last executing test programs: 11m56.284658074s ago: executing program 2 (id=781): socket(0x29, 0x3, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x0, 0x10, 0x0, 0x600000}, &(0x7f0000001480), &(0x7f00000014c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_clone3(0x0, 0x0) 11m55.23309395s ago: executing program 2 (id=788): chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) umount2(&(0x7f0000000500)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (fail_nth: 62) 11m55.173490437s ago: executing program 2 (id=789): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000300)={0x4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x7fff, 0x2, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xa75, 0x8}}}]}, {0x1}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x7d243a6ea807936d, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x3}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r6) r8 = syz_io_uring_setup(0x706a, &(0x7f0000000140)={0x0, 0xfad6, 0x3508, 0x0, 0x0, 0x0, r5}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0xdb4, 0x0, 0x0, 0x0, 0x13) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001800dd8d00000000000000000200000000000006000000000600150006000000100016800c00028004000100", @ANYRES32, @ANYBLOB="5c9050847dcd936cc4a37437c1c6d4d42d194c6812be143e696c3b7721d891f8c43603d4761710c93e1282eb9c4c20ca8751c9bbe4327e62f6979481d6b4cb9e6ea496ab9e772cc3b8f356b0ba477467524bfd38ff0bb5d3f39a001dde4c4489506626bd815e795a636875a5dc6430af8443b09edee6f6f95a4039b67ff46573d08a3ea43972ea7208800fb51e1e3db0fd796da0f2d795b98e0609a7eafb7510c5787901e5196322d9ef7b4103ed482af21d"], 0x34}}, 0x0) 11m54.254428003s ago: executing program 2 (id=796): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0xff, 0x7, &(0x7f0000000140)={0xc, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x850) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) recvmmsg(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}, 0x1}], 0x1, 0x2020, 0x0) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x10) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r6, r5, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) socket(0x840000000002, 0x3, 0xfa) 11m53.202112704s ago: executing program 2 (id=806): syz_open_dev$video4linux(&(0x7f0000000000), 0x104, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000005c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000340)={0xc, 0x8, 0xfa00, {&(0x7f00000006c0)}}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) modify_ldt$read_default(0x2, &(0x7f00000004c0)=""/229, 0xe5) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c12d0c6d", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendto$inet6(r2, &(0x7f0000000440)="264f7e9708dc53a46de6ff26cef5f7c3513271c78056e3a1ce3f3bc10c11b16f7297745e430514c803c049f55c1a1c240831c6935d644e9f8dd749bac387a959257958eb1f8cd0b2e92dce05d508c5851fcdd2a8ed9e2da074e9fb24fb229234c13efbd14d4aee6977171f21e25837263b201f0c86a5d93a9e", 0x79, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, '\x00', "c0b67cb29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) recvmsg(r2, &(0x7f0000000100)={0x0, 0x17, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/120, 0x78}], 0x20}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000030a, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000600)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000800f103", @ANYBLOB="40975513baa4473446d6ceb538444ae5177a70d43fd2851ce89a136690dceb19e2c3ceb37a896eb208ef05b7f7fe01bf0d633969b254689ad5a64fbc4970b20e30b3a7d14b84163b7a53eb9a2bda4055e7ea80bbd1f9603386cfdacf77a5fe9a31189899a42dc7a1aea6f967c67abf5d614df9bbd77b7f81825fa98d4dbd7f8add4057525f1e4678191929c6d873df19d66717e44f8abd601a14c19957f6f25dd59633c9", @ANYRESOCT=r4]) ioctl$KVM_NMI(r3, 0xae9a) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000280)=0x10) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x4f9]}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m52.884504465s ago: executing program 2 (id=808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xf, 0x0, @random="f09e3ee1997998d2fb8fbf4fccd8396cceed"}]}]}, 0x4c}, 0x1, 0xe7030000}, 0x0) 11m37.83443149s ago: executing program 32 (id=808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xf, 0x0, @random="f09e3ee1997998d2fb8fbf4fccd8396cceed"}]}]}, 0x4c}, 0x1, 0xe7030000}, 0x0) 7m49.570148077s ago: executing program 0 (id=2179): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x700}}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x68}}, 0x0) 7m49.568401092s ago: executing program 0 (id=2180): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x25) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r1}, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x158, 0x1f, 0x8, 0x70bd26, 0x25dfdbfe, {0xa}, [@generic="7df4a0799a77207be71f859d6598a23dbd3d4ee43776f94a9a673bbc59df500bbc75370a517a769037766a0ee37a8af9baaadc9c2f6f472060b4337d093af1bae49d2a11348e5f5e7a6032c053a5db73f6d8279850338d5e1feaa1b73dbd101ddd1361fafdf417f5f703ea387627c43500d012fe38888587fb3542f03a3cc38fc3a3f399ee66ddb0dad7848105270113dd7c25bf1fbe364016d9987cd2d0ba24ebee2cd2785044431a4d3fa85760a60428d099d73131322cfc74c92708b28e3609c448f64f58f8880dcb101c95e4de7611beb78e6de028e1c4b9b049976bfded7c6c6d0b9d231d0c0ed1277059", @generic="4160ead24f541871682d0044a2c5de61509200b56af3097cd365cc2eeac9ae47ff7ba969400cb5", @generic="c09ee0b3b2171316d2d28109a840328b95f5afa13956d2fd7ef289da7b4f74e3555f11097db42f7292b936ec1cb18c"]}, 0x158}}, 0x4) renameat2(r0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x6) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000400)={0x40, 0x4}) rename(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)='./file0\x00') mount$binder(0x0, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500), 0x40, &(0x7f0000000540)={[{@stats}, {@stats}, {@stats}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x100000001, 0x72eb, 0x0, 0x0, 0x9, 0x9, "6fef736901081baa6ced0397a36556d6dda49f176f55c4983c7cc0e06eb2e00f04e5e2b47435eb45619ea8281488da8d9ae38934feb9c95fe81807e708561528", "95f59d339053d877cc50f6a4c9f84a7c4edebe10ccadfb754692ad4391e84a1d204b07e5f1aa897131d8045081668737b154e640cd046946baaf6440f2869d3f", "69a6b8c26a7e5aa3d0c84d052202b445b1d2fa85413e103ea959fc118d04de32", [0xfffffffffffffff8, 0x9]}) fcntl$setflags(r2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000840)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000880)=0x18) rmdir(&(0x7f00000008c0)='./file1\x00') setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000900)=0x7, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000940)={'syzkaller1\x00', @remote}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r5 = memfd_secret(0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000980)={0xeeee0000, 0xc000, 0x1}) mknodat$null(r0, &(0x7f00000009c0)='./file1\x00', 0x2000, 0x103) faccessat(r0, &(0x7f0000000a00)='./file0\x00', 0x103) socket$rds(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x8, 0x4ba, 0x0, @mcast1, @private0, 0x1, 0x700, 0x3, 0x9}}) openat$sw_sync(0xffffff9c, &(0x7f0000000b00), 0x40000, 0x0) 7m49.502093238s ago: executing program 0 (id=2182): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$netlink(0x10, 0x3, 0x12) r0 = syz_open_dev$vcsu(0x0, 0x9, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0x5}, {0x9, 0x5, 0xd, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) 7m46.481431071s ago: executing program 0 (id=2193): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0xba01}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x20}}, 0x0) getgid() setxattr$incfs_id(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x3) write$FUSE_DIRENT(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b000000000000000", @ANYRES64, @ANYBLOB="000000000000000000000000000000000800000007000000627269646765300006006823000000000e00000000000000090000007a000000272f25405b2d2f27260000000000000003000000000000004000000000000000010000000002000000000000000000000600000000000000070000000000000000000000ff0000000600000000000000fdffffffffffffff05000000400000002c40232121000000"], 0xb0) open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x10b040, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0xe9, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "d77b5d2898"}]}}]}}]}}]}}, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc040564a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', 0x12) bind$rds(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x200, @remote}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000180)}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x0) 7m44.792374576s ago: executing program 0 (id=2200): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x1) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000002600)) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r0) socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaa0e63f03d4d00642f01ff010000000000000000000000000001fc0200000000000000000000000000003302000000000000c910fe8000000000000000000000000000bb0000000000000c0700000000000000000800090086dd080088be000000031504ea020100000000000001080022eb000000032301580902000000000000050002211c0800655800000002"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3ff, 0x0, 0x0, 0x3861253e7e26f701, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000cc0)='contention_begin\x00', r2}, 0x18) socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='hfs\x00', 0x40, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r5}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="3f000000010003", 0x7) 7m44.792095176s ago: executing program 0 (id=2201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0xf5ff, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x58}}, 0x0) 7m29.672814771s ago: executing program 33 (id=2201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0xf5ff, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x58}}, 0x0) 1m20.446102377s ago: executing program 1 (id=4251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x3, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TCSETA(r5, 0x5406, 0x0) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$TIOCSTI(r7, 0x5412, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r8, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) 1m19.396525256s ago: executing program 1 (id=4257): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='efivarfs\x00', 0x8b0088, &(0x7f0000000140)='TIPC\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) ioperm(0x0, 0x6e, 0xe) chroot(&(0x7f0000000000)='./file0\x00') ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000180)) 1m19.396088064s ago: executing program 1 (id=4258): socket$packet(0x11, 0x2, 0x300) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x4, 0x0, 0x0, {0x0, 0x0, [0x0, 0x17c1], [0x1]}, 0xf0ffff80}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1m18.996682804s ago: executing program 1 (id=4259): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/13], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000020000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002400)={r5, r7, 0x25, 0x0, @val=@perf_event={0xfffffffffffffff7}}, 0x18) syz_emit_ethernet(0x4a, &(0x7f00000026c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r8, 0x5402, &(0x7f0000004500)={0x0, 0x1000, 0x0, 0x0, 0x0, "030000007fffff5b000f000000462200"}) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x11, "00000000000000000000279600"}) r9 = syz_open_pts(r8, 0x0) r10 = dup(r9) read$FUSE(r10, &(0x7f0000004540)={0x2020}, 0x2020) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000001680)=r0}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x0, 0x7, 0x4, 0x3, 0x8, 0x4}, @exit, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000240)='GPL\x00', 0x209, 0x1000, &(0x7f0000000680)=""/4096, 0x40f00, 0x70, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xffffffff, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001700)=[r4, r10, 0xffffffffffffffff, 0xffffffffffffffff, r11], 0x0, 0x10, 0x72, @void, @value}, 0x94) syz_open_dev$ttys(0xc, 0x2, 0x1) 1m18.092647841s ago: executing program 1 (id=4267): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async, rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (rerun: 32) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x5, 0x0) (async, rerun: 32) getdents(r0, 0x0, 0x58) (async, rerun: 32) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000480)=0x8000, 0x4) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/asound/timers\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000001c0)=""/4068, 0xfe4) r3 = socket$inet6(0xa, 0x6, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x38}, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) (async) listen(r4, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="20006a84e1b93b00000000000000000000020000000008000a000000010000002fed87932d4808374b3684ab8c0ea740806e9f7338663ca7f101344361c9240b80007e181bf97178a05d9a7577621bdeaf78d10b478ad7ad03baf5ca0a09676963631c98bfef1d6e"], 0x20}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async, rerun: 64) close_range(r4, 0xffffffffffffffff, 0x0) (rerun: 64) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) (async, rerun: 64) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async, rerun: 64) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) io_setup(0x9, &(0x7f0000000240)) 1m17.960198917s ago: executing program 1 (id=4268): syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x850) ioctl$KVM_RUN(r0, 0xae80, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) recvmmsg(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}, 0x1}], 0x1, 0x2020, 0x0) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="32000000007800000005024f676d2a00"], 0x10) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000080)=0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r7, r5, 0x31, 0x0, @val=@iter={&(0x7f0000000380)=@task={r8, 0x0, r5}}}, 0x37) socket(0x840000000002, 0x3, 0xfa) 1m2.879265576s ago: executing program 34 (id=4268): syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x850) ioctl$KVM_RUN(r0, 0xae80, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="18050000000000000000000000000000b708001b58a0dafaa4b2b3b018f10b63f8ff00004300b7080000000000007b8af0ff00000000bfa100000100e6f7ffffffbfa400000000000007040000f0ffffffb702000008000000182300003b6fdaf521df1c1fe30c855bf74bc2449fc54954663800a1be52d382aecc9468ed84cb7a7f60253829c793b434b83388172f19f6f109dee715c8cede0c79195ddfaf4e5e4af1c09e51135b30e012c02ac337df2ba8520977ed5a7308e2fb5fb8807d6e4695aebb10eaa4c9bfc7b7016fa835b75e52f38b13c46fd0a1947302d706a8fd8401423fd414b5deef26969892e6f2c882779a81cbb332af1fa9af16b7a9b7184e758a733c2bdff27e37c8e704f4cbb5b22026f1c6e297e5ab883418190a417672da15c0880e0b5636f4fcc7d03d73458dae17562ffbaf428ca398d32a5b3016a7f37e70e4648d8b290394ad09b7824d38293f7c7a144f80ce5cbd8550934cb0e1d0c3176e125deb20f12ae15f156d869b3cae1d2ebba9c8b068ad2b91649e5421f567a3bc100e86bc1f19ef3960f47325a1e47f3da09d94c8e349e095311d8eb17a510aa71cf2fc5a9a27dff79ed081bbf0508038ace3a2b90b8e2828e6ff4692088cc5153fb5616a1f8601e19f3bf84c786ebcccd1f5b6b08e0087bce85932a038940f2e93d04bf8c6fb9c35ece879074bc18d282fc1e1b7c80f2e0e6d26484ed3db9837d25e5588a4", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) recvmmsg(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}, 0x1}], 0x1, 0x2020, 0x0) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="32000000007800000005024f676d2a00"], 0x10) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000080)=0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r7, r5, 0x31, 0x0, @val=@iter={&(0x7f0000000380)=@task={r8, 0x0, r5}}}, 0x37) socket(0x840000000002, 0x3, 0xfa) 6.607183844s ago: executing program 5 (id=4532): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 6.077044827s ago: executing program 5 (id=4535): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000ec0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1}, [{}], "aed27ff91098e35ef0d10a78bf96608ed367cd36c77be0b25af8288dc7cfcca19eb34ac2844fc259bf9db8f97888241db74ce3fb30dec28058e881e3819ee516769e66fc755973cc312825038137ab242be7476f945da69081bc8c1f9bfa4eaf92c076a4cd28c3ac313503ed3d2780f7bfdd6c1b2830959da8f96fbd7c001a3a56025e7b7ee60ed17fc2e79a44d77f9bb420e814227c54adb5eb10f449b6c3f5da9850104ed695f1d944555aa66350f455076c66fb077d50fbaa210dda4f4d1d74faae4441d8a67ba1337caebd0cb204c33ee3ec91289f751eb9e1c632cf8295cd814fcbf7e595fb22a141d8d26af95a5bff1f20846e53ae827065f2edc1ba9801462dd8cbd073fc743493389cf60cb28a4a40bf74c0768188b6cab537cbfac3206ec32a7ee15b074711398456a2c5be35a3c209b2674612118c1b37b4dd296434e7eca5b2daac27aa0d78982f67d2bbcb4e15c7d1f501f38bd7b1ebcc8fdc6753673b1a0ae3a21ef08263829e53bcbd4f66a72a808f5e7be6c870f381467ee4adf12543d484f1c0d746f4a33559ca16ce06d744e27b53d3061561b12986e55b614711d69fc2ec20759e37432a802c74e86fbceef4198513e6baf31a469a5ea3773cbb919ebc4fdc656c6444ef70d6608b280a11e056b601504b97f69540cf0ac2e92be5bb"}, 0x25d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x50, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3}, &(0x7f0000000040), 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000940)={0x2d71e, 0x0, 0x0, 0x7ffe, 0x0, "00ff7f0a0a0080000000000000000000000010"}) unshare(0x62040200) 5.409969079s ago: executing program 5 (id=4537): r0 = socket$pptp(0x18, 0x1, 0x2) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x0, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20a000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000004c0)=""/86) io_uring_enter(0xffffffffffffffff, 0x325b, 0x39f0, 0x15, 0x0, 0x0) r4 = syz_io_uring_setup(0x110d, &(0x7f00000003c0)={0x0, 0x80d5, 0x0, 0x0, 0x40000000}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x1}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11Hx\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x83\xc9\x86$\x1bj\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xd6\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd4dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf}\x1f7\x16\xb6f\xa0K \xb2\a\x89*>\xc7V\x0f\xc5\x98p\xf6-U\x19\xaf\x1a\xa2\xf0\xca\xd4\x04\xd9P\x97\xa2-\xcc\x1b\xe6\xa6L\r_\x17\x1b\x19\xa3\xe0\xc2@2\xa0\x9c\xaa\x1e\xff\xaf\xecbS\x00', 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, {0x8455}, 0x1}) io_uring_enter(r4, 0x3f72, 0x74f1, 0x0, 0x0, 0x0) 5.206798245s ago: executing program 6 (id=4538): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0xff, 0x7, &(0x7f0000000140)={0xc, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x850) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) recvmmsg(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2020, 0x0) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x80fe, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, 0xffffffffffffffff, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) socket(0x840000000002, 0x3, 0xfa) 4.079634297s ago: executing program 6 (id=4541): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) execve(0x0, 0x0, &(0x7f0000000080)={[0x0, 0x0]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdir(0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r4) syz_emit_vhci(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000030000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000009500000000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.841960622s ago: executing program 6 (id=4542): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000bc0)="be", 0x1) r2 = syz_open_dev$vcsu(0x0, 0x9, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0x5}, {0x9, 0x5, 0xd, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb45fd629100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db220100002600000000000080622ea74b2b7f6a0cad8c932e1559f5fc8cd77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bce5a6f087ae8f5e64be2c9d2d00b391d8177d7bb9f129db3d36dd015c7bd3f15aa6aadbeafdc3cf4cda547a9f1c27a7b2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11befffffffeffffffff97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00512fea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579ebb6d949fb12f63be72a3d817b324d6cada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108f6e8c71e26032176066599783568628f0309c3afa716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x241, 0x0, 0xaf, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb4206757531"}, 0x4c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38) close(0x3) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="ee000000", @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c0001"], 0x5c}, 0x1, 0xf000, 0x0, 0x8c1}, 