last executing test programs: 12m27.682054279s ago: executing program 1 (id=59): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe6) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xcccccccc}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r3, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r3, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x1fff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='p'], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, &(0x7f0000000040)=0x40) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x40, 0x51, 0xc3, 0x10, 0x10, 0x5da, 0x94, 0xf6f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd8, 0x0, 0x3, 0xac, 0x2d, 0x90, 0x0, [], [{{0x9, 0x5, 0x7, 0x4, 0x210, 0x4, 0xf, 0x2a}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xb, 0xc, 0x6}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x2, 0x4}}]}}]}}]}}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x1, 0x3}, 0x10) bind$ax25(r6, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) 12m24.329655149s ago: executing program 1 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4c000) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x80, 0x700, 0x81, 0x7, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="340100000108010200000000000000000200000205000300841000000000000000ca0000060002406000000034000480080008400000000408000540000000000800014000000008080005400000000108000940000000070800064000007fff3c010480080001400000000b080001400000045908b44e0c70000002083234566db40001400000000308000140400000000800014000000005080001408008000540000001bf08000140000007ff08000b400000004008000640fffff985080007400000080008000b400000000008000b400000008408000340000000094c0004800800054000007fff08"], 0x134}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x24020400) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, r9, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf48}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x4, 0x5, 0x5}) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x80000) bind$x25(r6, &(0x7f0000000e00), 0x12) 12m22.364637658s ago: executing program 1 (id=71): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(r1, 0x2, &(0x7f00000000c0)={0x3, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000007c0)={0x14, &(0x7f00000006c0)={0x20, 0x30, 0x93, {0x93, 0x5, "f1b5af258fa7297f05090d8b31924bfe6a1992fd1241f7dd9ed755a63a0b387869507080661a2264d1806fb7638fc0dd68e46a926c27448e5b96281f682b655277fd0d09df7a1fb9f5c92131f25ff0121d7f46e113bc3edfe1416b1430a35ad192400b6b3181b7a467d565a94a8631af71e7f60f6c0ca25ad22cb9c706f9dbe1608075a6fc380f4fe62fff0241d83e94e0"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000800)={0x0, 0x15, 0x4, "d8617c72"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000008c0)=ANY=[@ANYBLOB="2081030800002ffb3d"], &(0x7f0000000900)={0x20, 0x82, 0x3, "be0807"}, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x20, 0x84, 0x3, "e5e872"}, &(0x7f00000009c0)={0x20, 0x85, 0x3, "7af669"}}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001ec0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000002180)="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", 0xd4}, {&(0x7f0000000580)="6283cf9d3e7e8b16f368dcde52f1f28be8f6d7624c4f4cf26aec5be1d7d047b1585934494c2ff7c0b12a91165c9e014dc353b95cf2e0d4521c5f0f0168cce4c0e607138a88d684949bfcc16121b4f75c55a9979d82bdd8463a63577eb21048ec6bf8fb9e8fc73c231a47514556eb62529509a0c0eb7ff34711a250b451197886d31bbfa691c171850b407e693c8dc51945208f2d93a07dfd", 0x98}, {&(0x7f0000000640)="e32892ec1b9639111d04e8efb946a24e7ea3f0c1bf59b2bc9bffce2b98280b716f7ab49d70e4f76dd89049d55c45f638740af28c8e9acba5d18343dc7aa6570c3d805c96137c3e374bfa4d489e16e7d982aed8f247408715b3a5ec238456b6deac036bed347d46da4fbd2ce9b8", 0x6d}, {&(0x7f0000000400)="a2e364b7df545d603e4c9665893db7369673eb100e4cdf674ede46e1d295c3efabfa6d2ea8d7cdba5266f5fadc5882fdbb72d3d61b058ea85261a64607624c08ea7760a251791995a2817262db9c8d70892a53283a099bfa96229c0673af351bb009209215854ec479f4e55c3d04d81c8ec484c62e58f89aa017d03bde7afeb5d20f4133665e6f2aa4db5272dd7f428e13918a51bad651d1c92cdf8c406ac70156005f3f331f47072b"}, {&(0x7f0000000a80)="1fb3bd6a8134e9f3c3aa9523631ad625f9c84af0fe3a1d54eed40d3a930efb42b53023d5957cbdc72661f09471a83047e802cc88da77868039c8a74e5a70dd2b78b31a84133e34c603b2710bf639f225fa6b92ec7f83b05cced0bc93e0ab714debd3147ff85589f5fee29d0b5e722f9e301a", 0x72}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000000500)="eb4b035a213d8babc14b0100000000000000", 0x12}, {&(0x7f0000001b00)="6d2a9007578faeb7681888a938ae244710d714b90919e131fb803d70ca7c380005575702c6892148f38e58ab918fe15de03ac8bad9083ecf176f1efbd9989c0c1ad06b76ff6dcd87b4cf049253f9cea039d204e2335451ff46da934308e671f9a139a64a56dd8ee61ef6e14076fe0d896586460ed4c58ffb56b93451e2fa08d25b0ae8b9369f02f69fed262e1f44fa1491776d369bd143e6b361a740619cdc690c2dc6b8da3d896427ab9d639728aa529fbd89069e9f31f0127dfb1e3d48d671edfa4e50", 0xc4}, {&(0x7f0000001c00)="f4257358e5dbac45b799b480b69022ba06cb4fadac1d12a403fea4de83d48e718cfe75e0e24025278b75b7daf6e39aea39bf0e4868e6ba1f36d9cdf0e874fc9cfea61da3a9fa79a81b93f81d7594", 0xa3}, {&(0x7f0000001c80)="d70db5cf88c130138b50de16f0aba133f1e11843ce9d0fc9fca918c3bbe3ef74ce53dbd42de33ac9272b1a2536a849afae0e41cf664bec85cec8002f10b4fcdcd30e2765dba4895479d1bf6d2725bdd4903174ff331035e106aa89c805c779604750b846731f937b682ffdd836133ea62fb47b4a81a40ae30a6781327738142ad042e979d08fda86ccd3ef3ef99c5a4ba5516a3cf3408283a09fe63824b8036da365c640cd52938a24f07caef36c2bc14dce603c7352a5c0a37883279c440d9d365f2d74b75a", 0xc6}, {&(0x7f0000000b00)="55a9aca841af30a1c31dab4942ae0fca82d122586085d2013df8f0ccf909efd16e1ebc5b76871ae2d15d2754154e76f70e3291150fb6dde9a949e4e6db85a27226fb0232dd760a3db4ae557306f7b8f8806b1d6b06c2b1cbbed9055b63011e5a3399741e9051d4765b370c397a1e4cd2794ed956897b04a4f313ed0f521c475a80a61444ebe9d32970e9172e50da15eeebadc2701d980d4f21328ed0fde43ee36ad147b6c4cdae748738b60dd4ad691fa546610d2ee39df695c36fa5a0792c7009e872ccfd625c570e68c4175e26743bc7"}], 0xa, &(0x7f0000001e80), 0x0, 0x8080}}], 0x1, 0x2404c891) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f00000002c0)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x70, &(0x7f0000000d40)=[@in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x81}, @in6={0xa, 0x4e20, 0x5, @loopback, 0x10000}, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @in6={0xa, 0x4e20, 0x1, @local, 0x3}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000240)={r8, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 12m19.099198341s ago: executing program 1 (id=80): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000280)={0x0, r2}) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000280)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x4, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x400002, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x400002, 0xffffffffffffffff, 0x1}) r3 = userfaultfd(0x80801) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x4, 0xd, 0x5) (async) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x4, 0xd, 0x5) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') preadv(r5, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) 12m18.437705208s ago: executing program 1 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000000)=@id, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0) 12m17.134197143s ago: executing program 1 (id=86): r0 = socket(0x400000000010, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x6000, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x100, 0xf4, 0xe3}}}}]}, 0x48}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x0, 0x12d5f, 0x3}}, 0x44) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000000a0a000000000000000000000100000408000a400000000008000f400000000908000540000000190900010073797a31000000002c0011800b00010065787468647200001c0002800500020007000000080001400000000108000540000000007352f164afefadafe103d7affd3be3255b12ef22f8309145fff7cae8795da1040f485911a0c4ee4fbe0dcaccbcca2e9be96736d96f329ac303b3b0e27be7a798221dae6565c883c550d0368f3d629483d1509d23ce83b270fab98e04184072364258f7d37bae995c3f7b115315765d48c3e8e31a660a178efacd5134b38a01422486e4a51488"], 0x64}}, 0x800) socket(0x400000000010, 0xa, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x6000, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x100, 0xf4, 0xe3}}}}]}, 0x48}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x0, 0x12d5f, 0x3}}, 0x44) (async) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000000a0a000000000000000000000100000408000a400000000008000f400000000908000540000000190900010073797a31000000002c0011800b00010065787468647200001c0002800500020007000000080001400000000108000540000000007352f164afefadafe103d7affd3be3255b12ef22f8309145fff7cae8795da1040f485911a0c4ee4fbe0dcaccbcca2e9be96736d96f329ac303b3b0e27be7a798221dae6565c883c550d0368f3d629483d1509d23ce83b270fab98e04184072364258f7d37bae995c3f7b115315765d48c3e8e31a660a178efacd5134b38a01422486e4a51488"], 0x64}}, 0x800) (async) 12m16.560726804s ago: executing program 32 (id=86): r0 = socket(0x400000000010, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x6000, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x100, 0xf4, 0xe3}}}}]}, 0x48}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x0, 0x12d5f, 0x3}}, 0x44) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000000a0a000000000000000000000100000408000a400000000008000f400000000908000540000000190900010073797a31000000002c0011800b00010065787468647200001c0002800500020007000000080001400000000108000540000000007352f164afefadafe103d7affd3be3255b12ef22f8309145fff7cae8795da1040f485911a0c4ee4fbe0dcaccbcca2e9be96736d96f329ac303b3b0e27be7a798221dae6565c883c550d0368f3d629483d1509d23ce83b270fab98e04184072364258f7d37bae995c3f7b115315765d48c3e8e31a660a178efacd5134b38a01422486e4a51488"], 0x64}}, 0x800) socket(0x400000000010, 0xa, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x6000, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x100, 0xf4, 0xe3}}}}]}, 0x48}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x0, 0x12d5f, 0x3}}, 0x44) (async) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000000a0a000000000000000000000100000408000a400000000008000f400000000908000540000000190900010073797a31000000002c0011800b00010065787468647200001c0002800500020007000000080001400000000108000540000000007352f164afefadafe103d7affd3be3255b12ef22f8309145fff7cae8795da1040f485911a0c4ee4fbe0dcaccbcca2e9be96736d96f329ac303b3b0e27be7a798221dae6565c883c550d0368f3d629483d1509d23ce83b270fab98e04184072364258f7d37bae995c3f7b115315765d48c3e8e31a660a178efacd5134b38a01422486e4a51488"], 0x64}}, 0x800) (async) 9m13.638246661s ago: executing program 0 (id=521): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000801) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@null, @default, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) mkdir(&(0x7f0000000000)='./file1\x00', 0xf0a552e37b97b976) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='ntfs\x00', 0x8, &(0x7f0000000040)='usrquota') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0], 0x1, 0x180000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000380)) sendmsg$IPVS_CMD_ZERO(r5, 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 9m12.34242983s ago: executing program 0 (id=524): r0 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_ipv6host(r0, &(0x7f0000000400)=@l2={{0x5, 0x3a, 0x7, 0x3a, 0x4, 0x3a, 0x8000000000000002, 0x3a, 0x1, 0x3a, 0x1400, 0x3a, 0x4, 0x3a, 0xf}, 0x2f, 0x3f, 0x20, '-.&\v\x10@'}, 0xb4) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fusectl\x00', 0x40010, &(0x7f00000001c0)='-.&\v\x10@') ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)}) r2 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180900000020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x200000}, 0x18) getdents64(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='xprtrdma_fixup\x00', r3}, 0x18) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440), 0x1) r5 = syz_open_dev$dri(&(0x7f0000000000), 0xd1, 0x40100) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000040)) 9m12.021589859s ago: executing program 0 (id=528): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) syz_open_dev$loop(0x0, 0x800, 0x480140) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$TCSBRKP(r2, 0x5425, 0x4) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0x2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00') openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) 9m5.650411061s ago: executing program 0 (id=540): mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 9m5.487731719s ago: executing program 0 (id=542): timer_create(0x1, &(0x7f0000000180)={0x0, 0x3b, 0x0, @thr={&(0x7f0000000000)="3050a898aa6ba80d84cad0efbddc9c11056a92a270af04180793551b192fc06ea9aa0cb65acd26ced74615ace446233d7afc7ba63d51a97ac9d32953fbb281daeaa208fb78d6a80241db9b167a490b58f5154f95a970b42a3c521fae2ea0c1dfc9f6233a164aef2a943db6b03ececcc192764c0eaa17adc5ae927be8dfd5d7e7ae1f110a17130ae409ef8d45464a176d0484c557dc739eec", &(0x7f00000000c0)="06e2fcd34d8b21271d4fcb5bf8ff45d485eae9e9bed9c60bea84fdb7959e9a91565c143cf9b2f003faab73e2f336a879c9cf51b316debfb3f4e735ede439f303c637919445212ebe1ff94b1a986b5c6d08732f9a63d2fb221c7216caa5cf659b9d0b7c59548cab8366db9ffc3a188802519e214cb82114fd6b0ce658672b581bcdbc13f9793580e1fcce"}}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x64, 0xa, 0x0, 0x7f, 0x3, 0x6, 0x81, 0x23c, 0x40, 0x3a9, 0xfffffff8, 0xfffb, 0x38, 0x1, 0x7fff, 0x3, 0x9}, [{0x7, 0x9, 0x1, 0xfffffffffffffffe, 0x6, 0x5, 0x6, 0x7ff}], "78006fd582f3c32b9d8ab6934d0c4fe6f2bc53d9b5867dad0d60ab9404eb2cd32022d9141af918241e4d439cc9b58072c5b06df70c5ed861ac0dbcf3ace1be2d855c93341a09a7f992f9f2e1d506f1f665b8d44de0268029e2ecac5621e7e719fa26b9834d811b881fd6486ab31d08a31b06c854e6b24bf4407c46f4db8a048ca091228a628df63ec70f54186e3f2a2b74d01ed14518a9fbf0848c864580f1d6e64ea615ff1eca72ec8229ee44be23126bddafdd0162c4f78ce0419d449d4729bc3ae55fa4f3cf3bb8cc09dc60265657c6d651cf674b84d44c562e5f92ef4d3e862fc8df8fca12a949109698aa95c0ff13f1ed48cc29", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x86e) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000ac0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000b00)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000cc0)={@multicast1, @private, 0x0}, &(0x7f0000000d00)=0xc) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r2, 0x5, 0x4, 0x4}, 0x50) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r2, {0xfffffffc}}, './file0\x00'}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ec0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@bloom_filter={0x1e, 0x5, 0x3, 0x8, 0x2192, 0x1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x7}, 0x50) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000fc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)={0x1b, 0x0, 0x0, 0xa54, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x8, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000b80)='syzkaller\x00', 0x8001, 0xc4, &(0x7f0000000bc0)=""/196, 0x1f00, 0x9, '\x00', r4, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000d80)={0x0, 0x7, 0x5, 0x3}, 0x10, 0xffffffffffffffff, r5, 0x0, &(0x7f00000010c0)=[r6, 0x1, 0xffffffffffffffff, r7, r8, r1, r9, r10, r11], 0x0, 0x10, 0x9}, 0x94) close_range(r6, r5, 0x2) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000011c0), 0x101440, 0x0) ftruncate(r12, 0x5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000001240)={&(0x7f0000001200)=[0x0, 0x0, 0x0], 0x3, 0x1800, 0x0, 0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000013c0)={r13, &(0x7f0000001280)="676bcba6031d8f62fa488baccedae9a3eb5fa57473fba31118fd64bd54287ca34e6f6a142baf35b942e73129d376995e4e86d1e0ae1372d00e2980c15fcc305582eb01ce12de25fc30367495b6bc2025e19f6f4bcb7b17e0a2881a07b05f3655c39848a2e28477c0a27daafa35e3f2f8d3000f921070620aacb7d5045bef9f", &(0x7f0000001300)=""/138}, 0x20) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r11, 0xe8351000) writev(r12, &(0x7f0000001780)=[{&(0x7f0000001400)="86f80855e2c555ab1ca853fb51498acec3b232f8a93d056b1cef0ae4d26240a4e00200f3840cc02a45c22950ca139769274dacaa3a4827d985a0736695ad5fd5a78a0c7b8c2224dae8cae20928a22992a8c2ac422a01f1f7426b0664134f0ca6b8a807ed13dbb38be434b4f31e36374e62a4e10bf11b85930045dcde475a5c3b92ae6e14e8580634b949caec0a8b56eac4c05127fca41318f87f0ab61ab7746d69611bf67398083b3fed", 0xaa}, {&(0x7f00000014c0)="620c55a69512a4c49db2df91463d31fc21a00f8962c41266831b9ad54fdbf934a81926b775fdfd2999f6eca92035ceafbf07b163255f1ada0d05047bb57069ad3aca8a9837268f80c20e5d4c53aa6de626c068ef392010", 0x57}, {&(0x7f0000001540)="0ad68af4c8f11c4d4613f7c1c205433fc708e891152770691a4190d945044aa7616e9910c08f84a5316b1e6b64ff06ae3a285d40c37b1c56a3ffc1d3b6d1f1c1cd1cac0f02f481b05c0739cb329f4243ff45c976750ce61b82e6d82720c827169a0e8f0d66e8d5", 0x67}, {&(0x7f00000015c0)="9dd97f0fc9eb0ce7f824cef3b6977decaaa8e6a1276a35a7223e33bbcd6f1b238fc5d6db362be3498972645fa14f4cde9eb0b2b4e7043b9f73db8a1e85831a7187f07ef0bb23b4", 0x47}, {&(0x7f0000001640)="874eb60780c8a13924bcc2027033bac2e1806b8bb43b39987d544eb4456e4be93a47ba7af9d5cae8cd0b5319b74c75518a519bc0d6c3424a5c4a11819aba37d5964b4ca91656134e063109dc160dac8aff307e6e634a74b0e1b38b5d613fba7dec9bf22cdf57835acc6fbd194423f787a1e2b241442c7e0f4ec9c18c627c44ae348833057ba8882cec649c7d67a0753d00fdf044cc0d1965291925a343b48071f539cc2c3755108faef7f5ed5fa898c5c7be97b4de3418d1d05ece9332891874dfc92979fdd548905e8bd0f431cf1149efe18a1fbecb98", 0xd7}, {&(0x7f0000001740)="c900f0d61b88d3e11aa317a52f0b52f9ff1114ad2c939b068933f80f8be0dbb3a6df46a7a5d8efd92a2c3cc27874", 0x2e}], 0x6) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r12, 0x84, 0x77, &(0x7f0000001800)={0x0, 0xffff, 0xa, [0x1000, 0x8, 0x2, 0x4, 0x7, 0x471e, 0x401, 0xf, 0x5, 0x6]}, &(0x7f0000001840)=0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r13, 0x84, 0xf, &(0x7f0000001880)={r14, @in6={{0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x81}}, 0x81, 0x8, 0xfa, 0x4, 0x7}, &(0x7f0000001940)=0x98) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000001980)={0x2, 'wlan1\x00', {0x2}, 0xb}) openat$userio(0xffffffffffffff9c, &(0x7f00000019c0), 0x2380, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x50, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) 9m3.378131824s ago: executing program 0 (id=550): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) syz_open_dev$loop(0x0, 0x800, 0x480140) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$TCSBRKP(r2, 0x5425, 0x4) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0x2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00') openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) 8m58.99997124s ago: executing program 33 (id=550): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) syz_open_dev$loop(0x0, 0x800, 0x480140) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$TCSBRKP(r2, 0x5425, 0x4) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0x2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00') openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) 14.027517052s ago: executing program 4 (id=2136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async, rerun: 32) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_open_dev$media(&(0x7f0000000440), 0x40, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') (rerun: 32) preadv(r2, &(0x7f0000001b80)=[{&(0x7f0000000a40)=""/65, 0x41}, {0x0}], 0x2, 0x0, 0x0) (async, rerun: 32) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="19", 0x1, 0x20040005, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = syz_open_dev$MSR(&(0x7f0000000480), 0x1, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000980)={0x5, &(0x7f0000000ac0)=[{0x0, 0x9e, &(0x7f00000004c0)="e448256a47473bb0bd175a90b7ee678748654b130e165cf79bdb7592238b98908d343183581d76c764335e9f36675197ff6757b9313d275a81faf4af3e666c2f8d93a4d4635975c87f9af0cabe379bb9a790deb5a2c5a878f9dc602b891e1b87ab16e013fd8b39d77bcb52163126cdd98f51e4ef486077c40582961d5622af59c7c8a77138244ee367c3c72e899b616a3233e3dbc6b20d99b518be809b83", 0x0, 0x1}, {0xfffffffe, 0x95, &(0x7f0000000580)="69f9235335cdd93026487d67c86c63a43f152938131122a8eb921fc642a0b6b5d691f08a85ec3a3285d88d3a6bab6529543ea22a6595f2cb96760f32da7fa939ed4ae1796590ef9d8daa5227c5a28da05fba44acc453133e306d7f3860208dbb416c5265bb2cad0083db6aa059252c00bcf247d1794fb8e5c26d696705dfb58edbb374ef01c2f61f8cd87ee4a9ef1bec0843da77cb", 0x1}, {0x8, 0xac, &(0x7f0000000640)="dfa2645eb01bb49a01752cca62553d9c7e2ad48cd7338d49a3656de4fd49af3fdabc97d9d2dcdc6d21526b1ed713c389b24f1c92c240a8461c2e2b63b259140f94f517c367cb1294c0d204c7503e27bda56623ad78d285486e6fd47efa5a8ad580ee792ef7e0c9df3e0c78c6a861e9e0899b3fc43b2599bbb6ef4ef2b78776b74abacc28a71eb3dd43c742a4f4d88dd47c7de4e459c134a6b70e7fb62e23fe00152e78d8fc19aee62f685943", 0x0, 0x1}, {0x10000, 0xa6, &(0x7f0000000800)="c33c5bff73b034263a8b6fb5949046f416b7cb24c8fd3c6da632222d29a5e9e085645229737b5769c73cceae0a104c0308f9f08b83a035fddd2f04983058cebd44f4d05b3d670de845a944e186a44fc562f6fbe82fc1c646caf3fffcb6a96d882fc277d34934c5276c7b790e8c3357b92186997c33d86871049fecdb14e29155ccb9e97a80a4ba5366e71f1aba2b2844c2ff8f4e4687dc326c7bf465e79d7ce11edd74edcc5b", 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x1}]}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x406f413, 0x0) (async, rerun: 32) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000000)={0x4, 0x2, 0x9, 0x2, 0x1, 0x1}) (async, rerun: 32) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x1b, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x8dff, 