UID: 0 PID: 28114 Comm: syz.4.6085 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 2197.375202][T28114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2197.385278][T28114] Call Trace: [ 2197.388567][T28114] [ 2197.391513][T28114] dump_stack_lvl+0x241/0x360 [ 2197.396215][T28114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2197.401444][T28114] ? __pfx__printk+0x10/0x10 [ 2197.406064][T28114] ? __pfx_lock_release+0x10/0x10 [ 2197.411121][T28114] should_fail_ex+0x3b0/0x4e0 [ 2197.415822][T28114] _copy_from_user+0x2f/0xc0 [ 2197.420440][T28114] copy_msghdr_from_user+0xae/0x680 [ 2197.425659][T28114] ? __pfx___might_resched+0x10/0x10 [ 2197.430970][T28114] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2197.436807][T28114] ? do_recvmmsg+0x44e/0xab0 [ 2197.441493][T28114] ? __might_fault+0xaa/0x120 [ 2197.446194][T28114] do_recvmmsg+0x3bd/0xab0 [ 2197.450641][T28114] ? __pfx_do_recvmmsg+0x10/0x10 [ 2197.455593][T28114] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2197.461492][T28114] ? ksys_write+0x22a/0x2b0 [ 2197.466019][T28114] ? __pfx_lock_release+0x10/0x10 [ 2197.471073][T28114] ? vfs_write+0x730/0xd30 [ 2197.475507][T28114] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2197.481498][T28114] ? __fget_files+0x2a/0x410 [ 2197.486120][T28114] __x64_sys_recvmmsg+0x199/0x250 [ 2197.491173][T28114] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2197.496745][T28114] ? do_syscall_64+0x100/0x230 [ 2197.501538][T28114] ? do_syscall_64+0xb6/0x230 [ 2197.506249][T28114] do_syscall_64+0xf3/0x230 [ 2197.510776][T28114] ? clear_bhb_loop+0x35/0x90 [ 2197.515477][T28114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2197.521399][T28114] RIP: 0033:0x7fad3f77fed9 [ 2197.525833][T28114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2197.545461][T28114] RSP: 002b:00007fad405da058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2197.553901][T28114] RAX: ffffffffffffffda RBX: 00007fad3f945fa0 RCX: 00007fad3f77fed9 [ 2197.561889][T28114] RDX: 0400000000000203 RSI: 0000000020001580 RDI: 0000000000000005 [ 2197.569874][T28114] RBP: 00007fad405da0a0 R08: 0000000000000000 R09: 0000000000000000 [ 2197.577857][T28114] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 2197.585838][T28114] R13: 0000000000000000 R14: 00007fad3f945fa0 R15: 00007ffe74741ba8 [ 2197.593845][T28114] [ 2198.069161][T26313] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 2198.102739][T26313] usb 2-1: USB disconnect, device number 64 [ 2198.138264][T28082] team0: Port device team_slave_0 added [ 2198.148742][T28082] team0: Port device team_slave_1 added [ 2198.205381][T28082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2198.221925][T28082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2198.295387][T28082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2198.402322][T28082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2198.409308][T28082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2198.423316][T20602] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 2198.436679][T28082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2198.502694][T28082] hsr_slave_0: entered promiscuous mode [ 2198.510271][T28082] hsr_slave_1: entered promiscuous mode [ 2198.516644][T28082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2198.524486][T28082] Cannot create hsr debugfs directory [ 2198.605235][T20602] usb 7-1: Using ep0 maxpacket: 8 [ 2198.625720][T20602] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 2198.654476][T20602] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2198.677466][T20602] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2198.695035][ T47] libceph: connect (1)[c::]:6789 error -101 [ 2198.704124][T20602] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2198.717979][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 2198.727676][T20602] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2198.761225][T20602] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2198.771424][T28132] ceph: No mds server is up or the cluster is laggy [ 2198.778678][T20602] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2198.925068][T28082] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.030859][T20602] usb 7-1: usb_control_msg returned -32 [ 2199.041674][ T47] libceph: connect (1)[c::]:6789 error -101 [ 2199.050190][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 2199.071550][T20602] usbtmc 7-1:16.0: can't read capabilities [ 2199.128929][T27762] Bluetooth: hci5: command tx timeout [ 2200.017971][T28082] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2200.370887][T28082] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2200.868226][T23989] usb 7-1: USB disconnect, device number 54 [ 2201.942526][T28166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6096'. [ 