0x20040) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000007"], 0x118}], 0x1}, 0x0) 3.828415215s ago: executing program 4 (id=4543): r0 = socket(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="55577683dbc5c6761f50000000071400022dbd7010000000250000020073797a31000000000900020073797a30000000000900ffff000000000000000000000900020073797a300f00000005005400000000000800010000000000f4c0a2ba0adf3a21f2d055d5cf8ea58e7a889338dead"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x1001) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) r2 = dup(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xa5, &(0x7f0000000140)=""/165, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0cc5640, &(0x7f0000000780)={0x1, @raw_data="bd97b56589b352c7f4b0f04f404d1e7dfdb467af126512279c23d7d7d55926d060e5ed01960d90aae6992192fc1d2aa161d8a4586a13f1d24505deb64a8cd73ad01a70919c2ae8bb23c4462cf89ed4dc5991a973bb748a33d47daf56c367a99e6716cb74d57e34e9e5b4d0c13490122bb530e4146c968f39f00f8423a37bd5e2a5d201455c6b659a64b14a6afbb1fea1fd67cd5e75beba1e1ae65fb1b76f155925d668f9488ef651d3890435d5d3235d29597bff0501a66755943cbf14522552a2569dbf76acfbac"}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000340)=0x0) prlimit64(r6, 0xb, &(0x7f0000000480)={0x8, 0x46a3fad0}, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = dup(r1) sendfile(r7, r2, 0x0, 0x89ffc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000540)='/dev/null\x00') mkdir(0x0, 0x0) 3.825738641s ago: executing program 3 (id=4544): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000280)="f9", 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000003a80)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x231, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe0c81) write$sndseq(r5, 0x0, 0x0) poll(&(0x7f00000001c0)=[{r5}], 0x1, 0x100) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x600d, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe472}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0x7, 0x0, 0x0, 0x4000002}) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) fcntl$addseals(r4, 0x409, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='xdp_devmap_xmit\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000440)={0x0, 0x5b}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r9, 0x1, 0xfffffb11}, 0xc) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES64=r7], 0x20}}, 0x0) 3.509351245s ago: executing program 5 (id=4545): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77df2a87ba315ab8da00", "f9fe8002", "acc28000", "1eb15fbb", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00']}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)={0x1234, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x11e8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x8f, 0x2, "7ce66bd732ba509d2563e6a0994f52e7c1597f7bdfd8a1487f9b1665d1491d14606bca82be871d910e3e6a4f4347d6bddbff2bce5d1228f49651523dfdf48ea113cc36010a4ccfe5cd166ee80934b639d12c17b62f92f7ebc59cebb1c6c74a63b116c3ed921cf2f85952d7bdec5ceb7a71acacff2443050b4e93be8dc811af6da4fcd7fa4950a9e7a8cc85"}, @NL80211_FTM_RESP_ATTR_LCI={0x8e, 0x2, "bb038c1debac7cfe403afdb9c6d108a466cf132ebba11696c5db907d18ae3723009440f90b1086fb60684fdcc2a91aac1e2811f7a4662b4bfbab14ae30285a8970908857af87e84e9b1945082b0de69a81aeb043981322425256d32ad73cea4d884a58efea67964950b3bcec23ae999ff0053b64f79628d19b8d8cbadce43e2614cbd4551c3a85e095fe"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x18, 0x3, "0311fb3c192e902c6d02cc0f223613cf5b4a2e47"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa1, 0x3, "92adc8f054f4cecba19e565f4d99c88131e33a47295007527108d828d86d362211a5574f84b970c7800697cf9c38d7d566ca388bc80e1392bfee1de6f5b38865d21f55b1f8cf6d6032a767d3f867a38799e9838b8845ba2732a3a839dca0c9de7250077abadf11ff016df471c8cd16e0e583a68820dccd5eb4a02ac561cba63c0d713f9cebd1667e2cb91d5660f8ce79c140ac150a8690ca11158c4e7d"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x18, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x6, 0x2, "1952"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, 'X'}]}]]}, 0x1234}}, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000000)={'virt_wifi0\x00', @random="010000004000"}) close(r3) 3.154678932s ago: executing program 3 (id=4546): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x231, 0x0, 0x0, &(0x7f00000001c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000020000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r4, @ANYBLOB="08001b"], 0x34}}, 0x4004010) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00') fchdir(r5) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686", 0xf}], 0x1}, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3570], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) r9 = socket$inet6(0xa, 0x80002, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES64=r9], 0x20}}, 0x0) 2.87742083s ago: executing program 4 (id=4547): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv2(r2, 0x0, 0x0, 0x2b, 0x0, 0x0) write$tun(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0xba01}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x20}}, 0x0) unlink(&(0x7f00000001c0)='./file0\x00') getgid() setxattr$incfs_id(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x3) write$FUSE_DIRENT(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b000000000000000", @ANYRES64, @ANYBLOB="000000000000000000000000000000000800000007000000627269646765300006006823000000000e00000000000000090000007a000000272f25405b2d2f27260000000000000003000000000000004000000000000000010000000002000000000000000000000600000000000000070000000000000000000000ff0000000600000000000000fdffffffffffffff05000000400000002c40232121000000"], 0xb0) open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x10b040, 0x1e4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0xe9, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "d77b5d2898"}]}}]}}]}}]}}, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc040564a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x4001, 0x3, 0x354, 0x11c, 0x720d, 0x148, 0x0, 0x148, 0x1cc, 0x240, 0x240, 0x1cc, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0xff, 0xffffffff, 'ip6gre0\x00', 'bond0\x00', {0xff}, {0xff}, 0x84, 0x2, 0x31}, 0x0, 0x1b4, 0x210, 0x0, {}, [@common=@osf={{}, {'syz0\x00', 0x0, 0x4}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xfc00, 0x6, [0x2c, 0x8, 0x24, 0x33, 0x36, 0x2a, 0x11, 0x7, 0x24, 0x3b, 0x3d, 0x2f, 0x18, 0x1c, 0x10, 0x83f], 0x0, 0x7fff, 0x56}}}, {{@ip={@multicast2, @private=0xa010100, 0x0, 0xffffff00, 'bond_slave_0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x40}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffc]}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0xffffffffffffff35) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', 0x12) bind$rds(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x200, @remote}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000180)}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x2ddf, 0x0, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x5c7, &(0x7f0000000400)={0x0, 0xcf16, 0x10, 0x0, 0x321}, &(0x7f00000003c0), &(0x7f0000000500)) 2.42251374s ago: executing program 3 (id=4549): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50}, 0x50) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$ubi_ctrl(0xffffff9c, 0x0, 0x80040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x23, &(0x7f0000000980)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x19, 0x4, 0x8, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000ffa000/0x3000)=nil], 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x18, 0x2c, 0x1, 0x3000000, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0x19}]}, 0x18}], 0x1}, 0x0) 1.949110857s ago: executing program 3 (id=4550): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) pwritev2(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="bbd4b83102f5dec8fc4a1e7045b15ca62acebb897bb4fffe21023c34d96d1446", 0x20}, {&(0x7f0000000080)="281b76eaaa08a56c12ae7e152b382a5adde4db7601ba2e43a8e93e3cf2d488e5bee6f704db159e441851c03adb71c2a04e8ec515bb7e852072082d90c026e6f78ad3691df1d03b5b062bfbfbe80b", 0x4e}, {&(0x7f0000000100)="57c37acaa8f4a78c1f4a432d5dfe518b17caf2d4a77803ab16c5dc477edec5e659079a715477c879c4b1cb9ab7703777cfc89b7b577a4d6d6737ab1ac1a096da76182d9d3d181a78a0f9ff9fcaf0dc98dfd7d73c6265c85787f193f7e804ece6fc50b0", 0x63}, {&(0x7f0000000180)="1a2896d92f030f0cefa81efb1075267820b9d1ba614c42f867d3a14b3d2eac145c226658b249ed507edc1339ff7cd68d6a80fc799aa2404c8dfcf2fc78e1bd53ada356e2af94d8c418ce1523d2288d0cc7", 0x51}, {&(0x7f0000000200)="9490cd3c793da9582bfebbc160f5ecc15f9074c45e451a4c356fffcf5f35088df66fe0c0c01114052295ac9f1c7b2450625e6bcecd7dcfaaaefec72cae72c865c9a82d622d954f9d7259c81889ba656257fa9ad79a62d8d4f4837ee6a55fb3095159fa7a5aab377accd67746a65cebdb6567c3cfc5e0f1e37e12f3e5a7a0d2bf1a34a7ae90a1de6ad434e2d75a36190a808a7d53e423902f6364eb5a342562455608ade55a8f96e01a5c179d10200577bb46f478755f8a3e5147c459c734802f6eae734f2ee72dddacf33a20780d51afc6f573e93714", 0xd6}, {&(0x7f0000000300)="c4d7797870f5e94ae13aa78a1f03d8cf736eee310e9cea76a54f45e731cf835341f6525e4597fe0e5b90b9bcfa91e532bfecaa9a326b7b1f711f1e57ec89f1e9e589433299f97f53cb2af6348d8aaf564c11eff6c33414aeb24498f2c207f2cd1ee0cb0f612d81f68c2c27574931cfa9cf00046087e0ddabe65c7c8a480c39477afe352a38387a8e8f25f4b47e3d4fd5aeb2c28f8e9ef0fb26e1df3940a33c55e174bb5ef71c25b6d629641d53a5079ffd981357afce637f411a", 0xba}, {&(0x7f00000003c0)="0bfb5ba5703edd863114f28bcfe1b63be60afa0c5993e75470a673b306fe70725a89b4c2d51a4926e5e2be3a25b95ece6624b0a6be8dd38be64bc9261eabc6fdb0c958046e878de044fdca88960ac4ad2c8fbdf7dcf1f11869f48814d216406af7db15", 0x63}, {&(0x7f0000000440)="46b8ff30e15eaa3b2ce3817fefb192117bf41fc7021d688061daf5a25a59380c646beccdc7626986f1f837c71f96fae66698f1acc941", 0x36}], 0x8, 0x1, 0x8ce, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x3, 0x2) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000500)=0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r0, &(0x7f0000000540)="7922d6ba34a13738033c5f2b16fa970b0253833acfcb72bed57d11f7971c945fdbe6a1f14d45c6d20280913783487e8322a4f6e1edfe5405672946862015970bada3483488007e5424bdfaf843e8890f8d626a438f10db8d79f3fef29b5dc1006d2e60aaa8ed265f2c087b763402", &(0x7f00000005c0)=""/130}, 0x1c) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000006c0)={0xa, 0x0, [{0x3b6, 0x0, 0x3e}, {0x342, 0x0, 0xfffffffffffffffc}, {0xbb0, 0x0, 0x8}, {0x2a2, 0x0, 0x3}, {0x29a, 0x0, 0x8001}, {}, {0x2cb, 0x0, 0x7ff}, {0xb0a}, {0x0, 0x0, 0x10001}, {0x92b, 0x0, 0x5}]}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000006c0)={0xa, 0x0, [{0x3b6, 0x0, 0x3e}, {0x342, 0x0, 0xfffffffffffffffc}, {0xbb0, 0x0, 0x8}, {0x2a2, 0x0, 0x3}, {0x29a, 0x0, 0x8001}, {}, {0x2cb, 0x0, 0x7ff}, {0xb0a}, {0x0, 0x0, 0x10001}, {0x92b, 0x0, 0x5}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000009c0)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x1e, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5b}, [@tail_call, @call={0x85, 0x0, 0x0, 0x3d}, @exit, @ringbuf_query, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}]}, &(0x7f0000000b00)='syzkaller\x00', 0x80000000, 0x1000, &(0x7f0000000b40)=""/4096, 0x41000, 0x4, '\x00', 0x0, @fallback=0x4, r1, 0x8, &(0x7f0000001b40)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0x2, 0xd, 0xfffffff7}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000001bc0)=[r0], &(0x7f0000001c00)=[{0x0, 0x1, 0xc, 0x8}, {0x0, 0x1, 0x2, 0x7}], 0x10, 0x8001, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x1e, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5b}, [@tail_call, @call={0x85, 0x0, 0x0, 0x3d}, @exit, @ringbuf_query, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}]}, &(0x7f0000000b00)='syzkaller\x00', 0x80000000, 0x1000, &(0x7f0000000b40)=""/4096, 0x41000, 0x4, '\x00', 0x0, @fallback=0x4, r1, 0x8, &(0x7f0000001b40)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0x2, 0xd, 0xfffffff7}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000001bc0)=[r0], &(0x7f0000001c00)=[{0x0, 0x1, 0xc, 0x8}, {0x0, 0x1, 0x2, 0x7}], 0x10, 0x8001, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d00)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x9, 0x17, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd97, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='syzkaller\x00', 0x9, 0x4, &(0x7f0000000900)=""/4, 0x40f00, 0x3, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x9, 0x6, 0x2}, 0x10, r4, r5, 0x0, &(0x7f0000001d80)=[r0, r0, r6], 0x0, 0x10, 0xc, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x9, 0x17, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd97, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='syzkaller\x00', 0x9, 0x4, &(0x7f0000000900)=""/4, 0x40f00, 0x3, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x9, 0x6, 0x2}, 0x10, r4, r5, 0x0, &(0x7f0000001d80)=[r0, r0, r6], 0x0, 0x10, 0xc, @void, @value}, 0x94) getsockname$packet(r3, &(0x7f0000001e80), &(0x7f0000001ec0)=0x14) getsockname$packet(r3, &(0x7f0000001f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001f40)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname$l2tp(r3, &(0x7f0000001f80)={0x2, 0x0, @initdev}, &(0x7f0000001fc0)=0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000002040), r3) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002040), r3) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, r9, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, r9, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800) read$msr(r3, &(0x7f0000002140)=""/169, 0xa9) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000022c0)={&(0x7f0000002200), 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x20, 0x1404, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4000004) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000022c0)={&(0x7f0000002200), 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x20, 0x1404, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4000004) eventfd2(0x5, 0x80801) (async) eventfd2(0x5, 0x80801) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000002300)) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000002340)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x3}}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000023c0)="3117bd579477bf7da138665325332115cf66607e02d78fac4ff6fc517bfa8cbad7ed0710c1fa1a", 0x27}, {&(0x7f0000002400)="6bf16b44d98a065ab211808a11105b8dfa32cedeae643fac957bf408abde3ec49fcf10274ab9b6e1375b292eb205b1630bae089a51a9500f8fc409097884642d55f286c1b9313b8610817027b3bb87", 0x4f}, {&(0x7f0000002480)="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", 0xfe}, {&(0x7f0000002580)="208231fb685bba436cf9cebbaffe63940f38aaa672624195859af27f291736910ceafaa220f3f850ddf9a74801b1e73b1729d150b41bb38013ca32fefa0fe2b59ad16ada11f21916211869ba3b84c46cb5ed7fc9d9f502d732aff1fdaecdfef1dbe3964ba5adbe0426879bb982c08b18b397c67db6a2aa9443aa649ab480c190e361c21d2dc3c1ebcaa6527232608a0df1c140ae088f15027a679a6028636cc2be958956b1d6bd2ef44b797bff03edde342e78aea15d3ce283b9dffb6b57a0272cd57ace2accacbd2c9be71e20d0", 0xce}, {&(0x7f0000002680)="0f2fc801b03c26ba94f33e36fa77bcc73340501f9fcb339bd4210aeb32d9403d6a6255f07728d45c406bd47970033b74a1ef66c5a32c1359b52230251d56e4a8ab888cae7adb44547c545cb6e2cc41427377563bee57494063d8b71ff8285ddcc5a0dcda7c1d2603e2ab0a53b0b9818dc079e1df79", 0x75}, {&(0x7f0000002700)="982e6053ed96a36fcc0cf1eb926240c9dca0df613ad76a71b1b54d91437a2ad5e958a35c8d6c677158a4c3cf89fb0f04875258a6c46ea1d0abc9f3351928500398caa19ab1b86d65d9cdb14a30683640105c7edbcecd35bd20f97b024ec3d82ace2a66b1a013c245307cd6f98420b8c1a8a04236e8237361b594738e8cb58f1f5b0483c9335ad4ff4994af94a533e37a4807d0e765fb99c5074c56858f994d16903494a6049353cf3e5cc6525b43a0f6e912c39e236f60091ea7e2af97aabe942acbd1b7ce6d8a05af7d1e3c4ff7c9eaab2e1e1e68cf049b31418be5fd3343fb553c8d749cabd9507cd5bf8cf7c9aec913e9b76b2b147df0", 0xf8}, {&(0x7f0000002800)="01d648b142e160ca929498a099067e0c4cf8b8f15cda525b4bf4bcb626a0c8754ca5d6cf3998984fddc4cfe6a31b5727b0d3d900c4c86981bb921f78516bfac5b7c7dad809accf540a8d0086caa1fc7e0fe8993b1b3697c4b07c67533ed0b4dfa36346894fa9cb9702a03a83233dead3710525f6881bcbd934b091eea5dc7c2183b889473f5d612202c200d70b27334a163920f93983f6b9", 0x98}], 0x7, &(0x7f0000002900)=[{0x98, 0x1, 0x2, "cdbb39317273ed5b06b555e59b9214b5b0f05cf813c752e959950e9d0f8a38ec6f6411c68c01a48f82cc483feb7a2e777325372957f69a60807da7eae90d2365d2c94fefbc2a4414cafa423c2123edd7ef937288eb59720c90cdf55e572b6582ea1dd4ea456c52e7531f460f2aaaa5f1aeb6da3b95cf0c42886c44af780b11a77f0a7878a1d96461af"}, {0x14, 0x117, 0x7f7, "125a1b719315"}, {0x100c, 0x104, 0x9, "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"}, {0x80, 0x1, 0xe, "0e7e8dff43888b9567cab623c99401f4db045c0c1d44bfda6caa679098b7b08cc19bc5e2b6f8ec3448e1d31898c4269c0e9b423c694a4e13c97af4f406212a84f25bc0a1a39681bddac0b6bf5518805622b8522d16f8be609388712a78645e340518a8598019fd8d7efa6a75d569205011c9"}, {0xe0, 0x10d, 0x1000, "2a97e17e40fc0da005b9bfed4c9c20d5787c12e4ac164eb6e95eb1abb39efd9ab5b85fb478ca27636dda7f0afda1833070fc90c149afb340e1ba211389891a866fc92003d5ea50d44c48d6776ff14e10a7301890a5723cc7161cc059846f27bfddd938f6957f1b57cb9ffd485c3e99320ebe51628ace9c4b4bc3dada97bece0060e35a90cb8d3dc58e6a7cd5b1e21bd623d60bf8f104c32d30541b5ffc5a825c15e7760e9024f4d768923c30e8c186111719c0dba0bb467b99db2fd5d1cf9de566c67000575303b9a476e4f6120423ff1a8986"}, {0x10c, 0x115, 0x81, "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"}, {0xc4, 0x1e, 0xf, "5eefcef7c3f592a413a46c0515b02959d317f6309b1bbad164749ff23038dbff9adcf4de56068cc3232347b85c2f8ecb9334d06dbdb843b4481b0aee3d82dac871bb4c53e07d4698a3476655b96af683afbc209ee2d778a95ad81bcb5c9e38bd4fc22f276aed261aab46bb14edabcabc0b769564da299515cf3335729aa0874417794d5ff4c71d6417923c4ab2bc5b8f36afd3358b2c60c69af9d0eebedb839493b8b1fc6c7e7118e6dc581dd3bc88020efefe554ebf"}], 0x13e8}, 0x4000000) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000003d40)={0x40, 0x1}, 0x10) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000003d80)={0x1, 0x5, 0xeeee8000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000003d80)={0x1, 0x5, 0xeeee8000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000003e80)={&(0x7f0000003dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003e40)={&(0x7f0000003e00)={0x30, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x40000) openat$ptmx(0xffffff9c, &(0x7f0000003ec0), 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004140)=@bpf_lsm={0x1d, 0xd, &(0x7f0000003f00)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x744}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000003f80)='GPL\x00', 0x3cc0, 0x15, &(0x7f0000003fc0)=""/21, 0x0, 0x21, '\x00', r7, 0x1b, r3, 0x8, &(0x7f0000004000)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000004040)={0x5, 0x5, 0xc0000, 0x3}, 0x10, r4, 0x0, 0x0, &(0x7f0000004100)=[r3, 0xffffffffffffffff], 0x0, 0x10, 0x5, @void, @value}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004140)=@bpf_lsm={0x1d, 0xd, &(0x7f0000003f00)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x744}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000003f80)='GPL\x00', 0x3cc0, 0x15, &(0x7f0000003fc0)=""/21, 0x0, 0x21, '\x00', r7, 0x1b, r3, 0x8, &(0x7f0000004000)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000004040)={0x5, 0x5, 0xc0000, 0x3}, 0x10, r4, 0x0, 0x0, &(0x7f0000004100)=[r3, 0xffffffffffffffff], 0x0, 0x10, 0x5, @void, @value}, 0x94) 1.759227965s ago: executing program 3 (id=4551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x68, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close_range(r0, r4, 0x0) 1.492764131s ago: executing program 4 (id=4552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000500020000000900020073797a32000000000c0007800500150009000000050004000000000011000300686173683a6e65742c6e6574000000000500010007"], 0x58}, 0x1, 0x4000000}, 0x0) 1.389471957s ago: executing program 4 (id=4553): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = getpid() syz_pidfd_open(r2, 0x0) socket(0x10, 0x3, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$alg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4004800) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x170, r5, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x6c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x61840435849142fb}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000080) r6 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r6, 0x381b, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 1.289831912s ago: executing program 6 (id=4554): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv2(r2, 0x0, 0x0, 0x2b, 0x0, 