0x0, [0x6, 0x0]}, {}, {}, {0xa888, 0x88be, 0x8000000}}}}}}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003c0007010000000000000000017c00000400fc800c000180060006"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="31030100000000000000090000000800", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) (async, rerun: 32) r8 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') execveat$binfmt(r2, r8, &(0x7f00000000c0), &(0x7f00000002c0), 0x100) (async, rerun: 64) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, 0x0) (rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}}, 0x24}}, 0x40040) (async) listen(r9, 0xffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x4028af11, &(0x7f0000000500)) 12.546596985s ago: executing program 4 (id=2140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001600)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x100000000, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe1085905000100000000000000b420a9c81f40f05f819e01177d3d458dac00000000000000800000003b00f1ffffffffffff01000000000000000002", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000080)=0x2e9aa845) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r9 = dup2(r8, r6) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000180)=0xb0000) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@multicast1, @local, 0x0}, &(0x7f0000000080)=0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x4, '\x00', r4, r5, 0x4, 0x2, 0x3}, 0x50) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(0x0, 0x0, 0x0) mlockall(0x2) 10.119740216s ago: executing program 4 (id=2144): lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000880)={0x1430, 0x35, 0x100, 0x70bd26, 0x25dfdbfe, "", [@nested={0x1128, 0xfb, 0x0, 0x1, [@nested={0x1115, 0x13, 0x0, 0x1, [@generic="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", @typed={0x14, 0x122, 0x0, 0x0, @ipv6=@private0}, @nested={0x100, 0xa6, 0x0, 0x1, [@nested={0xfc, 0x5b, 0x0, 0x1, [@nested={0x4, 0xec}, @typed={0xe7, 0x139, 0x0, 0x0, @binary="c4ee43ce8e03a949cd4635b4867404257c6e04c65c637ed1d3dd534e7e215cf35e0c4ae5f59e4deab23c865577c79de1985421a1861d7fa97844c12473a3497d450980fd97f8ea339629e6d2f4cd92a2d4d4446e8caf82aabdfad8499c0bca8ae4fafd047b6a66345106f9e2c8dae02f75d3ea27dba03a14deef451327e7e37ad56f396f392063ed7a438d02e79a1373189021c674c6b90cd46181859adb8b9b6e01c630cdc3a8206a42d62a84cdd7814dc1b7985359afe288b3b94e373de037f1146c8052f5ed59031491b3b890ba02f5306bd4ab68b4e83f70c88d279b0fa881dea5"}, @nested={0x4, 0x13a}, @typed={0x8, 0xe9, 0x0, 0x0, @uid=r0}]}]}]}, @typed={0xc, 0x123, 0x0, 0x0, @u64}]}, @generic="d90a58cde601d565cdddcc6aa3fcc8c25583297245b4d7973d0df9b022c59bb26343d8fac6abbe023d9e0640355e0034d2aca4a49132b88c8660af242102d45a28332c4b796cc5268b9a5ec5b61042577e3e5ea90f21384e8c5852110520bfd976705ca7e25e8a5ac6dd7bdadeb451f164c86cdb89561b05f0b9e143b1917e3dd99ee920f46511a803ab9cf9dd2d6aaf8aee259d1476cd960ce44acbc69a70c4fdd6f99aeee46de8efec7151b1e4cc13cd723e9cfa7ba2f69b60189d7aff553101c449174d1e18b6c5b148275100a3f8bd0c4c96296c43028aa284f8f626392a21d31e5e06fe98065e0246d46b7fe927a881c18c044e5c139e", @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x35}}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x4}, @nested={0x1d6, 0xee, 0x0, 0x1, [@nested={0xaa, 0x120, 0x0, 0x1, [@generic="4ebe11db650a18e09c4c40e2a4d1b391df457e93954e2beb1c6be71a4a14497188fa9b0e81d2c50b5632eb27f35bf8d49b8b9d2def52ae4e1f467f713f7f96677fc4054c3983cadd57ba246bb1fb9097b92cfcd1cf729e83d2a8a967e32929ac5f796367be05525d2960983fe0cb77b57c209679b9f9e934fe83f7fc8a44288156d94c98e2921d16ee7eb5b5fd3c979a595be6e1a1815ea6005b9f7e428f143dc2a7606bdaa4"]}, @typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@empty}, @generic="ebc64934ef7b2857b1ba0bb0cb04348e96e2f05197b4a41093ee44cf8689042eb82194d529912a7507c15ce19ae4616e13d9faf6ab62892d09635cdeb443c76b51f84a9f734ae714b03dd4e08d87352695ece1762680ac5a2afa27d1bdfcd51a09397385d61a31134d36435e405cee7f975231b7a1444ec5e4907530d8d7718dfb54e0e3ec99909bfb9a871b2846396f66a06f0957b22655276d071b7d77195c99db0297b38508e6d77979292f8fcdf4bb960d08d9b39a45b157c0061f2e8cb9fcd33b73cbeff28dfd27c4ba9457c17a9cb1430a01c1bd3232ae6ee7c494fb4c39cbb4b5bcaca0f753ae907c8e7537f56d", @generic="f01254c8a325874b7a364f60eb18eb3e374838d32bfdcf", @typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="000000f103792e01010000000000"]}]}, 0x1430}], 0x1, 0x0, 0x0, 0x1000c889}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.530237444s ago: executing program 2 (id=2146): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb9, &(0x7f000000cf3d)=""/185, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={0x0, 0x0, 0x4000}, 0x18) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x49) openat(r0, 0x0, 0x6a000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0xffffffff, 0x1f, 0x7, 0xfffffffa, 0x3, "a4c82192e6aed8e8950470331d04006c9957ed"}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) symlinkat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f0000000180)='./file0\x00') 8.726674716s ago: executing program 4 (id=2149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000400), 0x2b5cf55f7edeae86, &(0x7f0000000400)=ANY=[]) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0xfd, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x401, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), 0x0, 0x0, 0xdd, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000ff00000000000000fcf20000b7080000000000007b8af8ff00000000b7080000c20800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="00b9e57739d2914a50934ce4196a00000000000b00b70500000800000085000000a5000000c000002cf1"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x5f, &(0x7f0000000140)=""/95, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x8, 0x1}, 0x10, r6, 0xffffffffffffffff, 0x2, &(0x7f00000005c0)=[0xffffffffffffffff], &(0x7f0000000740)=[{0x0, 0x1, 0xb, 0x1}, {0x5, 0x5, 0x9, 0x6}], 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, r4, 0x25, 0xa, @val=@target_btf_id=r6}, 0x14) write$sndseq(r5, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @addr={0x9, 0xd8}}, {0x0, 0x0, 0x0, 0x80, @tick, {0x0, 0x5}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr={0x82, 0x6}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0xd728}}], 0x70) 8.660022122s ago: executing program 2 (id=2150): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) recvmmsg(r1, 0x0, 0x0, 0x2021, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(&(0x7f0000000340), 0x0, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) mq_timedsend(0xffffffffffffffff, &(0x7f00000006c0)="72d8c71bbf400708539daea542fe462c3a6744c89b9ec3190690f0ea46a741e95d1f22945f2946f49691bdd8fe257d5f257756038ba7b66b18e3336127141f7bb11658bd7f293ebd088f59c805149df92b150a5bf726c931e7307f67ce64d3cd146741ea8df6e59fd49fb8bd03bf76265b921e0bf6170c6a97f395688c24dcb0975527ba2b5d6274493798e9d98006d59d0673790fbce7c69b90184bb0ce315b82a23706aac507a14f420a366a2cc25974e8cc6b6af7f02646832ae0d153d47874b8ae41790f9a7eb1704992b81e1d975958436c1aae3bf5c370f07cc1315487", 0xe0, 0x5, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 8.551959072s ago: executing program 4 (id=2152): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1, 0x0, 0x0, 0xffffffff}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x2c, 0x0, &(0x7f00000001c0)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x210000, 0x0) readv(r7, &(0x7f0000000380)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/109, 0x6d}, {&(0x7f00000002c0)=""/7, 0x7}], 0x3) fcntl$setstatus(r6, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1800000011140100040000000000000008004b0028000000383ca3ccfe3f05bfb151b76fe89b9349bb642ac4fec3ae2470ad87ca7c19fa5a1a6180e787052ca646edc40e480abcd8dcd27a8d3deff710905a222f25c2ab62b64fe3d9830000000000"], 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) write$uinput_user_dev(r6, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x519, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xfffffff1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40], [0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x9, 0xfffffffd, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x2, 0x0, 0x0, 0x31c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7], [0x0, 0xfffffffe, 0xff, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r6, 0x8040552c, &(0x7f0000006480)) 7.509618229s ago: executing program 2 (id=2156): sched_setscheduler(0x0, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00c7b39cf30322b7d9", @ANYRES32=0x0, @ANYBLOB="05002001070000000a0034000202020202020000140055006ef502e329b90ad837c8566df29a60020a00060085431210238700000a0034000101010101010000"], 0x5c}}, 0x44004) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x38, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r7, 0x0, 0x80, 0x5, 0x9, 0x1, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xe, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006148e0021215b887739fe4369964e11f8ae25f214689e5a198100c3d24b0c3a7c20c9555baaad7ba0599c95b20296234be9a06e40636efdf14e3a82ccc14a53af9d5c615733dbd4f7ffa76e94778294ddd9972de0cdecca598d40d146809c7913d29d2da8da3107039593a1dc63de0c512ad64d097105900412d18d03a2cb4e3f0100f4ef063c6e761352d07a71f99cb7c9b45327ebe948d5859d260fa32e2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f000099c000/0x14000)=nil, 0x14000}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r9, 0xe0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x8, 0x0, 0x0}}, 0x10) 5.710925785s ago: executing program 2 (id=2158): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000090000000500000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000001}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x2301) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 5.190129852s ago: executing program 5 (id=2161): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x49) openat(r0, 0x0, 0x6a000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) symlinkat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000180)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0x9362, 0x0) readlinkat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=""/66, 0x42) 5.078776755s ago: executing program 3 (id=2163): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) pipe2(&(0x7f0000000140), 0x80980) syz_io_uring_setup(0x1459, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) mkdir(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r1, 0x26, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setscheduler(0x0, 0x2, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x4, 0x10000}, {0x7, 0xfff}]}, 0x14, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_open_dev$vcsu(&(0x7f0000000040), 0xfffffffffffffffe, 0x8000) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r6, &(0x7f00000003c0)='./file0\x00') 4.795358461s ago: executing program 6 (id=2164): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$media(0x0, 0x66, 0x180502) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x84880, 0x0) 4.794061752s ago: executing program 5 (id=2165): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x7800, 0x1, 0x8, 0xf1c5, {{0x2c, 0x4, 0x0, 0xd, 0xb0, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010106, {[@ssrr={0x89, 0x3, 0x4f}, @timestamp_addr={0x44, 0x24, 0x1b, 0x1, 0x4, [{@multicast1, 0xa699}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xba}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x2d, 0x0}, 0x7}]}, @rr={0x7, 0xf, 0x12, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x38}, @local]}, @lsrr={0x83, 0x7, 0xff, [@broadcast]}, @timestamp={0x44, 0x14, 0xc9, 0x0, 0x1, [0x81, 0x29, 0x8000, 0x100]}, @noop, @cipso={0x86, 0x45, 0x3, [{0x6, 0x4, "134d"}, {0x6, 0x10, "2ce8d9b856f39a1c538174a78c4c"}, {0x0, 0x12, "e2d62d928e1d92d500c0f6ff0000009a"}, {0x5, 0x8, "483d646f1f1d"}, {0x6, 0x4, "4aaa"}, {0x7, 0xd, "215a95435c02329fef9872"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80000001}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000980)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.69253393s ago: executing program 6 (id=2166): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) recvmmsg(r1, 0x0, 0x0, 0x2021, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(&(0x7f0000000340), 0x0, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) mq_timedsend(0xffffffffffffffff, &(0x7f00000006c0)="72d8c71bbf400708539daea542fe462c3a6744c89b9ec3190690f0ea46a741e95d1f22945f2946f49691bdd8fe257d5f257756038ba7b66b18e3336127141f7bb11658bd7f293ebd088f59c805149df92b150a5bf726c931e7307f67ce64d3cd146741ea8df6e59fd49fb8bd03bf76265b921e0bf6170c6a97f395688c24dcb0975527ba2b5d6274493798e9d98006d59d0673790fbce7c69b90184bb0ce315b82a23706aac507a14f420a366a2cc25974e8cc6b6af7f02646832ae0d153d47874b8ae41790f9a7eb1704992b81e1d975958436c1aae3bf5c370f07cc1315487", 0xe0, 0x5, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 3.621378075s ago: executing program 4 (id=2167): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket(0x2a, 0x80000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="24000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="46c64ecf"], 0x28}, 0x4000000) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000f26c44204f070000b8d10102030109021200010200000904000000b284bb0000"], 0x0) r2 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(r2, 0x2, &(0x7f0000000140)={0x80, 0x5}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/udplite6\x00') lseek(r3, 0x10000000005, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101842, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 3.544691404s ago: executing program 6 (id=2168): syz_emit_ethernet(0x102a, &(0x7f0000001b40)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x48}, @void, {@llc_tr={0x11, {@llc={0x4e, 0x0, "e814", "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"}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50) futex(&(0x7f0000000000), 0x0, 0xfffffffe, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) mkdir(0x0, 0xc1) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 2.182157804s ago: executing program 6 (id=2169): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe6) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r2, 0x0, &(0x7f00000a0000)}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0xff0f, 0x0, 0x0, 0x1001, 0x1fff}) (fail_nth: 3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='p'], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000040)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) socket$tipc(0x1e, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) 2.156494595s ago: executing program 3 (id=2170): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@remote, @in6=@remote, 0x0, 0x33, 0x0, 0x0, 0xa, 0x60, 0x30}, {0x0, 0x7f, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0xfeffffffffffffff}, {0x3, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60, 0x0, 0x0, 0xee01}, {0x0, 0x1000000000000401, 0x0, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x3, 0x0, 0x100000000007fff}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x3}, [@mark={0xc, 0x15, {0x35075b, 0x7}}]}, 0xc4}}, 0x0) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$9p_fd(0x0, &(0x7f00000004c0)='./bus\x00', 0x0, 0xc8030, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYBLOB=',wf']) 2.033867855s ago: executing program 5 (id=2171): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x40000) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0xe, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x4040080) pipe(&(0x7f00000001c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r0, 0x0, 0x7fffffffffffffff}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000027c0000000039a0040008000c0001800600060008"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 1.953554227s ago: executing program 6 (id=2172): socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) prctl$PR_MCE_KILL_GET(0x22) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0x5, "33ee480f"}, @main=@item_012={0x1, 0x0, 0x9, "c5"}, @global=@item_4={0x3, 0x1, 0xa, "214d49aa"}]}}, 0x0}, 0x0) 1.924611749s ago: executing program 3 (id=2173): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="490900000000000000001500000004002b8008000300", @ANYRES32=r3, @ANYBLOB="08002a0000000000050029"], 0x58}, 0x1, 0x2000000}, 0x0) 1.779053722s ago: executing program 5 (id=2174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8401, 0x16) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x26100, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={0x0}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xf0ffff}, 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) inotify_init() r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 1.662222682s ago: executing program 3 (id=2175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000400), 0x2b5cf55f7edeae86, &(0x7f0000000400)=ANY=[]) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0xfd, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x401, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), 0x0, 0x0, 0xdd, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000ff00000000000000fcf20000b7080000000000007b8af8ff00000000b7080000c20800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="00b9e57739d2914a50934ce4196a00000000000b00b70500000800000085000000a5000000c000002cf1"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x5f, &(0x7f0000000140)=""/95, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x8, 0x1}, 0x10, r6, 0xffffffffffffffff, 0x2, &(0x7f00000005c0)=[0xffffffffffffffff], &(0x7f0000000740)=[{0x0, 0x1, 0xb, 0x1}, {0x5, 0x5, 0x9, 0x6}], 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, r4, 0x25, 0xa, @val=@target_btf_id=r6}, 0x14) write$sndseq(r5, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @addr={0x9, 0xd8}}, {0x0, 0x0, 0x0, 0x80, @tick, {0x0, 0x5}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr={0x82, 0x6}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0xd728}}], 0x70) 1.439673002s ago: executing program 3 (id=2176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$nl_route(0x10, 0x3, 0x0) 1.412815932s ago: executing program 5 (id=2177): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) io_uring_enter(r0, 0x4729, 0x47ef, 0x21, &(0x7f0000000040)={[0x8000000000000000]}, 0x8) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a00050049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x52) creat(0x0, 0x51) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000005c0)=""/222, 0xde}, {&(0x7f00000006c0)=""/198, 0xc6}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/205, 0xcd}, {&(0x7f00000004c0)=""/114, 0x72}, {&(0x7f00000008c0)=""/161, 0xa1}], 0x7, &(0x7f0000000a00)=""/178, 0xb2}, 0x5174}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)=""/169, 0xa9}, {&(0x7f0000000b80)=""/88, 0x58}], 0x2, &(0x7f0000000540)=""/40, 0x28}, 0x7fffffff}, {{&(0x7f0000000c00)=@tipc, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)=""/93, 0x5d}, {&(0x7f0000001180)=""/56, 0x38}, {&(0x7f0000000d40)=""/123, 0x7b}, {&(0x7f0000000d00)=""/41, 0x29}, {&(0x7f0000000e00)=""/219, 0xdb}, {&(0x7f0000000f00)=""/43, 0x2b}], 0x6, &(0x7f0000000fc0)=""/180, 0xb4}, 0x12}], 0x3, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000001000000040004800800010000000000"], 0x20}}, 0x0) r6 = bpf$MAP_CREATE(0x300000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400006fabd2078aaaf3dcd37ab62e47", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000500"/28], 0x50) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000000e4b88876604a1d40312a7f55d634126298f111b718241bd49395c501665a4e84a74eb2b991e9c5daf133c3106f70eec26a11e286eaa06d6e6238ed7120a6bc7c1fb701de14c0f5a50f4569e0c1"], &(0x7f0000000040)='GPL\x00'}, 0x80) r10 = epoll_create1(0x0) r11 = fcntl$dupfd(r10, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r11, r9, 0x11, 0x0, r11}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000011c0)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="1100000000000000", @ANYRES32=r8, @ANYBLOB, @ANYRES32, @ANYBLOB="3d1520143883751a3ae2fe2ffc4c91eb638d6604b0788afec038866470eb1b4197c5fcea5c39a96b49ae5e811bdf4a69396a79f0add52cfbfdc5ce58ad826d79ff6bf7a66e48daf54eeea31dc7d4579bd1d82916bc66ad16cac62b1e5fb4211edbfeafdb7b0edc236c819047fc58c3e6c51392ed291438d4eb6cab13127a1b4001e525a1a3f712563df47ac69421c3db2b65f61ef1fddccfdccf429e652b58321c949a3c8c3faeb5a6f7d8e181491c6b0009be4514e1d598abe7b6c1932fcc7b4e5b00318993d2fdf84825d5bd13e986e91915", @ANYRES64=0x0], 0x11) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYRES16=r6], 0x34}}, 0x24048044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000003000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) 1.325707098s ago: executing program 2 (id=2178): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8e}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000180)=@userptr={0x7, 0x5, 0x4, 0x100, 0x8001, {0x77359400}, {0x0, 0x2, 0x2, 0x6, 0xed, 0xc, "d4775dec"}, 0x10000, 0x2, {0x0}, 0x8e, 0x0, r0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_pidfd_open(0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x80000004, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000240)=0x1) close_range(r6, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@getstats={0x1c, 0x5e, 0x5, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, 0x1}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0xe0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040005}, 