last executing test programs: 43m20.279838664s ago: executing program 32 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000201010400000000000000000a050001300002802c00018014000300fc02000000000000000000000000000114000400fe8000000000000000000000000000210c0019800800020006000000135b688d68f784170334019b9180e960741cecb2586300395c8341b97c16245947ef7e50d7"], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) msgget$private(0x0, 0x101) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000100), 0x24, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000140)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(0x0) r6 = dup(0xffffffffffffffff) write$UHID_INPUT(r6, &(0x7f0000002a00)={0xd, {"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", 0x1000}}, 0x1006) 33m57.596477596s ago: executing program 33 (id=762): socket(0x1d, 0x2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xc8}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0x0, r6}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000005c0)=@sr0, r7, &(0x7f0000000600)) unshare(0x40020000) 28m42.27103237s ago: executing program 34 (id=1152): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x7c7b912c}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000"/45], 0x98}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0x0, 0x0}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000000)="11868a0fceae284c00000001", 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4004) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 19m30.855846726s ago: executing program 35 (id=1823): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x3, 0x204d01) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000240)=0x3) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) pwrite64(r4, &(0x7f00000002c0)="48352c0b6a06f227bcc3e9d90d6dc587b7ca0c9587606bee856e98cb83b26a96575a4b1e", 0x24, 0x7ff) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_unlink_exit\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, r3, 0x0, 0x3}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0x12, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @generic={0x8, 0x4, 0x9, 0xa, 0x6}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xe}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x40}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @ldst={0x1, 0x2, 0x2, 0x6, 0x7, 0xfffffffffffffff4, 0x4}, @alu={0x7, 0x0, 0x2, 0x5, 0x7, 0x100, 0xfffffffffffffffc}]}, 0x0, 0x3, 0xbe, &(0x7f0000000500)=""/190, 0x41000, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x0, 0x5, 0x8001, 0x7}, 0x10, 0x0, r7, 0x2, &(0x7f00000007c0)=[r8, r9, 0xffffffffffffffff], &(0x7f0000000800)=[{0x4, 0x3, 0x9, 0x6}, {0x0, 0x3, 0x0, 0xc}], 0x10, 0x7}, 0x94) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x10, 0x0, 0x0) sendmsg$inet(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r12, 0x4) sendmsg$unix(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000340)={'pcl818\x00', [0x2f00, 0x5, 0x3, 0x2, 0x9, 0x1, 0x1, 0x523, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x2, 0x832, 0x30002, 0x401, 0xa, 0x800, 0xe2df, 0x3, 0x1, 0x80, 0x60, 0x4, 0x5, 0x70f, 0x3]}) 16m12.70107022s ago: executing program 36 (id=2094): r0 = socket(0x23, 0x80002, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = io_uring_setup(0x1cfd, &(0x7f000000c480)={0x0, 0xe8e2, 0x8, 0x1fffd, 0x3}) r6 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x20, 0x0, 0x8000028b, 0x0, r5}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r5], 0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0xffffffff, 0x9, 0x0, 0xfffffe0000000003, 0x8, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) remap_file_pages(&(0x7f0000264000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x200, &(0x7f0000000340)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'gre0\x00', 0x3}, 0x18) 12m48.570377811s ago: executing program 9 (id=2470): syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_PARAM={{0x81}, 0x6}}}, 0x7) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) 12m47.455111761s ago: executing program 9 (id=2473): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000f80)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = socket(0x1d, 0x2, 0x6) recvmsg(r6, 0x0, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee8, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r2], 0x84}, 0x1, 0x0, 0x0, 0x40000041}, 0x4000084) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 12m32.072560899s ago: executing program 37 (id=2473): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000f80)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = socket(0x1d, 0x2, 0x6) recvmsg(r6, 0x0, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee8, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r2], 0x84}, 0x1, 0x0, 0x0, 0x40000041}, 0x4000084) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 7m33.033768127s ago: executing program 1 (id=4008): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61965b7e, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7f, 0x0, 0x1], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x199, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x100000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_open_dev$sndctrl(0x0, 0xffff, 0x84080) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000240)={0x200001, 0x9, 0xd, 0x1, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in=@loopback, 0x4e22, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x6}, 0x2253, 0x6e6bb0}, {{@in6=@local, 0x4d2, 0x6c}, 0x0, @in6=@private2}}, 0xe8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) ioctl$TCSETSW2(r7, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r6, 0x5437, 0x0) 7m30.824316909s ago: executing program 1 (id=4016): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, &(0x7f0000000040)="e1", 0x1, 0x801, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x8905, &(0x7f0000000580)) 7m30.635055413s ago: executing program 1 (id=4018): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x1000, 0xa000}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000002340)={r1, 0x1, 0x2000, 0x8000}) 7m30.617643295s ago: executing program 1 (id=4020): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 7m29.838417994s ago: executing program 1 (id=4021): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x104) fdatasync(r0) 7m29.289094387s ago: executing program 1 (id=4025): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="0d18687da3e7", 0x6}], 0x1}}], 0x1, 0x40091) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000040)=0x40) recvfrom$inet(r0, &(0x7f0000000100)=""/68, 0x44, 0x123, &(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10) 7m28.675490765s ago: executing program 38 (id=4025): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="0d18687da3e7", 0x6}], 0x1}}], 0x1, 0x40091) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000040)=0x40) recvfrom$inet(r0, &(0x7f0000000100)=""/68, 0x44, 0x123, &(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10) 6m58.520612761s ago: executing program 0 (id=4160): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x40000000, 0x3a6}, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/21, 0x15}, {&(0x7f0000000180)=""/135, 0x87}], 0x2}, 0x2020) lseek(0xffffffffffffffff, 0xe, 0x4) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x18, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x5, 0x12b, 0x0, 0x0, @binary='F'}]}, 0x18}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = epoll_create(0x113f) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000400)={0x80000000}) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) 6m57.504768068s ago: executing program 0 (id=4161): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 6m57.007180889s ago: executing program 0 (id=4167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 6m56.515845869s ago: executing program 0 (id=4169): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', 0x14) 6m55.960284627s ago: executing program 0 (id=4171): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x40000000, 0x3a6}, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/21, 0x15}, {&(0x7f0000000180)=""/135, 0x87}], 0x2}, 0x2020) lseek(0xffffffffffffffff, 0xe, 0x4) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x18, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x5, 0x12b, 0x0, 0x0, @binary='F'}]}, 0x18}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = epoll_create(0x113f) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000400)={0x80000000}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000027b40)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xffffffffffffffff, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyN', 