0x0) write$tun(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x7d243a6ea807936d, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x3}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r6) r8 = syz_io_uring_setup(0x706a, &(0x7f0000000140)={0x0, 0xfad6, 0x3508, 0x0, 0x0, 0x0, r5}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0xdb4, 0x0, 0x0, 0x0, 0x13) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x0) 768.493187ms ago: executing program 5 (id=4556): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0485510, &(0x7f0000000080)) r1 = socket(0x2, 0x80805, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x3}, 0xfffffffffffffcc1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000c80)=[{0x20, 0xfc, 0x0, 0xfffff00c}]}, 0x8) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064d1, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r4 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) r7 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r7, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r7, 0xab00, r5) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) r8 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x20, 0x961c0) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@bridge_newneigh={0x70, 0x1c, 0x0, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x1, 0x4}, [@NDA_SRC_VNI={0x8, 0xb, 0x2dd}, @NDA_LINK_NETNSID={0x8, 0xa, 0x5}, @NDA_DST_IPV6={0x14, 0x1, @private0}, @NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_SRC_VNI={0x8, 0xb, 0x8}, @NDA_PROBES={0x8, 0x4, 0xf1c}, @NDA_PROBES={0x8, 0x4, 0x3}, @NDA_VNI={0x8, 0x7, 0x2}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4000) syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0xb0601) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)='2', 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 495.137522ms ago: executing program 6 (id=4557): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2009, 0x4}, 0x8, 0x10, &(0x7f0000000080)={0x3, 0x10, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x2, 0x13, 0xf}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000440)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) 400.124259ms ago: executing program 4 (id=4558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x4}]}, 0x3c}, 0x1, 0x2f}, 0x0) 229.55599ms ago: executing program 4 (id=4559): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv2(r2, 0x0, 0x0, 0x2b, 0x0, 0x0) write$tun(r2, &(0x7f0000000480)={@val={0x0, 0x884c}, @val={0x5, 0x80, 0x7800, 0xc4, 0x40, 0xc}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private0}}, 0x42) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv2(r2, 0x0, 0x0, 0x2b, 0x0, 0x0) write$tun(r2, &(0x7f0000000480)={@val={0x0, 0x884c}, @val={0x5, 0x80, 0x7800, 0xc4, 0x40, 0xc}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private0}}, 0x42) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 [ 797.550577][T20221] dump_stack_lvl+0x16c/0x1f0 [ 797.552016][T20221] should_fail_ex+0x497/0x5b0 [ 797.553401][T20221] _copy_from_user+0x2e/0xd0 [ 797.554753][T20221] __sys_bpf+0x215/0x57a0 [ 797.556016][T20221] ? __pfx_lock_release+0x10/0x10 [ 797.557496][T20221] ? __pfx___sys_bpf+0x10/0x10 [ 797.558896][T20221] ? vfs_write+0x306/0x1150 [ 797.560217][T20221] ? __mutex_unlock_slowpath+0x164/0x690 [ 797.561883][T20221] ? fput+0x67/0x440 [ 797.563008][T20221] ? ksys_write+0x1ba/0x250 [ 797.564319][T20221] ? __pfx_ksys_write+0x10/0x10 [ 797.566275][T20221] __ia32_sys_bpf+0x76/0xe0 [ 797.567706][T20221] __do_fast_syscall_32+0x73/0x120 [ 797.569226][T20221] do_fast_syscall_32+0x32/0x80 [ 797.570640][T20221] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 797.572630][T20221] RIP: 0023:0xf7f56579 [ 797.573827][T20221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 797.579476][T20221] RSP: 002b:00000000f508555c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 797.581912][T20221] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 0000000020000800 [ 797.584185][T20221] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 797.586593][T20221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 797.588934][T20221] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 797.591927][T20221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 797.594619][T20221] [ 797.986012][T20233] netlink: 'syz.3.3987': attribute type 1 has an invalid length. [ 798.176654][ C0] net_ratelimit: 5 callbacks suppressed [ 798.176689][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 798.416783][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 798.736769][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 798.742126][T20240] cgroup: fork rejected by pids controller in /syz3 [ 799.046677][ T57] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 799.206870][ T57] usb 6-1: Using ep0 maxpacket: 16 [ 799.210777][ T57] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 799.214550][ T57] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 799.219037][ T57] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 799.226193][ T57] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 799.226687][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 799.230121][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.235519][ T57] usb 6-1: Product: syz [ 799.237484][ T57] usb 6-1: Manufacturer: syz [ 799.239491][ T57] usb 6-1: SerialNumber: syz [ 799.246355][ T57] usb 6-1: config 0 descriptor?? [ 799.250806][ T57] appledisplay 6-1:0.0: Could not find int-in endpoint [ 799.253704][ T57] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 799.413179][T20279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.456711][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 799.478615][ T9] usb 6-1: USB disconnect, device number 63 [ 799.698012][ T9] usb 10-1: USB disconnect, device number 47 [ 799.776741][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 800.057619][T20300] netlink: 'syz.5.3997': attribute type 1 has an invalid length. [ 800.256713][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 800.496643][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 800.825943][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 801.291500][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 801.436920][T20324] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4004'. [ 801.440294][T20324] netlink: 'syz.1.4004': attribute type 1 has an invalid length. [ 801.735589][T20330] ata1.00: invalid command format 189 [ 802.176808][T20337] netlink: 'syz.4.4011': attribute type 1 has an invalid length. [ 802.602184][ T5987] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 802.757673][ T5987] usb 10-1: Using ep0 maxpacket: 32 [ 802.760454][ T5987] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 802.762828][ T5987] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 802.765963][ T5987] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 802.769248][ T5987] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 802.772974][ T5987] usb 10-1: config 0 interface 0 has no altsetting 0 [ 802.783239][T20343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4012'. [ 802.791391][ T5987] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 802.794065][ T5987] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 802.796760][ T5987] usb 10-1: Product: syz [ 802.798007][ T5987] usb 10-1: Manufacturer: syz [ 802.799386][ T5987] usb 10-1: SerialNumber: syz [ 802.801721][ T5987] usb 10-1: config 0 descriptor?? [ 802.804668][ T5987] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 802.808138][ T5987] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 803.170732][T20354] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4015'. [ 803.285221][T20340] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 803.293204][ C1] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 803.295343][ T5988] usb 10-1: USB disconnect, device number 48 [ 803.301310][T20340] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4020'. [ 803.301654][ T5988] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 803.304539][ C0] net_ratelimit: 5 callbacks suppressed [ 803.304553][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 803.312489][T20340] netlink: 'syz.5.4020': attribute type 1 has an invalid length. [ 803.546015][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 803.857453][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 803.979855][T20373] netlink: 'syz.3.4023': attribute type 27 has an invalid length. [ 804.325341][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 804.536947][T20402] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4032'. [ 804.539592][T20402] netlink: 'syz.4.4032': attribute type 1 has an invalid length. [ 804.549798][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 804.861886][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 805.096439][T14229] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 805.262328][T14229] usb 6-1: Using ep0 maxpacket: 16 [ 805.265111][T14229] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 805.268461][T14229] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 805.272313][T14229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 805.275539][T14229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 805.279271][T14229] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 805.284683][T14229] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 805.287443][T14229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.290029][T14229] usb 6-1: Product: syz [ 805.291334][T14229] usb 6-1: Manufacturer: syz [ 805.293159][T14229] usb 6-1: SerialNumber: syz [ 805.296008][T14229] usb 6-1: config 0 descriptor?? [ 805.330730][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 805.546362][T14229] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 805.548064][T14229] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 805.555563][T14229] usb 6-1: USB disconnect, device number 64 [ 805.574666][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 805.887425][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 806.346982][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 806.548332][T20429] netlink: 'syz.1.4041': attribute type 1 has an invalid length. [ 807.417442][T20446] netlink: 'syz.1.4044': attribute type 12 has an invalid length. [ 807.667698][T20448] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 808.374607][T14229] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 808.384572][ C0] net_ratelimit: 5 callbacks suppressed [ 808.384611][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 808.533857][T14229] usb 10-1: Using ep0 maxpacket: 16 [ 808.537493][T14229] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 808.540567][T14229] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 808.546677][T14229] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 808.549883][T14229] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 808.560249][T14229] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 808.565693][T14229] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 808.568377][T14229] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.571052][T14229] usb 10-1: Product: syz [ 808.572259][T14229] usb 10-1: Manufacturer: syz [ 808.573576][T14229] usb 10-1: SerialNumber: syz [ 808.576211][T14229] usb 10-1: config 0 descriptor?? [ 808.629833][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 808.826795][T14229] appledisplay 10-1:0.0: Error while getting initial brightness: -110 [ 808.827325][T14229] appledisplay 10-1:0.0: probe with driver appledisplay failed with error -110 [ 808.838178][T14229] usb 10-1: USB disconnect, device number 49 [ 808.933946][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 809.410192][T20478] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4053'. [ 809.413674][T20478] netlink: 'syz.1.4053': attribute type 1 has an invalid length. [ 809.416827][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 809.650687][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 809.886680][ T9] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 809.965057][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 810.043956][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 810.048891][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.053051][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.056611][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 810.061680][ T9] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 810.065822][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.070562][ T9] usb 10-1: config 0 descriptor?? [ 810.076642][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input26 [ 810.083493][ T5339] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 810.093266][ T5339] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 810.096034][ T5339] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 810.103488][ T5339] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 810.123983][ T5339] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 810.127275][T19568] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 810.130401][ T5339] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 810.137019][ T5339] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 810.143027][ T5339] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 810.277488][ T945] usb 10-1: USB disconnect, device number 50 [ 810.292303][T20489] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 810.436908][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 810.672859][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 810.728941][T20498] netlink: 'syz.3.4060': attribute type 1 has an invalid length. [ 810.977886][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 811.477666][T20508] netlink: 'syz.5.4062': attribute type 1 has an invalid length. [ 811.500951][T20512] tipc: Enabling of bearer rejected, failed to enable media [ 811.503957][T20512] nbd: must specify at least one socket [ 811.853085][T20522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4067'. [ 811.861245][T20522] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 812.415302][ T9] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 812.592741][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 812.595368][ T9] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 812.597759][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 812.600935][ T9] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 812.604212][ T9] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 812.608022][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 812.611428][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 812.614215][ T9] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 812.616612][ T9] usb 6-1: Product: syz [ 812.617834][ T9] usb 6-1: Manufacturer: syz [ 812.619166][ T9] usb 6-1: SerialNumber: syz [ 812.858708][ T57] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 812.965790][ T9] usb 6-1: config 0 descriptor?? [ 812.968772][ T9] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 812.974274][ T9] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 813.017805][ T57] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.020796][ T57] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.023582][ T57] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 813.027880][ T57] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 813.030365][ T57] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.034301][ T57] usb 10-1: config 0 descriptor?? [ 813.262605][T20539] netlink: 'syz.4.4072': attribute type 1 has an invalid length. [ 813.440302][ T57] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 813.443050][ T57] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 813.445594][ T57] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 813.447769][ T57] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 813.449963][ T57] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 813.452452][ T57] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 813.454601][ T57] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 813.456817][ T57] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 813.459073][ T57] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 813.465254][ T57] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 813.467369][ T57] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 813.469499][ T57] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 813.471616][ T57] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 813.473952][ T57] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 813.476087][ T57] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 813.478612][ T57] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 813.491355][ T5988] usb 6-1: USB disconnect, device number 65 [ 813.491450][ C2] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 813.495309][T20544] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4070'. [ 813.498269][T20528] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 813.508653][ T5988] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 813.509345][ C0] net_ratelimit: 6 callbacks suppressed [ 813.509355][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 813.512374][ T57] plantronics 0003:047F:FFFF.0029: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 813.518391][T20544] netlink: 'syz.1.4070': attribute type 1 has an invalid length. [ 813.650950][T14229] usb 10-1: USB disconnect, device number 51 [ 813.736192][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 813.826864][T20551] netlink: 'syz.4.4075': attribute type 1 has an invalid length. [ 814.052167][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 814.417211][ T57] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 814.453177][T20560] netlink: 'syz.3.4079': attribute type 10 has an invalid length. [ 814.515853][T20562] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.535538][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 814.547916][T20568] macvtap0: entered promiscuous mode [ 814.550024][T20568] team0: entered promiscuous mode [ 814.552030][T20568] team_slave_0: entered promiscuous mode [ 814.554916][T20568] team_slave_1: entered promiscuous mode [ 814.558171][T20568] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 814.561057][T20568] team0: Device macvtap0 is already an upper device of the team interface [ 814.566091][T20568] team0: left promiscuous mode [ 814.567629][T20568] team_slave_0: left promiscuous mode [ 814.569346][T20568] team_slave_1: left promiscuous mode [ 814.581661][ T57] usb 10-1: Using ep0 maxpacket: 16 [ 814.586153][ T57] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 814.589099][ T57] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 814.592263][ T57] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 814.595484][ T57] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 814.598627][ T57] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 814.603685][ T57] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 814.606496][ T57] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.608811][ T57] usb 10-1: Product: syz [ 814.609988][ T57] usb 10-1: Manufacturer: syz [ 814.611330][ T57] usb 10-1: SerialNumber: syz [ 814.615892][ T57] usb 10-1: config 0 descriptor?? [ 814.616128][T20562] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.702209][T20562] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.762653][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 814.784206][T20562] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.859200][T20562] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.862545][T20562] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.864732][T20562] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.866814][T20562] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.871270][ T57] appledisplay 10-1:0.0: Error while getting initial brightness: -110 [ 814.872379][ T57] appledisplay 10-1:0.0: probe with driver appledisplay failed with error -110 [ 814.897877][ T57] usb 10-1: USB disconnect, device number 52 [ 815.078587][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 815.562572][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 815.585100][T20582] netlink: 'syz.1.4086': attribute type 1 has an invalid length. [ 815.642492][T20588] FAULT_INJECTION: forcing a failure. [ 815.642492][T20588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.646748][T20588] CPU: 0 UID: 0 PID: 20588 Comm: syz.1.4088 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 815.649852][T20588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 