2202.141440][T27762] Bluetooth: hci5: command tx timeout [ 2202.212998][T28082] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2202.310201][T28170] FAULT_INJECTION: forcing a failure. [ 2202.310201][T28170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2202.323770][ T47] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 2202.358699][T28170] CPU: 0 UID: 0 PID: 28170 Comm: syz.2.6098 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 2202.369522][T28170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2202.379615][T28170] Call Trace: [ 2202.382911][T28170] [ 2202.385859][T28170] dump_stack_lvl+0x241/0x360 [ 2202.390570][T28170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2202.395802][T28170] ? __pfx__printk+0x10/0x10 [ 2202.400422][T28170] ? __pfx_lock_release+0x10/0x10 [ 2202.405477][T28170] ? __lock_acquire+0x1397/0x2100 [ 2202.410543][T28170] should_fail_ex+0x3b0/0x4e0 [ 2202.415257][T28170] _copy_from_user+0x2f/0xc0 [ 2202.419855][T28170] kstrtouint_from_user+0xc6/0x190 [ 2202.424969][T28170] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2202.430691][T28170] ? __pfx_lock_acquire+0x10/0x10 [ 2202.435720][T28170] proc_fail_nth_write+0xaa/0x2d0 [ 2202.440765][T28170] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2202.446687][T28170] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2202.452333][T28170] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2202.457966][T28170] vfs_write+0x2a3/0xd30 [ 2202.462224][T28170] ? __pfx_vfs_write+0x10/0x10 [ 2202.466992][T28170] ? __fget_files+0x2a/0x410 [ 2202.471586][T28170] ? __fget_files+0x395/0x410 [ 2202.476264][T28170] ? __fget_files+0x2a/0x410 [ 2202.480858][T28170] ksys_write+0x18f/0x2b0 [ 2202.485194][T28170] ? __pfx_ksys_write+0x10/0x10 [ 2202.490051][T28170] ? do_syscall_64+0x100/0x230 [ 2202.494820][T28170] ? do_syscall_64+0xb6/0x230 [ 2202.499500][T28170] do_syscall_64+0xf3/0x230 [ 2202.504026][T28170] ? clear_bhb_loop+0x35/0x90 [ 2202.508714][T28170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2202.514619][T28170] RIP: 0033:0x7f0aaf17e98f [ 2202.519043][T28170] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2202.538654][T28170] RSP: 002b:00007f0aafea0050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2202.547075][T28170] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0aaf17e98f [ 2202.555050][T28170] RDX: 0000000000000001 RSI: 00007f0aafea00b0 RDI: 0000000000000004 [ 2202.563022][T28170] RBP: 00007f0aafea00a0 R08: 0000000000000000 R09: 0000000000000000 [ 2202.570991][T28170] R10: 00000000200002c0 R11: 0000000000000293 R12: 0000000000000001 [ 2202.578960][T28170] R13: 0000000000000000 R14: 00007f0aaf346080 R15: 00007ffe529f6ce8 [ 2202.586940][T28170] [ 2202.830533][ T47] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2202.852597][ T47] usb 2-1: not running at top speed; connect to a high speed hub [ 2203.123591][ T47] usb 2-1: config 81 has an invalid interface number: 159 but max is 0 [ 2203.898173][ T47] usb 2-1: config 81 has no interface number 0 [ 2203.906107][ T47] usb 2-1: config 81 interface 159 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2203.918981][ T47] usb 2-1: config 81 interface 159 has no altsetting 0 [ 2204.226453][T28082] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2204.404525][T27762] Bluetooth: hci5: command tx timeout [ 2204.508720][ T47] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=fb.61 [ 2204.517912][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.526501][ T47] usb 2-1: Product: syz [ 2204.531048][ T47] usb 2-1: Manufacturer: syz [ 2204.535687][ T47] usb 2-1: SerialNumber: syz [ 2204.547629][T28082] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2204.558987][T28082] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2204.566339][ T47] usb 2-1: can't set config #81, error -71 [ 2204.616463][T28082] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2204.682901][ T47] usb 2-1: USB disconnect, device number 65 [ 2204.977191][T28189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6103'. [ 2204.995061][T28189] bridge_slave_1: left allmulticast mode [ 2205.000799][T28189] bridge_slave_1: left promiscuous mode [ 2205.006548][T28189] bridge0: port 2(bridge_slave_1) entered disabled state [ 2205.020036][T23989] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2205.055720][T28082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2205.108744][T28082] 8021q: adding VLAN 0 to HW filter on device team0 [ 2205.131126][T13045] bridge0: port 1(bridge_slave_0) entered blocking state [ 2205.138349][T13045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2205.192690][T13045] bridge0: port 2(bridge_slave_1) entered blocking state [ 2205.193075][T28197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6105'. [ 