0x4004800) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setns(r5, 0x24020000) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r0, 0x2, 0x0, 0x5, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0]}, 0x40) 902.522451ms ago: executing program 6 (id=2179): syz_emit_ethernet(0x102a, &(0x7f0000001b40)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x48}, @void, {@llc_tr={0x11, {@llc={0x4e, 0x0, "e814", "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"}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50) futex(&(0x7f0000000000), 0x0, 0xfffffffe, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) mkdir(0x0, 0xc1) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 2.158821ms ago: executing program 5 (id=2180): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0xefffffff, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 3 (id=2181): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) pipe2(&(0x7f0000000140), 0x80980) syz_io_uring_setup(0x1459, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r1, 0x26, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setscheduler(0x0, 0x2, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x4, 0x10000}, {0x7, 0xfff}]}, 0x14, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_open_dev$vcsu(&(0x7f0000000040), 0xfffffffffffffffe, 0x8000) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r6, &(0x7f00000003c0)='./file0\x00') kernel console output (not intermixed with test programs): 633] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 457.213505][ T9633] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 457.213516][ T9633] RSP: 0018:ffffc9000ea27a38 EFLAGS: 00050202 [ 457.213529][ T9633] RAX: 00007ffffffff001 RBX: 000000000000040e RCX: 000000000000040e [ 457.213537][ T9633] RDX: 0000000000000001 RSI: 0000200000000180 RDI: ffff888029c5d000 [ 457.213546][ T9633] RBP: ffffc9000ea27d90 R08: 0000000000000005 R09: 0000000000000006 [ 457.213560][ T9633] R10: dffffc0000000000 R11: ffffed100538ba81 R12: dffffc0000000000 [ 457.213574][ T9633] R13: ffffc9000ea27ae0 R14: ffff888029c5d000 R15: 0000200000000180 [ 457.213608][ T9633] _copy_from_user+0x7a/0xb0 [ 457.213635][ T9633] ? semctl_main+0xee/0x15f0 [ 457.213652][ T9633] semctl_main+0x6f5/0x15f0 [ 457.213666][ T9633] ? semctl_main+0xee/0x15f0 [ 457.213682][ T9633] ? __lock_acquire+0xab9/0xd20 [ 457.213695][ T9633] ? __pfx_semctl_main+0x10/0x10 [ 457.213745][ T9633] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 457.213779][ T9633] ? __pfx_vfs_write+0x10/0x10 [ 457.213798][ T9633] __se_sys_semctl+0x31c/0x3a0 [ 457.213813][ T9633] ? __pfx___se_sys_semctl+0x10/0x10 [ 457.213833][ T9633] ? __pfx_ksys_write+0x10/0x10 [ 457.213842][ T9633] ? rcu_is_watching+0x15/0xb0 [ 457.213860][ T9633] ? do_syscall_64+0xbe/0x3b0 [ 457.213877][ T9633] do_syscall_64+0xfa/0x3b0 [ 457.213888][ T9633] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.213901][ T9633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.213912][ T9633] ? clear_bhb_loop+0x60/0xb0 [ 457.213927][ T9633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.213938][ T9633] RIP: 0033:0x7ff0a578ebe9 [ 457.213950][ T9633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.213959][ T9633] RSP: 002b:00007ff0a6635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 457.213972][ T9633] RAX: ffffffffffffffda RBX: 00007ff0a59b5fa0 RCX: 00007ff0a578ebe9 [ 457.213980][ T9633] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000002 [ 457.213988][ T9633] RBP: 00007ff0a6635090 R08: 0000000000000000 R09: 0000000000000000 [ 457.213995][ T9633] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 457.214003][ T9633] R13: 00007ff0a59b6038 R14: 00007ff0a59b5fa0 R15: 00007ffc30e7c078 [ 457.214022][ T9633] [ 459.272182][ T44] IPVS: starting estimator thread 0... [ 459.363789][ T9653] IPVS: using max 31 ests per chain, 74400 per kthread [ 460.156023][ T9669] vlan0: entered promiscuous mode [ 460.224028][ T9669] bond0: entered promiscuous mode [ 460.765672][ T9669] bond_slave_0: entered promiscuous mode [ 460.947852][ T9669] bond_slave_1: entered promiscuous mode [ 462.393109][ T9669] team0: Port device vlan0 added [ 462.780314][ T9673] dlm: no local IP address has been set [ 462.785992][ T9673] dlm: cannot start dlm midcomms -107 [ 463.015271][ T9685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.991400][ T9723] FAULT_INJECTION: forcing a failure. [ 465.991400][ T9723] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 466.083957][ T9723] CPU: 1 UID: 0 PID: 9723 Comm: syz.4.982 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 466.083986][ T9723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 466.083998][ T9723] Call Trace: [ 466.084006][ T9723] [ 466.084015][ T9723] dump_stack_lvl+0x189/0x250 [ 466.084042][ T9723] ? __pfx____ratelimit+0x10/0x10 [ 466.084063][ T9723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.084084][ T9723] ? __pfx__printk+0x10/0x10 [ 466.084112][ T9723] ? fs_reclaim_acquire+0x7d/0x100 [ 466.084145][ T9723] should_fail_ex+0x414/0x560 [ 466.084172][ T9723] prepare_alloc_pages+0x213/0x610 [ 466.084204][ T9723] __alloc_frozen_pages_noprof+0x123/0x370 [ 466.084234][ T9723] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 466.084270][ T9723] ? policy_nodemask+0x27c/0x720 [ 466.084288][ T9723] ? rcuref_put+0x1b7/0x210 [ 466.084314][ T9723] alloc_pages_mpol+0x232/0x4a0 [ 466.084342][ T9723] vma_alloc_folio_noprof+0xe4/0x200 [ 466.084360][ T9723] ? dst_release+0x126/0x1b0 [ 466.084382][ T9723] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 466.084417][ T9723] folio_prealloc+0x30/0x180 [ 466.084440][ T9723] do_wp_page+0x1231/0x5800 [ 466.084494][ T9723] ? __pfx_do_wp_page+0x10/0x10 [ 466.084520][ T9723] ? do_raw_spin_lock+0x121/0x290 [ 466.084549][ T9723] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 466.084586][ T9723] __handle_mm_fault+0x1144/0x5620 [ 466.084638][ T9723] ? __pfx___handle_mm_fault+0x10/0x10 [ 466.084692][ T9723] ? find_vma+0xe7/0x160 [ 466.084709][ T9723] ? __pfx_find_vma+0x10/0x10 [ 466.084730][ T9723] handle_mm_fault+0x2d5/0x7f0 [ 466.084772][ T9723] do_user_addr_fault+0x764/0x1390 [ 466.084828][ T9723] exc_page_fault+0x76/0xf0 [ 466.084852][ T9723] asm_exc_page_fault+0x26/0x30 [ 466.084870][ T9723] RIP: 0010:__put_user_4+0xd/0x20 [ 466.084891][ T9723] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 466.084907][ T9723] RSP: 0018:ffffc9001053fc98 EFLAGS: 00050202 [ 466.084925][ T9723] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000007ff8 [ 466.084938][ T9723] RDX: 0000000000000000 RSI: ffffffff8db6fcc6 RDI: ffffffff8be1ba40 [ 466.084951][ T9723] RBP: ffffc9001053feb0 R08: 0000000000000000 R09: ffffffff8208a560 [ 466.084964][ T9723] R10: 00000000ffffff97 R11: 0000000000000000 R12: 0000200000007fc0 [ 466.084977][ T9723] R13: 000000000004001c R14: 0000200000007fc0 R15: 0000000000000000 [ 466.084997][ T9723] ? __might_fault+0xb0/0x130 [ 466.085025][ T9723] __sys_sendmmsg+0x25f/0x430 [ 466.085062][ T9723] ? __pfx___sys_sendmmsg+0x10/0x10 [ 466.085089][ T9723] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 466.085142][ T9723] ? ksys_write+0x22a/0x250 [ 466.085162][ T9723] ? __pfx_ksys_write+0x10/0x10 [ 466.085177][ T9723] ? rcu_is_watching+0x15/0xb0 [ 466.085206][ T9723] __x64_sys_sendmmsg+0xa0/0xc0 [ 466.085238][ T9723] do_syscall_64+0xfa/0x3b0 [ 466.085257][ T9723] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.085277][ T9723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.085296][ T9723] ? clear_bhb_loop+0x60/0xb0 [ 466.085319][ T9723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.085337][ T9723] RIP: 0033:0x7f8a89f8ebe9 [ 466.085354][ T9723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.085369][ T9723] RSP: 002b:00007f8a8ae38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 466.085388][ T9723] RAX: ffffffffffffffda RBX: 00007f8a8a1b5fa0 RCX: 00007f8a89f8ebe9 [ 466.085401][ T9723] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 466.085413][ T9723] RBP: 00007f8a8ae38090 R08: 0000000000000000 R09: 0000000000000000 [ 466.085425][ T9723] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 466.085436][ T9723] R13: 00007f8a8a1b6038 R14: 00007f8a8a1b5fa0 R15: 00007fff06cfe078 [ 466.085469][ T9723] [ 466.542673][ T9718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.229148][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.984'. [ 468.188699][ T9747] fuse: Unknown parameter 'group_idd)3' [ 468.249941][ T9747] fuse: Unknown parameter 'group_idd)3' [ 468.671895][ T9755] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 468.681082][ T9755] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 469.751080][ T9764] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 469.760276][ T9764] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 473.501390][ T9813] wg1 speed is unknown, defaulting to 1000 [ 473.921333][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1007'. [ 474.258084][ T9826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.093401][ T9832] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 476.870248][ T9854] bpq0: entered allmulticast mode [ 477.631855][ T9865] tmpfs: Unknown parameter '7zI-)pHET⒘^Zj޵ Xl(U$!Mp 5CrP >XFnfm"rpDCe2es?Ä̗' [ 479.116441][ T9889] cgroup: name respecified [ 479.988494][ T9895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1033'. [ 479.997532][ T9895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1033'. [ 481.337737][ T9904] sctp: [Deprecated]: syz.5.1035 (pid 9904) Use of int in max_burst socket option deprecated. [ 481.337737][ T9904] Use struct sctp_assoc_value instead [ 481.340720][ T9906] netlink: 'syz.2.1036': attribute type 5 has an invalid length. [ 482.520326][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'. [ 483.814038][ T9952] xt_hashlimit: size too large, truncated to 1048576 [ 484.341266][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 484.668552][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 484.717723][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 484.769435][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.836972][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 484.869657][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 484.914999][ T9949] bio_check_eod: 2 callbacks suppressed [ 484.915021][ T9949] syz.2.1044: attempt to access beyond end of device [ 484.915021][ T9949] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 484.948395][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.957824][ T24] usb 5-1: Product: syz [ 484.972100][ T9949] syz.2.1044: attempt to access beyond end of device [ 484.972100][ T9949] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 484.988456][ T9949] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 485.002153][ T9949] syz.2.1044: attempt to access beyond end of device [ 485.002153][ T9949] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 485.022388][ T9949] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 485.044233][ T9949] syz.2.1044: attempt to access beyond end of device [ 485.044233][ T9949] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 485.072026][ T24] usb 5-1: Manufacturer: syz [ 485.083040][ T24] usb 5-1: SerialNumber: syz [ 485.344664][ T9949] syz.2.1044: attempt to access beyond end of device [ 485.344664][ T9949] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 485.360142][ T9949] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 485.371241][ T9949] syz.2.1044: attempt to access beyond end of device [ 485.371241][ T9949] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 485.388927][ T9949] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 486.005762][ T24] usb 5-1: 0:2 : does not exist [ 486.016281][ T9949] syz.2.1044: attempt to access beyond end of device [ 486.016281][ T9949] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 486.075073][ T9949] syz.2.1044: attempt to access beyond end of device [ 486.075073][ T9949] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 486.128153][ T9949] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 486.149581][ T9973] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1057'. [ 486.159035][ T9973] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1057'. [ 486.324090][ T9949] syz.2.1044: attempt to access beyond end of device [ 486.324090][ T9949] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 486.343978][ T9949] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 486.359772][ T9949] syz.2.1044: attempt to access beyond end of device [ 486.359772][ T9949] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 487.169506][ T9949] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 487.185846][ T9949] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 487.198869][ T9949] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 487.463180][ T24] usb 5-1: USB disconnect, device number 6 [ 489.607809][T10003] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 491.397181][T10018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1070'. [ 491.409327][T10018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1070'. [ 492.634216][ T5836] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 493.202246][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'. [ 493.334047][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 493.341361][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.362364][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.405228][ T5836] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 493.439975][ T5836] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 493.450566][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.462855][ T5836] usb 4-1: config 0 descriptor?? [ 493.468814][T10041] netlink: zone id is out of range [ 493.608498][T10044] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 493.684685][T10041] netlink: set zone limit has 4 unknown bytes [ 493.980797][ T5836] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 494.070755][T10047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.095974][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 494.095995][ T30] audit: type=1326 audit(1755680387.368:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10048 comm="syz.5.1080" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad7d98ebe9 code=0x0 [ 494.114137][T10047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.128810][ T5836] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 494.154203][ T5836] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 494.253826][ T2153] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 494.578239][T10057] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1082'. [ 494.591789][ T2153] usb 3-1: config 6 has an invalid interface number: 223 but max is 1 [ 494.607095][ T2153] usb 3-1: config 6 has an invalid interface number: 168 but max is 1 [ 494.633974][ T2153] usb 3-1: config 6 has no interface number 0 [ 494.645471][ T2153] usb 3-1: config 6 has no interface number 1 [ 494.656473][ T2153] usb 3-1: config 6 interface 223 has no altsetting 0 [ 494.670738][ T2153] usb 3-1: config 6 interface 168 has no altsetting 0 [ 494.687002][ T2153] usb 3-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=93.a4 [ 494.704706][ T2153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.726180][ T2153] usb 3-1: Product: syz [ 494.738462][ T2153] usb 3-1: Manufacturer: syz [ 494.748445][ T2153] usb 3-1: SerialNumber: syz [ 494.998500][ T2153] usb 3-1: USB disconnect, device number 13 [ 495.287114][T10061] infiniband syz1: set active [ 495.292388][T10061] infiniband syz1: added bond_slave_0 [ 495.318680][ T5966] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 495.335981][ T5966] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 495.377369][ T5966] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 495.526002][ T5966] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 495.563262][T10061] RDS/IB: syz1: added [ 495.576934][T10061] smc: adding ib device syz1 with port count 1 [ 495.583441][T10061] smc: ib device syz1 port 1 has pnetid [ 495.800701][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1087'. [ 496.175555][ T5836] usb 4-1: USB disconnect, device number 23 [ 496.432329][T10087] loop9: detected capacity change from 0 to 7 [ 496.439788][T10087] Buffer I/O error on dev loop9, logical block 0, async page read [ 496.471611][T10087] Buffer I/O error on dev loop9, logical block 0, async page read [ 496.496982][T10087] Buffer I/O error on dev loop9, logical block 0, async page read [ 496.528229][T10087] Buffer I/O error on dev loop9, logical block 0, async page read [ 496.536890][T10087] Buffer I/O error on dev loop9, logical block 0, async page read [ 496.551963][T10087] Buffer I/O error on dev loop9, logical block 0, async page read [ 496.580692][T10087] Buffer I/O error on dev loop9, logical block 0, async page read [ 496.603724][T10087] ldm_validate_partition_table(): Disk read failed. [ 496.628249][T10087] Buffer I/O error on dev loop9, logical block 0, async page read [ 496.653904][T10087] Buffer I/O error on dev loop9, logical block 0, async page read [ 497.214215][T10087] Buffer I/O error on dev loop9, logical block 0, async page read [ 497.252861][T10087] Dev loop9: unable to read RDB block 0 [ 497.273370][T10087] loop9: unable to read partition table [ 497.320168][T10087] loop9: partition table beyond EOD, truncated [ 497.347995][T10087] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 497.347995][T10087] ) failed (rc=-5) [ 497.430037][T10093] tmpfs: Bad value for 'mpol' [ 497.473276][T10093] binder: 10091:10093 ioctl 4018620d 0 returned -22 [ 497.539742][T10093] binder: 10091:10093 ioctl 4020ae46 7fe58b31abe0 returned -22 [ 497.566769][T10093] binder: 10091:10093 ioctl 4020ae46 7fe58b31abe0 returned -22 [ 497.613116][T10093] binder: 10091:10093 ioctl 4020ae46 7fe58b31abe0 returned -22 [ 497.647632][T10093] binder: 10091:10093 ioctl 4020ae46 7fe58b31abe0 returned -22 [ 497.667248][T10099] Smack: duplicate mount options [ 497.691933][T10093] binder: 10091:10093 ioctl 4020ae46 7fe58b31abe0 returned -22 [ 497.713303][T10099] ref_ctr increment failed for inode: 0x43b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802a109400 [ 497.750044][T10093] binder: 10091:10093 ioctl 4020ae46 7fe58b31abe0 returned -22 [ 497.778300][T10093] binder: 10091:10093 ioctl 4020ae46 7fe58b31abe0 returned -22 [ 497.853846][T10093] binder: 10091:10093 ioctl 4020ae46 7fe58b31abe0 returned -22 [ 497.873881][T10093] binder: 10091:10093 ioctl 4020ae46 7fe58b31abe0 returned -22 [ 497.923912][T10093] binder: 10091:10093 ioctl 4020ae46 7fe58b31abe0 returned -22 [ 497.953166][T10093] binder: 10091:10093 ioctl 4020ae46 7fe58b31abe0 returned -22 [ 498.009453][T10093] binder: 10091:10093 ioctl 4020ae46 7fe58b31abe0 returned -22 [ 498.217589][ T30] audit: type=1326 audit(1755680391.488:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10091 comm="syz.2.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58a58ebe9 code=0x7fc00000 [ 498.431377][ T30] audit: type=1326 audit(1755680391.688:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10094 comm="syz.5.