815.653035][T20588] Call Trace: [ 815.654013][T20588] [ 815.654882][T20588] dump_stack_lvl+0x16c/0x1f0 [ 815.656327][T20588] should_fail_ex+0x497/0x5b0 [ 815.657729][T20588] _copy_to_user+0x32/0xd0 [ 815.659069][T20588] simple_read_from_buffer+0xd0/0x160 [ 815.660633][T20588] proc_fail_nth_read+0x198/0x270 [ 815.662097][T20588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 815.663694][T20588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 815.665341][T20588] vfs_read+0x1df/0xbe0 [ 815.666488][T20588] ? __fget_files+0x1fc/0x3a0 [ 815.667831][T20588] ? __pfx___mutex_lock+0x10/0x10 [ 815.669299][T20588] ? __pfx_vfs_read+0x10/0x10 [ 815.670658][T20588] ? __fget_files+0x206/0x3a0 [ 815.672018][T20588] ksys_read+0x12b/0x250 [ 815.673249][T20588] ? __pfx_ksys_read+0x10/0x10 [ 815.674631][T20588] __do_fast_syscall_32+0x73/0x120 [ 815.676178][T20588] do_fast_syscall_32+0x32/0x80 [ 815.678176][T20588] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 815.680728][T20588] RIP: 0023:0xf7fe2579 [ 815.682339][T20588] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 815.687846][T20588] RSP: 002b:00000000f5136590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 815.690237][T20588] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f5136620 [ 815.692488][T20588] RDX: 000000000000000f RSI: 00000000f7473ff4 RDI: 0000000000000000 [ 815.694764][T20588] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 815.697495][T20588] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 815.700676][T20588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 815.703359][T20588] [ 815.789838][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 815.967673][ T9] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 816.115978][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 816.135848][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 816.138836][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 816.142019][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 816.146421][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 816.149842][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 816.153115][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 816.162186][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 816.166726][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.169323][ T9] usb 6-1: Product: syz [ 816.170623][ T9] usb 6-1: Manufacturer: syz [ 816.172040][ T9] usb 6-1: SerialNumber: syz [ 816.174316][ T9] usb 6-1: config 0 descriptor?? [ 816.393320][ T5987] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 816.432481][ T9] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 816.438374][ T9] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 816.444172][ T25] usb 6-1: USB disconnect, device number 66 [ 816.550888][ T5987] usb 9-1: Using ep0 maxpacket: 32 [ 816.557761][ T5987] usb 9-1: config 0 has no interfaces? [ 816.562595][ T5987] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 816.566104][ T5987] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 816.569367][ T5987] usb 9-1: Product: syz [ 816.575251][ T5987] usb 9-1: Manufacturer: syz [ 816.577131][ T5987] usb 9-1: SerialNumber: syz [ 816.580518][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 816.581010][ T5987] usb 9-1: config 0 descriptor?? [ 816.751622][ T5988] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 816.789366][T20601] netlink: 'syz.4.4093': attribute type 1 has an invalid length. [ 816.792306][T20601] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4093'. [ 816.795747][T20601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4093'. [ 816.906906][ T5988] usb 10-1: Using ep0 maxpacket: 16 [ 816.910639][ T5988] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 816.913758][ T5988] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 816.917169][ T5988] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 816.920340][ T5988] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 816.923502][ T5988] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 816.928797][ T5988] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 816.931408][ T5988] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.933716][ T5988] usb 10-1: Product: syz [ 816.934951][ T5988] usb 10-1: Manufacturer: syz [ 816.936310][ T5988] usb 10-1: SerialNumber: syz [ 816.938941][ T5988] usb 10-1: config 0 descriptor?? [ 817.206478][ T5988] appledisplay 10-1:0.0: Error while getting initial brightness: -110 [ 817.207830][ T5988] appledisplay 10-1:0.0: probe with driver appledisplay failed with error -110 [ 817.218420][ T5988] usb 10-1: USB disconnect, device number 53 [ 818.638545][ C0] net_ratelimit: 5 callbacks suppressed [ 818.638562][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 818.876256][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 819.193187][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 819.398051][ T5988] usb 9-1: USB disconnect, device number 70 [ 819.668619][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 819.787433][ T5988] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 819.906432][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 819.946218][ T5988] usb 9-1: Using ep0 maxpacket: 32 [ 819.952013][ T5988] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 819.954882][ T5988] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 819.958578][ T5988] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 819.963927][ T5988] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 819.968187][ T5988] usb 9-1: config 0 interface 0 has no altsetting 0 [ 819.985490][ T5988] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 819.988458][ T5988] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 819.990997][ T5988] usb 9-1: Product: syz [ 819.992498][ T5988] usb 9-1: Manufacturer: syz [ 819.993990][ T5988] usb 9-1: SerialNumber: syz [ 820.003920][ T5988] usb 9-1: config 0 descriptor?? [ 820.018223][ T5988] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 820.026535][ T5988] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 820.223433][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 820.514655][ T5988] usb 9-1: USB disconnect, device number 71 [ 820.514703][ C0] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 820.518508][T20676] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4106'. [ 820.520318][T20656] ldusb 9-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 820.522530][T20676] netlink: 'syz.4.4106': attribute type 1 has an invalid length. [ 820.527119][ T5988] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 820.699275][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 820.937247][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 821.125661][ T2102] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 821.200057][T20704] netlink: 'syz.3.4121': attribute type 27 has an invalid length. [ 821.254439][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 821.274519][ T2102] usb 6-1: Using ep0 maxpacket: 16 [ 821.283089][ T2102] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 821.287699][ T2102] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 821.291196][ T2102] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 821.294752][ T2102] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 821.298089][ T2102] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 821.303406][ T2102] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 821.306938][ T2102] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.309105][ T2102] usb 6-1: Product: syz [ 821.310301][ T2102] usb 6-1: Manufacturer: syz [ 821.311952][ T2102] usb 6-1: SerialNumber: syz [ 821.314423][ T2102] usb 6-1: config 0 descriptor?? [ 821.572337][ T2102] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 821.576664][ T2102] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 821.582853][ T2102] usb 6-1: USB disconnect, device number 67 [ 821.730624][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 822.796602][T20737] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4130'. [ 822.802686][T20735] netlink: 'syz.1.4128': attribute type 1 has an invalid length. [ 822.985768][T20745] tmpfs: Unknown parameter 'grpquota_i~od:ôŠ?D@˽ éAšWe_hart'¢üit' [ 823.149710][ T25] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 823.278844][T20762] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 823.294040][T20762] FAULT_INJECTION: forcing a failure. [ 823.294040][T20762] name failslab, interval 1, probability 0, space 0, times 0 [ 823.313873][T20762] CPU: 2 UID: 0 PID: 20762 Comm: syz.4.4141 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 823.317008][T20762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 823.320135][T20762] Call Trace: [ 823.321270][T20762] [ 823.322461][T20762] dump_stack_lvl+0x16c/0x1f0 [ 823.324399][T20762] should_fail_ex+0x497/0x5b0 [ 823.325810][T20762] should_failslab+0xc2/0x120 [ 823.327211][T20762] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 823.328899][T20762] ? __alloc_skb+0x2b3/0x380 [ 823.330251][T20762] __alloc_skb+0x2b3/0x380 [ 823.331855][T20762] ? __pfx___alloc_skb+0x10/0x10 [ 823.333870][T20762] ? ida_alloc_range+0x5bb/0x820 [ 823.335384][T20762] ? apparmor_sk_clone_security+0x380/0x3d0 [ 823.337125][T20762] ? __pfx_ida_alloc_range+0x10/0x10 [ 823.338650][T20762] create_monitor_ctrl_open+0x17a/0x7f0 [ 823.340241][T20762] ? __pfx_create_monitor_ctrl_open+0x10/0x10 [ 823.342469][T20762] ? kvm_vcpu_write_tsc_offset.cold+0x8/0x2a [ 823.344679][T20762] ? security_capable+0x7e/0x260 [ 823.346122][T20762] hci_sock_ioctl+0x42c/0x820 [ 823.347510][T20762] ? lockdep_hardirqs_on+0x7c/0x110 [ 823.349032][T20762] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 823.350545][T20762] hci_sock_compat_ioctl+0x43/0x80 [ 823.352097][T20762] compat_sock_ioctl+0x17b/0x7e0 [ 823.353551][T20762] ? __pfx_hci_sock_compat_ioctl+0x10/0x10 [ 823.355247][T20762] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 823.356849][T20762] ? __fget_files+0x206/0x3a0 [ 823.358225][T20762] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 823.359799][T20762] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 823.361559][T20762] __do_fast_syscall_32+0x73/0x120 [ 823.363595][T20762] do_fast_syscall_32+0x32/0x80 [ 823.365200][T20762] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 823.367052][T20762] RIP: 0023:0xf7f66579 [ 823.368238][T20762] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 823.373772][T20762] RSP: 002b:00000000f509555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 823.376179][T20762] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000400448ca [ 823.378486][T20762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 823.381423][T20762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 823.383730][T20762] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 823.385977][T20762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 823.388265][T20762] [ 823.389272][ C2] vkms_vblank_simulate: vblank timer overrun [ 823.395024][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 823.404621][ T25] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 823.407907][ T25] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 823.411359][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 823.415277][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 823.422876][ T25] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 823.440082][ T25] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 823.442881][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.445878][ T25] usb 10-1: Product: syz [ 823.447344][ T25] usb 10-1: Manufacturer: syz [ 823.449020][ T25] usb 10-1: SerialNumber: syz [ 823.451657][ T25] usb 10-1: config 0 descriptor?? [ 823.542071][T20768] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4142'. [ 823.545618][T20768] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4142'. [ 823.705589][ T25] appledisplay 10-1:0.0: Error while getting initial brightness: -110 [ 823.706947][ T25] appledisplay 10-1:0.0: probe with driver appledisplay failed with error -110 [ 823.794889][ C0] net_ratelimit: 6 callbacks suppressed [ 823.794938][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 823.866893][ T2102] usb 10-1: USB disconnect, device number 54 [ 824.033261][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 824.350838][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 824.645233][T20777] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 824.827918][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 825.066044][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 825.383937][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 825.528577][T20798] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 825.722570][ T6007] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 825.725446][T20805] siw: device registration error -23 [ 825.741957][T20805] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 825.870874][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 825.900826][ T6007] usb 10-1: Using ep0 maxpacket: 32 [ 825.921463][ T6007] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 825.924399][ T6007] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 825.942375][ T6007] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 825.946806][ T6007] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 825.981609][ T6007] usb 10-1: config 0 interface 0 has no altsetting 0 [ 825.989756][ T6007] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 825.992549][ T6007] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 825.995201][ T6007] usb 10-1: Product: syz [ 825.996617][ T6007] usb 10-1: Manufacturer: syz [ 825.998159][ T6007] usb 10-1: SerialNumber: syz [ 826.001568][ T6007] usb 10-1: config 0 descriptor?? [ 826.006858][ T6007] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 826.010995][ T6007] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 826.030192][ T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 826.099475][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 826.179195][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 826.191084][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 826.196730][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 826.216591][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 826.220015][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 826.223391][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 826.230851][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 826.233781][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.236202][ T9] usb 6-1: Product: syz [ 826.237660][ T9] usb 6-1: Manufacturer: syz [ 826.239190][ T9] usb 6-1: SerialNumber: syz [ 826.242961][ T9] usb 6-1: config 0 descriptor?? [ 826.417550][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 826.517504][ T9] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 826.526054][ T9] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 826.547164][ T5988] usb 6-1: USB disconnect, device number 68 [ 826.682684][T20797] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 826.682763][ T945] usb 10-1: USB disconnect, device number 55 [ 826.684829][ C2] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 826.688838][ T945] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 826.691669][T20797] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4151'. [ 826.694302][T20797] netlink: 'syz.5.4151': attribute type 1 has an invalid length. [ 826.894746][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 828.764900][T20864] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 828.973311][ C0] net_ratelimit: 7 callbacks suppressed [ 828.973324][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 829.005307][T20867] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4170'. [ 829.007980][T20867] netlink: 'syz.4.4170': attribute type 1 has an invalid length. [ 829.202165][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 829.530488][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 829.702299][T20881] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4174'. [ 829.747561][T20882] 9pnet_fd: Insufficient options for proto=fd [ 829.998277][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 830.071017][T20884] sch_fq: defrate 0 ignored. [ 830.157674][ T5960] Bluetooth: hci1: command 0x041b tx timeout [ 830.237116][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 830.420084][ T40] audit: type=1326 audit(1735261781.044:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20876 comm="syz.1.4173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7fc00000 [ 830.565591][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 831.033494][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 831.272442][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 831.485964][T20909] netlink: 'syz.1.4180': attribute type 39 has an invalid length. [ 831.589760][T20911] block device autoloading is deprecated and will be removed. [ 831.600970][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 831.874413][T20916] netlink: 'syz.1.4183': attribute type 10 has an invalid length. [ 831.961540][T20919] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4184'. [ 831.968348][T20919] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4184'. [ 832.079021][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 832.673929][T20934] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4189'. [ 832.676607][T20934] netlink: 'syz.1.4189': attribute type 1 has an invalid length. [ 832.914095][T20945] netlink: 'syz.5.4192': attribute type 27 has an invalid length. [ 832.919307][T20945] ip6tnl1: left promiscuous mode [ 833.214458][ T25] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 833.373817][ T25] usb 9-1: Using ep0 maxpacket: 32 [ 833.376505][ T25] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 833.378889][ T25] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 833.382058][ T25] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 833.385780][ T25] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 833.389474][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 833.392866][ T25] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 833.396625][ T25] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 833.399113][ T25] usb 9-1: Product: syz [ 833.400412][ T25] usb 9-1: Manufacturer: syz [ 833.401811][ T25] usb 9-1: SerialNumber: syz [ 833.405113][ T25] usb 9-1: config 0 descriptor?? [ 833.407799][ T25] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 833.410882][ T25] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 833.592969][ T6007] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 833.742437][ T6007] usb 6-1: Using ep0 maxpacket: 32 [ 833.745189][ T6007] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 833.747536][ T6007] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 833.750656][ T6007] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 833.754050][ T6007] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 833.757803][ T6007] usb 6-1: config 0 interface 0 has no altsetting 0 [ 833.761531][ T6007] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 833.764266][ T6007] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 833.766837][ T6007] usb 6-1: Product: syz [ 833.768402][ T6007] usb 6-1: Manufacturer: syz [ 833.769830][ T6007] usb 6-1: SerialNumber: syz [ 833.772032][ T6007] usb 6-1: config 0 descriptor?? [ 833.775649][ T6007] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 833.778772][ T6007] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 833.894843][T20947] ldusb 9-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 833.894978][ T945] usb 9-1: USB disconnect, device number 72 [ 833.896967][ C3] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 833.903690][ T945] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 833.907243][T20974] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4194'. [ 833.911846][T20974] netlink: 'syz.4.4194': attribute type 1 has an invalid length. [ 834.147906][ C0] net_ratelimit: 6 callbacks suppressed [ 834.147919][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 834.389977][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 834.475563][ T6007] usb 6-1: USB disconnect, device number 69 [ 834.486393][T20980] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4198'. [ 834.489913][T20980] netlink: 'syz.1.4198': attribute type 1 has an invalid length. [ 834.494462][ T6007] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 