2205.199804][T13045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2205.216494][T23989] usb 3-1: Using ep0 maxpacket: 16 [ 2205.225889][T23989] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2205.235582][T23989] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 2205.243702][T23989] usb 3-1: config 0 has no interface number 0 [ 2205.250079][T23989] usb 3-1: config 0 interface 93 has no altsetting 0 [ 2205.265775][T23989] usb 3-1: New USB device found, idVendor=2040, idProduct=721e, bcdDevice=5e.2b [ 2205.275043][T23989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2205.284864][T23989] usb 3-1: Product: syz [ 2205.302808][T28082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2205.314603][T23989] usb 3-1: Manufacturer: syz [ 2205.321484][T23989] usb 3-1: SerialNumber: syz [ 2205.326268][T28082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2205.347502][T23989] usb 3-1: config 0 descriptor?? [ 2205.473505][T28203] [U] ›+P]ÚTEHÝÎ+;Û’ÏE=OÕÍ_¡×K»Ø‡ [ 2205.839578][T28082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2205.979610][T28082] veth0_vlan: entered promiscuous mode [ 2206.016191][T28082] veth1_vlan: entered promiscuous mode [ 2206.070200][T28082] veth0_macvtap: entered promiscuous mode [ 2206.115002][T28082] veth1_macvtap: entered promiscuous mode [ 2206.179138][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.206682][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.216546][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.259487][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.269348][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.316703][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.349665][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.376231][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.405845][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.427304][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.437513][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.448116][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.458458][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.475333][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.561614][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.602055][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.662262][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.697414][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.729939][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.748448][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.772686][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.804777][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.839257][T28082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2206.884061][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2206.904066][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.932750][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2206.972463][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.007827][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2207.030542][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.066037][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2207.136670][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.154132][T28224] netlink: 'syz.1.6110': attribute type 10 has an invalid length. [ 2207.157583][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2207.209272][T28225] netlink: 'syz.1.6110': attribute type 10 has an invalid length. [ 2207.219769][T28225] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6110'. [ 2207.228886][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.253948][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2207.293067][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.353573][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2207.377417][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.396346][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2207.429956][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.455380][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2207.497415][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.522223][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2207.563699][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.573608][T28082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2207.614195][T28082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.636576][T28082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2207.741609][T28224] batman_adv: batadv0: Adding interface: team0 [ 2207.756359][T28224] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2207.838347][T23989] usb 3-1: unknown interface protocol 0x1a, assuming v1 [ 2207.846138][T28224] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2207.863076][T23989] usb 3-1: cannot