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7d98ebe9 code=0x7fc00000 [ 500.587823][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 501.262371][ T2153] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 501.503841][ T2153] usb 5-1: Using ep0 maxpacket: 8 [ 501.511965][ T2153] usb 5-1: unable to get BOS descriptor or descriptor too short [ 501.530933][ T2153] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 501.552456][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.559833][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.583147][ T2153] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 501.598871][ T2153] usb 5-1: config 4 has no interface number 0 [ 501.618056][ T2153] usb 5-1: string descriptor 0 read error: -22 [ 501.625130][ T2153] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 501.640885][ T2153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.707476][ T2153] usb 5-1: Found UVC 0.02 device (04f2:b746) [ 501.723731][ T2153] usb 5-1: No streaming interface found for terminal 6. [ 501.912607][ T2153] usb 5-1: USB disconnect, device number 7 [ 503.061511][T10148] fuse: Bad value for 'fd' [ 503.349991][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1114'. [ 503.586110][T10140] random: crng reseeded on system resumption [ 503.804410][T10163] block nbd4: Device being setup by another task [ 503.889756][T10161] block nbd4: NBD_DISCONNECT [ 503.958023][T10160] block nbd4: Disconnected due to user request. [ 503.983904][ T30] audit: type=1800 audit(1755680397.228:61): pid=10161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1116" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 503.997916][T10160] block nbd4: shutting down sockets [ 504.503808][ T5966] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 504.695909][ T5966] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 504.728030][ T5966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.800868][ T5966] usb 4-1: config 0 descriptor?? [ 505.057526][ T5966] gspca_main: spca508-2.14.0 probing 8086:0110 [ 505.249031][ T5966] gspca_spca508: reg_read err -71 [ 505.358365][ T5966] gspca_spca508: reg_read err -71 [ 506.027058][ T5966] gspca_spca508: reg_read err -71 [ 506.270725][ T5966] gspca_spca508: reg_read err -71 [ 506.296150][ T5966] gspca_spca508: reg_read err -71 [ 506.339659][ T5966] gspca_spca508: reg write: error -71 [ 506.363728][ T5966] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 506.393645][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 506.434051][ T5966] usb 4-1: USB disconnect, device number 24 [ 507.198833][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'. [ 507.688177][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1134'. [ 507.772046][T10221] netlink: 'syz.4.1134': attribute type 2 has an invalid length. [ 508.427613][ T30] audit: type=1326 audit(1755680401.698:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10227 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a89f8ebe9 code=0x7ffc0000 [ 508.531705][ T30] audit: type=1326 audit(1755680401.698:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10227 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a89f8ebe9 code=0x7ffc0000 [ 508.670907][T10233] overlayfs: missing 'lowerdir' [ 510.680509][ T30] audit: type=1326 audit(1755680401.728:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10227 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8a89f8ebe9 code=0x7ffc0000 [ 510.704092][ T30] audit: type=1326 audit(1755680401.728:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10227 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a89f8ebe9 code=0x7ffc0000 [ 510.725922][ T30] audit: type=1326 audit(1755680401.728:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10227 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a89f8ebe9 code=0x7ffc0000 [ 510.748202][ T30] audit: type=1326 audit(1755680401.828:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10227 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8a89f8ebe9 code=0x7ffc0000 [ 510.770781][ T30] audit: type=1326 audit(1755680401.828:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10227 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a89f8ebe9 code=0x7ffc0000 [ 510.856024][T10237] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 510.888102][ T30] audit: type=1326 audit(1755680401.828:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10227 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a89f8ebe9 code=0x7ffc0000 [ 511.053683][ T30] audit: type=1326 audit(1755680401.828:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10227 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8a89f8ebe9 code=0x7ffc0000 [ 511.122597][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 511.132584][ T30] audit: type=1326 audit(1755680401.828:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10227 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a89f8ebe9 code=0x7ffc0000 [ 511.348579][ T30] audit: type=1326 audit(1755680401.828:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10227 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a89f8ebe9 code=0x7ffc0000 [ 511.491192][ T30] audit: type=1326 audit(1755680401.828:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10227 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8a89f8ebe9 code=0x7ffc0000 [ 514.785727][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1149'. [ 514.822732][T10276] netlink: 'syz.4.1149': attribute type 2 has an invalid length. [ 515.481639][T10284] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 515.675925][ T44] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 515.843429][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 516.069865][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.288428][ T44] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 516.463929][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.888776][ T44] usb 4-1: config 0 descriptor?? [ 517.610405][ T44] lua 0003:1E7D:2C2E.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0 [ 517.721864][T10302] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 517.730988][T10302] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 518.875596][T10313] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 518.886083][T10313] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 520.137926][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1165'. [ 520.148956][T10320] netlink: 'syz.5.1165': attribute type 2 has an invalid length. [ 520.289464][ T5916] usb 4-1: USB disconnect, device number 25 [ 521.657036][T10337] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1170'. [ 522.243190][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.288294][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.744823][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1171'. [ 524.436089][ T5966] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 524.656408][ T5966] usb 4-1: Using ep0 maxpacket: 8 [ 524.682560][ T5966] usb 4-1: unable to get BOS descriptor or descriptor too short [ 524.716831][ T5966] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 2560, setting to 1024 [ 524.731607][ T5966] usb 4-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 524.788471][ T5966] usb 4-1: config 8 interface 0 has no altsetting 0 [ 524.818570][ T5966] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 524.849330][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.883709][ T5966] usb 4-1: Product: syz [ 524.900416][ T5966] usb 4-1: Manufacturer: syz [ 524.919668][ T5966] usb 4-1: SerialNumber: syz [ 525.635879][ T5966] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 525.677430][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 525.683668][ T5966] usb 4-1: selecting invalid altsetting 0 [ 525.822170][ T5966] usb 4-1: USB disconnect, device number 26 [ 526.103650][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 526.159041][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1178'. [ 526.170155][T10377] netlink: 'syz.5.1178': attribute type 2 has an invalid length. [ 526.285927][ T24] usb 5-1: config index 0 descriptor too short (expected 41255, got 27) [ 526.321366][ T24] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 526.343994][ T24] usb 5-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 526.370203][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 65 [ 526.380075][ T24] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 526.391585][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.438599][ T24] usb 5-1: config 0 descriptor?? [ 526.539284][T10387] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 526.667957][T10372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.704499][T10372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.094181][ T5836] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 527.295721][ T5836] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 527.319477][ T5836] usb 4-1: config 150 has no interface number 0 [ 527.339411][ T5836] usb 4-1: config 150 interface 204 has no altsetting 0 [ 527.359526][ T5836] usb 4-1: config 150 interface 1 has no altsetting 0 [ 527.388715][ T5836] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 527.410796][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.431360][ T5836] usb 4-1: Product: syz [ 527.439670][ T5836] usb 4-1: Manufacturer: syz [ 527.469896][ T5836] usb 4-1: SerialNumber: syz [ 527.702381][T10394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.715301][T10394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.740404][ T5836] xr_serial 4-1:150.204: xr_serial converter detected [ 528.391271][T10414] hub 8-0:1.0: USB hub found [ 528.399259][T10414] hub 8-0:1.0: 1 port detected [ 529.336924][ T24] usb 5-1: string descriptor 0 read error: -71 [ 529.422641][ T24] usb 5-1: USB disconnect, device number 8 [ 529.800810][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1196'. [ 529.822000][T10424] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1195'. [ 529.832053][T10424] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1195'. [ 529.844798][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1196'. [ 529.900017][T10425] netlink: 'syz.6.1196': attribute type 7 has an invalid length. [ 531.128430][ T5836] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 531.155822][ T5836] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 531.239294][ T5836] usb 4-1: USB disconnect, device number 27 [ 531.261936][ T5836] xr_serial 4-1:150.204: device disconnected [ 531.740044][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1201'. [ 534.504656][T10500] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 534.513750][T10500] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 539.440695][T10556] netlink: 'syz.4.1233': attribute type 4 has an invalid length. [ 539.496075][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 539.512100][T10556] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1233'. [ 539.763700][ T9] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 540.063911][ T9] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 540.097928][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.230829][ T9] usb 3-1: config 0 descriptor?? [ 540.463696][T10579] 9pnet_fd: Insufficient options for proto=fd [ 540.475914][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 540.843791][ T9] gp8psk: usb in 128 operation failed. [ 541.051622][ T9] gp8psk: FW Version = 244.249.196 (0xf4f9c4) Build 2015/223/09 [ 541.284695][T10564] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1236'. [ 541.296444][ T9] gp8psk: usb in 149 operation failed. [ 541.303178][ T9] gp8psk: failed to get FPGA version [ 541.321821][ T9] gp8psk: usb in 138 operation failed. [ 541.336525][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 541.368214][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 541.411886][ T9] usb 3-1: USB disconnect, device number 14 [ 542.591954][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1248'. [ 542.601299][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1248'. [ 544.199492][T10625] overlayfs: failed to resolve './file1': -2 [ 544.219651][T10625] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1254'. [ 544.228809][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1254'. [ 544.431020][T10630] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1258'. [ 548.570288][T10673] netlink: 'syz.5.1269': attribute type 13 has an invalid length. [ 548.580906][T10673] netlink: 'syz.5.1269': attribute type 17 has an invalid length. [ 549.002579][T10673] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.010333][T10673] bridge0: port 2(bridge_slave_1) entered listening state [ 549.019299][T10673] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.026476][T10673] bridge0: port 1(bridge_slave_0) entered listening state [ 549.041684][T10673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.838407][T10704] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1279'. [ 551.931897][T10704] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1279'. [ 552.024565][T10704] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1279'. [ 552.174026][T10715] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1283'. [ 552.183079][T10715] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1283'. [ 552.776715][ T978] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 553.040549][ T978] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 553.216133][ T978] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 553.560200][T10729] 9pnet_fd: Insufficient options for proto=fd [ 553.561576][ T978] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 553.576191][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 553.584923][ T978] usb 3-1: SerialNumber: syz [ 553.705589][ T978] usb 3-1: bad CDC descriptors [ 553.711211][ T978] usb-storage 3-1:1.0: USB Mass Storage device detected [ 553.733474][ T978] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 553.751835][ T978] scsi host1: usb-storage 3-1:1.0 [ 553.875003][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1290'. [ 555.204786][T10761] bond_slave_0: entered promiscuous mode [ 555.211356][T10761] bond_slave_1: entered promiscuous mode [ 555.252213][T10761] macvlan0: entered allmulticast mode [ 555.478963][T10761] bond0: entered allmulticast mode [ 555.510849][T10761] bond_slave_0: entered allmulticast mode [ 555.549833][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'. [ 555.562563][T10761] bond_slave_1: entered allmulticast mode [ 555.690026][T10761] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 555.715076][T10761] bridge0: port 3(macvlan0) entered blocking state [ 555.733854][T10761] bridge0: port 3(macvlan0) entered disabled state [ 555.766590][T10761] macvlan0: entered promiscuous mode [ 555.781164][T10761] bond0: entered promiscuous mode [ 555.819433][T10761] bridge0: port 3(macvlan0) entered blocking state [ 555.826219][T10761] bridge0: port 3(macvlan0) entered listening state [ 556.809853][ T5966] usb 3-1: USB disconnect, device number 15 [ 557.127420][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1301'. [ 557.169830][T10778] netlink: 'syz.5.1301': attribute type 2 has an invalid length. [ 557.504188][T10787] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1305'. [ 557.730724][T10790] overlayfs: empty lowerdir [ 557.783015][T10790] loop2: detected capacity change from 0 to 7 [ 557.801467][T10790] Dev loop2: unable to read RDB block 7 [ 557.820407][T10790] loop2: unable to read partition table [ 557.826745][T10790] loop2: partition table beyond EOD, truncated [ 557.836698][T10790] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 558.567634][T10810] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1309'. [ 560.295951][T10833] 9pnet_fd: Insufficient options for proto=fd [ 560.810605][T10842] netlink: 'syz.6.1321': attribute type 29 has an invalid length. [ 560.881332][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1321'. [ 562.701897][T10837] kvm: kvm [10829]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x85 [ 562.977468][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 563.674501][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.680943][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.693872][T10837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1318'. [ 565.139575][T10880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.566979][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1344'. [ 569.669048][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'. [ 569.683215][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'. [ 569.691402][T10920] netlink: 'syz.6.1344': attribute type 2 has an invalid length. [ 571.513319][T10942] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1350'. [ 571.954706][T10948] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1351'. [ 574.235668][T10969] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 574.243981][T10969] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 574.253001][T10969] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 574.260869][T10969] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 574.270579][T10970] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 574.316746][T10970] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 574.344094][T10970] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 574.395432][T10970] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 575.354109][T10992] x_tables: unsorted underflow at hook 3 [ 575.514758][ T5928] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 575.533250][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1360'. [ 576.227045][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 576.315977][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 576.656796][ T5928] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 576.686795][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 576.718045][ T5928] usb 5-1: SerialNumber: syz [ 576.759106][ T5928] usb 5-1: bad CDC descriptors [ 576.804330][ T5928] usb-storage 5-1:1.0: USB Mass Storage device detected [ 576.855312][ T5928] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 576.923675][ T5928] scsi host1: usb-storage 5-1:1.0 [ 578.140849][T11004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1362'. [ 579.052496][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 579.052518][ T30] audit: type=1326 audit(1755680472.308:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11020 comm="syz.6.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 579.298174][ T5928] usb 5-1: USB disconnect, device number 9 [ 579.323780][ T30] audit: type=1326 audit(1755680472.358:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11020 comm="syz.6.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 579.413778][ T30] audit: type=1326 audit(1755680472.358:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11020 comm="syz.6.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 579.523778][ T30] audit: type=1326 audit(1755680472.358:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11020 comm="syz.6.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 579.624531][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 579.633125][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 579.669064][ T30] audit: type=1326 audit(1755680472.358:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11020 comm="syz.6.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc37f8d550 code=0x7ffc0000 [ 579.753766][ T30] audit: type=1326 audit(1755680472.368:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11020 comm="syz.6.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 579.843785][ T30] audit: type=1326 audit(1755680472.368:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11020 comm="syz.6.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 582.491446][T11049] sp0: Synchronizing with TNC [ 582.563871][T11049] sp0: Found TNC [ 583.043843][ T978] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 583.193682][ T978] usb 3-1: device descriptor read/64, error -71 [ 583.643653][ T978] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 583.823766][ T978] usb 3-1: device descriptor read/64, error -71 [ 583.934306][ T978] usb usb3-port1: attempt power cycle [ 584.443550][T11073] af_packet: tpacket_rcv: packet too big, clamped from 4880 to 3944. macoff=96 [ 584.474857][ T978] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 584.499224][T11073] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.1381'. [ 584.544243][ T978] usb 3-1: device descriptor read/8, error -71 [ 584.784430][ T978] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 584.857096][ T978] usb 3-1: device descriptor read/8, error -71 [ 584.990969][ T978] usb usb3-port1: unable to enumerate USB device [ 585.098038][T11084] overlayfs: failed to clone upperpath [ 585.664796][T11096] netlink: 360 bytes leftover after parsing attributes in process `syz.5.1388'. [ 586.025070][ C0] bridge0: port 3(macvlan0) entered learning state [ 586.757641][T11107] overlayfs: failed to resolve 'cgroup': -2 [ 587.731241][T11127] wg1 speed is unknown, defaulting to 1000 [ 588.624140][ T978] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 588.811923][ T978] usb 5-1: unable to get BOS descriptor or descriptor too short [ 589.063249][ T978] usb 5-1: not running at top speed; connect to a high speed hub [ 589.095923][ T978] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 589.171980][ T978] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 589.183557][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.197585][T11137] IPVS: Unknown mcast interface: dvmrp0 [ 589.253587][ T978] usb 5-1: Product: syz [ 589.261129][ T978] usb 5-1: Manufacturer: syz [ 589.273678][ T978] usb 5-1: SerialNumber: syz [ 590.045500][T11152] syz_tun: entered promiscuous mode [ 590.079589][T11152] vlan0: entered promiscuous mode [ 590.647754][T11150] wg1 speed is unknown, defaulting to 1000 [ 590.933662][T11162] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1405'. [ 591.004442][T11162] batadv1: entered promiscuous mode [ 591.009744][T11162] batadv1: entered allmulticast mode [ 591.526411][ T978] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 591.801333][ T978] usb 5-1: USB disconnect, device number 10 [ 592.504328][T11176] fuse: Bad value for 'group_id' [ 592.523614][T11176] fuse: Bad value for 'group_id' [ 593.273854][ T5928] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 593.476709][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.701453][ T5928] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 594.113877][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.211599][ T5928] usb 4-1: config 0 descriptor?? [ 594.870412][ T5928] logitech 0003:046D:C295.0008: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.3-1/input0 [ 594.941862][T11188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.953636][ T5928] logitech 0003:046D:C295.0008: no inputs found [ 594.976427][T11188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.236012][ T5966] usb 4-1: USB disconnect, device number 28 [ 595.264909][T11207] FAULT_INJECTION: forcing a failure. [ 595.264909][T11207] name failslab, interval 1, probability 0, space 0, times 0 [ 595.283201][T11207] CPU: 1 UID: 0 PID: 11207 Comm: syz.2.1420 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 595.283229][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 595.283241][T11207] Call Trace: [ 595.283249][T11207] [ 595.283258][T11207] dump_stack_lvl+0x189/0x250 [ 595.283287][T11207] ? __pfx____ratelimit+0x10/0x10 [ 