834.699147][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 834.919955][ T40] audit: type=1326 audit(1735261785.552:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20986 comm="syz.3.4203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 834.928849][ T40] audit: type=1326 audit(1735261785.552:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20986 comm="syz.3.4203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 834.936668][ T40] audit: type=1326 audit(1735261785.573:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20986 comm="syz.3.4203" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 834.944586][ T40] audit: type=1326 audit(1735261785.573:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20986 comm="syz.3.4203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 834.952486][ T40] audit: type=1326 audit(1735261785.573:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20986 comm="syz.3.4203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 834.959947][ T40] audit: type=1326 audit(1735261785.593:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20986 comm="syz.3.4203" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 834.967408][ T40] audit: type=1326 audit(1735261785.593:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20986 comm="syz.3.4203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 834.975316][ T40] audit: type=1326 audit(1735261785.593:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20986 comm="syz.3.4203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 834.983156][ T40] audit: type=1326 audit(1735261785.593:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20986 comm="syz.3.4203" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 835.131902][T20997] sg_write: data in/out 196608/4 bytes for SCSI command 0xdb-- guessing data in; [ 835.131902][T20997] program syz.5.4207 not setting count and/or reply_len properly [ 835.177304][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 835.416463][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 835.655787][ T6007] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 835.735457][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 835.815250][ T6007] usb 10-1: Using ep0 maxpacket: 32 [ 835.819031][ T6007] usb 10-1: config 0 has no interfaces? [ 835.822381][ T6007] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 835.825162][ T6007] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 835.827574][ T6007] usb 10-1: Product: syz [ 835.828877][ T6007] usb 10-1: Manufacturer: syz [ 835.830221][ T6007] usb 10-1: SerialNumber: syz [ 835.832531][ T6007] usb 10-1: config 0 descriptor?? [ 836.051696][ T945] usb 10-1: USB disconnect, device number 56 [ 836.213967][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 836.453085][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 836.772085][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 836.912169][T21022] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 837.039280][T21027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4215'. [ 837.584805][T21033] overlayfs: missing 'lowerdir' [ 838.048368][ T25] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 838.189020][T21050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4223'. [ 838.207909][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 838.211726][ T25] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 838.214203][ T25] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 838.217504][ T25] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 838.220990][ T25] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 838.224828][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 838.228408][ T25] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 838.232192][ T25] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 838.237623][ T25] usb 6-1: Product: syz [ 838.238914][ T25] usb 6-1: Manufacturer: syz [ 838.240203][ T25] usb 6-1: SerialNumber: syz [ 838.242420][ T25] usb 6-1: config 0 descriptor?? [ 838.245635][ T25] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 838.250198][ T25] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 838.342492][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 838.342503][ T40] audit: type=1326 audit(1735261788.993:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21060 comm="syz.3.4228" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 838.351702][ T40] audit: type=1326 audit(1735261788.993:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21060 comm="syz.3.4228" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 838.359667][ T40] audit: type=1326 audit(1735261788.993:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21060 comm="syz.3.4228" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 838.366255][ T40] audit: type=1326 audit(1735261788.993:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21060 comm="syz.3.4228" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 838.374448][ T40] audit: type=1326 audit(1735261788.993:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21060 comm="syz.3.4228" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 838.380612][ T40] audit: type=1326 audit(1735261788.993:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21060 comm="syz.3.4228" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 838.386895][ T40] audit: type=1326 audit(1735261788.993:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21060 comm="syz.3.4228" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 838.393058][ T40] audit: type=1326 audit(1735261788.993:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21060 comm="syz.3.4228" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 838.399334][ T40] audit: type=1326 audit(1735261788.993:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21060 comm="syz.3.4228" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 838.405389][ T40] audit: type=1326 audit(1735261788.993:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21060 comm="syz.3.4228" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf715e579 code=0x7ffc0000 [ 838.735922][T21042] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 838.737668][ T945] usb 6-1: USB disconnect, device number 70 [ 838.738018][ C2] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 838.746193][ T945] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 838.749348][T21042] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4218'. [ 838.751947][T21042] netlink: 'syz.1.4218': attribute type 1 has an invalid length. [ 838.763264][T21077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4232'. [ 839.324844][ C0] net_ratelimit: 6 callbacks suppressed [ 839.324858][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 839.564326][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 839.893405][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 840.372176][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 840.611652][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 840.920940][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 841.409812][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 841.639245][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 841.958595][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 842.437527][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 842.509825][T21165] netlink: 'syz.3.4256': attribute type 1 has an invalid length. [ 842.557824][T21162] netlink: 'syz.4.4253': attribute type 1 has an invalid length. [ 842.926577][ T5987] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 843.076192][ T5987] usb 10-1: Using ep0 maxpacket: 32 [ 843.079010][ T5987] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 843.081496][ T5987] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 843.091435][ T5987] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 843.094749][ T5987] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 843.102617][ T5987] usb 10-1: config 0 interface 0 has no altsetting 0 [ 843.118922][T21177] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 843.122529][ T5987] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 843.125252][ T5987] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 843.127759][ T5987] usb 10-1: Product: syz [ 843.130154][ T5987] usb 10-1: Manufacturer: syz [ 843.133551][ T5987] usb 10-1: SerialNumber: syz [ 843.146216][ T5987] usb 10-1: config 0 descriptor?? [ 843.149542][ T5987] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 843.154598][ T5987] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 843.303903][T21181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4265'. [ 843.792706][T21173] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 843.792955][ T945] usb 10-1: USB disconnect, device number 57 [ 843.794871][ C0] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 843.800122][ T945] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 843.808633][T21173] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4262'. [ 843.811264][T21173] netlink: 'syz.5.4262': attribute type 1 has an invalid length. [ 844.363681][ T25] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 844.523347][ C0] net_ratelimit: 6 callbacks suppressed [ 844.523366][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 844.524676][ T25] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 844.530740][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.534050][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.536914][ T25] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 844.541551][ T25] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 844.544425][ T25] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 844.546849][ T25] usb 9-1: Manufacturer: syz [ 844.549460][ T25] usb 9-1: config 0 descriptor?? [ 844.752913][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 844.958532][ T25] appleir 0003:05AC:8243.002A: unknown main item tag 0x0 [ 844.960968][ T25] appleir 0003:05AC:8243.002A: No inputs registered, leaving [ 844.965126][ T25] appleir 0003:05AC:8243.002A: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 845.072314][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 845.215462][ T25] usb 9-1: USB disconnect, device number 73 [ 845.561444][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 845.791545][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 845.830998][T21220] XFS (nullb0): Invalid superblock magic number [ 846.110554][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 846.589766][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 846.829385][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 847.148927][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 847.256339][T21247] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 847.573318][T21260] overlayfs: overlapping lowerdir path [ 847.638035][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 847.706932][T21266] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4286'. [ 847.710476][T21266] netlink: 'syz.5.4286': attribute type 1 has an invalid length. [ 847.857802][ T6007] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 848.017633][ T6007] usb 9-1: Using ep0 maxpacket: 32 [ 848.021315][ T6007] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 848.023662][ T6007] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 848.026877][ T6007] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 848.030588][ T6007] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 848.034371][ T6007] usb 9-1: config 0 interface 0 has no altsetting 0 [ 848.038637][ T6007] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 848.042006][ T6007] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 848.044367][ T6007] usb 9-1: Product: syz [ 848.045564][ T6007] usb 9-1: Manufacturer: syz [ 848.046919][ T6007] usb 9-1: SerialNumber: syz [ 848.049635][ T6007] usb 9-1: config 0 descriptor?? [ 848.052678][ T6007] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 848.056019][ T6007] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 848.315078][T21272] netlink: 'syz.3.4290': attribute type 1 has an invalid length. [ 848.573682][T21265] ldusb 9-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 848.576491][T21265] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4289'. [ 848.578510][ T5988] usb 9-1: USB disconnect, device number 74 [ 848.579148][ C2] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 848.584606][T21265] netlink: 'syz.4.4289': attribute type 1 has an invalid length. [ 848.607714][ T5988] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 849.705182][ C0] net_ratelimit: 5 callbacks suppressed [ 849.705196][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 849.944834][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 850.264409][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 850.753823][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 850.983531][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 851.303123][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 851.405475][T21307] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 851.782537][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 852.032358][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 852.341966][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 852.343987][ T5987] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 852.521737][ T5987] usb 10-1: Using ep0 maxpacket: 16 [ 852.524565][ T5987] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 852.527769][ T5987] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 852.531237][ T5987] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 852.536085][ T5987] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 852.539357][ T5987] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 852.544687][ T5987] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 852.547378][ T5987] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.549752][ T5987] usb 10-1: Product: syz [ 852.551012][ T5987] usb 10-1: Manufacturer: syz [ 852.552519][ T5987] usb 10-1: SerialNumber: syz [ 852.554899][ T5987] usb 10-1: config 0 descriptor?? [ 852.731653][ T6007] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 852.761087][ T5987] appledisplay 10-1:0.0: Error while getting initial brightness: -71 [ 852.764098][ T5987] appledisplay 10-1:0.0: probe with driver appledisplay failed with error -71 [ 852.768721][ T5987] usb 10-1: USB disconnect, device number 58 [ 852.831433][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 852.881521][ T6007] usb 9-1: Using ep0 maxpacket: 32 [ 852.884876][ T6007] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 852.887851][ T6007] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 852.892478][ T6007] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 852.896619][ T6007] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 852.901779][ T6007] usb 9-1: config 0 interface 0 has no altsetting 0 [ 852.906234][ T6007] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 852.909462][ T6007] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 852.912790][ T6007] usb 9-1: Product: syz [ 852.914384][ T6007] usb 9-1: Manufacturer: syz [ 852.916194][ T6007] usb 9-1: SerialNumber: syz [ 852.919328][ T6007] usb 9-1: config 0 descriptor?? [ 852.924222][ T6007] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 852.928583][ T6007] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 853.424659][T21341] netlink: 'syz.5.4307': attribute type 10 has an invalid length. [ 853.427351][T21341] team0: Device hsr_slave_0 failed to register rx_handler [ 853.429392][T21339] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4303'. [ 853.437755][T21339] netlink: 'syz.4.4303': attribute type 1 has an invalid length. [ 853.440809][ T945] usb 9-1: USB disconnect, device number 75 [ 853.440876][ C0] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 853.460779][T21325] ldusb 9-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 853.465132][ T945] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 854.234884][T21352] overlayfs: failed to clone upperpath [ 854.909330][ C0] net_ratelimit: 5 callbacks suppressed [ 854.909380][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 855.148979][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 855.458739][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 855.938367][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 856.178187][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 856.497816][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 856.525987][T21389] nbd: must specify a device to reconfigure [ 856.987416][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 857.160090][T21399] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 857.201600][T21399] bridge_slave_1: left allmulticast mode [ 857.204074][T21399] bridge_slave_1: left promiscuous mode [ 857.206682][T21399] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.210199][T21399] bridge_slave_0: left allmulticast mode [ 857.211943][T21399] bridge_slave_0: left promiscuous mode [ 857.213837][T21399] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.227651][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 857.278659][T21394] netlink: 'syz.4.4322': attribute type 1 has an invalid length. [ 857.537037][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 857.541091][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 857.541141][ T40] audit: type=1326 audit(1735261808.224:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21408 comm="syz.5.4327" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x0 [ 857.886929][T21420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4328'. [ 858.450173][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4333'. [ 858.573067][T21431] hsr_slave_1 (unregistering): left promiscuous mode [ 858.774239][ T5960] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 858.793583][ T5960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 858.799501][ T5960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 858.803224][ T5960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 858.807409][ T5960] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 858.816886][ T5960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 859.019943][ T99] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.061698][T21436] chnl_net:caif_netlink_parms(): no params data found [ 859.127306][ T99] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.265426][T21436] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.274503][T21436] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.280910][T21436] bridge_slave_0: entered allmulticast mode [ 859.287896][T21436] bridge_slave_0: entered promiscuous mode [ 859.293286][ T99] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.305673][T21436] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.307900][T21436] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.325662][T21436] bridge_slave_1: entered allmulticast mode [ 859.327847][T21436] bridge_slave_1: entered promiscuous mode [ 859.363078][ T99] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.449490][T21436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 859.453904][T21436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 859.650884][T21436] team0: Port device team_slave_0 added [ 859.654904][T21436] team0: Port device team_slave_1 added [ 859.706467][T21436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.708516][T21436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.724512][T21436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.743347][T21436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.746009][T21436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.754422][T21436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.800237][T21470] netlink: 'syz.4.4343': attribute type 27 has an invalid length. [ 859.859924][ T99] bridge_slave_1: left allmulticast mode [ 859.861597][ T99] bridge_slave_1: left promiscuous mode [ 859.865223][ T99] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.880354][ T99] bridge_slave_0: left allmulticast mode [ 859.882118][ T99] bridge_slave_0: left promiscuous mode [ 859.883795][ T99] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.105009][ C0] net_ratelimit: 6 callbacks suppressed [ 860.105020][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 860.344887][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 860.654723][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 