find UAC_HEADER [ 2207.896830][T23989] snd-usb-audio 3-1:0.93: probe with driver snd-usb-audio failed with error -22 [ 2207.933989][T28225] team0: entered promiscuous mode [ 2207.970426][T28225] team_slave_0: entered promiscuous mode [ 2207.976292][T28225] team_slave_1: entered promiscuous mode [ 2208.000944][T23989] usb 3-1: USB disconnect, device number 34 [ 2208.046821][T28225] 8021q: adding VLAN 0 to HW filter on device team0 [ 2208.053752][T28225] batman_adv: batadv0: Interface activated: team0 [ 2208.066299][T28225] batman_adv: batadv0: Interface deactivated: team0 [ 2208.075247][T28225] batman_adv: batadv0: Removing interface: team0 [ 2209.046121][T28225] bridge0: port 2(team0) entered blocking state [ 2209.052654][T28225] bridge0: port 2(team0) entered disabled state [ 2209.059165][T28225] team0: entered allmulticast mode [ 2209.064372][T28225] team_slave_0: entered allmulticast mode [ 2209.070116][T28225] team_slave_1: entered allmulticast mode [ 2209.077838][T28225] bridge0: port 2(team0) entered blocking state [ 2209.084262][T28225] bridge0: port 2(team0) entered forwarding state [ 2209.268360][T28082] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2209.288232][T28082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2209.846386][T28082] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2210.013345][T28082] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2210.195508][T28245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6115'. [ 2210.204597][T28245] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6115'. [ 2210.252731][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2210.261060][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2210.278895][T28246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6116'. [ 2210.288825][T28246] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6116'. [ 2210.324930][T10742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2210.343519][T10742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2210.578700][T23989] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2210.737715][T28252] usb usb8: usbfs: process 28252 (syz.3.6117) did not claim interface 0 before use [ 2210.747729][T23989] usb 3-1: Using ep0 maxpacket: 16 [ 2210.755150][T23989] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2210.769581][T23989] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2210.779469][T23989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2210.790997][T28252] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2210.798293][T23989] usb 3-1: Product: syz [ 2210.802558][T28252] overlayfs: failed to set xattr on upper [ 2210.808722][T23989] usb 3-1: Manufacturer: syz [ 2210.813529][T28252] overlayfs: ...falling back to redirect_dir=nofollow. [ 2210.821041][T23989] usb 3-1: SerialNumber: syz [ 2210.828046][T28252] overlayfs: ...falling back to index=off. [ 2210.834453][T23989] usb 3-1: config 0 descriptor?? [ 2210.840929][T28252] overlayfs: ...falling back to uuid=null. [ 2211.225594][T23989] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2211.347953][T28262] netlink: 'syz.6.6120': attribute type 39 has an invalid length. [ 2211.434226][T23989] usb 4-1: Using ep0 maxpacket: 8 [ 2211.442278][T23989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2211.455220][T23989] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2211.477868][T23989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2211.494136][T23989] usb 4-1: config 0 descriptor?? [ 2211.615800][ T974] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2211.729654][T23989] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2211.744069][T20602] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 2211.797438][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 2211.810992][ T974] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 2211.833471][ T974] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=85.bd [ 2211.850679][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=254 [ 2211.858893][ T974] usb 2-1: Product: syz [ 2211.873641][ T974] usb 2-1: Manufacturer: syz [ 2211.878369][ T974] usb 2-1: SerialNumber: syz [ 2211.893478][ T974] usb 2-1: config 0 descriptor?? [ 2211.904378][T20602] usb 7-1: Using ep0 maxpacket: 16 [ 2211.912024][T20602] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2211.920847][T20602] usb 7-1: config 0 has an invalid interface number: 93 but max is 0 [ 2211.929128][T20602] usb 7-1: config 0 has no interface number 0 [ 2211.935303][T20602] usb 7-1: config 0 interface 93 has no altsetting 0 [ 2211.944124][T20602] usb 7-1: New USB device found, idVendor=2040, idProduct=721e, bcdDevice=5e.2b [ 2211.955622][ T974] usb 4-1: USB disconnect, device number 49 [ 2211.964205][T20602] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.984415][T20602] usb 