0x3a, './file0'}, 0x1f5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) 6m54.111019939s ago: executing program 0 (id=4179): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="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"], 0x159c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0xef) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000000180)=""/62, 0x3e) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x41000000}], 0x0) 6m53.655674782s ago: executing program 39 (id=4179): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000b81400800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000240201802400028008000340000000000800034000000000080003400000000008000180000000003c00028008000340000000000800018000000000080003400000000008000340000000000900020073797a30000000000900020073797a310000000044000280080003400000000008000340000000010900020073797a32000000000800034000000000080003400000000108000340000000020900020073797a30000000003400028008000180000000000900020073797a310000000008000340000000000900020073797a320000000008000340000000000c0002800800034000000000400002800900020073797a310000000008000340000000000900020073797a32000000000900020073797a3200000000080001800000000008000180fffffffcfc000100789be1642f8430c460e8692a8f8c45aaf3118316539052ba181a60f03707ec8179fd143ed6c4db73977b77f68686d2ec94b25435ecec60f6ac23db96833cbf99779e33db32e62fe3a078933d3c1122022952988b9550db169ecb6e39fd8720a05d3eeb5d40a7ab91f9b5565dc2b48c9ac61eefd9d0aab86e58ea1940d2240a851dbeabcf0b6cefba164663ad87cbcdb6aa1468529d1206b1fa3aa39118b45ab882df7fb2c6e9c25a706f99002cc42ee9b894b4bbfe66ce8fa1038566ae3407d5c80e28dc3911476785933d1ef923697a44a9cd4271d539e2ecc14d37a5e2074116425f0766b49a6febf9f1b8405ee9de1363b262f1be2839a40101804c0002800900020073797a300000000008000340000000000900020073797a300000000008000180000000000900020073797a30000000000900020073797a3200000000080003400000000104000280380002800900020073797a300000000008000180000000000900020073797a320000000008000340000000000900020073797a32000000002400028008000180000000000900020073797a32000000000900020073797a3000000000f3000100a6117a78b9e48d6dd9ad86fc2c54547cbee98c24f4b972c82722771febf3e388f9b3907852ee4adbd95ca25deb487ac3d49d3716931979f6bbf2b8cdcc0bc37f27a54709a59c31c01c5544b11cb9c6ca800d7f23c3cc5237458188f26a04c78ad8dfd3b13e958558dc3b7f0f4cfc16c4fd23e11b25bd23b195b64166e0c3a8ab3ebbd2ead4abf745bcf4d4b0610521d7ec52023ed38c7f9fb1cbab6a9d87c96fd783ff63f9483766557291fcc41f17c423550c1e965a66e30631b271db96cccb68bf8c91656e894ef46a296974170da742b0d13d665f0f2e80d3590b3dc637851b6e7b0adc59ab874ce337a258bc4300080003400000"], 0x159c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0xef) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000000180)=""/62, 0x3e) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x41000000}], 0x0) 3m28.35700817s ago: executing program 3 (id=5270): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x8011, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "46174562000000000000000000002000", "c6ff1b00", "2e9c588f00"}, 0x28) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1}, 0xa}, {{0x0, 0x0, 0x0}, 0x8}], 0x47, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x10121, 0x0) shutdown(r0, 0x0) 3m28.261361408s ago: executing program 3 (id=5272): ioperm(0x284, 0x7f, 0xe3) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r5, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) 3m27.283207291s ago: executing program 3 (id=5278): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e28, @private=0xa210102}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 3m27.250927766s ago: executing program 3 (id=5279): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1018, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open(0x0, 0x10b942, 0x1) syz_open_dev$evdev(0x0, 0x6, 0x501100) 3m27.187088071s ago: executing program 3 (id=5280): syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) syz_open_dev$vbi(&(0x7f0000001400), 0x0, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) timerfd_create(0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000) 3m25.423221616s ago: executing program 3 (id=5286): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x5, 0x4) 3m24.884040172s ago: executing program 40 (id=5286): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x5, 0x4) 2m6.360065005s ago: executing program 6 (id=5650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000000b7080000000000007baa00fe000000"], 0x0, 0x7}, 0x94) 2m4.626084992s ago: executing program 6 (id=5659): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x68, 0x28, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r4, {0x1}, {0xd}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_bpf={0x2c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000804}, 0x40) 2m4.42961023s ago: executing program 6 (id=5662): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$unix(0x1, 0x5, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x120) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0/file0\x00'}, 0x6e) read$FUSE(r0, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006dc0)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x6, {0x1, 0x0, 0x0, 0x7, 0x7, 0xfff, {0x4, 0x8, 0x101, 0x7, 0x5, 0x9ce9, 0x80000001, 0x3, 0x2, 0x6000, 0x1, r3, r4, 0x0, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) 2m4.141258718s ago: executing program 6 (id=5664): socket$alg(0x26, 0x5, 0x0) io_uring_setup(0x458b, &(0x7f0000000280)={0x0, 0x52f5, 0x400, 0x0, 0x15a}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d1050120000200000001090212"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2m2.402204858s ago: executing program 6 (id=5672): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x8cd42, 0x0) read$FUSE(r3, 0x0, 0xeffd) 2m1.595675935s ago: executing program 6 (id=5675): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x68942, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0x400000000000000}}, 0x28) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m0.287020094s ago: executing program 8 (id=5679): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x83b, &(0x7f00000000c0)={0x0, 0x11e, 0x80, 0x3, 0x319}, &(0x7f0000000140)=0x0, &(0x7f0000000400)=0x0) socket$inet(0x2, 0x2, 0x0) r5 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r5, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1m56.121583413s ago: executing program 8 (id=5707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000180)) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x88c4) 1m54.079080975s ago: executing program 8 (id=5713): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f7af3", 0x3, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="33fe0000710091"], 0xfe33) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 1m52.577917531s ago: executing program 8 (id=5721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) 1m48.690528491s ago: executing program 8 (id=5731): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61965b7e, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7f, 0x0, 0x1], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x199, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x100000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0xffff, 0x84080) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000240)={0x200001, 0x9, 0xd, 0x1, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in=@loopback, 0x4e22, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x6}, 0x2253, 0x6e6bb0}, {{@in6=@local, 0x4d2, 0x6c}, 0x0, @in6=@private2}}, 0xe8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}, 0x1, 0x0, 0x0, 0x840}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) ioctl$TCSETSW2(r7, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r6, 0x5437, 0x0) 1m47.298153038s ago: executing program 8 (id=5738): socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x0, 0x6c}, 0x0, @in6=@empty, 0x3501, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 1m45.947620005s ago: executing program 41 (id=5675): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x68942, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0x400000000000000}}, 0x28) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m32.01141293s ago: executing program 42 (id=5738): socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x0, 0x6c}, 0x0, @in6=@empty, 0x3501, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 51.625612121s ago: executing program 9 (id=5800): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="40980100000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 46.528707563s