860.817590][ T99] bond0 (unregistering): left promiscuous mode [ 860.820212][ T99] bond_slave_0: left promiscuous mode [ 860.822551][ T99] bond_slave_1: left promiscuous mode [ 860.827363][ T99] mac80211_hwsim hwsim22 wlan1: left promiscuous mode [ 860.836404][ T99] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.840853][ T99] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.846876][ T99] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 860.849855][ T99] bond0 (unregistering): Released all slaves [ 860.861358][T21436] hsr_slave_0: entered promiscuous mode [ 860.865872][T21436] hsr_slave_1: entered promiscuous mode [ 860.870408][T21436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 860.873476][T21436] Cannot create hsr debugfs directory [ 860.894771][T16256] Bluetooth: hci2: command tx timeout [ 860.940991][ T99] tipc: Disabling bearer [ 860.942998][ T99] tipc: Left network mode [ 861.134468][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 861.249393][T21436] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 861.255572][T21436] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 861.271145][T21436] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 861.315073][ T99] batadv0: left promiscuous mode [ 861.329634][ T99] hsr_slave_0: left promiscuous mode [ 861.332596][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.347820][ T99] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.351378][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.364626][ T99] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.379698][T21496] overlayfs: failed to verify upper root origin [ 861.454608][ T99] veth1_macvtap: left promiscuous mode [ 861.456617][ T99] veth0_macvtap: left promiscuous mode [ 861.458417][ T99] veth1_vlan: left promiscuous mode [ 861.460405][ T99] veth0_vlan: left promiscuous mode [ 861.621948][ T99] pim6reg (unregistering): left allmulticast mode [ 861.703987][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 862.173698][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 862.743382][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 862.973278][T16256] Bluetooth: hci2: command 0x041b tx timeout [ 863.213119][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 863.782823][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 864.252535][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 864.262772][T21520] autofs4:pid:21520:validate_dev_ioctl: path string terminator missing for cmd(0xc0189374) [ 865.052141][T16256] Bluetooth: hci2: command 0x041b tx timeout [ 865.292063][ C0] net_ratelimit: 1 callbacks suppressed [ 865.292080][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 865.587793][T21436] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 865.591470][T21492] netlink: 'syz.3.4348': attribute type 1 has an invalid length. [ 865.651882][T21523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 865.754813][T21436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.814991][T21436] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.825197][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.827273][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.830157][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.832294][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.851800][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 866.102930][ T99] IPVS: stop unused estimator thread 0... [ 866.331545][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 866.380806][T21436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.891311][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 866.927985][T21436] veth0_vlan: entered promiscuous mode [ 866.945988][T21436] veth1_vlan: entered promiscuous mode [ 866.978295][T21436] veth0_macvtap: entered promiscuous mode [ 867.010955][T21436] veth1_macvtap: entered promiscuous mode [ 867.025271][T21436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.028283][T21436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.031045][T21436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.051180][T21436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.055995][T21436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.082387][T21436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.085368][T21436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.088148][T21436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.131247][T16256] Bluetooth: hci2: command 0x041b tx timeout [ 867.133079][T21436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.136897][T21436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.152157][T21436] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.155066][T21436] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.158157][T21436] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.260523][T21436] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.371079][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 867.809643][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.835268][T12648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.835292][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.837597][T12648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.930892][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 868.058175][T21549] netlink: 'syz.5.4363': attribute type 1 has an invalid length. [ 868.410678][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 868.420761][T21585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4334'. [ 868.948179][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 868.961500][ T5960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 868.966558][ T5960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 868.969575][ T5960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 868.980564][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 868.983034][ T5960] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 868.985394][ T5960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 869.240355][ T5960] Bluetooth: hci2: command 0x041b tx timeout [ 869.450302][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 869.936073][T21601] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 870.178938][T21593] chnl_net:caif_netlink_parms(): no params data found [ 870.479879][T14229] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 870.489915][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 870.552214][T21618] netlink: 260 bytes leftover after parsing attributes in process `syz.6.4379'. [ 870.562700][T21593] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.564810][T21593] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.577338][T21593] bridge_slave_0: entered allmulticast mode [ 870.588229][T21593] bridge_slave_0: entered promiscuous mode [ 870.592440][T21593] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.595277][T21593] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.608392][T21593] bridge_slave_1: entered allmulticast mode [ 870.610726][T21593] bridge_slave_1: entered promiscuous mode [ 870.740528][T21593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 870.744334][T21593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.752057][T14229] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.755105][T14229] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.757799][T14229] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 870.772300][T14229] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 870.774919][T14229] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.779790][T14229] usb 9-1: config 0 descriptor?? [ 870.835580][T21593] team0: Port device team_slave_0 added [ 870.840779][T21593] team0: Port device team_slave_1 added [ 871.049715][T16256] Bluetooth: hci3: command tx timeout [ 871.196183][T14229] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 871.198343][T14229] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 871.201288][T14229] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 871.210808][T14229] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 871.212947][T14229] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 871.215059][T14229] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 871.217196][T14229] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 871.239846][T14229] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 871.242011][T14229] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 871.244209][T14229] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 871.246335][T14229] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 871.248445][T14229] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 871.261633][T14229] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 871.263791][T14229] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 871.289211][T14229] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 871.291595][T14229] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 871.310089][T14229] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 871.529575][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 871.873606][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 871.900684][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 871.929707][ T12] bond0 (unregistering): Released all slaves [ 872.143508][T21593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.145593][T21593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.183300][T21593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.187291][ T12] tipc: Disabling bearer [ 872.187477][ T25] usb 9-1: USB disconnect, device number 76 [ 872.188765][ T12] tipc: Left network mode [ 872.194119][T21593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.196081][T21593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.223435][T21593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.569240][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 872.652875][T21593] hsr_slave_0: entered promiscuous mode [ 872.669324][T21593] hsr_slave_1: entered promiscuous mode [ 872.679235][T21593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 872.681471][T21593] Cannot create hsr debugfs directory [ 872.820879][ T12] hsr_slave_0: left promiscuous mode [ 872.835198][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.137373][T16256] Bluetooth: hci3: command 0x041b tx timeout [ 873.349008][T14229] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 873.544305][T14229] usb 9-1: Using ep0 maxpacket: 16 [ 873.569186][T14229] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 873.572332][T14229] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 873.575775][T14229] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 873.598888][T14229] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 873.602107][T14229] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 873.608963][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 873.648925][T14229] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 873.651594][T14229] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.653918][T14229] usb 9-1: Product: syz [ 873.655149][T14229] usb 9-1: Manufacturer: syz [ 873.656591][T14229] usb 9-1: SerialNumber: syz [ 873.658966][T14229] usb 9-1: config 0 descriptor?? [ 873.929141][T14229] appledisplay 9-1:0.0: Error while getting initial brightness: -110 [ 873.939129][T14229] appledisplay 9-1:0.0: probe with driver appledisplay failed with error -110 [ 874.658652][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 875.208490][T16256] Bluetooth: hci3: command 0x041b tx timeout [ 875.688362][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 876.601744][T21645] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4385'. [ 876.738105][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 877.010447][ T12] team0 (unregistering): Port device team_slave_1 removed [ 877.297979][T16256] Bluetooth: hci3: command 0x041b tx timeout [ 877.543033][ T12] team0 (unregistering): Port device team_slave_0 removed [ 877.767888][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 878.010819][T21650] netlink: 260 bytes leftover after parsing attributes in process `syz.6.4387'. [ 878.807663][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 879.135435][T21658] syz.6.4389: attempt to access beyond end of device [ 879.135435][T21658] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 879.160784][T21658] XFS (nbd6): SB validate failed with error -5. [ 879.382219][T16256] Bluetooth: hci3: command 0x041b tx timeout [ 879.847832][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 880.887278][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 880.967251][T16256] Bluetooth: hci2: command 0x041b tx timeout [ 881.175417][T21638] netlink: 'syz.5.4383': attribute type 1 has an invalid length. [ 881.286990][T14229] usb 9-1: USB disconnect, device number 77 [ 881.927095][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 882.801606][ T12] IPVS: stop unused estimator thread 0... [ 882.966926][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 883.018864][T21593] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 883.079410][T21593] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 883.085134][T21593] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 883.104597][T21593] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 883.185354][T21684] bridge_slave_0: left allmulticast mode [ 883.187133][T21684] bridge_slave_0: left promiscuous mode [ 883.189076][T21684] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.218935][T21684] bridge_slave_1: left allmulticast mode [ 883.220642][T21684] bridge_slave_1: left promiscuous mode [ 883.222412][T21684] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.226383][T21684] bond0: (slave bond_slave_0): Releasing backup interface [ 883.231291][T21684] bond0: (slave bond_slave_1): Releasing backup interface [ 883.254404][T21684] team0: Port device team_slave_0 removed [ 883.300071][T21684] team0: Port device team_slave_1 removed [ 883.302096][T21684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 883.304122][T21684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.317568][T21684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.319753][T21684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.494109][T21593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.547981][T21593] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.588313][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.590970][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.628044][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.630073][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.666774][ T25] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 883.816816][ T25] usb 10-1: Using ep0 maxpacket: 32 [ 883.823964][ T25] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 883.826226][ T25] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 883.836835][ T25] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 883.840127][ T25] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 883.864333][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 883.967165][ T25] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 883.973211][ T25] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 884.006807][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 884.026903][ T25] usb 10-1: Product: syz [ 884.028210][ T25] usb 10-1: Manufacturer: syz [ 884.029565][ T25] usb 10-1: SerialNumber: syz [ 884.034160][ T25] usb 10-1: config 0 descriptor?? [ 884.047635][ T25] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 884.067457][ T25] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 884.126991][T21688] netlink: 'syz.4.4396': attribute type 1 has an invalid length. [ 884.167904][T21593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.229015][T21593] veth0_vlan: entered promiscuous mode [ 884.232988][T21593] veth1_vlan: entered promiscuous mode [ 884.294814][T21593] veth0_macvtap: entered promiscuous mode [ 884.307086][T21593] veth1_macvtap: entered promiscuous mode [ 884.336696][ T25] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 884.342858][T21593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.345841][T21593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.386668][T21593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.389689][T21593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.393178][T21593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.417916][T21593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.420922][T21593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.423733][T21593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.446722][T21593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.450251][T21593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.470488][T21593] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.473179][T21593] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.475689][T21593] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.508770][T21593] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.546674][ T25] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.549882][ T25] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.552715][ T25] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 884.556434][ T25] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 884.581720][ T25] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.593838][ T25] usb 11-1: config 0 descriptor?? [ 884.656911][T12647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.659187][T12647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.741974][ T30] usb 10-1: USB disconnect, device number 59 [ 884.742113][ C3] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 884.742605][T21686] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 884.747714][ T30] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 884.752423][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.754746][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.771114][T21686] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4395'. [ 884.773759][T21686] netlink: 'syz.5.4395': attribute type 1 has an invalid length. [ 885.003611][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.005814][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.026336][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.028478][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.030482][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.032436][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.046614][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.046614][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 885.050730][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.052817][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.054877][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.096604][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.098743][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.100896][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.102998][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.105122][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.119443][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.121639][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.123742][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.125916][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.145539][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.156849][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.159005][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.161207][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.163302][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.165401][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.174490][T21709] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.206601][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.212569][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.214715][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.236559][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.238689][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.240831][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.243083][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.245569][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.276682][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.278823][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.280935][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.283023][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.285167][ T25] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 885.356795][ T25] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 885.361829][ T25] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 886.086711][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 886.116768][ T945] usb 11-1: USB disconnect, device number 2 [ 886.746474][ T5987] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 886.869627][T21709] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.916413][ T5987] usb 10-1: Using ep0 maxpacket: 32 [ 886.936858][ T5987] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 886.940528][ T5987] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 886.944767][ T5987] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 886.958249][T21732] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 886.984613][ T5987] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 886.999290][ T5987] usb 10-1: config 0 interface 0 has no altsetting 0 [ 887.027521][T21726] netlink: 'syz.4.4403': attribute type 1 has an invalid length. [ 887.045715][ T5987] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 887.049310][ T5987] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 887.052390][ T5987] usb 10-1: Product: syz [ 887.053672][ T5987] usb 10-1: Manufacturer: syz [ 887.055096][ T5987] usb 10-1: SerialNumber: syz [ 887.086959][ T5987] usb 10-1: config 0 descriptor?? [ 887.100568][ T5987] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 887.119959][ T5987] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 887.126393][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 887.526333][ T5987] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 887.696279][ T5987] usb 9-1: Using ep0 maxpacket: 32 [ 887.728496][ T5987] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 887.731335][ T5987] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 887.734456][ T5987] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 887.756297][ T5987] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 887.770292][ T5987] usb 9-1: config 0 interface 0 has no altsetting 0 [ 887.780958][ T5987] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 887.784334][ T5987] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 887.810868][ T5987] usb 9-1: Product: syz [ 887.812438][ T5987] usb 9-1: Manufacturer: syz [ 887.814165][ T5987] usb 9-1: SerialNumber: syz [ 887.831523][ T5987] usb 9-1: config 0 descriptor?? [ 887.836867][ T5987] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 887.861707][ T5987] ldusb 9-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 888.015928][T21728] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 888.017210][ T945] usb 10-1: USB disconnect, device number 60 [ 888.017954][ C1] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 888.018635][ T6007] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 888.024653][T21737] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4404'. [ 888.028235][T21737] netlink: 'syz.5.4404': attribute type 1 has an invalid length. [ 888.031306][ T945] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 888.176214][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 888.178316][ T6007] usb 11-1: Using ep0 maxpacket: 32 [ 888.190508][ T6007] usb 11-1: config 0 has no interfaces? [ 888.218303][ T6007] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 888.221141][ T6007] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 888.223587][ T6007] usb 11-1: Product: syz [ 888.224894][ T6007] usb 11-1: Manufacturer: syz [ 888.234721][ T6007] usb 11-1: SerialNumber: syz [ 888.242307][ T6007] usb 11-1: config 0 descriptor?? [ 888.278034][T21709] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.359162][ T945] usb 9-1: USB disconnect, device number 78 [ 888.361179][T21736] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4406'. [ 888.363759][T21736] netlink: 'syz.4.4406': attribute type 1 has an invalid length. [ 888.386477][ T945] ldusb 9-1:0.0: LD USB Device #1 now disconnected [ 888.410851][T21709] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.589374][T21709] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.617837][T21709] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.625107][T21709] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.677266][T21709] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.206083][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 890.245967][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 890.276290][T21769] bridge_slave_0: left allmulticast mode [ 890.278142][T21769] bridge_slave_0: left promiscuous mode [ 890.279849][T21769] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.283920][T21769] bridge_slave_1: left allmulticast mode [ 890.285624][T21769] bridge_slave_1: left promiscuous mode [ 890.287431][T21769] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.291516][T21769] bond0: (slave bond_slave_0): Releasing backup interface [ 890.300047][T21769] bond0: (slave bond_slave_1): Releasing backup interface [ 890.315364][T21769] team0: Port device team_slave_0 removed [ 890.330379][T21769] team0: Port device team_slave_1 removed [ 890.332454][T21769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.334610][T21769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.369909][T21769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.372352][T21769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.744424][ T5988] usb 11-1: USB disconnect, device number 3 [ 891.285911][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 891.351281][T21772] netlink: 'syz.3.4415': attribute type 1 has an invalid length. [ 891.643121][T21787] netlink: 'syz.6.4418': attribute type 1 has an invalid length. [ 891.948028][ T5988] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 892.126969][ T5988] usb 8-1: Using ep0 maxpacket: 32 [ 892.141829][ T5988] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 892.144330][ T5988] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 892.155817][ T5988] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 892.159210][ T5988] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 892.164004][ T5988] usb 8-1: config 0 interface 0 has no altsetting 0 [ 892.226826][ T5988] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 892.229598][ T5988] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 892.232201][ T5988] usb 8-1: Product: syz [ 892.233501][ T5988] usb 8-1: Manufacturer: syz [ 892.234853][ T5988] usb 8-1: SerialNumber: syz [ 892.267285][ T5988] usb 8-1: config 0 descriptor?? [ 892.272685][ T5988] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 892.287944][ T5988] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 892.325819][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 892.854823][ T945] usb 8-1: USB disconnect, device number 67 [ 892.854927][ C0] ldusb 8-1:0.0: usb_submit_urb failed (-19) [ 892.856806][T21810] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4420'. [ 892.861035][T21810] netlink: 'syz.3.4420': attribute type 1 has an invalid length. [ 892.875942][T21792] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 892.878299][ T945] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 893.295930][ T5988] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 893.315720][ T6016] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 893.365729][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 893.478327][ T5988] usb 9-1: Using ep0 maxpacket: 32 [ 893.485892][ T5988] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 893.488743][ T5988] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 893.490467][ T6016] usb 11-1: Using ep0 maxpacket: 32 [ 893.491874][ T5988] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 893.509189][ T6016] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 893.511409][ T6016] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 893.534864][ T6016] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 893.537925][ T6016] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 893.539196][ T5988] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 893.541824][ T6016] usb 11-1: config 0 interface 0 has no altsetting 0 [ 893.545440][ T5988] usb 9-1: config 0 interface 0 has no altsetting 0 [ 893.576549][ T5988] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 893.579385][ T5988] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 893.580863][ T6016] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 893.581881][ T5988] usb 9-1: Product: syz [ 893.584528][ T6016] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 893.595668][ T5988] usb 9-1: Manufacturer: syz [ 893.597152][ T5988] usb 9-1: SerialNumber: syz [ 893.608932][ T6016] usb 11-1: Product: syz [ 893.610129][ T5988] usb 9-1: config 0 descriptor?? [ 893.610206][ T6016] usb 11-1: Manufacturer: syz [ 893.613159][ T6016] usb 11-1: SerialNumber: syz [ 893.617947][ T5988] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 893.629395][ T6016] usb 11-1: config 0 descriptor?? [ 893.629937][ T5988] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 893.636512][ T6016] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 893.665346][ T6016] ldusb 11-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 894.405668][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 894.572723][ T30] usb 11-1: USB disconnect, device number 4 [ 894.575252][ T30] ldusb 11-1:0.0: LD USB Device #1 now disconnected [ 894.663275][ T5987] usb 9-1: USB disconnect, device number 79 [ 894.664905][ C3] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 894.667365][T21818] ldusb 9-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 894.669586][ T5987] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 894.675659][T21834] netlink: 188 bytes leftover after parsing attributes in process `syz.6.4425'. [ 894.678418][T21834] netlink: 'syz.6.4425': attribute type 1 has an invalid length. [ 894.685600][T21817] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4426'. [ 894.695640][T21817] netlink: 'syz.4.4426': attribute type 1 has an invalid length. [ 895.445553][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 896.068407][T21848] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.323084][T21848] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.354781][T21847] netlink: 'syz.4.4432': attribute type 1 has an invalid length. [ 896.481482][T21848] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.485764][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 896.543711][T21831] netlink: 'syz.5.4429': attribute type 1 has an invalid length. [ 896.793855][T21848] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.149082][T21848] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.170629][T21848] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.189047][T21848] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.199076][T21848] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.497880][T21865] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4438'. [ 897.525415][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 898.133597][T21883] netlink: 'syz.6.4443': attribute type 1 has an invalid length. [ 898.266638][T21889] netlink: 'syz.4.4445': attribute type 10 has an invalid length. [ 898.277838][T21889] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 898.565397][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 899.066450][T21908] syzkaller1: entered promiscuous mode [ 899.072588][T21908] syzkaller1: entered allmulticast mode [ 899.585307][T14229] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 899.605286][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 899.735626][T14229] usb 8-1: Using ep0 maxpacket: 16 [ 899.774651][T14229] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 899.778088][T14229] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 899.781212][T14229] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 899.846383][T21918] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4453'. [ 899.925322][T14229] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 899.929667][T14229] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 899.975517][T14229] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 899.978258][T14229] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.984491][T14229] usb 8-1: Product: syz [ 899.985994][T14229] usb 8-1: Manufacturer: syz [ 899.994880][T14229] usb 8-1: SerialNumber: syz [ 900.005658][T14229] usb 8-1: config 0 descriptor?? [ 900.184309][T21927] netlink: 'syz.6.4456': attribute type 1 has an invalid length. [ 900.218022][T21913] FAULT_INJECTION: forcing a failure. [ 900.218022][T21913] name failslab, interval 1, probability 0, space 0, times 0 [ 900.221613][T21913] CPU: 1 UID: 0 PID: 21913 Comm: syz.3.4452 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 900.224678][T21913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 900.227802][T21913] Call Trace: [ 900.228760][T21913] [ 900.229618][T21913] dump_stack_lvl+0x16c/0x1f0 [ 900.231227][T21913] should_fail_ex+0x497/0x5b0 [ 900.232590][T21913] ? fs_reclaim_acquire+0xae/0x150 [ 900.234072][T21913] should_failslab+0xc2/0x120 [ 900.235437][T21913] __kmalloc_noprof+0xce/0x4f0 [ 900.236836][T21913] ? d_absolute_path+0x137/0x1b0 [ 900.238261][T21913] ? tomoyo_encode2+0x100/0x3e0 [ 900.239675][T21913] tomoyo_encode2+0x100/0x3e0 [ 900.241044][T21913] tomoyo_realpath_from_path+0x1a7/0x710 [ 900.242665][T21913] tomoyo_path_number_perm+0x248/0x5b0 [ 900.244232][T21913] ? tomoyo_path_number_perm+0x235/0x5b0 [ 900.245865][T21913] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 900.247629][T21913] ? find_held_lock+0x2d/0x110 [ 900.249030][T21913] ? __pfx_lock_release+0x10/0x10 [ 900.250470][T21913] ? trace_lock_acquire+0x14e/0x1f0 [ 900.251983][T21913] ? find_held_lock+0x2d/0x110 [ 900.253364][T21913] ? lock_acquire+0x2f/0xb0 [ 900.254686][T21913] ? __fget_files+0x40/0x3a0 [ 900.256092][T21913] ? __fget_files+0x206/0x3a0 [ 900.257451][T21913] security_file_ioctl_compat+0x9b/0x240 [ 900.259063][T21913] __do_compat_sys_ioctl+0x4e/0x2c0 [ 900.260586][T21913] __do_fast_syscall_32+0x73/0x120 [ 900.262072][T21913] do_fast_syscall_32+0x32/0x80 [ 900.263480][T21913] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 900.265563][T21913] RIP: 0023:0xf712e579 [ 900.266757][T21913] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 900.272228][T21913] RSP: 002b:00000000f512055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 900.274621][T21913] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000004611 [ 900.276946][T21913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 900.279235][T21913] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 900.281508][T21913] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 900.283778][T21913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 900.285588][T14229] appledisplay 8-1:0.0: Error while getting initial brightness: -110 [ 900.286057][T21913] [ 900.305787][T14229] appledisplay 8-1:0.0: probe with driver appledisplay failed with error -110 [ 900.337466][T21913] ERROR: Out of memory at tomoyo_realpath_from_path. [ 900.363980][ T6016] usb 8-1: USB disconnect, device number 68 [ 900.645228][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 901.258349][T21945] tipc: Started in network mode [ 901.259903][T21945] tipc: Node identity ac14142f, cluster identity 4711 [ 901.262011][T21945] tipc: New replicast peer: 0.0.0.0 [ 901.263968][T21945] tipc: Enabled bearer , priority 10 [ 901.318025][T21945] tipc: New replicast peer: 100.1.1.0 [ 901.685184][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 902.265215][T14229] tipc: Node number set to 2886997039 [ 902.459335][T21972] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4467'. [ 902.698909][T21968] netlink: 'syz.3.4468': attribute type 1 has an invalid length. [ 902.725154][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 903.765174][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 903.898070][T21995] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4476'. [ 904.805080][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 905.227423][T22020] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4483'. [ 905.845086][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 905.972422][T22037] tipc: Started in network mode [ 905.974305][T22037] tipc: Node identity ac14142f, cluster identity 4711 [ 905.998474][T22037] tipc: New replicast peer: 0.0.0.0 [ 906.000716][T22037] tipc: Enabled bearer , priority 10 [ 906.008028][T22037] tipc: New replicast peer: 100.1.1.0 [ 906.405855][T22043] netlink: 'syz.4.4491': attribute type 1 has an invalid length. [ 906.894971][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 906.995364][ T6016] tipc: Node number set to 2886997039 [ 907.427297][T22058] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4495'. [ 907.924952][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 908.227269][T22082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4502'. [ 908.230610][T22082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4502'. [ 908.278767][T16256] Bluetooth: Unexpected continuation frame (len 18) [ 908.412431][T22091] sch_fq: defrate 0 ignored. [ 908.805528][ T6007] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 908.956320][ T6007] usb 11-1: Using ep0 maxpacket: 32 [ 908.961651][ T6007] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 908.964933][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 908.974282][ T6007] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 908.991253][ T6007] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 909.007139][ T6007] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 909.021011][ T6007] usb 11-1: config 0 interface 0 has no altsetting 0 [ 909.030584][ T6007] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 909.037729][ T6007] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 909.045839][ T6007] usb 11-1: Product: syz [ 909.052899][ T6007] usb 11-1: Manufacturer: syz [ 909.058100][ T6007] usb 11-1: SerialNumber: syz [ 909.064810][ T6007] usb 11-1: config 0 descriptor?? [ 909.074890][ T6007] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 909.087194][ T6007] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 909.913045][T22094] ldusb 11-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 909.916445][T22103] netlink: 188 bytes leftover after parsing attributes in process `syz.6.4506'. [ 909.919072][T22103] netlink: 'syz.6.4506': attribute type 1 has an invalid length. [ 909.923670][ T5988] usb 11-1: USB disconnect, device number 5 [ 909.925664][ C1] ldusb 11-1:0.0: usb_submit_urb failed (-19) [ 909.951906][ T5988] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 910.005045][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 910.271311][T22106] netlink: 'syz.3.4508': attribute type 1 has an invalid length. [ 910.863628][T22123] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 911.054877][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 911.836642][T22146] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 912.094844][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 913.124976][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 913.159156][T22173] x_tables: ip_tables: udp match: only valid for protocol 17 [ 913.184839][ T57] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 913.354815][ T57] usb 9-1: Using ep0 maxpacket: 32 [ 913.357688][ T57] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 913.360062][ T57] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 913.383642][ T57] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 913.393806][ T57] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 913.395125][T22174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4526'. [ 913.397759][ T57] usb 9-1: config 0 interface 0 has no altsetting 0 [ 913.446312][ T57] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 913.448918][ T57] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 913.451297][ T57] usb 9-1: Product: syz [ 913.452513][ T57] usb 9-1: Manufacturer: syz [ 913.453846][ T57] usb 9-1: SerialNumber: syz [ 913.465948][ T57] usb 9-1: config 0 descriptor?? [ 913.473831][ T57] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 913.493066][ T57] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 913.676143][T22180] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4528'. [ 914.060569][T22169] ldusb 9-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 914.061137][ T30] usb 