7-1: Product: syz [ 2211.988607][T20602] usb 7-1: Manufacturer: syz [ 2212.000804][T20602] usb 7-1: SerialNumber: syz [ 2212.013005][T20602] usb 7-1: config 0 descriptor?? [ 2212.160322][T23989] usb 2-1: USB disconnect, device number 66 [ 2213.256582][ T25] usb 3-1: USB disconnect, device number 35 [ 2214.832205][T17835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2214.842134][T17835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2214.844581][T17835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2214.846196][T17835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2214.857527][T17835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2214.857838][T17835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2215.145448][T20602] usb 7-1: unknown interface protocol 0x1a, assuming v1 [ 2215.145478][T20602] usb 7-1: cannot find UAC_HEADER [ 2216.145758][T20602] snd-usb-audio 7-1:0.93: probe with driver snd-usb-audio failed with error -22 [ 2216.148135][T20602] usb 7-1: USB disconnect, device number 55 [ 2216.194498][T28305] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6132'. [ 2216.207047][T28305] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6132'. [ 2216.664499][T22043] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2216.691499][T22043] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 51005 - 0 [ 2216.712191][T22043] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 44483 - 0 [ 2216.766693][T28291] chnl_net:caif_netlink_parms(): no params data found [ 2216.915845][T22043] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2216.953133][T22043] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 51005 - 0 [ 2216.967166][T22043] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 44483 - 0 [ 2217.064863][T22043] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2217.094693][T22043] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 51005 - 0 [ 2217.132174][T17835] Bluetooth: hci0: command tx timeout [ 2217.142920][T22043] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 44483 - 0 [ 2217.267902][T28291] bridge0: port 1(bridge_slave_0) entered blocking state [ 2217.307822][T28291] bridge0: port 1(bridge_slave_0) entered disabled state [ 2217.343834][T28291] bridge_slave_0: entered allmulticast mode [ 2217.368695][T28291] bridge_slave_0: entered promiscuous mode [ 2217.397929][T28291] bridge0: port 2(bridge_slave_1) entered blocking state [ 2217.414319][T28291] bridge0: port 2(bridge_slave_1) entered disabled state [ 2217.430701][T28291] bridge_slave_1: entered allmulticast mode [ 2217.553197][T28291] bridge_slave_1: entered promiscuous mode [ 2217.688537][T22043] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2217.720021][T22043] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 51005 - 0 [ 2330.377418][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2330.384418][ C0] rcu: 1-...!: (1 GPs behind) idle=a634/1/0x4000000000000000 softirq=133052/133053 fqs=1 [ 2330.396255][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P28307/1:b..l [ 2330.404278][ C0] rcu: (detected by 0, t=10505 jiffies, g=138497, q=291 ncpus=2) [ 2330.412093][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2330.412131][ C1] NMI backtrace for cpu 1 [ 2330.412145][ C1] CPU: 1 UID: 0 PID: 28323 Comm: syz.6.6134 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 2330.412165][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2330.412177][ C1] RIP: 0010:timerqueue_del+0x5/0x100 [ 2330.412202][ C1] Code: 0f 0b 90 e9 d6 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 49 89 f5 49 89 fe 48 bd 00 00 00 00 00 [ 2330.412218][ C1] RSP: 0018:ffffc90000a18d30 EFLAGS: 00000002 [ 2330.412232][ C1] RAX: 0000000000010000 RBX: 0000000000000001 RCX: ffff88803abeda00 [ 2330.412245][ C1] RDX: ffff88803abeda00 RSI: ffff888078bf7340 RDI: ffff8880b872c9d0 [ 2330.412258][ C1] RBP: ffffc90000a18ea0 R08: ffffffff818cd4c2 R09: 1ffffffff2030416 [ 2330.412272][ C1] R10: dffffc0000000000 R11: fffffbfff2030417 R12: 1ffff110170e593b [ 2330.412285][ C1] R13: dffffc0000000000 R14: ffff888078bf7340 R15: ffff8880b872c880 [ 2330.412298][ C1] FS: 00007f9bcf9366c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 2330.412314][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2330.412326][ C1] CR2: 0000001b2f118ff8 CR3: 000000006209e000 CR4: 00000000003526f0 [ 2330.412342][ C1] Call Trace: [ 2330.412350][ C1] [ 2330.412359][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2330.412398][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2330.412440][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2330.412479][ C1] ? nmi_handle+0x2a/0x5a0 [ 2330.412537][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2330.412561][ C1] ? nmi_handle+0x14f/0x5a0 [ 2330.412579][ C1] ? nmi_handle+0x2a/0x5a0 [ 2330.412598][ C1] ? timerqueue_del+0x5/0x100 [ 2330.412614][ C1] ? default_do_nmi+0x63/0x160 [ 2330.412633][ C1] ? exc_nmi+0x123/0x1f0 [ 2330.412650][ C1] ? end_repeat_nmi+0xf/0x53 [ 2330.412668][ C1] ? __hrtimer_run_queues+0x3b2/0xd30 [ 2330.412692][ C1] ? timerqueue_del+0x5/0x100 [ 2330.412709][ C1] ? timerqueue_del+0x5/0x100 [ 2330.412727][ C1] ? timerqueue_del+0x5/0x100 [ 2330.412744][ C1] [ 2330.412750][ C1] [ 2330.412756][ C1] __hrtimer_run_queues+0x3d0/0xd30 [ 2330.412786][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2330.412811][ C1] ? handle_softirqs+0x7e0/0x9b0 [ 2330.412835][ C1] ? read_tsc+0x9/0x20 [ 2330.412857][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 2330.412878][ C1] hrtimer_interrupt+0x403/0xa40 [ 2330.412910][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 2330.412931][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 2330.412952][ C1] [ 2330.412958][ C1] [ 2330.412965][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2330.412989][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 2330.413007][ C1] Code: 2b 00 74 08 4c 89 f7 e8 7a 80 8c 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 2330.413022][ C1] RSP: 0018:ffffc90003f473e0 EFLAGS: 00000206 [ 2330.413036][ C1] RAX: 0000000000000001 RBX: 1ffff920007e8e88 RCX: ffff88803abee4d8 [ 2330.413049][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0aa880 RDI: ffffffff8c5e90a0 [ 2330.413062][ C1] RBP: ffffc90003f47528 R08: ffffffff94282887 R09: 1ffffffff2850510 [ 2330.413075][ C1] R10: dffffc0000000000 R11: fffffbfff2850511 R12: 1ffff920007e8e84 [ 2330.413088][ C1] R13: dffffc0000000000 R14: ffffc90003f47440 R15: 0000000000000246 [ 2330.413112][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2330.413130][ C1] ? schedule_timeout+0xb0/0x290 [ 2330.413149][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2330.413173][ C1] ? sk_filter_trim_cap+0x1b3/0xa80 [ 2330.413190][ C1] sk_filter_trim_cap+0x1d0/0xa80 [ 2330.413207][ C1] ? sk_filter_trim_cap+0x1b3/0xa80 [ 2330.413226][ C1] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 2330.413245][ C1] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 2330.413263][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2330.413286][ C1] ? hook_unix_may_send+0x11e/0x5b0 [ 2330.413308][ C1] ? unix_dgram_sendmsg+0xd25/0x1f80 [ 2330.413326][ C1] ? unix_dgram_sendmsg+0xd32/0x1f80 [ 2330.413348][ C1] unix_dgram_sendmsg+0xb15/0x1f80 [ 2330.413380][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2330.413401][ C1] ? __import_iovec+0x3a8/0x870 [ 2330.413428][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2330.413447][ C1] __sock_sendmsg+0x221/0x270 [ 2330.413472][ C1] ____sys_sendmsg+0x52a/0x7e0 [ 2330.413496][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2330.413513][ C1] ? __fget_files+0x2a/0x410 [ 2330.413535][ C1] ? __sys_sendmmsg+0x392/0x720 [ 2330.413554][ C1] ? __might_fault+0xaa/0x120 [ 2330.413577][ C1] __sys_sendmmsg+0x36a/0x720 [ 2330.413602][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2330.413635][ C1] ? wake_up_q+0xdc/0x120 [ 2330.413660][ C1] ? futex_wait+0x285/0x360 [ 2330.413680][ C1] ? __pfx_futex_wait+0x10/0x10 [ 2330.413703][ C1] ? unix_dgram_connect+0xaec/0xd80 [ 2330.413725][ C1] ? do_futex+0x33b/0x560 [ 2330.413753][ C1] ? __sys_connect+0x119/0x2d0 [ 2330.413775][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2330.413794][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2330.413818][ C1] ? do_syscall_64+0x100/0x230 [ 2330.413843][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 2330.413863][ C1] do_syscall_64+0xf3/0x230 [ 2330.413886][ C1] ? clear_bhb_loop+0x35/0x90 [ 2330.413902][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2330.413925][ C1] RIP: 0033:0x7f9bceb7fed9 [ 2330.413941][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2330.413956][ C1] RSP: 002b:00007f9bcf936058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2330.413972][ C1] RAX: ffffffffffffffda RBX: 00007f9bced45fa0 RCX: 00007f9bceb7fed9 [ 2330.413985][ C1] RDX: 0000000000000651 RSI: 0000000020000000 RDI: 0000000000000005 [ 2330.413996][ C1] RBP: 00007f9bcebf3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 2330.414007][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2330.414017][ C1] R13: 0000000000000000 R14: 00007f9bced45fa0 R15: 00007ffe299a9ca8 [ 2330.414037][ C1] [ 2330.414119][ C0] task:syz.3.6129 state:R running task stack:25648 pid:28307 tgid:28299 ppid:28082 flags:0x00004002 [ 2331.022140][ C0] Call Trace: [ 2331.025430][ C0] [ 2331.028383][ C0] __schedule+0x17fb/0x4be0 [ 2331.032909][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2331.039255][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 2331.044480][ C0] ? __pfx___schedule+0x10/0x10 [ 2331.049363][ C0] ? preempt_schedule+0xe1/0xf0 [ 2331.054229][ C0] preempt_schedule_common+0x84/0xd0 [ 2331.059556][ C0] preempt_schedule+0xe1/0xf0 [ 2331.064263][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 2331.069663][ C0] preempt_schedule_thunk+0x1a/0x30 [ 2331.074884][ C0] _raw_spin_unlock+0x3e/0x50 [ 2331.079578][ C0] unmap_page_range+0x37fa/0x4230 [ 2331.084644][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2331.090669][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 2331.096063][ C0] ? mas_next_slot+0xdc6/0xea0 [ 2331.100859][ C0] ? uprobe_munmap+0x183/0x460 [ 2331.105645][ C0] ? unmap_single_vma+0x1bd/0x2b0 [ 2331.110698][ C0] unmap_vmas+0x3cc/0x5f0 [ 2331.115053][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 2331.119933][ C0] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 2331.125420][ C0] exit_mmap+0x275/0xc20 [ 2331.129683][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 2331.134473][ C0] ? __pfx_exit_aio+0x10/0x10 [ 2331.139182][ C0] ? uprobe_clear_state+0x271/0x290 [ 2331.144387][ C0] ? mm_update_next_owner+0xa2/0x8a0 [ 2331.149689][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2331.154909][ C0] __mmput+0x115/0x3b0 [ 2331.158995][ C0] exit_mm+0x220/0x310 [ 2331.163077][ C0] ? __pfx_exit_mm+0x10/0x10 [ 2331.167677][ C0] ? taskstats_exit+0x326/0xa60 [ 2331.172545][ C0] do_exit+0x9b2/0x28e0 [ 2331.176719][ C0] ? __pfx_do_exit+0x10/0x10 [ 2331.181316][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2331.186710][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2331.192703][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2331.199037][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 2331.204162][ C0] do_group_exit+0x207/0x2c0 [ 2331.208762][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2331.213970][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 2331.219185][ C0] get_signal+0x16b2/0x1750 [ 2331.223718][ C0] ? __pfx_get_signal+0x10/0x10 [ 2331.228594][ C0] arch_do_signal_or_restart+0x96/0x860 [ 2331.234165][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2331.240333][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2331.246335][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 2331.252074][ C0] syscall_exit_to_user_mode+0xce/0x340 [ 2331.257641][ C0] do_syscall_64+0x100/0x230 [ 2331.262248][ C0] ? clear_bhb_loop+0x35/0x90 [ 2331.266938][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2331.272850][ C0] RIP: 0033:0x7f6d7e97fed9 [ 2331.277279][ C0] RSP: 002b:00007f6d7c7f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2331.285706][ C0] RAX: 0000000000010106 RBX: 00007f6d7eb46080 RCX: 00007f6d7e97fed9 [ 2331.293688][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000006 [ 2331.301665][ C0] RBP: 00007f6d7e9f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 2331.309641][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2331.317619][ C0] R13: 0000000000000001 R14: 00007f6d7eb46080 R15: 00007ffdb4b78ee8 [ 2331.325636][ C0] [ 2331.328679][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g138497 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2331.339983][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2331.349964][ C0] rcu: RCU grace-period kthread stack dump: [ 2331.355857][ C0] task:rcu_preempt state:R running task stack:26072 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 2331.367623][ C0] Call Trace: [ 2331.370923][ C0] [ 2331.373872][ C0] __schedule+0x17fb/0x4be0 [ 2331.378421][ C0] ? __pfx___schedule+0x10/0x10 [ 2331.383289][ C0] ? __pfx_lock_release+0x10/0x10 [ 2331.388336][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2331.394677][ C0] ? schedule+0x90/0x320 [ 2331.398937][ C0] schedule+0x14b/0x320 [ 2331.403111][ C0] schedule_timeout+0x15a/0x290 [ 2331.407973][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2331.413357][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2331.418664][ C0] ? prepare_to_swait_event+0x330/0x350 [ 2331.424227][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 2331.429088][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 2331.434333][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 2331.440239][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2331.445535][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2331.451445][ C0] ? finish_swait+0xd4/0x1e0 [ 2331.456047][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 2331.460653][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2331.465868][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2331.471777][ C0] ? __kthread_parkme+0x169/0x1d0 [ 2331.476816][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2331.482026][ C0] kthread+0x2f0/0x390 [ 2331.486109][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2331.491319][ C0] ? __pfx_kthread+0x10/0x10 [ 2331.495933][ C0] ret_from_fork+0x4b/0x80 [ 