ago: executing program 9 (id=5918): r0 = io_uring_setup(0x1612, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}], 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c7902, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x40400) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7, 0x200, 0x6, 0x5, 0x400000}) sendfile(r2, r2, 0x0, 0x7fffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 40.559041092s ago: executing program 9 (id=5930): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setpgid(0x0, r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) utimes(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) 40.215637465s ago: executing program 9 (id=5932): r0 = socket$caif_stream(0x25, 0x1, 0x5) accept(r0, &(0x7f0000000300)=@isdn, &(0x7f0000000180)=0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='net/nfsfs\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x690000, 0x8, 0x3}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r4, r3, &(0x7f0000002700)=0x1, 0x8) getdents(0xffffffffffffffff, &(0x7f0000000200)=""/206, 0xce) 24.922527366s ago: executing program 43 (id=5932): r0 = socket$caif_stream(0x25, 0x1, 0x5) accept(r0, &(0x7f0000000300)=@isdn, &(0x7f0000000180)=0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='net/nfsfs\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x690000, 0x8, 0x3}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r4, r3, &(0x7f0000002700)=0x1, 0x8) getdents(0xffffffffffffffff, &(0x7f0000000200)=""/206, 0xce) 13.119154875s ago: executing program 4 (id=6002): r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) write$smackfs_netlabel(r0, &(0x7f0000000040)=@l1={{0x2, 0x2e, 0xfffffffffffffffd, 0x2e, 0x4, 0x2e, 0xfffffffffffffff7}, 0x20, '{'}, 0x57) 10.150272588s ago: executing program 4 (id=6008): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) 8.119495673s ago: executing program 5 (id=6014): socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_addr=@remote, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 6.420792592s ago: executing program 7 (id=6018): socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) 6.230462264s ago: executing program 7 (id=6020): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 5.929508633s ago: executing program 4 (id=6022): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0xe79b04dd2a128718, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.441587994s ago: executing program 2 (id=6025): unshare(0x26020480) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) r4 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2de, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) 4.391542733s ago: executing program 5 (id=6026): r0 = userfaultfd(0x801) mkdirat(0xffffffffffffff9c, 0x0, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x8002, 0x0) read$msr(r1, &(0x7f0000019540)=""/102400, 0x19000) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000161000/0xf000)=nil, &(0x7f00001df000/0x3000)=nil, 0xf000, 0x2, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.199073185s ago: executing program 7 (id=6027): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x803, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r3, &(0x7f0000000300), 0x6) 4.188542111s ago: executing program 2 (id=6028): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1ff) mount$nfs(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x28, 0x0) inotify_add_watch(r2, 0x0, 0x46000046) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.502437534s ago: executing program 7 (id=6029): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="00003c000000f2f77f424dc819df3f772a7ab28ec3465a4f86babe119b9e7d6faa138863683317bb147dacbeb941d8ca28d2d57645fb81c0"], 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x28, 0xf4, 0x0, 0xfffff034}]}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0xffffffffffffffff, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.350869109s ago: executing program 2 (id=6030): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r5, 0x0) accept4$rose(r5, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=@newlink={0x3c, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x3c}}, 0x20008040) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) 3.310417734s ago: executing program 4 (id=6031): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61965b7e, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7f, 0x0, 0x1], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x199, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x100000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0xffff, 0x84080) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000240)={0x200001, 0x9, 0xd, 0x1, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in=@loopback, 0x4e22, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x6}, 0x2253, 0x6e6bb0}, {{@in6=@local, 0x4d2, 0x6c}, 0x0, @in6=@private2}}, 0xe8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) ioctl$TCSETSW2(r7, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r6, 0x5437, 0x0) 3.030055294s ago: executing program 2 (id=6032): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000080), 0x4) 2.224190383s ago: executing program 5 (id=6033): gettid() openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r3, 0x1}, 0x20) 2.223458227s ago: executing program 7 (id=6034): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2.063742981s ago: executing program 2 (id=6035): socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x2048ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x4, 0x0, 0x69}, &(0x7f0000000080), &(0x7f0000ff4000)) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0xc8c9, 0x4002, 0x5e51, 0xfffffffffffffffe, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x2, 0x0, 0x5, 0x5}, 0x0, 0x0) 1.880944228s ago: executing program 4 (id=6036): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e", 0xb, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000504"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x20048000) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.359056962s ago: executing program 5 (id=6037): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) clock_gettime(0xfffffffffffffff1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/stat\x00') unlinkat(r3, &(0x7f0000004b00)='./file0\x00', 0x200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/3699], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 1.217695386s ago: executing program 7 (id=6038): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0xfffffffc) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x2a0, 0x100000c, 0xc0, 0xc0, 0x0, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 258.470066ms ago: executing program 2 (id=6039): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 170.988685ms ago: executing program 5 (id=6040): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x10, "0062ba7d82e7ff00000000000000f7ffffff00"}) syz_open_pts(r4, 0x20000) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000300)={"d1ed39ffffffff74628c46d2e681cdb9e581cbbd3be8dd5fffff5600", r2}) close_range(r0, r1, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 68.522349ms ago: executing program 4 (id=6041): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) 0s ago: executing program 5 (id=6042): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000010bd408205000000000000000109022400011b0000000904"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): 9] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.4583'. [ 2407.046614][ T5836] usb 5-1: Using ep0 maxpacket: 8 [ 2407.047343][T25463] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4570'. [ 2407.080032][ T5836] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 2407.104392][ T5836] usb 5-1: config 0 has no interface number 0 [ 2407.110594][ T5836] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2407.139254][ T5836] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2407.172883][ T5836] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2407.194741][ T5836] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2407.222900][ T5836] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2407.232115][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2407.264118][ T5836] usb 5-1: config 0 descriptor?? [ 2407.309188][ T5836] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2407.312929][T16341] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2407.404588][ T30] audit: type=1326 audit(1752560468.075:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25473 comm="syz.2.