595.283310][T11207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.283332][T11207] ? __pfx__printk+0x10/0x10 [ 595.283366][T11207] ? __pfx___might_resched+0x10/0x10 [ 595.283387][T11207] ? fs_reclaim_acquire+0x7d/0x100 [ 595.283419][T11207] should_fail_ex+0x414/0x560 [ 595.283447][T11207] should_failslab+0xa8/0x100 [ 595.283471][T11207] kmem_cache_alloc_noprof+0x73/0x3c0 [ 595.283507][T11207] ? ptlock_alloc+0x20/0x70 [ 595.283531][T11207] ptlock_alloc+0x20/0x70 [ 595.283549][T11207] pte_alloc_one+0x7d/0x170 [ 595.283573][T11207] __do_fault+0xd1/0x390 [ 595.283598][T11207] __handle_mm_fault+0x37ed/0x5620 [ 595.283652][T11207] ? __pfx___handle_mm_fault+0x10/0x10 [ 595.283707][T11207] ? __pfx___might_resched+0x10/0x10 [ 595.283734][T11207] handle_mm_fault+0x2d5/0x7f0 [ 595.283763][T11207] ? vma_is_secretmem+0xd/0x50 [ 595.283791][T11207] __get_user_pages+0x1af4/0x30b0 [ 595.283831][T11207] ? mt_find+0x15c/0x5f0 [ 595.283884][T11207] ? __pfx___get_user_pages+0x10/0x10 [ 595.283938][T11207] populate_vma_page_range+0x26b/0x340 [ 595.283962][T11207] ? __pfx_populate_vma_page_range+0x10/0x10 [ 595.283995][T11207] ? down_read+0x1ad/0x2e0 [ 595.284012][T11207] __mm_populate+0x24c/0x380 [ 595.284031][T11207] ? __pfx___mm_populate+0x10/0x10 [ 595.284049][T11207] ? up_write+0x1c4/0x420 [ 595.284067][T11207] do_shmat+0xa09/0xca0 [ 595.284089][T11207] ? __pfx_do_shmat+0x10/0x10 [ 595.284105][T11207] ? __pfx_ksys_write+0x10/0x10 [ 595.284121][T11207] __x64_sys_shmat+0x9c/0xf0 [ 595.284140][T11207] do_syscall_64+0xfa/0x3b0 [ 595.284153][T11207] ? lockdep_hardirqs_on+0x9c/0x150 [ 595.284165][T11207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.284177][T11207] ? clear_bhb_loop+0x60/0xb0 [ 595.284192][T11207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.284203][T11207] RIP: 0033:0x7fe58a58ebe9 [ 595.284216][T11207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.284227][T11207] RSP: 002b:00007fe58b31c038 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 595.284242][T11207] RAX: ffffffffffffffda RBX: 00007fe58a7b6090 RCX: 00007fe58a58ebe9 [ 595.284251][T11207] RDX: 0000000000007000 RSI: 0000200000ffd000 RDI: 0000000000000000 [ 595.284259][T11207] RBP: 00007fe58b31c090 R08: 0000000000000000 R09: 0000000000000000 [ 595.284266][T11207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 595.284273][T11207] R13: 00007fe58a7b6128 R14: 00007fe58a7b6090 R15: 00007fffa8c80f78 [ 595.284294][T11207] [ 596.089474][T11222] fuse: Bad value for 'group_id' [ 596.089498][T11222] fuse: Bad value for 'group_id' [ 596.102473][T11220] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 597.336782][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1434'. [ 597.681920][T11257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 598.428431][T11264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1437'. [ 598.525824][T11264] trusted_key: syz.3.1437 sent an empty control message without MSG_MORE. [ 598.612332][T11264] netlink: 'syz.3.1437': attribute type 10 has an invalid length. [ 598.657120][T11264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.732746][T11264] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 600.192259][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1439'. [ 603.161144][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1451'. [ 603.869305][T11314] overlayfs: failed to clone upperpath [ 604.214783][T11319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 604.222972][T11319] IPv6: NLM_F_CREATE should be set when creating new route [ 604.230399][T11319] IPv6: NLM_F_CREATE should be set when creating new route [ 604.255192][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'. [ 604.650737][T11325] Unknown options in mask 5 [ 605.031923][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1456'. [ 605.237541][T11332] CIFS mount error: No usable UNC path provided in device string! [ 605.237541][T11332] [ 605.524379][T11332] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 606.774141][T11342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 607.430190][T11352] netlink: 'syz.6.1464': attribute type 2 has an invalid length. [ 609.703720][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.711071][ C0] bridge0: topology change detected, propagating [ 609.717702][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.725087][ C0] bridge0: topology change detected, propagating [ 611.310338][T11374] lo speed is unknown, defaulting to 1000 [ 611.316576][T11374] lo speed is unknown, defaulting to 1000 [ 611.323394][T11374] lo speed is unknown, defaulting to 1000 [ 611.344496][T11374] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 611.379932][T11374] lo speed is unknown, defaulting to 1000 [ 611.388085][T11374] lo speed is unknown, defaulting to 1000 [ 611.396643][T11374] lo speed is unknown, defaulting to 1000 [ 611.404718][T11374] lo speed is unknown, defaulting to 1000 [ 611.412724][T11374] lo speed is unknown, defaulting to 1000 [ 611.651214][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1472'. [ 612.332928][T11385] comedi comedi0: comedi_test: 236 microvolt, 100000 microsecond waveform attached [ 616.103741][ C0] bridge0: port 3(macvlan0) entered forwarding state [ 616.110489][ C0] bridge0: topology change detected, propagating [ 616.584236][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 617.372681][T11418] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1480'. [ 617.382218][T11418] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1480'. [ 617.909853][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1479'. [ 617.919644][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 617.929801][ T24] usb 3-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 617.940531][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 617.972401][T11420] netlink: 'syz.3.1479': attribute type 2 has an invalid length. [ 617.996858][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 618.009079][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.022218][ T24] usb 3-1: Product: syz [ 618.029279][ T24] usb 3-1: Manufacturer: syz [ 618.054507][ T24] usb 3-1: SerialNumber: syz [ 618.239207][ T24] usb 3-1: 0:2 : does not exist [ 618.271284][ T24] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 618.350374][ T24] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 618.386429][ T24] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 618.446061][ T24] usb 3-1: 5:0: cannot get min/max values for control 8 (id 5) [ 618.461579][T11437] vivid-000: disconnect [ 618.544408][ T24] usb 3-1: USB disconnect, device number 20 [ 618.702958][T11431] syzkaller0: entered promiscuous mode [ 618.713045][T11431] syzkaller0: entered allmulticast mode [ 619.626803][T11445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1489'. [ 619.699161][T11446] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1489'. [ 620.037646][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1491'. [ 623.230255][T11473] netlink: 'syz.6.1497': attribute type 10 has an invalid length. [ 623.239992][T11473] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1497'. [ 624.428686][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.443915][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.053993][T11446] bridge_slave_1: left allmulticast mode [ 625.059718][T11446] bridge_slave_1: left promiscuous mode [ 625.071192][T11446] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.081614][T11446] bridge_slave_0: left allmulticast mode [ 625.088160][T11431] vivid-000: reconnect [ 625.088357][T11446] bridge_slave_0: left promiscuous mode [ 625.099098][T11446] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.173897][T11467] netlink: 'syz.5.1496': attribute type 12 has an invalid length. [ 625.184928][T11473] batman_adv: batadv0: Adding interface: virt_wifi0 [ 625.191578][T11473] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.217377][T11473] batman_adv: batadv0: Interface activated: virt_wifi0 [ 625.366783][T11480] veth1_to_bond: entered allmulticast mode [ 625.391732][T11480] veth1_to_bond: entered promiscuous mode [ 625.400313][T11479] veth1_to_bond: left promiscuous mode [ 625.424024][T11479] veth1_to_bond: left allmulticast mode [ 630.383947][T11515] bpq0: left allmulticast mode [ 633.351361][T11530] syz.4.1513(11530): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 634.343867][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 634.536070][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 634.549743][ T24] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 634.720412][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 634.748969][ T24] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 634.914063][ T24] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 634.928081][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 634.949761][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 634.959271][ T24] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 634.973608][ T24] usb 3-1: Product: syz [ 634.977844][ T24] usb 3-1: Manufacturer: syz [ 634.982627][ T24] usb 3-1: SerialNumber: syz [ 635.013817][ T24] usb 3-1: config 0 descriptor?? [ 635.180970][ T24] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 635.642578][T11543] bridge0: port 3(syz_tun) entered blocking state [ 635.649685][T11543] bridge0: port 3(syz_tun) entered disabled state [ 635.656566][T11543] syz_tun: entered allmulticast mode [ 635.664257][T11543] syz_tun: entered promiscuous mode [ 635.671720][T11543] bridge0: port 3(syz_tun) entered blocking state [ 635.678961][T11543] bridge0: port 3(syz_tun) entered forwarding state [ 635.691384][T11543] xt_CT: You must specify a L4 protocol and not use inversions on it [ 635.702182][ T24] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 636.984026][ T24] usb 3-1: USB disconnect, device number 21 [ 637.173812][T11563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 637.363370][ T24] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 638.261467][T11582] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1527'. [ 638.787966][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1528'. [ 638.813988][T11585] netlink: 'syz.5.1528': attribute type 2 has an invalid length. [ 638.824767][T11581] x_tables: duplicate underflow at hook 2 [ 639.356383][T11600] 9pnet_fd: Insufficient options for proto=fd [ 640.771764][T11631] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 640.781091][T11631] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 642.223417][T11647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1542'. [ 642.463866][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 642.673589][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 642.797043][ T9] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 642.816739][T11660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1546'. [ 643.071760][ T9] usb 4-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE [ 643.104911][ T9] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0xE has an invalid bInterval 170, changing to 11 [ 643.117488][T11660] netlink: 'syz.4.1546': attribute type 10 has an invalid length. [ 643.163767][ T9] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0xE has invalid maxpacket 34661, setting to 1024 [ 643.176234][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 643.211927][ T9] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 643.224874][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.234062][ T9] usb 4-1: Product: syz [ 643.239025][ T9] usb 4-1: Manufacturer: syz [ 643.239652][T11660] team0: Port device wlan1 added [ 643.244107][ T9] usb 4-1: SerialNumber: syz [ 643.247637][ T9] usb 4-1: config 0 descriptor?? [ 643.632835][T11667] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1548'. [ 643.642363][T11667] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1548'. [ 644.165607][T11646] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 644.452431][T11670] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 644.463637][ T5966] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 644.621068][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1550'. [ 644.631355][ T5966] usb 5-1: Using ep0 maxpacket: 16 [ 644.643380][T11672] netlink: 'syz.6.1550': attribute type 2 has an invalid length. [ 645.003721][ T5966] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.023069][ T5966] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 645.038823][ T5966] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 645.062996][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.073206][ T5966] usb 5-1: Product: syz [ 645.077801][ T5966] usb 5-1: Manufacturer: syz [ 645.082526][ T5966] usb 5-1: SerialNumber: syz [ 645.270814][ T30] audit: type=1326 audit(1755680538.538:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11675 comm="syz.6.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 645.353400][ T30] audit: type=1326 audit(1755680538.568:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11675 comm="syz.6.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 645.379932][ T30] audit: type=1326 audit(1755680538.568:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11675 comm="syz.6.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 645.438254][ T30] audit: type=1326 audit(1755680538.568:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11675 comm="syz.6.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdc37f8ec23 code=0x7ffc0000 [ 645.494928][ T30] audit: type=1326 audit(1755680538.578:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11675 comm="syz.6.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdc37f8ec23 code=0x7ffc0000 [ 645.535746][ T30] audit: type=1326 audit(1755680538.578:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11675 comm="syz.6.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 645.561462][ T30] audit: type=1326 audit(1755680538.598:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11675 comm="syz.6.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 645.591679][ T30] audit: type=1326 audit(1755680538.608:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11675 comm="syz.6.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 645.614165][ T30] audit: type=1326 audit(1755680538.608:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11675 comm="syz.6.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 645.642314][ T30] audit: type=1326 audit(1755680538.618:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11675 comm="syz.6.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 646.153059][ T44] usb 4-1: USB disconnect, device number 29 [ 646.367307][ T5966] usb 5-1: 0:2 : does not exist [ 646.430617][ T5966] usb 5-1: USB disconnect, device number 11 [ 646.714432][ T44] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 646.715517][T11699] bridge0: entered promiscuous mode [ 649.476126][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1559'. [ 649.494009][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1559'. [ 649.600871][T11701] netlink: 'syz.6.1559': attribute type 7 has an invalid length. [ 649.920386][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 651.596909][T11728] siw: device registration error -23 [ 651.609229][T11730] FAULT_INJECTION: forcing a failure. [ 651.609229][T11730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.622577][T11730] CPU: 0 UID: 0 PID: 11730 Comm: syz.3.1570 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 651.622620][T11730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 651.622633][T11730] Call Trace: [ 651.622642][T11730] [ 651.622651][T11730] dump_stack_lvl+0x189/0x250 [ 651.622681][T11730] ? __pfx____ratelimit+0x10/0x10 [ 651.622703][T11730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.622727][T11730] ? __pfx__printk+0x10/0x10 [ 651.622753][T11730] ? __might_fault+0xb0/0x130 [ 651.622786][T11730] should_fail_ex+0x414/0x560 [ 651.622814][T11730] _copy_from_iter+0x1db/0x16f0 [ 651.622850][T11730] ? policy_nodemask+0x27c/0x720 [ 651.622870][T11730] ? __pfx__copy_from_iter+0x10/0x10 [ 651.622903][T11730] ? set_page_refcounted+0xa0/0x1e0 [ 651.622925][T11730] ? page_copy_sane+0x4e/0x280 [ 651.622953][T11730] copy_page_from_iter+0xdd/0x170 [ 651.622983][T11730] tun_get_user+0x1c4d/0x3ce0 [ 651.623013][T11730] ? tun_get_user+0x693/0x3ce0 [ 651.623058][T11730] ? __pfx_tun_get_user+0x10/0x10 [ 651.623093][T11730] ? __lock_acquire+0xab9/0xd20 [ 651.623120][T11730] ? ref_tracker_alloc+0x318/0x460 [ 651.623140][T11730] ? __lock_acquire+0xab9/0xd20 [ 651.623161][T11730] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 651.623190][T11730] ? tun_get+0x1c/0x2f0 [ 651.623223][T11730] ? tun_get+0x1c/0x2f0 [ 651.623246][T11730] ? tun_get+0x1c/0x2f0 [ 651.623277][T11730] tun_chr_write_iter+0x113/0x200 [ 651.623307][T11730] vfs_write+0x54b/0xa90 [ 651.623333][T11730] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 651.623359][T11730] ? __pfx_vfs_write+0x10/0x10 [ 651.623391][T11730] ? __fget_files+0x2a/0x420 [ 651.623425][T11730] ksys_write+0x145/0x250 [ 651.623448][T11730] ? __pfx_ksys_write+0x10/0x10 [ 651.623479][T11730] ? do_syscall_64+0xbe/0x3b0 [ 651.623506][T11730] do_syscall_64+0xfa/0x3b0 [ 651.623527][T11730] ? lockdep_hardirqs_on+0x9c/0x150 [ 651.623548][T11730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.623566][T11730] ? clear_bhb_loop+0x60/0xb0 [ 651.623602][T11730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.623621][T11730] RIP: 0033:0x7ff0a578d69f [ 651.623640][T11730] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 651.623657][T11730] RSP: 002b:00007ff0a6635000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 651.623680][T11730] RAX: ffffffffffffffda RBX: 00007ff0a59b5fa0 RCX: 00007ff0a578d69f [ 651.623694][T11730] RDX: 000000000000002a RSI: 0000200000000000 RDI: 00000000000000c8 [ 651.623706][T11730] RBP: 00007ff0a6635090 R08: 0000000000000000 R09: 0000000000000000 [ 651.623719][T11730] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 651.623731][T11730] R13: 00007ff0a59b6038 R14: 00007ff0a59b5fa0 R15: 00007ffc30e7c078 [ 651.623765][T11730] [ 652.154197][T11734] wg1 speed is unknown, defaulting to 1000 [ 652.733915][ T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 653.191676][T11740] FAULT_INJECTION: forcing a failure. [ 653.191676][T11740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.262628][T11740] CPU: 1 UID: 0 PID: 11740 Comm: syz.3.1571 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 653.262669][T11740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 653.262681][T11740] Call Trace: [ 653.262690][T11740] [ 653.262699][T11740] dump_stack_lvl+0x189/0x250 [ 653.262729][T11740] ? __pfx____ratelimit+0x10/0x10 [ 653.262751][T11740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.262775][T11740] ? __pfx__printk+0x10/0x10 [ 653.262801][T11740] ? __might_fault+0xb0/0x130 [ 653.262836][T11740] should_fail_ex+0x414/0x560 [ 653.262864][T11740] _copy_from_user+0x2d/0xb0 [ 653.262894][T11740] ___sys_sendmsg+0x158/0x2a0 [ 653.262924][T11740] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.263002][T11740] ? __might_fault+0xb0/0x130 [ 653.263033][T11740] __sys_sendmmsg+0x227/0x430 [ 653.263071][T11740] ? __pfx___sys_sendmmsg+0x10/0x10 [ 653.263098][T11740] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 653.263154][T11740] ? ksys_write+0x22a/0x250 [ 653.263177][T11740] ? __pfx_ksys_write+0x10/0x10 [ 653.263193][T11740] ? rcu_is_watching+0x15/0xb0 [ 653.263223][T11740] __x64_sys_sendmmsg+0xa0/0xc0 [ 653.263257][T11740] do_syscall_64+0xfa/0x3b0 [ 653.263279][T11740] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.263299][T11740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.263318][T11740] ? clear_bhb_loop+0x60/0xb0 [ 653.263343][T11740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.263361][T11740] RIP: 0033:0x7ff0a578ebe9 [ 653.263380][T11740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.263397][T11740] RSP: 002b:00007ff0a6635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 653.263420][T11740] RAX: ffffffffffffffda RBX: 00007ff0a59b5fa0 RCX: 00007ff0a578ebe9 [ 653.263435][T11740] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 653.263449][T11740] RBP: 00007ff0a6635090 R08: 0000000000000000 R09: 0000000000000000 [ 653.263462][T11740] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 653.263480][T11740] R13: 00007ff0a59b6038 R14: 00007ff0a59b5fa0 R15: 00007ffc30e7c078 [ 653.263514][T11740] [ 653.377051][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 653.377485][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.488419][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.494423][ C1] hrtimer: interrupt took 230892674 ns [ 653.530124][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 653.580000][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 653.594453][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.650523][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1575'. [ 653.660658][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 653.689050][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.739556][ T9] usb 5-1: Product: syz [ 653.762776][ T9] usb 5-1: Manufacturer: syz [ 653.794465][ T9] usb 5-1: SerialNumber: syz [ 653.830665][T11734] lo speed is unknown, defaulting to 1000 [ 655.289010][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1578'. [ 655.340711][T11758] netlink: 'syz.5.1578': attribute type 2 has an invalid