9-1: USB disconnect, device number 80 [ 914.062626][ C2] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 914.070583][T22181] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4525'. [ 914.073212][T22181] netlink: 'syz.4.4525': attribute type 1 has an invalid length. [ 914.086443][ T30] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 914.174923][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 914.215776][T22186] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 915.214767][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 916.244742][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 917.284919][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 918.114845][ T57] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 918.297886][ T57] usb 11-1: Using ep0 maxpacket: 32 [ 918.306060][ T57] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 918.309344][ T57] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 918.313630][ T57] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 918.324697][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 918.348016][ T57] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 918.351851][ T57] usb 11-1: config 0 interface 0 has no altsetting 0 [ 918.360577][ T57] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 918.363204][ T57] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 918.374705][ T57] usb 11-1: Product: syz [ 918.375960][ T57] usb 11-1: Manufacturer: syz [ 918.377359][ T57] usb 11-1: SerialNumber: syz [ 918.384110][ T57] usb 11-1: config 0 descriptor?? [ 918.398689][ T57] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 918.406769][ T57] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 918.885252][T22249] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 919.020199][T22246] netlink: 188 bytes leftover after parsing attributes in process `syz.6.4542'. [ 919.023136][T22246] netlink: 'syz.6.4542': attribute type 1 has an invalid length. [ 919.024997][T22235] ldusb 11-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 919.085111][ T5988] usb 11-1: USB disconnect, device number 6 [ 919.085177][ C2] ldusb 11-1:0.0: usb_submit_urb failed (-19) [ 919.095009][ T5988] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 919.374690][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 919.564717][ T2102] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 919.736300][ T2102] usb 10-1: Using ep0 maxpacket: 16 [ 919.765698][ T2102] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 919.768769][ T2102] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 919.771976][ T2102] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 919.774203][T22267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4551'. [ 919.784952][ T2102] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 919.788283][ T2102] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 919.825558][ T2102] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 919.828243][ T2102] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.830533][ T2102] usb 10-1: Product: syz [ 919.831771][ T2102] usb 10-1: Manufacturer: syz [ 919.833129][ T2102] usb 10-1: SerialNumber: syz [ 919.837511][ T2102] usb 10-1: config 0 descriptor?? [ 920.090833][ T2102] appledisplay 10-1:0.0: Error while getting initial brightness: -71 [ 920.134946][ T2102] appledisplay 10-1:0.0: probe with driver appledisplay failed with error -71 [ 920.141598][ T2102] usb 10-1: USB disconnect, device number 61 [ 920.400198][T22267] hsr_slave_1 (unregistering): left promiscuous mode [ 920.414680][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 921.444684][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 921.679898][T22290] [ 921.680674][T22290] ====================================================== [ 921.682728][T22290] WARNING: possible circular locking dependency detected [ 921.684707][T22290] 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 Not tainted [ 921.687595][T22290] ------------------------------------------------------ [ 921.690034][T22290] syz.5.4556/22290 is trying to acquire lock: [ 921.691766][T22290] ffff888024119968 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 921.694868][T22290] [ 921.694868][T22290] but task is already holding lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 921.696998][T22290] ffff888024119438 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 921.700390][T22290] [ 921.700390][T22290] which lock already depends on the new lock. [ 921.700390][T22290] [ 921.703241][T22290] [ 921.703241][T22290] the existing dependency chain (in reverse order) is: [ 921.705778][T22290] [ 921.705778][T22290] -> #4 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 921.708216][T22290] blk_mq_submit_bio+0x1fb6/0x24c0 [ 921.709823][T22290] __submit_bio+0x384/0x540 [ 921.711292][T22290] submit_bio_noacct_nocheck+0x698/0xd70 [ 921.713016][T22290] submit_bio_noacct+0x93a/0x1e20 [ 921.714557][T22290] mpage_readahead+0x41d/0x590 [ 921.716031][T22290] read_pages+0x1a8/0xdc0 [ 921.717365][T22290] page_cache_ra_unbounded+0x3dc/0x750 [ 921.718984][T22290] force_page_cache_ra+0x24b/0x340 [ 921.720577][T22290] page_cache_sync_ra+0x110/0x9c0 [ 921.722163][T22290] filemap_get_pages+0xd7b/0x1be0 [ 921.723765][T22290] filemap_read+0x3ca/0xd70 [ 921.725217][T22290] blkdev_read_iter+0x187/0x480 [ 921.726766][T22290] vfs_read+0x87f/0xbe0 [ 921.728133][T22290] ksys_read+0x12b/0x250 [ 921.729522][T22290] do_syscall_64+0xcd/0x250 [ 921.731023][T22290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.732871][T22290] [ 921.732871][T22290] -> #3 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 921.735236][T22290] down_read+0x9a/0x330 [ 921.736591][T22290] filemap_fault+0x2e0/0x2820 [ 921.738323][T22290] __do_fault+0x10a/0x490 [ 921.739805][T22290] do_pte_missing+0xebd/0x3e00 [ 921.741360][T22290] __handle_mm_fault+0x103c/0x2a40 [ 921.742976][T22290] handle_mm_fault+0x3fa/0xaa0 [ 921.744517][T22290] __get_user_pages+0x8d9/0x3b50 [ 921.746071][T22290] populate_vma_page_range+0x27f/0x3a0 [ 921.747789][T22290] __mm_populate+0x1d6/0x380 [ 921.749256][T22290] vm_mmap_pgoff+0x293/0x360 [ 921.750713][T22290] ksys_mmap_pgoff+0x32c/0x5c0 [ 921.752223][T22290] __do_fast_syscall_32+0x73/0x120 [ 921.753800][T22290] do_fast_syscall_32+0x32/0x80 [ 921.755375][T22290] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 921.757326][T22290] [ 921.757326][T22290] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 921.759482][T22290] __might_fault+0x11b/0x190 [ 921.760908][T22290] _copy_from_user+0x29/0xd0 [ 921.762345][T22290] __blk_trace_setup+0xa8/0x180 [ 921.763896][T22290] blk_trace_setup+0x47/0x70 [ 921.765454][T22290] sg_ioctl+0x7a3/0x26b0 [ 921.766886][T22290] compat_ptr_ioctl+0x6b/0xa0 [ 921.768403][T22290] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 921.770091][T22290] __do_fast_syscall_32+0x73/0x120 [ 921.771721][T22290] do_fast_syscall_32+0x32/0x80 [ 921.773264][T22290] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 921.775304][T22290] [ 921.775304][T22290] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 921.777570][T22290] __mutex_lock+0x19b/0xa60 [ 921.778980][T22290] blk_register_queue+0x13c/0x4f0 [ 921.780552][T22290] add_disk_fwnode+0x785/0x1300 [ 921.782059][T22290] brd_alloc.isra.0+0x50a/0x7c0 [ 921.783546][T22290] brd_init+0x12b/0x1d0 [ 921.784918][T22290] do_one_initcall+0x128/0x630 [ 921.786409][T22290] kernel_init_freeable+0x58f/0x8b0 [ 921.788048][T22290] kernel_init+0x1c/0x2b0 [ 921.789455][T22290] ret_from_fork+0x45/0x80 [ 921.790926][T22290] ret_from_fork_asm+0x1a/0x30 [ 921.792453][T22290] [ 921.792453][T22290] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 921.794692][T22290] __lock_acquire+0x249e/0x3c40 [ 921.796230][T22290] lock_acquire.part.0+0x11b/0x380 [ 921.797806][T22290] __mutex_lock+0x19b/0xa60 [ 921.799231][T22290] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 921.801066][T22290] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 921.802773][T22290] nbd_start_device+0x15b/0xd70 [ 921.804272][T22290] nbd_ioctl+0x21a/0xfd0 [ 921.805658][T22290] compat_blkdev_ioctl+0x2f7/0x750 [ 921.807198][T22290] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 921.808799][T22290] __do_fast_syscall_32+0x73/0x120 [ 921.810371][T22290] do_fast_syscall_32+0x32/0x80 [ 921.811865][T22290] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 921.813749][T22290] [ 921.813749][T22290] other info that might help us debug this: [ 921.813749][T22290] [ 921.816721][T22290] Chain exists of: [ 921.816721][T22290] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#54 [ 921.816721][T22290] [ 921.820756][T22290] Possible unsafe locking scenario: [ 921.820756][T22290] [ 921.822847][T22290] CPU0 CPU1 [ 921.824334][T22290] ---- ---- [ 921.825851][T22290] lock(&q->q_usage_counter(io)#54); [ 921.827397][T22290] lock(mapping.invalidate_lock#2); [ 921.829555][T22290] lock(&q->q_usage_counter(io)#54); [ 921.831739][T22290] lock(&q->sysfs_lock); [ 921.832938][T22290] [ 921.832938][T22290] *** DEADLOCK *** [ 921.832938][T22290] [ 921.835181][T22290] 4 locks held by syz.5.4556/22290: [ 921.836650][T22290] #0: ffff888024184998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 921.839200][T22290] #1: ffff8880241848d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 921.842220][T22290] #2: ffff888024119438 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 921.845607][T22290] #3: ffff888024119470 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 921.848975][T22290] [ 921.848975][T22290] stack backtrace: [ 921.850623][T22290] CPU: 0 UID: 0 PID: 22290 Comm: syz.5.4556 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 921.853553][T22290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 921.856524][T22290] Call Trace: [ 921.857463][T22290] [ 921.858297][T22290] dump_stack_lvl+0x116/0x1f0 [ 921.859611][T22290] print_circular_bug+0x41c/0x610 [ 921.861038][T22290] check_noncircular+0x31a/0x400 [ 921.862467][T22290] ? __pfx_check_noncircular+0x10/0x10 [ 921.864049][T22290] ? save_trace+0x42/0xa10 [ 921.865344][T22290] ? add_lock_to_list+0x17d/0x390 [ 921.866830][T22290] __lock_acquire+0x249e/0x3c40 [ 921.868237][T22290] ? __pfx___lock_acquire+0x10/0x10 [ 921.869728][T22290] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 921.871354][T22290] ? stack_depot_save_flags+0x36d/0x9e0 [ 921.872910][T22290] lock_acquire.part.0+0x11b/0x380 [ 921.874390][T22290] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 921.876188][T22290] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 921.877791][T22290] ? rcu_is_watching+0x12/0xc0 [ 921.879167][T22290] ? trace_lock_acquire+0x14e/0x1f0 [ 921.880681][T22290] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 921.882458][T22290] ? lock_acquire+0x2f/0xb0 [ 921.883774][T22290] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 921.885565][T22290] __mutex_lock+0x19b/0xa60 [ 921.886878][T22290] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 921.888650][T22290] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 921.890520][T22290] ? __pfx___mutex_lock+0x10/0x10 [ 921.891973][T22290] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 921.893721][T22290] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 921.895440][T22290] ? lock_acquire.part.0+0x11b/0x380 [ 921.896955][T22290] ? __mutex_trylock_common+0xea/0x250 [ 921.898502][T22290] ? __pfx___mutex_trylock_common+0x10/0x10 [ 921.900206][T22290] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 921.901903][T22290] ? rcu_is_watching+0x12/0xc0 [ 921.903403][T22290] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 921.905130][T22290] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 921.906796][T22290] ? __pfx___mutex_lock+0x10/0x10 [ 921.908266][T22290] ? lockdep_hardirqs_on+0x7c/0x110 [ 921.909775][T22290] ? __mutex_lock+0x1cc/0xa60 [ 921.911143][T22290] ? nbd_ioctl+0x151/0xfd0 [ 921.912435][T22290] ? __pfx___mutex_lock+0x10/0x10 [ 921.913883][T22290] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 921.915470][T22290] nbd_start_device+0x15b/0xd70 [ 921.916915][T22290] ? bpf_lsm_capable+0x9/0x10 [ 921.918278][T22290] nbd_ioctl+0x21a/0xfd0 [ 921.919500][T22290] ? __pfx_nbd_ioctl+0x10/0x10 [ 921.920910][T22290] ? __pfx_lock_release+0x10/0x10 [ 921.922361][T22290] ? trace_lock_acquire+0x14e/0x1f0 [ 921.923875][T22290] ? __pfx_nbd_ioctl+0x10/0x10 [ 921.925280][T22290] compat_blkdev_ioctl+0x2f7/0x750 [ 921.926786][T22290] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 921.928449][T22290] ? __fget_files+0x206/0x3a0 [ 921.929812][T22290] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 921.931442][T22290] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 921.932974][T22290] __do_fast_syscall_32+0x73/0x120 [ 921.934469][T22290] do_fast_syscall_32+0x32/0x80 [ 921.935923][T22290] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 921.937738][T22290] RIP: 0023:0xf7f56579 [ 921.938920][T22290] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 921.944428][T22290] RSP: 002b:00000000f508555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 921.946826][T22290] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000ab03 [ 921.949333][T22290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 921.951649][T22290] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 921.953899][T22290] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 921.956158][T22290] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 921.958403][T22290] [ 922.104972][T22290] block nbd5: shutting down sockets [ 922.187665][ T99] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.306174][ T99] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.356066][ T99] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.416040][ T99] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.582613][ T99] bond0 (unregistering): Released all slaves [ 922.676015][ T99] tipc: Disabling bearer [ 922.677586][ T99] tipc: Left network mode [ 922.861992][ T99] hsr_slave_0: left promiscuous mode [ 922.865169][ T99] veth1_macvtap: left promiscuous mode [ 922.866842][ T99] veth0_macvtap: left promiscuous mode [ 922.868544][ T99] veth1_vlan: left promiscuous mode [ 922.870015][ T99] veth0_vlan: left promiscuous mode [ 924.126469][ T99] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.176396][ T99] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.246488][ T99] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.297579][ T99] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.356593][ T99] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.416689][ T99] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.466642][ T99] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.506150][ T99] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.571103][ T99] bridge_slave_1: left allmulticast mode [ 924.572791][ T99] bridge_slave_1: left promiscuous mode [ 924.574481][ T99] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.577620][ T99] bridge_slave_0: left allmulticast mode [ 924.579218][ T99] bridge_slave_0: left promiscuous mode [ 924.580868][ T99] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.584517][ T99] bridge_slave_1: left allmulticast mode [ 924.586391][ T99] bridge_slave_1: left promiscuous mode [ 924.588057][ T99] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.590679][ T99] bridge_slave_0: left allmulticast mode [ 924.592323][ T99] bridge_slave_0: left promiscuous mode [ 924.593929][ T99] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.320073][ T99] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 925.322679][ T99] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 925.325623][ T99] bond0 (unregistering): Released all slaves [ 925.328573][ T99] bond1 (unregistering): Released all slaves [ 925.443771][ T99] bond0 (unregistering): Released all slaves [ 925.449965][ T99] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 925.452975][ T99] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 925.456073][ T99] bond0 (unregistering): Released all slaves [ 925.546327][ T99] tipc: Disabling bearer [ 925.547957][ T99] tipc: Left network mode [ 925.556939][ T99] tipc: Disabling bearer [ 925.558595][ T99] tipc: Left network mode [ 926.110627][ T99] hsr_slave_0: left promiscuous mode [ 926.112419][ T99] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.114691][ T99] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.117929][ T99] hsr_slave_0: left promiscuous mode [ 926.120681][ T99] hsr_slave_0: left promiscuous mode [ 926.122278][ T99] hsr_slave_1: left promiscuous mode [ 926.123988][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.125981][ T99] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.128121][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.129952][ T99] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.133773][ T99] veth1_macvtap: left promiscuous mode [ 926.135441][ T99] veth0_macvtap: left promiscuous mode [ 926.137007][ T99] veth1_vlan: left promiscuous mode [ 926.138335][ T99] veth0_vlan: left promiscuous mode [ 926.140138][ T99] veth1_macvtap: left promiscuous mode [ 926.141514][ T99] veth0_macvtap: left promiscuous mode [ 926.142938][ T99] veth1_vlan: left promiscuous mode [ 926.144289][ T99] veth0_vlan: left promiscuous mode [ 926.791888][ T99] team0 (unregistering): Port device team_slave_1 removed [ 926.870101][ T99] team0 (unregistering): Port device team_slave_0 removed [ 928.114071][ T99] team0 (unregistering): Port device team_slave_1 removed [ 928.120231][ T99] team0 (unregistering): Port device team_slave_0 removed [ 929.015196][ T99] IPVS: stop unused estimator thread 0... [ 929.017322][ T99] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 17:33:12 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85142de0 RDI=ffffffff9a667240 RBP=ffffffff9a667200 RSP=ffffc90003ad6fa8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff34cce9a R15=dffffc0000000000 RIP=ffffffff85142e07 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057e764c0 CR3=000000005f6c2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000081b9a159 RBX=0000000081b9a159 RCX=ffff888066ceb020 RDX=000000002530746c RSI=00000000162356be RDI=00000000a9e9f096 RBP=0000000000000001 RSP=ffffc9000e217748 R8 =0000000000000000 R9 =ffff88807e5a1590 R10=ffffffff901ce3d7 R11=00000000000a2001 R12=0000000000000000 R13=ffffc9000e2177a8 R14=000000000000000d R15=000000000000000d RIP=ffffffff84c80065 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f35828e7280 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000313eaffc CR3=000000006e71e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffff8 Opmask01=00000000003fffff Opmask02=0000000003bfffff Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 69253a6925632500 3d45444f4d564544 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe318cb000 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ddf6df643d204967 737326db230baa58 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003078 30004e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003078 303d4e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d45 0d004e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 696b66722f373379 68702f3131323038 656565692f35336d 697377682f6d6973 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ad0aaa6b50 000055ad0aaa7120 0000000000000041 0000550032356c6c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000001 000055ad0aa7c910 0000000000000211 0031003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263b383a3a263a 383a3a26493b3a3a 26483b3a3a264b3b 3a0a00307f617930 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000000 RCX=1ffffffff3476314 RDX=0000000000000000 RSI=ffffffff8bb16f80 RDI=0000000000000000 RBP=0000000000000282 RSP=ffffc900039e7248 R8 =0000000000000000 R9 =fffffbfff2039c7a R10=ffffffff901ce3d7 R11=0000000000000bfc R12=ffffffff9a5f6728 R13=0000000000002e39 R14=0000000000000000 R15=ffff8880591af000 RIP=ffffffff8176a610 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fc6e40 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7463ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=0000000000000001 RCX=1ffffffff3476314 RDX=dffffc0000000000 RSI=ffffffff81d37e2e RDI=0000000000000001 RBP=ffffea0001adeb40 RSP=ffffc9000c9ff4c0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=000000000000e150 R12=0000000000000000 R13=0000000000000000 R14=ffffea0001adeb74 R15=0000000000000081 RIP=ffffffff816812f6 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f514b90a CR3=0000000055be2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000