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65178e929 code=0x7ffc0000 [ 2407.467682][ T30] audit: type=1326 audit(1752560468.115:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25473 comm="syz.2.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65178e929 code=0x7ffc0000 [ 2407.486779][T16341] usb 4-1: Using ep0 maxpacket: 8 [ 2407.518262][ T30] audit: type=1326 audit(1752560468.115:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25473 comm="syz.2.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe65178e929 code=0x7ffc0000 [ 2407.548813][T16341] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2407.561930][T16341] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2407.588442][T16341] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2407.595229][T21663] usb 5-1: USB disconnect, device number 17 [ 2407.601329][T16341] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2407.619014][T16341] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2407.641836][T16341] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2407.651416][T16341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2407.673723][T21663] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 2407.684137][ T30] audit: type=1326 audit(1752560468.115:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25473 comm="syz.2.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65178e929 code=0x7ffc0000 [ 2407.751595][ T30] audit: type=1326 audit(1752560468.115:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25473 comm="syz.2.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65178e929 code=0x7ffc0000 [ 2407.799925][ T30] audit: type=1326 audit(1752560468.115:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25473 comm="syz.2.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe65178e929 code=0x7ffc0000 [ 2407.865951][ T30] audit: type=1326 audit(1752560468.115:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25473 comm="syz.2.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe65172ab19 code=0x7ffc0000 [ 2407.899527][T25482] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2407.911277][T16341] usb 4-1: usb_control_msg returned -32 [ 2407.911329][T16341] usbtmc 4-1:16.0: can't read capabilities [ 2407.932805][ T30] audit: type=1326 audit(1752560468.115:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25473 comm="syz.2.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65178e929 code=0x7ffc0000 [ 2407.963805][T25482] overlayfs: maximum fs stacking depth exceeded [ 2407.970562][ T30] audit: type=1326 audit(1752560468.115:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25473 comm="syz.2.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe65172ab19 code=0x7ffc0000 [ 2407.997914][ T30] audit: type=1326 audit(1752560468.115:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25473 comm="syz.2.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65178e929 code=0x7ffc0000 [ 2408.632482][T25499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4600'. [ 2408.959008][T25506] netlink: 4268 bytes leftover after parsing attributes in process `syz.8.4596'. [ 2408.969269][T25506] netlink: 4268 bytes leftover after parsing attributes in process `syz.8.4596'. [ 2410.119109][T16432] usb 4-1: USB disconnect, device number 55 [ 2410.282271][T25532] tipc: Enabling of bearer rejected, failed to enable media [ 2410.621358][T25542] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.4615'. [ 2410.631622][T25542] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.4615'. [ 2411.499440][T25547] lo speed is unknown, defaulting to 1000 [ 2411.524504][T25547] lo speed is unknown, defaulting to 1000 [ 2413.111380][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 2413.111466][ T30] audit: type=1400 audit(1752560473.785:416): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25568 comm="syz.2.4623" [ 2413.815281][T25573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4625'. [ 2413.841661][ T30] audit: type=1400 audit(1752560474.485:417): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25571 comm="syz.2.4625" daddr=ff02::1 dest=20002 [ 2414.123178][ T1211] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2414.983699][T25585] input: syz1 as /devices/virtual/input/input42 [ 2415.023364][ T1211] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2415.032467][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2415.046227][T25587] loop2: detected capacity change from 0 to 7 [ 2415.057566][T25587] Dev loop2: unable to read RDB block 7 [ 2415.068468][T25587] loop2: AHDI p1 p2 p3 [ 2415.074622][ T1211] usb 5-1: config 0 descriptor?? [ 2415.079889][T25587] loop2: partition table partially beyond EOD, truncated [ 2415.089764][ T1211] cp210x 5-1:0.0: cp210x converter detected [ 2415.096313][T25587] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 2415.106161][T25587] loop2: p2 size 150995456 extends beyond EOD, truncated [ 2415.492194][ T1211] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2415.720982][ T1211] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2415.910810][T20169] usb 5-1: USB disconnect, device number 18 [ 2415.940734][T20169] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2416.027809][T20169] cp210x 5-1:0.0: device disconnected [ 2416.383056][ T1211] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 2416.544698][ T1211] usb 7-1: config 7 has an invalid interface number: 219 but max is 0 [ 2416.560343][ T1211] usb 7-1: config 7 has no interface number 0 [ 2416.568102][ T1211] usb 7-1: config 7 interface 219 has no altsetting 0 [ 2416.575281][ T1211] usb 7-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=77.a1 [ 2416.584556][ T1211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2416.729744][T25655] overlayfs: failed to clone upperpath [ 2416.799238][ T30] audit: type=1400 audit(1752560477.475:418): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25622 comm="syz.6.4644" daddr=fc00:: dest=20002 [ 2416.817772][ T1211] usb 7-1: string descriptor 0 read error: -71 [ 2416.825807][ T1211] ems_usb 7-1:7.219 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 2416.846907][ T1211] ems_usb 7-1:7.219: probe with driver ems_usb failed with error -22 [ 2416.859786][ T1211] usb 7-1: USB disconnect, device number 9 [ 2417.057024][T25660] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 2417.684820][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bd76c00: rx timeout, send abort [ 2417.695829][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805bd76c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 2418.020932][T25671] netlink: 'syz.6.4662': attribute type 4 has an invalid length. [ 2418.045128][ T30] audit: type=1400 audit(1752560478.695:419): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25670 comm="syz.6.4662" daddr=::ffff:172.20.20.170 [ 2418.523040][ T1162] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2418.545260][T25682] vcan0: tx drop: invalid sa for name 0xbffffffffffffffd [ 2419.484582][T21663] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2419.687568][T21663] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2419.695866][T21663] usb 4-1: config 0 has no interface number 0 [ 2419.702540][T21663] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2419.728547][T21663] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2419.738627][T21663] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 2419.762061][T21663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2419.789951][T21663] usb 4-1: config 0 descriptor?? [ 2420.288809][T21663] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0012/input/input43 [ 2420.677159][T21663] holtek_kbd 0003:04D9:A055.