length. [ 656.187316][T11774] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1581'. [ 657.363900][T11793] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1586'. [ 658.230930][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 658.230955][ T30] audit: type=1326 audit(1755680551.488:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11794 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a578ebe9 code=0x7ffc0000 [ 658.490004][ T30] audit: type=1326 audit(1755680551.488:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11794 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a578ebe9 code=0x7ffc0000 [ 658.512173][ T30] audit: type=1326 audit(1755680551.538:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11794 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff0a578ebe9 code=0x7ffc0000 [ 659.504976][ T30] audit: type=1326 audit(1755680551.538:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11794 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a578ebe9 code=0x7ffc0000 [ 659.546005][ T30] audit: type=1326 audit(1755680551.538:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11794 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a578ebe9 code=0x7ffc0000 [ 660.377709][ T9] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 660.528753][ T30] audit: type=1326 audit(1755680551.538:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11794 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff0a578ebe9 code=0x7ffc0000 [ 660.550950][ T30] audit: type=1326 audit(1755680551.538:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11794 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a578ebe9 code=0x7ffc0000 [ 660.941036][ T5928] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 660.949398][ T30] audit: type=1326 audit(1755680551.538:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11794 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a578ebe9 code=0x7ffc0000 [ 660.973947][ T30] audit: type=1326 audit(1755680551.538:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11794 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff0a578ebe9 code=0x7ffc0000 [ 661.013649][ T30] audit: type=1326 audit(1755680551.538:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11794 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a578ebe9 code=0x7ffc0000 [ 661.123651][ T5928] usb 3-1: Using ep0 maxpacket: 8 [ 661.129134][ T9] usb 5-1: USB disconnect, device number 12 [ 662.362408][ T5928] usb 3-1: unable to get BOS descriptor or descriptor too short [ 662.412217][ T5928] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 662.420491][ T5928] usb 3-1: can't read configurations, error -71 [ 663.911086][T11836] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1599'. [ 664.869242][T11841] wg1 speed is unknown, defaulting to 1000 [ 665.906785][T11857] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1606'. [ 665.983834][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1605'. [ 667.247328][T11841] lo speed is unknown, defaulting to 1000 [ 669.801518][T11888] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1614'. [ 670.733421][T11904] xt_NFQUEUE: number of total queues is 0 [ 676.046287][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1631'. [ 678.646732][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1641'. [ 678.660279][T11974] netlink: 'syz.5.1641': attribute type 2 has an invalid length. [ 679.358896][T11989] 9pnet_fd: Insufficient options for proto=fd [ 679.622398][T11997] bond0: (slave batadv0): Releasing backup interface [ 679.658781][T11997] bond0: (slave bond_slave_0): Releasing backup interface [ 679.767175][T11997] bond0: (slave bond_slave_1): Releasing backup interface [ 679.840447][T11997] team0: Port device team_slave_0 removed [ 680.076696][T11997] team0: Port device team_slave_1 removed [ 680.100011][T11997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.211828][T11997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.880990][ T5836] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 680.947647][T11997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.982396][T11997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.000493][T11997] batman_adv: batadv0: Removing interface: macvtap0 [ 681.060285][ T5836] usb 5-1: unable to get BOS descriptor or descriptor too short [ 682.016776][ T5836] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 682.039986][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1652'. [ 682.059707][ T5836] usb 5-1: config 1 has no interface number 1 [ 682.060541][T12016] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 682.078915][T12016] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 682.086678][ T5836] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 682.223665][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.278112][ T5836] usb 5-1: Product: syz [ 682.282368][ T5836] usb 5-1: Manufacturer: syz [ 682.315653][ T5836] usb 5-1: SerialNumber: syz [ 682.536648][ T5836] usb 5-1: 2:1 : unknown format tag 0x1000 is detected. processed as MPEG. [ 682.604424][ T5836] usb 5-1: found format II with max.bitrate = 26774, frame size=2 [ 682.612674][ T5836] usb 5-1: 2:1 : unknown format tag 0x1000 is detected. processed as MPEG. [ 682.626027][T12022] syz_tun: entered allmulticast mode [ 682.634079][ T5836] usb 5-1: found format II with max.bitrate = 26774, frame size=2 [ 683.283881][ T5836] usb 5-1: failed to enable PITCH for EP 0x82 [ 683.418574][ T5836] usb 5-1: USB disconnect, device number 13 [ 683.465532][T12025] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 683.775273][T12032] netlink: 'syz.3.1661': attribute type 10 has an invalid length. [ 683.818284][T12032] syz_tun: entered promiscuous mode [ 683.827143][T12035] ptrace attach of "./syz-executor exec"[5846] was attempted by ""[12035] [ 683.957878][T12032] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 683.970874][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 683.971070][ T30] audit: type=1326 audit(1755680577.238:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.5.1664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad7d98ebe9 code=0x0 [ 684.781211][T12045] netlink: 'syz.3.1666': attribute type 1 has an invalid length. [ 684.789391][T12045] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1666'. [ 685.870037][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.881550][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.778744][T12088] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 688.911850][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1687'. [ 689.045834][T12103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 689.143977][T12107] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1688'. [ 690.754186][T12120] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 690.763286][T12120] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 691.924706][T12125] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 691.933715][T12125] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 693.061115][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1696'. [ 694.344532][T12144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.637832][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1698'. [ 694.915782][T12155] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 694.924950][T12155] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 695.701508][T12160] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1703'. [ 698.065704][T12171] fuse: Unknown parameter '' [ 699.291976][T12182] kvm: kvm [12181]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x85 [ 699.657860][T12193] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 699.666992][T12193] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 700.616851][T12197] fuse: Bad value for 'user_id' [ 700.622090][T12197] fuse: Bad value for 'user_id' [ 702.385693][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1718'. [ 703.353704][ T30] audit: type=1326 audit(1755680596.608:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12216 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7d98ebe9 code=0x7ffc0000 [ 704.079248][ T30] audit: type=1326 audit(1755680596.658:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12216 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7d98ebe9 code=0x7ffc0000 [ 704.214059][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1720'. [ 704.308340][ T30] audit: type=1326 audit(1755680596.658:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12216 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad7d98ebe9 code=0x7ffc0000 [ 704.463422][ T30] audit: type=1326 audit(1755680596.658:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12216 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7d98ebe9 code=0x7ffc0000 [ 704.563816][ T30] audit: type=1326 audit(1755680596.668:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12216 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7d98ebe9 code=0x7ffc0000 [ 704.685408][ T30] audit: type=1326 audit(1755680596.688:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12216 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad7d98ebe9 code=0x7ffc0000 [ 704.690870][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1724'. [ 704.907996][ T30] audit: type=1326 audit(1755680596.688:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12216 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7d98ebe9 code=0x7ffc0000 [ 705.241937][ T30] audit: type=1326 audit(1755680596.718:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12216 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7d98ebe9 code=0x7ffc0000 [ 705.286764][T12230] netlink: 'syz.2.1724': attribute type 2 has an invalid length. [ 705.295134][ T30] audit: type=1326 audit(1755680596.718:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12216 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad7d98ebe9 code=0x7ffc0000 [ 705.317737][ T30] audit: type=1326 audit(1755680596.718:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12216 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7d98ebe9 code=0x7ffc0000 [ 705.379034][T12237] fuse: Bad value for 'user_id' [ 705.395124][T12237] fuse: Bad value for 'user_id' [ 708.918674][T12255] netlink: 'syz.2.1732': attribute type 10 has an invalid length. [ 709.027840][T12258] binder: 12253:12258 ioctl 8030560a 200000000180 returned -22 [ 710.629894][T12278] bio_check_eod: 2 callbacks suppressed [ 710.629924][T12278] syz.4.1737: attempt to access beyond end of device [ 710.629924][T12278] loop4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 710.649281][T12278] syz.4.1737: attempt to access beyond end of device [ 710.649281][T12278] loop4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 710.662624][T12278] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 710.672834][T12278] syz.4.1737: attempt to access beyond end of device [ 710.672834][T12278] loop4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 710.686802][T12278] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 710.698437][T12278] syz.4.1737: attempt to access beyond end of device [ 710.698437][T12278] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 710.712047][T12278] syz.4.1737: attempt to access beyond end of device [ 710.712047][T12278] loop4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 710.725325][T12278] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 710.735335][T12278] syz.4.1737: attempt to access beyond end of device [ 710.735335][T12278] loop4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 710.748638][T12278] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 710.759461][T12278] syz.4.1737: attempt to access beyond end of device [ 710.759461][T12278] loop4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 710.772848][T12278] syz.4.1737: attempt to access beyond end of device [ 710.772848][T12278] loop4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 710.786980][T12278] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 710.797654][T12278] syz.4.1737: attempt to access beyond end of device [ 710.797654][T12278] loop4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 710.810931][T12278] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 710.821807][T12278] syz.4.1737: attempt to access beyond end of device [ 710.821807][T12278] loop4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 710.835574][T12278] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 710.845838][T12278] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 710.855488][T12278] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 711.081072][T12282] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 711.093125][T12282] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 711.106447][T12282] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 711.117356][T12282] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 711.119786][T12282] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 711.120306][T12282] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 711.122143][T12282] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 711.122616][T12282] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 711.122673][T12282] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 712.439495][T12289] fuse: Bad value for 'user_id' [ 712.458988][T12289] fuse: Bad value for 'user_id' [ 716.216379][T12320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 716.364734][T12323] netlink: 'syz.6.1752': attribute type 2 has an invalid length. [ 718.017296][ T5966] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 718.218689][ T5966] usb 5-1: Using ep0 maxpacket: 16 [ 718.229490][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1767'. [ 718.321567][ T5966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.358122][T12360] netlink: 'syz.3.1767': attribute type 2 has an invalid length. [ 718.636958][ T5966] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 718.730936][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.760872][ T5966] usb 5-1: config 0 descriptor?? [ 719.083950][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1768'. [ 719.301327][ T5966] cypress 0003:04B4:07B1.0009: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.4-1/input0 [ 719.531463][ T5928] usb 5-1: USB disconnect, device number 14 [ 719.681307][T12375] cgroup: noprefix used incorrectly [ 720.004171][ T5836] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 720.223065][ T5836] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 720.312589][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.376000][ T5836] usb 3-1: config 0 descriptor?? [ 720.819677][ T5966] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 721.123632][ T5966] usb 4-1: Using ep0 maxpacket: 32 [ 721.337200][ T5966] usb 4-1: unable to get BOS descriptor or descriptor too short [ 721.391515][ T5966] usb 4-1: config 8 has an invalid interface number: 203 but max is 0 [ 721.408148][ T5966] usb 4-1: config 8 has no interface number 0 [ 721.416366][T12393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1776'. [ 721.451756][ T5966] usb 4-1: config 8 interface 203 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 721.571388][ T5966] usb 4-1: config 8 interface 203 has no altsetting 0 [ 721.605898][ T5966] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=a1.d3 [ 721.615616][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.626844][ T5966] usb 4-1: Product: syz [ 721.638548][ T5966] usb 4-1: Manufacturer: syz [ 721.658218][ T5966] usb 4-1: SerialNumber: syz [ 721.899819][ T5966] usb 4-1: USB disconnect, device number 31 [ 722.035742][T12406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.513758][ T5836] usb 3-1: string descriptor 0 read error: -71 [ 722.520963][ T5836] ldusb 3-1:0.0: Interrupt in endpoint not found [ 722.530508][ T5836] usb 3-1: USB disconnect, device number 24 [ 722.629142][T12410] No such timeout policy "syz1" [ 722.635066][T12410] No such timeout policy "syz1" [ 722.887384][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1783'. [ 723.033710][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1784'. [ 723.164492][T12420] netlink: 'syz.3.1784': attribute type 2 has an invalid length. [ 724.784510][T12430] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1787'. [ 725.408263][T12430] netlink: 18 bytes leftover after parsing attributes in process `syz.6.1787'. [ 725.559715][T12430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 726.525148][ T5966] wg1 speed is unknown, defaulting to 1000 [ 727.131770][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1795'. [ 727.154825][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1795'. [ 727.183591][T12453] netlink: 'syz.4.1795': attribute type 7 has an invalid length. [ 727.424738][T12457] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1796'. [ 727.968895][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1797'. [ 727.988686][T12459] ipip0: entered promiscuous mode [ 728.073788][T12459] ipip0: entered allmulticast mode [ 728.322855][T12468] overlayfs: failed to clone upperpath [ 728.371567][T12469] overlayfs: failed to clone upperpath [ 729.117460][T12482] x_tables: duplicate underflow at hook 1 [ 729.718455][T12485] fuse: Bad value for 'fd' [ 730.855395][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1808'. [ 730.864459][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1808'. [ 730.873337][T12491] netlink: 'syz.6.1808': attribute type 7 has an invalid length. [ 731.014159][T10415] Bluetooth: hci5: Frame reassembly failed (-84) [ 733.095194][ T5853] Bluetooth: hci5: command 0x1003 tx timeout [ 733.124093][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 733.710116][T12521] ip6gretap0: entered promiscuous mode [ 733.718231][T12521] macsec1: entered allmulticast mode [ 733.723882][T12521] ip6gretap0: entered allmulticast mode [ 733.786893][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1816'. [ 733.798462][T12521] ip6gretap0: left allmulticast mode [ 733.805216][T12521] ip6gretap0: left promiscuous mode [ 734.712315][T12539] netlink: zone id is out of range [ 734.735796][T12539] netlink: zone id is out of range [ 735.109698][T12539] netlink: set zone limit has 4 unknown bytes [ 737.077281][T12554] overlayfs: failed to clone upperpath [ 738.345106][ T5842] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 738.541720][T12569] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 738.551049][T12569] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 738.793160][ T5842] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 739.071422][ T5842] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 739.104875][ T5842] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 739.138153][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 739.173183][ T5842] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 739.202756][ T5842] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 739.238697][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 739.286403][ T5842] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 739.350543][ T5842] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 739.411443][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 739.463538][T12580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 739.468353][ T5842] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 739.519458][ T5842] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 739.619163][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 739.778072][ T5842] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 739.894677][ T5842] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 739.924607][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 739.956908][ T5842] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 740.004680][ T5842] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 740.070632][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 740.086328][ T5842] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 740.105254][ T5842] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 740.119347][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 740.340727][ T5842] usb 4-1: unable to read config index 7 descriptor/start: -71 [ 740.376175][ T5842] usb 4-1: can't read configurations, error -71 [ 741.065915][T12586] kthread_run failed with err -4 [ 741.581706][T12606] netlink: 'syz.5.1838': attribute type 3 has an invalid length. [ 742.979379][T12614] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 742.988916][T12614] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 744.648686][T12626] dlm: no local IP address has been set [ 744.654560][T12626] dlm: cannot start dlm midcomms -107 [ 745.670152][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1847'. [ 745.973062][T12656] fuseblk: Bad value for 'rootmode' [ 747.296955][T12672] netlink: 'syz.5.1855': attribute type 1 has an invalid length. [ 747.327826][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.337010][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.409952][T12674] fuse: Bad value for 'fd' [ 747.433969][T12675] netlink: 'syz.5.1855': attribute type 1 has an invalid length. [ 749.340221][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1859'. [ 749.356136][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 749.356151][ T30] audit: type=1804 