2331.500357][ C0] ? __pfx_kthread+0x10/0x10 [ 2331.504961][ C0] ret_from_fork_asm+0x1a/0x30 [ 2331.509757][ C0] [ 2331.512785][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2331.519220][ C0] CPU: 0 UID: 0 PID: 10742 Comm: kworker/u8:14 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 2331.530256][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2331.540344][ C0] Workqueue: events_unbound toggle_allocation_gate [ 2331.546887][ C0] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2c60 [ 2331.553689][ C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 56 e9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 e5 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 e4 [ 2331.573761][ C0] RSP: 0018:ffffc9001fe176e0 EFLAGS: 00000293 [ 2331.579858][ C0] RAX: ffffffff81938cdb RBX: 1ffff110170e88b9 RCX: ffff888031c61e00 [ 2331.587842][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2331.595831][ C0] RBP: ffffc9001fe178e0 R08: ffffffff81938caa R09: 1ffffffff2850510 [ 2331.603820][ C0] R10: dffffc0000000000 R11: fffffbfff2850511 R12: dffffc0000000000 [ 2331.611802][ C0] R13: ffff8880b87445c8 R14: ffff8880b863f940 R15: 0000000000000001 [ 2331.619783][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 2331.628721][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2331.635311][ C0] CR2: 00007f9bcf915d58 CR3: 000000000e736000 CR4: 00000000003526f0 [ 2331.643298][ C0] Call Trace: [ 2331.646584][ C0] [ 2331.649434][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 2331.655783][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 2331.661452][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 2331.667293][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 2331.673639][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 2331.679034][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 2331.684693][ C0] ? update_process_times+0x242/0x2f0 [ 2331.690163][ C0] ? tick_nohz_handler+0x37c/0x500 [ 2331.695294][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 2331.700771][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 2331.706181][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2331.711916][ C0] ? sched_clock+0x4a/0x70 [ 2331.716350][ C0] ? read_tsc+0x9/0x20 [ 2331.720432][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 2331.726516][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 2331.731755][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 2331.737922][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 2331.743741][ C0] [ 2331.746689][ C0] [ 2331.749624][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2331.755803][ C0] ? smp_call_function_many_cond+0x19da/0x2c60 [ 2331.761970][ C0] ? smp_call_function_many_cond+0x1a0b/0x2c60 [ 2331.768139][ C0] ? smp_call_function_many_cond+0x19f3/0x2c60 [ 2331.774322][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 2331.779365][ C0] ? __pfx___text_poke+0x10/0x10 [ 2331.784312][ C0] ? process_scheduled_works+0x976/0x1840 [ 2331.790063][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 2331.796409][ C0] ? __pfx___might_resched+0x10/0x10 [ 2331.801709][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2331.807618][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 2331.812670][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 2331.817799][ C0] text_poke_bp_batch+0x352/0xb30 [ 2331.822843][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2331.828840][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 2331.835011][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 2331.840576][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 2331.846835][ C0] ? process_scheduled_works+0x976/0x1840 [ 2331.852572][ C0] text_poke_finish+0x30/0x50 [ 2331.857260][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 2331.863256][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 2331.869168][ C0] static_key_enable+0x1a/0x20 [ 2331.873943][ C0] toggle_allocation_gate+0xbc/0x260 [ 2331.879240][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 2331.885140][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2331.891490][ C0] process_scheduled_works+0xa66/0x1840 [ 2331.897080][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2331.903092][ C0] ? assign_work+0x364/0x3d0 [ 2331.907703][ C0] worker_thread+0x870/0xd30 [ 2331.912309][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2331.918224][ C0] ? __kthread_parkme+0x169/0x1d0 [ 2331.923262][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2331.928380][ C0] kthread+0x2f0/0x390 [ 2331.932459][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2331.937581][ C0] ? __pfx_kthread+0x10/0x10 [ 2331.942183][ C0] ret_from_fork+0x4b/0x80 [ 2331.946609][ C0] ? __pfx_kthread+0x10/0x10 [ 2331.951228][ C0] ret_from_fork_asm+0x1a/0x30 [ 2331.956022][ C0]