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 2420.801776][T21663] usb 4-1: USB disconnect, device number 56 [ 2421.723706][T25711] loop6: detected capacity change from 0 to 7 [ 2421.743160][T25711] Dev loop6: unable to read RDB block 7 [ 2421.748972][T25711] loop6: unable to read partition table [ 2421.755962][T25711] loop6: partition table beyond EOD, truncated [ 2421.762324][T25711] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2422.664811][T25720] ipvlan0: entered promiscuous mode [ 2424.459332][T25777] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.4699'. [ 2424.469541][T25777] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.4699'. [ 2425.434675][ T30] audit: type=1800 audit(1752560486.115:420): pid=25789 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4704" name="nullb0" dev="tmpfs" ino=3411 res=0 errno=0 [ 2425.470817][ T30] audit: type=1400 audit(1752560486.145:421): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25790 comm="syz.4.4705" daddr=ff02::1 dest=20004 [ 2425.512101][ T30] audit: type=1326 audit(1752560486.185:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25790 comm="syz.4.4705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc573b8e929 code=0x0 [ 2425.675317][T25801] loop2: detected capacity change from 0 to 1 [ 2425.685855][T25801] ldm_validate_privheads(): Disk read failed. [ 2425.692392][T25801] Dev loop2: unable to read RDB block 1 [ 2425.700369][T25801] loop2: AHDI p2 p3 [ 2425.712633][T25801] loop2: partition table partially beyond EOD, truncated [ 2425.722281][T25801] loop2: p3 start 335544320 is beyond EOD, truncated [ 2426.191883][T25812] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.4712'. [ 2426.202005][T25812] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.4712'. [ 2427.144256][T25830] loop2: detected capacity change from 0 to 7 [ 2427.172622][T25830] loop2: [ 2427.179918][T25830] loop2: partition table partially beyond EOD, truncated [ 2427.658135][T25853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4724'. [ 2427.906071][T25857] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.4725'. [ 2427.916059][T25857] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.4725'. [ 2429.483110][T16432] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2429.559838][T25890] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.4738'. [ 2429.570091][T25890] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.4738'. [ 2430.335782][T16432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2430.374381][T16432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2430.401673][T16432] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2430.429929][T16432] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2430.441289][T16432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2430.473810][T16432] usb 5-1: config 0 descriptor?? [ 2430.897493][T16432] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 2430.971493][T16432] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2431.164747][T16432] usb 5-1: USB disconnect, device number 19 [ 2431.173237][T25884] plantronics 0003:047F:FFFF.0013: usb_submit_urb(ctrl) failed: -19 [ 2431.806561][T25909] input: syz0 as /devices/virtual/input/input44 [ 2432.082959][ T30] audit: type=1400 audit(1752560492.765:423): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25921 comm="syz.8.4746" [ 2432.407156][T25932] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.4751'. [ 2432.418412][T25932] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.4751'. [ 2433.245354][ T30] audit: type=1804 audit(1752560493.915:424): pid=25944 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.4756" name="/newroot/115/bus/file0" dev="overlay" ino=639 res=1 errno=0 [ 2433.533881][T25956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4759'. [ 2434.444312][T25981] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.4767'. [ 2434.454516][T25981] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.4767'. [ 2435.390045][T25990] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2435.893589][T16432] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2436.204937][T16432] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2436.216391][T16432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2436.229230][T16432] usb 5-1: config 0 descriptor?? [ 2436.297163][T26018] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.4781'. [ 2436.307350][T26018] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.4781'. [ 2436.464889][ T5902] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2437.346255][ T5902] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2437.378119][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2437.480388][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2437.500995][ T5902] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2437.515810][ T5902] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2437.526926][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2437.624436][ T5902] usb 7-1: config 0 descriptor?? [ 2438.425114][T16432] usb 5-1: Cannot set autoneg [ 2438.430155][T16432] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2438.466784][ T5902] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 2438.541070][T16432] usb 5-1: USB disconnect, device number 20 [ 2438.877727][T26010] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4780'. [ 2439.072433][ T5902] usb 7-1: USB disconnect, device number 10 [ 2439.246544][T26047] lo speed is unknown, defaulting to 1000 [ 2439.257897][T26047] lo speed is unknown, defaulting to 1000 [ 2440.162084][T26077] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4801'. [ 2441.553141][ T5902] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2441.555715][T11186] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2441.760345][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 2441.881944][ T5902] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2442.009394][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2442.241224][ T5902] usb 5-1: config 0 descriptor?? [ 2442.440989][ T5902] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2443.068875][T11186] usb 7-1: Using ep0 maxpacket: 16 [ 2443.090932][T11186] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2443.112976][T11186] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2443.132784][T11186] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2443.159905][T11186] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2443.240235][T11186] usb 7-1: Product: syz [ 2443.274655][T11186] usb 7-1: Manufacturer: syz [ 2443.341532][T11186] usb 7-1: SerialNumber: syz [ 2443.836675][T11186] usb 7-1: 0:2 : does not exist [ 2443.868275][T11186] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2443.906760][T11186] usb 7-1: USB disconnect, device number 11 [ 2444.081884][ T5902] gspca_sunplus: reg_w_riv err -110 [ 2444.087370][ T5902] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 2444.207530][ T30] audit: type=1400 audit(1752560504.885:425): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26114 comm="syz.3.4814" daddr=::ffff:172.20.20.187 [ 2444.927562][T26121] netlink: zone id is out of range [ 2444.935711][T26121] netlink: zone id is out of range [ 2444.941056][T26121] netlink: zone id is out of range [ 2445.188784][T26121] netlink: set zone limit has 4 unknown bytes [ 2445.923834][T21663] usb 5-1: USB disconnect, device number 21 [ 2446.200125][T26130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4818'. [ 2447.047116][ T30] audit: type=1800 audit(1752560507.715:426): pid=26139 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.4825" name="bus" dev="overlay" ino=619 res=0 errno=0 [ 2447.267146][T26150] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2449.214317][T26175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4836'. [ 2450.274424][ T30] audit: type=1400 audit(1752560510.955:427): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26187 comm="syz.8.4840" daddr=ff02::1 [ 2450.512885][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2452.132905][T11186] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2453.102782][T11186] usb 7-1: Using ep0 maxpacket: 16 [ 2453.115339][T11186] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2453.128339][T11186] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2453.188618][T11186] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2453.253004][T26217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4847'. [ 2453.274788][T11186] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2453.397086][T11186] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2453.597382][T11186] usb 7-1: config 0 descriptor?? [ 2454.248021][T11186] HID 045e:07da: Invalid code 65791 type 1 [ 2454.258170][T11186] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0015/input/input46 [ 2454.279064][T11186] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 2454.548613][T11186] usb 7-1: USB disconnect, device number 12 [ 2454.607847][ T30] audit: type=1326 audit(1752560515.285:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26236 comm="syz.2.4857" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe65178e929 code=0x0 [ 2454.653054][T20169] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2454.813027][T20169] usb 5-1: Using ep0 maxpacket: 16 [ 2454.820410][T20169] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2454.830789][T20169] usb 5-1: config 0 has no interface number 0 [ 2454.839797][T20169] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2454.852990][T20169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2454.861237][T20169] usb 5-1: Product: syz [ 2454.865745][T20169] usb 5-1: Manufacturer: syz [ 2454.870496][T20169] usb 5-1: SerialNumber: syz [ 2454.878106][T20169] usb 5-1: config 0 descriptor?? [ 2454.888058][T20169] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2455.819064][T20169] gspca_spca1528: reg_w err -71 [ 2456.363187][T20169] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 2456.381859][T20169] usb 5-1: USB disconnect, device number 22 [ 2457.778850][T26261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4864'. [ 2458.670439][T26272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4870'. [ 2458.710496][T26272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4870'. [ 2458.787970][T26272] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4870'. [ 2459.126581][T26286] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 2460.687486][T26300] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2460.863150][ T5902] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2461.024003][ T5902] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 2461.047446][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2461.103421][ T5902] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2461.167800][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2461.223126][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2461.251966][ T5902] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2461.290718][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2461.318515][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2461.359584][ T5902] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2461.391283][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2461.430887][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2461.486402][ T5902] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2461.542200][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2461.591579][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2461.656398][ T5902] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2461.676620][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2461.737699][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2461.753133][ T5902] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2461.767472][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2461.777283][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2461.787092][ T5902] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2461.798684][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2461.808030][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2461.817549][ T5902] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2461.830675][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2461.841866][ T5902] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2461.851661][ T5902] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2461.862276][ T5902] usb 5-1: Product: syz [ 2461.868640][ T5902] usb 5-1: Manufacturer: syz [ 2461.873768][ T5902] usb 5-1: SerialNumber: syz [ 2461.892087][ T5902] usb 5-1: config 0 descriptor?? [ 2461.906843][ T5902] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 2462.148321][T26298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2462.160850][T26298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2462.178835][T24474] usb 5-1: USB disconnect, device number 23 [ 2462.197245][T24474] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 2462.545659][T26324] kernel read not supported for file /Ù“㎀Dg@]¦¢šeñÎh (pid: 26324 comm: syz.6.4887) [ 2462.556753][ T30] audit: type=1800 audit(1752560523.235:429): pid=26324 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.4887" name=D99310E38E804467405DA6A29A65F1CE1868 dev="mqueue" ino=101712 res=0 errno=0 [ 2462.589524][T21663] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2462.649430][ T30] audit: type=1800 audit(1752560523.325:430): pid=26326 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4888" name="nullb0" dev="tmpfs" ino=3411 res=0 errno=0 [ 2462.677010][ T5902] kernel read not supported for file /Ù“㎀Dg@]¦¢šeñÎh (pid: 5902 comm: kworker/1:3) [ 2462.762952][T21663] usb 4-1: Using ep0 maxpacket: 32 [ 2462.784325][T21663] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2462.809583][T21663] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2462.829451][T21663] usb 4-1: can't read configurations, error -71 [ 2464.165171][T26342] input: syz0 as /devices/virtual/input/input47 [ 2464.521367][T26349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4896'. [ 2465.793775][T21663] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2465.982215][T21663] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2466.042558][T21663] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2466.111937][T21663] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2466.187197][T21663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2466.378246][T26365] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2466.613779][T21663] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2466.971505][T21663] usb 4-1: USB disconnect, device number 59 [ 2467.522853][ T5902] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2467.591091][T26401] lo speed is unknown, defaulting to 1000 [ 2467.600624][T26401] lo speed is unknown, defaulting to 1000 [ 2467.693534][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 2467.702246][ T5902] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 2467.735362][ T5902] usb 5-1: config 0 has no interface number 0 [ 2467.741529][ T5902] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2467.756805][ T5902] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2467.769052][ T5902] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2467.831555][ T5902] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2467.895388][ T5902] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2467.930058][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2467.971269][ T5902] usb 5-1: config 0 descriptor?? [ 2467.986902][ T5902] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2468.256222][T16432] usb 5-1: USB disconnect, device number 24 [ 2468.289587][T26421] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.4921'. [ 2468.299457][T26421] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.4921'. [ 2468.320057][T16432] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 2470.183587][T26418] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4922'. [ 2470.477772][ T30] audit: type=1400 audit(1752560531.155:431): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26428 comm="syz.3.4923" [ 2470.848524][T26451] netlink: 'syz.2.4934': attribute type 12 has an invalid length. [ 2470.856860][T26451] netlink: 'syz.2.4934': attribute type 29 has an invalid length. [ 2470.876286][T26451] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4934'. [ 2470.889460][T26451] netlink: 'syz.2.4934': attribute type 2 has an invalid length. [ 2470.941254][T26451] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4934'. [ 2471.739996][T26465] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2473.126710][T26481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4944'. [ 2474.341533][ T30] audit: type=1400 audit(1752560535.015:432): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26484 comm="syz.6.4945" daddr=fe80::2a dest=20003 [ 2475.104750][T21663] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2476.354810][T21663] usb 4-1: Using ep0 maxpacket: 32 [ 2476.374689][T21663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2476.451714][T21663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2476.483047][T21663] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2476.492144][T21663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2476.533406][T21663] usb 4-1: config 0 descriptor?? [ 2476.699059][T26524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4960'. [ 2476.981307][T21663] savu 0003:1E7D:2D5A.