audit(1755680642.628:232): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.1857" name="/newroot/330/file1" dev="fuse" ino=1 res=1 errno=0 [ 749.382007][ C1] vkms_vblank_simulate: vblank timer overrun [ 749.390624][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1859'. [ 749.399842][T12694] netlink: 'syz.4.1859': attribute type 7 has an invalid length. [ 749.554278][ T30] audit: type=1800 audit(1755680642.828:233): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1857" name="/" dev="fuse" ino=1 res=0 errno=0 [ 749.865673][T12697] xt_NFQUEUE: number of total queues is 0 [ 750.316551][T12701] xt_NFQUEUE: number of total queues is 0 [ 750.653710][ T5842] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 750.836627][ T5842] usb 4-1: Using ep0 maxpacket: 16 [ 750.852518][ T5842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.877567][ T5842] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 750.893950][ T5842] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 750.903088][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.930747][ T5842] usb 4-1: config 0 descriptor?? [ 751.074002][ T44] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 751.088148][T12715] netlink: 'syz.5.1864': attribute type 10 has an invalid length. [ 751.279494][T12719] netlink: 'syz.5.1864': attribute type 4 has an invalid length. [ 751.289166][T12719] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1864'. [ 752.118544][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 752.294912][ T44] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 752.738472][T12715] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 752.775172][T12715] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 752.798517][ T44] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 752.819575][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.828235][ T44] usb 3-1: Product: syz [ 752.836475][ T44] usb 3-1: Manufacturer: syz [ 752.841580][ T44] usb 3-1: SerialNumber: syz [ 752.851874][ T44] usb 3-1: config 0 descriptor?? [ 752.999710][T12709] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 753.062732][ T44] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 753.512605][T12719] : renamed from bond0 (while UP) [ 753.661708][T12726] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 753.670973][T12726] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 753.916129][ T5966] usb 4-1: USB disconnect, device number 34 [ 755.042123][T12738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 756.726677][ T44] usb 3-1: USB disconnect, device number 25 [ 756.732743][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 756.872059][T12747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 758.159948][T12756] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1875'. [ 758.350820][T12762] xt_NFQUEUE: number of total queues is 0 [ 759.078900][T12763] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 759.086203][T12763] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 759.122113][T12763] vhci_hcd vhci_hcd.0: Device attached [ 759.146187][T12759] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 759.163938][T12759] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 759.176635][T12759] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 759.254624][T12759] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 759.274689][T12769] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1878'. [ 759.293676][ T44] vhci_hcd: vhci_device speed not set [ 759.377096][T12759] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(14) [ 759.383782][T12759] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 759.396967][ T44] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 759.673691][T12759] vhci_hcd vhci_hcd.0: Device attached [ 759.711536][T12763] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(16) [ 759.718307][T12763] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 760.753833][T12763] vhci_hcd vhci_hcd.0: Device attached [ 760.839116][T12787] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 760.848272][T12787] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 761.092603][T12759] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 761.122666][T12759] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 761.944539][T12791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 761.994666][T12780] vhci_hcd: connection closed [ 762.001360][ T64] vhci_hcd: stop threads [ 762.005115][T12770] vhci_hcd: connection closed [ 762.018939][T12765] vhci_hcd: connection reset by peer [ 762.031866][ T64] vhci_hcd: release socket [ 762.039154][ T64] vhci_hcd: disconnect device [ 762.060263][ T64] vhci_hcd: stop threads [ 762.084303][ T64] vhci_hcd: release socket [ 762.102794][ T64] vhci_hcd: disconnect device [ 762.122272][ T64] vhci_hcd: stop threads [ 762.133918][ T64] vhci_hcd: release socket [ 762.140342][ T64] vhci_hcd: disconnect device [ 762.261594][T12805] binder: 12804:12805 unknown command 0 [ 762.267559][T12805] binder: 12804:12805 ioctl c0306201 200000000080 returned -22 [ 762.584638][T12812] xt_NFQUEUE: number of total queues is 0 [ 763.350510][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1892'. [ 763.406586][ T5836] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 763.686328][ T5836] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 763.699704][ T5836] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.710058][ T5836] usb 5-1: config 0 has no interface number 0 [ 763.716744][ T5836] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 763.762682][ T5836] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 764.427921][ T5836] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 764.528569][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.533614][ T44] vhci_hcd: vhci_device speed not set [ 764.536739][ T5836] usb 5-1: Product: syz [ 764.548662][ T5836] usb 5-1: Manufacturer: syz [ 764.553929][ T5836] usb 5-1: SerialNumber: syz [ 764.572485][ T5836] usb 5-1: config 0 descriptor?? [ 764.609484][T12827] overlayfs: failed to resolve './file0': -2 [ 765.070630][ T9] usb 5-1: USB disconnect, device number 15 [ 765.709524][T12852] xt_NFQUEUE: number of total queues is 0 [ 766.442392][T12854] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 766.451692][T12854] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 768.076319][T12864] fuse: Bad value for 'group_id' [ 768.081450][T12864] fuse: Bad value for 'group_id' [ 768.953728][ T5928] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 769.184467][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.388826][ T5928] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 769.622974][ T5928] usb 3-1: config 0 has no interface number 1 [ 769.723654][ T5928] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 769.758490][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.800384][ T5928] usb 3-1: config 0 descriptor?? [ 769.816970][ T5928] usb 3-1: unknown number of interfaces: 2 [ 770.033605][T12904] netlink: 'syz.5.1922': attribute type 1 has an invalid length. [ 770.321408][T12904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.336707][T12902] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1910'. [ 771.219162][T12908] bond0: (slave veth3): Enslaving as an active interface with a down link [ 771.339525][T12913] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1923'. [ 771.350872][T12913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 771.358318][T12913] IPv6: NLM_F_CREATE should be set when creating new route [ 771.511989][T12910] bond0: (slave dummy0): making interface the new active one [ 771.521969][T12910] dummy0: entered promiscuous mode [ 771.528393][T12910] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 771.719188][T12909] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 771.728047][T12909] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 772.341566][ T5836] usb 3-1: USB disconnect, device number 26 [ 776.764956][T12943] netlink: 'syz.3.1931': attribute type 1 has an invalid length. [ 777.005445][T12943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 777.200751][ T30] audit: type=1804 audit(1755680670.468:234): pid=12958 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1936" name="/newroot/366/file1" dev="fuse" ino=1 res=1 errno=0 [ 777.227863][T12947] bond1: (slave veth3): Enslaving as an active interface with a down link [ 777.245740][ T30] audit: type=1800 audit(1755680670.498:235): pid=12958 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1936" name="/" dev="fuse" ino=1 res=0 errno=0 [ 777.279485][T12950] bond1: (slave dummy0): making interface the new active one [ 777.289480][T12950] dummy0: entered promiscuous mode [ 777.295427][T12950] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 778.171630][T12974] random: crng reseeded on system resumption [ 782.247708][ T30] audit: type=1326 audit(1755680675.358:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.2.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58a58ebe9 code=0x7ffc0000 [ 782.269367][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.360177][ T30] audit: type=1326 audit(1755680675.358:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.2.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58a58ebe9 code=0x7ffc0000 [ 783.033948][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1965'. [ 783.422495][T13054] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 783.721227][ T30] audit: type=1326 audit(1755680676.988:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13059 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 783.852954][ T30] audit: type=1326 audit(1755680676.988:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13059 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 784.185336][ T30] audit: type=1326 audit(1755680676.988:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13059 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 784.223895][ T30] audit: type=1326 audit(1755680676.988:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13059 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 784.268116][T13063] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 784.277104][T13063] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 784.343766][ T30] audit: type=1326 audit(1755680676.988:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13059 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 784.463287][ T30] audit: type=1326 audit(1755680676.988:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13059 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc37f8ebe9 code=0x7ffc0000 [ 784.484986][ C0] vkms_vblank_simulate: vblank timer overrun [ 784.763341][ T30] audit: type=1326 audit(1755680676.988:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13059 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc37f8d550 code=0x7ffc0000 [ 784.785032][ C0] vkms_vblank_simulate: vblank timer overrun [ 784.889670][ T30] audit: type=1326 audit(1755680676.988:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13059 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc37f8d69f code=0x7ffc0000 [ 786.184334][T13083] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1973'. [ 786.325529][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 787.370745][T13085] netlink: 'syz.4.1975': attribute type 2 has an invalid length. [ 788.822585][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1982'. [ 789.005488][T10415] dummy0: left promiscuous mode [ 790.500034][T13120] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 790.509118][T13120] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 791.486956][T13136] fuse: Unknown parameter 'user_i00000000000000000000' [ 792.547760][T13147] netlink: 1364 bytes leftover after parsing attributes in process `syz.5.1995'. [ 793.699888][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 794.332707][ T64] dummy0: left promiscuous mode [ 796.299731][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2002'. [ 799.616947][T13205] dlm: no local IP address has been set [ 799.753628][T13205] dlm: cannot start dlm midcomms -107 [ 800.974131][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'. [ 800.983689][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2013'. [ 801.302600][T13217] netlink: 'syz.3.2013': attribute type 7 has an invalid length. [ 804.790096][T13257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 805.467773][T13266] dlm: no local IP address has been set [ 805.473801][T13266] dlm: cannot start dlm midcomms -107 [ 806.707830][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2030'. [ 806.745078][T13273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2030'. [ 806.765533][T13273] netlink: 'syz.6.2030': attribute type 7 has an invalid length. [ 808.193893][T13294] fuse: Unknown parameter 'user_id00000000000000000000' [ 808.751112][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.757693][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.517693][T13312] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 809.526776][T13312] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 810.560527][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2044'. [ 810.589084][T13317] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2044'. [ 810.639009][T13317] netlink: 'syz.6.2044': attribute type 7 has an invalid length. [ 810.733764][T13311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2042'. [ 811.603778][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2045'. [ 812.462209][T13336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2047'. [ 812.550324][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2048'. [ 812.559985][T13342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.059890][T13351] fuse: Bad value for 'fd' [ 813.200393][T13343] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 813.407876][T13343] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 813.883853][T13342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.942733][T13343] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 814.030314][T13343] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 814.105685][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2055'. [ 814.295410][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2055'. [ 814.544088][T13365] netlink: 'syz.5.2055': attribute type 7 has an invalid length. [ 814.640897][T13343] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 814.656997][T13343] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 814.792486][T13358] netdevsim netdevsim6: Direct firmware load for . [ 814.792486][T13358] failed with error -2 [ 814.833135][T13343] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 814.869363][T13343] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 814.885166][T13358] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 814.885166][T13358] [ 815.033512][T13343] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 815.052204][T13343] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 815.143844][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 815.647205][T13372] wg1 speed is unknown, defaulting to 1000 [ 815.944496][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 816.321164][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2061'. [ 816.334182][T13385] netlink: 'syz.6.2061': attribute type 2 has an invalid length. [ 816.663583][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 816.905012][ T5838] Bluetooth: hci0: command 0x0405 tx timeout [ 816.916995][T13343] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 817.064264][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 817.223623][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 817.299965][T13372] lo speed is unknown, defaulting to 1000 [ 818.138762][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 818.258918][T13402] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 818.268076][T13402] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 819.107377][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 819.113537][ T5853] Bluetooth: hci0: command 0x0405 tx timeout [ 819.143525][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 821.563510][ T5838] Bluetooth: hci0: command 0x0405 tx timeout [ 822.954973][T13425] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 822.963956][T13425] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 823.426710][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2072'. [ 823.435886][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2072'. [ 827.019196][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2085'. [ 827.049402][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2085'. [ 827.099277][T13462] netlink: 'syz.4.2085': attribute type 7 has an invalid length. [ 827.546277][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 827.546297][ T30] audit: type=1804 audit(1755680720.818:248): pid=13470 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.2087" name="/newroot/414/file1" dev="fuse" ino=1 res=1 errno=0 [ 827.625398][ T30] audit: type=1800 audit(1755680720.838:249): pid=13470 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2087" name="/" dev="fuse" ino=1 res=0 errno=0 [ 827.941565][ T30] audit: type=1804 audit(1755680721.188:250): pid=13473 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.2088" name="/newroot/368/file1" dev="fuse" ino=1 res=1 errno=0 [ 827.974924][ T30] audit: type=1800 audit(1755680721.188:251): pid=13473 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2088" name="/" dev="fuse" ino=1 res=0 errno=0 [ 830.097629][T13483] netlink: 'syz.4.2090': attribute type 17 has an invalid length. [ 833.131082][T13492] syz_tun: left allmulticast mode [ 835.353920][T13500] FAULT_INJECTION: forcing a failure. [ 835.353920][T13500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 835.414818][T13500] CPU: 0 UID: 0 PID: 13500 Comm: syz.3.2097 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 835.414850][T13500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 835.414863][T13500] Call Trace: [ 835.414872][T13500] [ 835.414880][T13500] dump_stack_lvl+0x189/0x250 [ 835.414914][T13500] ? __pfx____ratelimit+0x10/0x10 [ 835.414938][T13500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 835.414962][T13500] ? __pfx__printk+0x10/0x10 [ 835.414989][T13500] ? __might_fault+0xb0/0x130 [ 835.415024][T13500] should_fail_ex+0x414/0x560 [ 835.415054][T13500] _copy_from_user+0x2d/0xb0 [ 835.415086][T13500] restore_altstack+0x9d/0x4b0 [ 835.415115][T13500] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 835.415153][T13500] ? __pfx_restore_altstack+0x10/0x10 [ 835.415189][T13500] ? _raw_spin_unlock_irq+0x23/0x50 [ 835.415210][T13500] ? lockdep_hardirqs_on+0x9c/0x150 [ 835.415236][T13500] __ia32_sys_rt_sigreturn+0x1ac/0x7b0 [ 835.415275][T13500] ? lockdep_hardirqs_on+0x9c/0x150 [ 835.415299][T13500] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 835.415329][T13500] ? _raw_spin_unlock_irq+0x2e/0x50 [ 835.415347][T13500] ? signal_setup_done+0x230/0x310 [ 835.415376][T13500] ? __lock_acquire+0xab9/0xd20 [ 835.415422][T13500] ? __task_pid_nr_ns+0x28/0x470 [ 835.415458][T13500] ? do_syscall_64+0xbe/0x3b0 [ 835.415488][T13500] do_syscall_64+0xfa/0x3b0 [ 835.415511][T13500] ? lockdep_hardirqs_on+0x9c/0x150 [ 835.415533][T13500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.415555][T13500] ? clear_bhb_loop+0x60/0xb0 [ 835.415582][T13500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.415613][T13500] RIP: 0033:0x7ff0a572add9 [ 835.415635][T13500] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 835.415653][T13500] RSP: 002b:00007ff0a6634a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 835.415677][T13500] RAX: ffffffffffffffda RBX: 00007ff0a59b5fa0 RCX: 00007ff0a572add9 [ 835.415692][T13500] RDX: 00007ff0a6634a80 RSI: 00007ff0a6634bb0 RDI: 0000000000000021 [ 835.415707][T13500] RBP: 00007ff0a6635090 R08: 0000000000000000 R09: 0000000000000000 [ 835.415720][T13500] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 835.415733][T13500] R13: 00007ff0a59b6038 R14: 00007ff0a59b5fa0 R15: 00007ffc30e7c078 [ 835.415768][T13500] [ 836.106820][T13515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 836.408377][T13519] netlink: 360 bytes leftover after parsing attributes in process `syz.3.2103'. [ 839.937531][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2111'. [ 840.396514][T13560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 841.144771][T13568] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 841.153850][T13568] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 841.908296][T13566] netdevsim netdevsim5: Direct firmware load for failed with error -2 [ 841.933941][T13566] netdevsim netdevsim5: Falling back to sysfs fallback for: [ 842.146569][T13567] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2114'. [ 842.155686][T13567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 842.162898][T13567] IPv6: NLM_F_CREATE should be set when creating new route [ 842.243144][T13574] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 842.252215][T13574] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 845.675140][T13592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 845.732845][ T30] audit: type=1804 audit(1755680738.998:252): pid=13598 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.2123" name="/newroot/421/file1" dev="fuse" ino=1 res=1 errno=0 [ 846.094749][T13605] dlm: no local IP address has been set [ 846.100343][T13605] dlm: cannot start dlm midcomms -107 [ 846.755447][T13621] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 846.764699][T13621] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 848.586344][ T30] audit: type=1800 audit(1755680741.858:253): pid=13598 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2123" name="/" dev="fuse" ino=1 res=0 errno=0 [ 849.102397][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2130'. [ 849.143575][T13629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2130'. [ 849.399216][T13629] netlink: 'syz.2.2130': attribute type 7 has an invalid length. [ 850.357952][T13647] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 851.544538][T13658] dlm: no local IP address has been set [ 851.550223][T13658] dlm: cannot start dlm midcomms -107 [ 851.675281][T13659] wg1 speed is unknown, defaulting to 1000 [ 852.503337][T13671] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 852.512453][T13671] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 852.824361][T13673] loop9: detected capacity change from 0 to 7 [ 852.846719][T13673] buffer_io_error: 4 callbacks suppressed [ 852.847150][T13673] Buffer I/O error on dev loop9, logical block 0, async page read [ 852.865709][T13673] Buffer I/O error on dev loop9, logical block 0, async page read [ 852.881675][T13673] Buffer I/O error on dev loop9, logical block 0, async page read [ 852.899157][T13673] Buffer I/O error on dev loop9, logical block 0, async page read [ 853.026172][T13673] Buffer I/O error on dev loop9, logical block 0, async page read [ 853.044684][T13673] Buffer I/O error on dev loop9, logical block 0, async page read [ 853.059429][T13673] Buffer I/O error on dev loop9, logical block 0, async page read [ 853.070034][T13673] ldm_validate_partition_table(): Disk read failed. [ 853.077461][T13673] Buffer I/O error on dev loop9, logical block 0, async page read [ 853.092650][T13673] Buffer I/O error on dev loop9, logical block 0, async page read [ 853.106310][T13673] Buffer I/O error on dev loop9, logical block 0, async page read [ 853.132644][T13673] Dev loop9: unable to read RDB block 0 [ 853.214543][T13673] loop9: unable to read partition table [ 853.222225][T13673] loop9: partition table beyond EOD, truncated [ 853.228948][T13673] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 853.228948][T13673] ) failed (rc=-5) [ 854.737175][T13680] tipc: Enabling of bearer rejected, failed to enable media [ 854.833169][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2145'. [ 854.879232][T13684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2145'. [ 854.892047][T13684] netlink: 'syz.5.2145': attribute type 7 has an invalid length. [ 855.692864][T13659] lo speed is unknown, defaulting to 1000 [ 855.794237][T13697] dlm: no local IP address has been set [ 855.799874][T13697] dlm: cannot start dlm midcomms -107 [ 856.414694][T13715] input: syz0 as /devices/virtual/input/input12 [ 858.045601][T13723] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 858.054704][T13723] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 859.066794][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2160'. [ 859.083742][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2159'. [ 859.349920][T13737] No control pipe specified [ 862.243569][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 862.403502][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 862.435556][ T9] usb 5-1: config 2 has an invalid descriptor of length 178, skipping remainder of the config [ 862.455506][T13762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2171'. [ 862.462361][ T9] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 862.531699][ T9] usb 5-1: New USB device found, idVendor=074f, idProduct=0000, bcdDevice=d1.b8 [ 862.542845][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.561648][ T9] usb 5-1: Product: syz [ 862.582018][ T9] usb 5-1: Manufacturer: syz [ 862.592103][ T9] usb 5-1: SerialNumber: syz [ 862.625647][T13766] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2173'. [ 862.821848][T13770] dlm: no local IP address has been set [ 862.827610][T13770] dlm: cannot start dlm midcomms -107 [ 867.530226][ T5928] usb 5-1: USB disconnect, device number 16 Connection to 10.128.1.24 closed by remote host. [ 868.936509][ T5845] bridge0: port 3(syz_tun) entered disabled state [ 869.028037][ T5845] syz_tun (unregistering): left allmulticast mode [ 869.040529][ T5845] syz_tun (unregistering): left promiscuous mode [ 869.064286][ T5845] bridge0: port 3(syz_tun) entered disabled state [ 869.280645][ T5846] bond0: (slave syz_tun): Releasing backup interface [ 869.492985][ T6171] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.597445][ T6171] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.699553][ T6171] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.791724][ T6171] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.949062][ T6171] bridge_slave_1: left allmulticast mode [ 869.955331][ T6171] bridge_slave_1: left promiscuous mode [ 869.961093][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.970749][ T6171] bridge_slave_0: left allmulticast mode [ 869.976679][ T6171] bridge_slave_0: left promiscuous mode [ 869.984895][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.198547][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.204982][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.569988][ T6171] team0: Port device vlan0 removed [ 870.582742][ T6171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.594022][ T6171] bond_slave_0: left promiscuous mode [ 870.603932][ T6171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.612938][ T6171] bond_slave_1: left promiscuous mode [ 870.620637][ T6171] bond0 (unregistering): Released all slaves [ 870.778323][ T6171] bond1 (unregistering): (slave veth5): Releasing active interface [ 870.786546][ T6171] dummy0: entered promiscuous mode [ 870.796989][ T6171] bond1 (unregistering): (slave dummy0): Releasing active interface [ 870.810192][ T6171] bond1 (unregistering): Released all slaves [ 870.833010][ T5842] wg1 speed is unknown, defaulting to 1000 [ 870.839608][ T5842] syz0: Port: 1 Link DOWN [ 870.919647][ T6171] tipc: Disabling bearer [ 870.938005][ T6171] tipc: Left network mode [ 871.052593][ T6171] [ 871.054987][ T6171] ====================================================== [ 871.062104][ T6171] WARNING: possible circular locking dependency detected [ 871.069125][ T6171] 6.16.0-syzkaller #0 Not tainted [ 871.074155][ T6171] ------------------------------------------------------ [ 871.081173][ T6171] kworker/u8:9/6171 is trying to acquire lock: [ 871.087328][ T6171] ffff88806dd60e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 871.096953][ T6171] [ 871.096953][ T6171] but task is already holding lock: [ 871.104331][ T6171] ffff888078c08768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 871.114735][ T6171] [ 871.114735][ T6171] which lock already depends on the new lock. [ 871.114735][ T6171] [ 871.125227][ T6171] [ 871.125227][ T6171] the existing dependency chain (in reverse order) is: [ 871.134242][ T6171] [ 871.134242][ T6171] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 871.142004][ T6171] lock_acquire+0x120/0x360 [ 871.147057][ T6171] __mutex_lock+0x182/0xe80 [ 871.152095][ T6171] ieee80211_open+0xed/0x1f0 [ 871.157219][ T6171] __dev_open+0x470/0x880 [ 871.162082][ T6171] netif_open+0xaa/0x170 [ 871.166854][ T6171] dev_open+0x125/0x260 [ 871.171543][ T6171] team_add_slave+0xb36/0x2840 [ 871.176839][ T6171] do_set_master+0x530/0x6d0 [ 871.181961][ T6171] do_setlink+0xcf0/0x41c0 [ 871.186905][ T6171] rtnl_newlink+0x160b/0x1c70 [ 871.192107][ T6171] rtnetlink_rcv_msg+0x7cc/0xb70 [ 871.197575][ T6171] netlink_rcv_skb+0x205/0x470 [ 871.202868][ T6171] netlink_unicast+0x75c/0x8e0 [ 871.208164][ T6171] netlink_sendmsg+0x805/0xb30 [ 871.213459][ T6171] __sock_sendmsg+0x21c/0x270 [ 871.218663][ T6171] ____sys_sendmsg+0x505/0x830 [ 871.223961][ T6171] ___sys_sendmsg+0x21f/0x2a0 [ 871.229173][ T6171] __x64_sys_sendmsg+0x19b/0x260 [ 871.234650][ T6171] do_syscall_64+0xfa/0x3b0 [ 871.239685][ T6171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.246113][ T6171] [ 871.246113][ T6171] -> #0 (team->team_lock_key#5){+.+.}-{4:4}: [ 871.254301][ T6171] validate_chain+0xb9b/0x2140 [ 871.259594][ T6171] __lock_acquire+0xab9/0xd20 [ 871.264797][ T6171] lock_acquire+0x120/0x360 [ 871.269830][ T6171] __mutex_lock+0x182/0xe80 [ 871.274860][ T6171] team_del_slave+0x32/0x1c0 [ 871.279984][ T6171] team_device_event+0x285/0xa20 [ 871.285445][ T6171] notifier_call_chain+0x1b3/0x3e0 [ 871.291086][ T6171] unregister_netdevice_many_notify+0x15d8/0x2320 [ 871.298033][ T6171] unregister_netdevice_queue+0x33c/0x380 [ 871.304282][ T6171] _cfg80211_unregister_wdev+0x165/0x590 [ 871.310448][ T6171] ieee80211_remove_interfaces+0x49a/0x6d0 [ 871.316785][ T6171] ieee80211_unregister_hw+0x5d/0x2c0 [ 871.322690][ T6171] mac80211_hwsim_del_radio+0x275/0x460 [ 871.328767][ T6171] hwsim_exit_net+0x584/0x640 [ 871.333977][ T6171] ops_undo_list+0x497/0x990 [ 871.339112][ T6171] cleanup_net+0x4c5/0x800 [ 871.344059][ T6171] process_scheduled_works+0xade/0x17b0 [ 871.350133][ T6171] worker_thread+0x8a0/0xda0 [ 871.355247][ T6171] kthread+0x70e/0x8a0 [ 871.359847][ T6171] ret_from_fork+0x3fc/0x770 [ 871.364959][ T6171] ret_from_fork_asm+0x1a/0x30 [ 871.370253][ T6171] [ 871.370253][ T6171] other info that might help us debug this: [ 871.370253][ T6171] [ 871.380514][ T6171] Possible unsafe locking scenario: [ 871.380514][ T6171] [ 871.388229][ T6171] CPU0 CPU1 [ 871.393596][ T6171] ---- ---- [ 871.398991][ T6171] lock(&rdev->wiphy.mtx); [ 871.403504][ T6171] lock(team->team_lock_key#5); [ 871.411000][ T6171] lock(&rdev->wiphy.mtx); [ 871.418050][ T6171] lock(team->team_lock_key#5); [ 871.423003][ T6171] [ 871.423003][ T6171] *** DEADLOCK *** [ 871.423003][ T6171] [ 871.431150][ T6171] 5 locks held by kworker/u8:9/6171: [ 871.436440][ T6171] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 871.447331][ T6171] #1: ffffc9000b537bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 871.457872][ T6171] #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 871.467294][ T6171] #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 871.477151][ T6171] #4: ffff888078c08768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 871.487955][ T6171] [ 871.487955][ T6171] stack backtrace: [ 871.493851][ T6171] CPU: 1 UID: 0 PID: 6171 Comm: kworker/u8:9 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 871.493871][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 871.493882][ T6171] Workqueue: netns cleanup_net [ 871.493905][ T6171] Call Trace: [ 871.493912][ T6171] [ 871.493919][ T6171] dump_stack_lvl+0x189/0x250 [ 871.493939][ T6171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 871.493956][ T6171] ? __pfx__printk+0x10/0x10 [ 871.493976][ T6171] ? print_lock_name+0xde/0x100 [ 871.493994][ T6171] print_circular_bug+0x2ee/0x310 [ 871.494014][ T6171] check_noncircular+0x134/0x160 [ 871.494033][ T6171] validate_chain+0xb9b/0x2140 [ 871.494053][ T6171] ? lockdep_hardirqs_on+0x9c/0x150 [ 871.494072][ T6171] __lock_acquire+0xab9/0xd20 [ 871.494087][ T6171] ? team_del_slave+0x32/0x1c0 [ 871.494107][ T6171] lock_acquire+0x120/0x360 [ 871.494119][ T6171] ? team_del_slave+0x32/0x1c0 [ 871.494140][ T6171] ? __mutex_trylock_common+0x153/0x260 [ 871.494160][ T6171] __mutex_lock+0x182/0xe80 [ 871.494175][ T6171] ? team_del_slave+0x32/0x1c0 [ 871.494194][ T6171] ? rcu_is_watching+0x15/0xb0 [ 871.494212][ T6171] ? team_del_slave+0x32/0x1c0 [ 871.494231][ T6171] ? __pfx___mutex_lock+0x10/0x10 [ 871.494247][ T6171] ? bond_netdev_event+0xd9/0xe80 [ 871.494270][ T6171] ? __pfx___mutex_lock+0x10/0x10 [ 871.494286][ T6171] ? __pfx_bond_netdev_event+0x10/0x10 [ 871.494309][ T6171] team_del_slave+0x32/0x1c0 [ 871.494330][ T6171] team_device_event+0x285/0xa20 [ 871.494346][ T6171] notifier_call_chain+0x1b3/0x3e0 [ 871.494366][ T6171] unregister_netdevice_many_notify+0x15d8/0x2320 [ 871.494388][ T6171] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 871.494407][ T6171] ? __lock_acquire+0xab9/0xd20 [ 871.494428][ T6171] unregister_netdevice_queue+0x33c/0x380 [ 871.494444][ T6171] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 871.494463][ T6171] _cfg80211_unregister_wdev+0x165/0x590 [ 871.494485][ T6171] ieee80211_remove_interfaces+0x49a/0x6d0 [ 871.494503][ T6171] ? __pfx_synchronize_rcu+0x10/0x10 [ 871.494521][ T6171] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 871.494539][ T6171] ? rcu_is_watching+0x15/0xb0 [ 871.494557][ T6171] ieee80211_unregister_hw+0x5d/0x2c0 [ 871.494580][ T6171] mac80211_hwsim_del_radio+0x275/0x460 [ 871.494604][ T6171] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 871.494629][ T6171] hwsim_exit_net+0x584/0x640 [ 871.494655][ T6171] ? __pfx_hwsim_exit_net+0x10/0x10 [ 871.494674][ T6171] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 871.494696][ T6171] ops_undo_list+0x497/0x990 [ 871.494719][ T6171] ? __pfx_ops_undo_list+0x10/0x10 [ 871.494742][ T6171] cleanup_net+0x4c5/0x800 [ 871.494762][ T6171] ? __pfx_cleanup_net+0x10/0x10 [ 871.494783][ T6171] ? _raw_spin_unlock_irq+0x23/0x50 [ 871.494796][ T6171] ? process_scheduled_works+0x9ef/0x17b0 [ 871.494811][ T6171] ? process_scheduled_works+0x9ef/0x17b0 [ 871.494827][ T6171] process_scheduled_works+0xade/0x17b0 [ 871.494851][ T6171] ? __pfx_process_scheduled_works+0x10/0x10 [ 871.494872][ T6171] worker_thread+0x8a0/0xda0 [ 871.494888][ T6171] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 871.494914][ T6171] ? __kthread_parkme+0x7b/0x200 [ 871.494933][ T6171] kthread+0x70e/0x8a0 [ 871.494952][ T6171] ? __pfx_worker_thread+0x10/0x10 [ 871.494967][ T6171] ? __pfx_kthread+0x10/0x10 [ 871.494986][ T6171] ? _raw_spin_unlock_irq+0x23/0x50 [ 871.494999][ T6171] ? lockdep_hardirqs_on+0x9c/0x150 [ 871.495013][ T6171] ? __pfx_kthread+0x10/0x10 [ 871.495031][ T6171] ret_from_fork+0x3fc/0x770 [ 871.495047][ T6171] ? __pfx_ret_from_fork+0x10/0x10 [ 871.495062][ T6171] ? __switch_to_asm+0x39/0x70 [ 871.495080][ T6171] ? __switch_to_asm+0x33/0x70 [ 871.495097][ T6171] ? __pfx_kthread+0x10/0x10 [ 871.495116][ T6171] ret_from_fork_asm+0x1a/0x30 [ 871.495138][ T6171] [ 871.868116][ T6171] team0: Port device wlan1 removed [ 872.049534][ T6171] hsr_slave_0: left promiscuous mode [ 872.077943][ T6171] hsr_slave_1: left promiscuous mode [ 872.086156][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.097587][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.105557][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.112971][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.123098][ T6171] veth1_macvtap: left promiscuous mode [ 872.128673][ T6171] veth0_macvtap: left promiscuous mode [ 872.134287][ T6171] veth1_vlan: left promiscuous mode [ 872.139528][ T6171] veth0_vlan: left promiscuous mode [ 872.330789][ T6171] team0 (unregistering): Port device team_slave_1 removed [ 872.358152][ T6171] team0 (unregistering): Port device team_slave_0 removed [ 872.788866][ T6171] ------------[ cut here ]------------ [ 872.794597][ T6171] WARNING: CPU: 0 PID: 6171 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x81/0x100 [ 872.804747][ T6171] Modules linked in: [ 872.808639][ T6171] CPU: 0 UID: 0 PID: 6171 Comm: kworker/u8:9 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 872.818771][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 872.828902][ T6171] Workqueue: netns cleanup_net [ 872.833747][ T6171] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100 [ 872.839754][ T6171] Code: 55 82 ef f7 4b 83 3c 2c 00 75 19 e8 09 9b 8f f7 49 81 fd f8 07 00 00 74 1d e8 fb 9a 8f f7 49 83 c5 08 eb c9 e8 f0 9a 8f f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6 [ 872.859429][ T6171] RSP: 0018:ffffc9000b5378b0 EFLAGS: 00010293 [ 872.865550][ T6171] RAX: ffffffff8a308ad0 RBX: ffff888030c34000 RCX: ffff8880260d1e00 [ 872.873709][ T6171] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffff888030c340b8 [ 872.882192][ T6171] RBP: ffffc9000b5379b0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 872.890785][ T6171] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffff888030c34000 [ 872.898856][ T6171] R13: 00000000000000b8 R14: ffff88807cf28000 R15: dffffc0000000000 [ 872.907276][ T6171] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 872.916370][ T6171] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 872.922968][ T6171] CR2: 00007fad7e6e7d60 CR3: 000000000df38000 CR4: 00000000003526f0 [ 872.930988][ T6171] Call Trace: [ 872.934327][ T6171] [ 872.937293][ T6171] ops_undo_list+0x497/0x990 [ 872.941888][ T6171] ? __pfx_ops_undo_list+0x10/0x10 [ 872.947069][ T6171] cleanup_net+0x4c5/0x800 [ 872.951539][ T6171] ? __pfx_cleanup_net+0x10/0x10 [ 872.956522][ T6171] ? _raw_spin_unlock_irq+0x23/0x50 [ 872.961717][ T6171] ? process_scheduled_works+0x9ef/0x17b0 [ 872.967492][ T6171] ? process_scheduled_works+0x9ef/0x17b0 [ 872.973240][ T6171] process_scheduled_works+0xade/0x17b0 [ 872.978832][ T6171] ? __pfx_process_scheduled_works+0x10/0x10 [ 872.985227][ T6171] worker_thread+0x8a0/0xda0 [ 872.989820][ T6171] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 872.996806][ T6171] ? __kthread_parkme+0x7b/0x200 [ 873.001776][ T6171] kthread+0x70e/0x8a0 [ 873.005895][ T6171] ? __pfx_worker_thread+0x10/0x10 [ 873.011099][ T6171] ? __pfx_kthread+0x10/0x10 [ 873.015773][ T6171] ? _raw_spin_unlock_irq+0x23/0x50 [ 873.020967][ T6171] ? lockdep_hardirqs_on+0x9c/0x150 [ 873.026193][ T6171] ? __pfx_kthread+0x10/0x10 [ 873.030790][ T6171] ret_from_fork+0x3fc/0x770 [ 873.035432][ T6171] ? __pfx_ret_from_fork+0x10/0x10 [ 873.040541][ T6171] ? __switch_to_asm+0x39/0x70 [ 873.045376][ T6171] ? __switch_to_asm+0x33/0x70 [ 873.050154][ T6171] ? __pfx_kthread+0x10/0x10 [ 873.054779][ T6171] ret_from_fork_asm+0x1a/0x30 [ 873.059563][ T6171] [ 873.062576][ T6171] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 873.069850][ T6171] CPU: 0 UID: 0 PID: 6171 Comm: kworker/u8:9 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 873.079906][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 873.089974][ T6171] Workqueue: netns cleanup_net [ 873.094754][ T6171] Call Trace: [ 873.098034][ T6171] [ 873.100963][ T6171] dump_stack_lvl+0x99/0x250 [ 873.105660][ T6171] ? __asan_memcpy+0x40/0x70 [ 873.110283][ T6171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 873.115492][ T6171] ? __pfx__printk+0x10/0x10 [ 873.120449][ T6171] panic+0x2db/0x790 [ 873.124363][ T6171] ? __pfx_panic+0x10/0x10 [ 873.128794][ T6171] ? ret_from_fork_asm+0x1a/0x30 [ 873.133747][ T6171] __warn+0x31b/0x4b0 [ 873.137738][ T6171] ? xfrm6_tunnel_net_exit+0x81/0x100 [ 873.143136][ T6171] ? xfrm6_tunnel_net_exit+0x81/0x100 [ 873.148564][ T6171] report_bug+0x2be/0x4f0 [ 873.153007][ T6171] ? xfrm6_tunnel_net_exit+0x81/0x100 [ 873.158397][ T6171] ? xfrm6_tunnel_net_exit+0x81/0x100 [ 873.163781][ T6171] ? xfrm6_tunnel_net_exit+0x83/0x100 [ 873.169163][ T6171] handle_bug+0x84/0x160 [ 873.173416][ T6171] exc_invalid_op+0x1a/0x50 [ 873.177930][ T6171] asm_exc_invalid_op+0x1a/0x20 [ 873.182788][ T6171] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100 [ 873.188780][ T6171] Code: 55 82 ef f7 4b 83 3c 2c 00 75 19 e8 09 9b 8f f7 49 81 fd f8 07 00 00 74 1d e8 fb 9a 8f f7 49 83 c5 08 eb c9 e8 f0 9a 8f f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6 [ 873.208399][ T6171] RSP: 0018:ffffc9000b5378b0 EFLAGS: 00010293 [ 873.214493][ T6171] RAX: ffffffff8a308ad0 RBX: ffff888030c34000 RCX: ffff8880260d1e00 [ 873.222471][ T6171] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffff888030c340b8 [ 873.230485][ T6171] RBP: ffffc9000b5379b0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 873.238467][ T6171] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffff888030c34000 [ 873.246448][ T6171] R13: 00000000000000b8 R14: ffff88807cf28000 R15: dffffc0000000000 [ 873.254518][ T6171] ? xfrm6_tunnel_net_exit+0x80/0x100 [ 873.259909][ T6171] ops_undo_list+0x497/0x990 [ 873.264575][ T6171] ? __pfx_ops_undo_list+0x10/0x10 [ 873.269703][ T6171] cleanup_net+0x4c5/0x800 [ 873.274223][ T6171] ? __pfx_cleanup_net+0x10/0x10 [ 873.279355][ T6171] ? _raw_spin_unlock_irq+0x23/0x50 [ 873.284644][ T6171] ? process_scheduled_works+0x9ef/0x17b0 [ 873.290376][ T6171] ? process_scheduled_works+0x9ef/0x17b0 [ 873.296102][ T6171] process_scheduled_works+0xade/0x17b0 [ 873.301664][ T6171] ? __pfx_process_scheduled_works+0x10/0x10 [ 873.307660][ T6171] worker_thread+0x8a0/0xda0 [ 873.312268][ T6171] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 873.318612][ T6171] ? __kthread_parkme+0x7b/0x200 [ 873.323567][ T6171] kthread+0x70e/0x8a0 [ 873.327653][ T6171] ? __pfx_worker_thread+0x10/0x10 [ 873.332874][ T6171] ? __pfx_kthread+0x10/0x10 [ 873.337562][ T6171] ? _raw_spin_unlock_irq+0x23/0x50 [ 873.342763][ T6171] ? lockdep_hardirqs_on+0x9c/0x150 [ 873.347968][ T6171] ? __pfx_kthread+0x10/0x10 [ 873.352615][ T6171] ret_from_fork+0x3fc/0x770 [ 873.357239][ T6171] ? __pfx_ret_from_fork+0x10/0x10 [ 873.362441][ T6171] ? __switch_to_asm+0x39/0x70 [ 873.367223][ T6171] ? __switch_to_asm+0x33/0x70 [ 873.372004][ T6171] ? __pfx_kthread+0x10/0x10 [ 873.376611][ T6171] ret_from_fork_asm+0x1a/0x30 [ 873.381393][ T6171] [ 873.384572][ T6171] Kernel Offset: disabled [ 873.388899][ T6171] Rebooting in 86400 seconds..