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 2477.409928][T21663] usb 4-1: USB disconnect, device number 60 [ 2478.223480][ T30] audit: type=1400 audit(1752560538.905:433): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26557 comm="syz.6.4975" dest=2 [ 2478.439653][T26562] netlink: 'syz.2.4977': attribute type 1 has an invalid length. [ 2478.512810][ T5902] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2478.676523][ T5902] usb 7-1: config 0 has no interfaces? [ 2478.689696][ T5902] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 2478.707295][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2478.744044][T26562] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2478.761004][ T5902] usb 7-1: Product: syz [ 2478.777767][ T5902] usb 7-1: Manufacturer: syz [ 2478.791254][T26567] bond5: (slave gretap1): making interface the new active one [ 2478.800492][ T5902] usb 7-1: SerialNumber: syz [ 2478.817293][ T5902] usb 7-1: config 0 descriptor?? [ 2478.838083][T26567] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 2479.062566][T24474] usb 7-1: USB disconnect, device number 13 [ 2479.161669][T26574] overlayfs: failed to clone upperpath [ 2482.507521][T13139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2483.274365][ T30] audit: type=1400 audit(1752560543.955:434): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26627 comm="syz.2.5001" daddr=ff02::1 dest=20000 [ 2484.927368][T21663] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2485.133178][T21663] usb 5-1: Using ep0 maxpacket: 16 [ 2485.192846][T21663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2485.236990][T21663] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2485.296628][T21663] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2485.320924][T21663] usb 5-1: Product: syz [ 2485.364899][T21663] usb 5-1: Manufacturer: syz [ 2485.386281][T21663] usb 5-1: SerialNumber: syz [ 2485.461148][T21663] usb 5-1: config 0 descriptor?? [ 2485.578441][T21663] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2485.598664][T21663] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 2486.221748][T21663] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 2486.762774][ T1211] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2487.509853][ T1211] usb 7-1: Using ep0 maxpacket: 16 [ 2487.560260][T21663] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2487.887346][T21663] em28xx 5-1:0.0: board has no eeprom [ 2487.904307][ T1211] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2487.914803][ T1211] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2487.931997][ T1211] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2487.942120][ T1211] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2487.954509][ T1211] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2487.967842][T21663] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2487.976491][T21663] em28xx 5-1:0.0: dvb set to bulk mode. [ 2487.983213][ T1211] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2487.992488][ T1211] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2488.000873][T11186] em28xx 5-1:0.0: Binding DVB extension [ 2488.011072][T21663] usb 5-1: USB disconnect, device number 25 [ 2488.019138][T21663] em28xx 5-1:0.0: Disconnecting em28xx [ 2488.024959][ T1211] usb 7-1: Manufacturer: syz [ 2488.032960][ T1211] usb 7-1: config 0 descriptor?? [ 2488.101567][T11186] em28xx 5-1:0.0: Registering input extension [ 2488.109342][T21663] em28xx 5-1:0.0: Closing input extension [ 2488.139708][T21663] em28xx 5-1:0.0: Freeing device [ 2488.139718][T26670] netlink: 'syz.4.5017': attribute type 4 has an invalid length. [ 2488.407758][T26679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5018'. [ 2488.734799][T11186] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2489.202794][ T1211] rc_core: IR keymap rc-hauppauge not found [ 2489.209283][ T1211] Registered IR keymap rc-empty [ 2489.214902][ T1211] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2489.232883][ T1211] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2489.253574][ T1211] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 2489.267481][ T1211] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input49 [ 2489.285965][ T1211] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2489.293827][T11186] usb 4-1: Using ep0 maxpacket: 32 [ 2489.305865][T11186] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2489.316447][ T1211] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2489.329240][T11186] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2489.340653][T11186] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2489.349261][ T1211] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2489.356684][T11186] usb 4-1: Product: syz [ 2489.361306][T11186] usb 4-1: Manufacturer: syz [ 2489.366319][T11186] usb 4-1: SerialNumber: syz [ 2489.375148][T11186] usb 4-1: config 0 descriptor?? [ 2489.381289][T26671] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2489.389015][ T1211] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2489.404919][T11186] hub 4-1:0.0: bad descriptor, ignoring hub [ 2489.413483][T11186] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2489.433639][ T1211] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2489.474517][ T1211] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2489.642965][ T1211] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2489.683703][ T1211] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2489.720257][ T1211] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2489.783451][ T1211] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2489.807601][ T1211] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2489.847224][ T1211] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2489.884180][ T1211] usb 7-1: USB disconnect, device number 14 [ 2490.584937][T26671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2490.636036][T26671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2490.773076][T11186] usb 4-1: USB disconnect, device number 61 [ 2490.820602][T26696] binder: 26695:26696 ioctl c0306201 200000000240 returned -14 [ 2491.367382][T26713] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5028'. [ 2493.583218][T16432] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 2494.078063][T16432] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2494.088184][T16432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2494.139861][T16432] usb 5-1: config 0 descriptor?? [ 2495.030197][ T30] audit: type=1400 audit(1752560555.705:435): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26776 comm="syz.2.5051" daddr=::ffff:172.20.20.170 dest=20000 [ 2495.532044][T11186] IPVS: starting estimator thread 0... [ 2495.551167][T26791] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2495.622837][T26796] IPVS: using max 32 ests per chain, 76800 per kthread [ 2495.847479][T16432] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2495.870176][T16432] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 2495.903588][T16432] asix 5-1:0.0: probe with driver asix failed with error -71 [ 2495.920965][T16432] usb 5-1: USB disconnect, device number 26 [ 2496.132094][T26820] netlink: 'syz.2.5067': attribute type 39 has an invalid length. [ 2496.540373][ T30] audit: type=1326 audit(1752560557.195:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26826 comm="syz.2.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65178e929 code=0x7ffc0000 [ 2496.570773][ T30] audit: type=1326 audit(1752560557.195:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26826 comm="syz.2.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65178e929 code=0x7ffc0000 [ 2496.595216][ T30] audit: type=1326 audit(1752560557.205:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26826 comm="syz.2.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe65178e929 code=0x7ffc0000 [ 2496.618905][ T30] audit: type=1326 audit(1752560557.205:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26826 comm="syz.2.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65178e929 code=0x7ffc0000 [ 2496.652405][ T30] audit: type=1326 audit(1752560557.205:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26826 comm="syz.2.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65178e929 code=0x7ffc0000 [ 2496.690355][T26832] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.5069'. [ 2496.700298][T26832] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.5069'. [ 2497.524161][T26829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5071'. [ 2497.581080][ T30] audit: type=1326 audit(1752560557.205:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26826 comm="syz.2.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe65178e929 code=0x7ffc0000 [ 2498.573580][ T30] audit: type=1326 audit(1752560559.255:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26826 comm="syz.2.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65178e929 code=0x7ffc0000 [ 2498.772023][ T30] audit: type=1326 audit(1752560559.255:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26826 comm="syz.2.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65178e929 code=0x7ffc0000 [ 2500.585976][T26869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5082'. [ 2501.939765][T26887] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5083'. [ 2501.950143][T26887] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5083'. [ 2503.313775][T26905] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5091'. [ 2503.324005][T26905] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5091'. [ 2504.051795][T26908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5093'. [ 2505.692395][T16341] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2505.995901][T16341] usb 7-1: config index 0 descriptor too short (expected 34, got 18) [ 2506.019183][T16341] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2506.052093][T16341] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2506.096629][T26939] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.5104'. [ 2506.106904][T26939] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.5104'. [ 2506.383248][T16341] usb 7-1: Product: syz [ 2506.463385][T16341] usb 7-1: Manufacturer: syz [ 2506.537439][T16341] usb 7-1: SerialNumber: syz [ 2506.614271][T16341] usb 7-1: config 0 descriptor?? [ 2506.874499][T26944] overlayfs: failed to clone upperpath [ 2506.931916][ T30] audit: type=1400 audit(1752560567.605:444): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26945 comm="syz.3.5108" dest=2 [ 2508.316416][T16341] usb-storage 7-1:0.0: USB Mass Storage device detected [ 2508.369675][T26972] netlink: 'syz.4.5116': attribute type 1 has an invalid length. [ 2508.380587][T26972] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5116'. [ 2508.411202][T16341] usb 7-1: USB disconnect, device number 15 [ 2508.422455][T26972] netlink: 'syz.4.5116': attribute type 2 has an invalid length. [ 2508.440834][T26972] netlink: 'syz.4.5116': attribute type 1 has an invalid length. [ 2509.634566][T26983] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5117'. [ 2509.644351][T26983] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5117'. [ 2511.309049][ T30] audit: type=1800 audit(1752560571.985:445): pid=27015 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5129" name="bus" dev="tmpfs" ino=8099 res=0 errno=0 [ 2511.371198][T27020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5130'. [ 2512.099871][T27040] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5135'. [ 2512.110076][T27040] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5135'. [ 2514.504167][T12971] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2515.112791][ T5902] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2515.283001][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 2515.301083][ T5902] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2515.338226][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2515.359665][ T5902] usb 5-1: Product: syz [ 2515.368700][ T5902] usb 5-1: Manufacturer: syz [ 2515.378880][ T5902] usb 5-1: SerialNumber: syz [ 2515.392256][ T5902] usb 5-1: config 0 descriptor?? [ 2515.623608][ T5902] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2516.304053][T20169] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 2516.435294][T20169] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2516.527478][ T5902] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2516.611383][ T5902] usb 5-1: USB disconnect, device number 27 [ 2517.512916][T20169] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2517.846324][T20169] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2517.892952][T20169] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2517.924224][T20169] usb 7-1: config 0 descriptor?? [ 2517.941757][T20169] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2518.449147][T27157] kvm: kvm [27156]: vcpu2, guest rIP: 0x292 Unhandled WRMSR(0xc1) = 0xfb0000000000 [ 2518.481289][T27157] kvm: kvm [27156]: vcpu2, guest rIP: 0x292 Unhandled WRMSR(0xc2) = 0x6f0000000000 [ 2518.496811][T27157] kvm: kvm [27156]: vcpu2, guest rIP: 0x292 Unhandled WRMSR(0xc1) = 0x6f0000000000 [ 2518.537528][T27157] kvm: kvm [27156]: vcpu2, guest rIP: 0x292 Unhandled WRMSR(0xc1) = 0x6f0000000000 [ 2518.572284][T27157] kvm: kvm [27156]: vcpu2, guest rIP: 0x292 Unhandled WRMSR(0xc2) = 0x6f0000000000 [ 2518.584573][T27157] kvm: kvm [27156]: vcpu2, guest rIP: 0x292 Unhandled WRMSR(0xc1) = 0x6f0000000000 [ 2518.595902][T27157] kvm: kvm [27156]: vcpu2, guest rIP: 0x292 Unhandled WRMSR(0xc2) = 0x670000000000 [ 2518.605956][T27157] kvm: kvm [27156]: vcpu2, guest rIP: 0x292 Unhandled WRMSR(0xc2) = 0xa300006762 [ 2519.046438][T16341] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2519.187977][T20169] gspca_stv06xx: I2C: Read error writing address: -71 [ 2519.198946][T20169] usb 7-1: USB disconnect, device number 16 [ 2519.214685][T16341] usb 4-1: config 0 has no interfaces? [ 2519.221613][T16341] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2519.232538][T16341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2519.247138][T16341] usb 4-1: config 0 descriptor?? [ 2519.465248][T27162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2519.479391][T27162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2519.490712][T16341] usb 4-1: USB disconnect, device number 62 [ 2519.892804][T16341] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2519.933647][T24474] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2520.047005][T16341] usb 5-1: Using ep0 maxpacket: 32 [ 2520.056929][T16341] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 2520.077248][T16341] usb 5-1: config 0 has no interface number 0 [ 2520.089848][T16341] usb 5-1: config 0 interface 12 has no altsetting 0 [ 2520.092951][T24474] usb 4-1: Using ep0 maxpacket: 16 [ 2520.104953][T16341] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2520.120532][T16341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2520.130877][T16341] usb 5-1: Product: syz [ 2520.131136][T24474] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2520.142066][T16341] usb 5-1: Manufacturer: syz [ 2520.151040][T16341] usb 5-1: SerialNumber: syz [ 2520.165107][T16341] usb 5-1: config 0 descriptor?? [ 2520.176120][T24474] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2520.196591][T24474] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 2520.212741][T24474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2520.230273][T24474] usb 4-1: Product: syz [ 2520.242823][T24474] usb 4-1: Manufacturer: syz [ 2520.247504][T24474] usb 4-1: SerialNumber: syz [ 2520.350154][ T30] audit: type=1400 audit(1752560581.025:446): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27193 comm="syz.2.5191" [ 2520.687991][T24474] usb 4-1: 0:2 : does not exist [ 2521.312279][T24474] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 2521.357850][T24474] usb 4-1: USB disconnect, device number 63 [ 2521.414625][T16341] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 2521.429995][T16341] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 2521.440971][T16341] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2521.470736][T16341] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 2521.508586][T16341] usb 5-1: USB disconnect, device number 28 [ 2522.164553][T20169] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2522.332930][T20169] usb 7-1: Using ep0 maxpacket: 8 [ 2522.367145][T20169] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2522.387107][T20169] usb 7-1: config 3 has an invalid interface number: 173 but max is 2 [ 2522.413275][T20169] usb 7-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 2522.440633][T20169] usb 7-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 2522.450181][T20169] usb 7-1: config 3 has no interface number 0 [ 2522.457487][T20169] usb 7-1: config 3 interface 173 altsetting 221 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 2522.471448][T20169] usb 7-1: config 3 interface 173 has no altsetting 0 [ 2522.487859][T20169] usb 7-1: string descriptor 0 read error: -22 [ 2522.495364][T20169] usb 7-1: New USB device found, idVendor=22b8, idProduct=2d9a, bcdDevice=ed.44 [ 2522.505522][T20169] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2522.650276][ T30] audit: type=1400 audit(1752560583.325:447): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27250 comm="syz.2.5213" dest=2 [ 2522.717528][T27251] xt_CT: No such helper "syz1" [ 2522.813946][T20169] usb 7-1: USB disconnect, device number 17 [ 2525.270370][ T30] audit: type=1400 audit(1752560585.945:448): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27298 comm="syz.2.5230" daddr=2001:: dest=20000 [ 2525.293207][ T30] audit: type=1400 audit(1752560585.975:449): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27298 comm="syz.2.5230" daddr=2001:: [ 2525.471876][T27303] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5233'. [ 2525.645814][T27305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5234'. [ 2525.712976][T11186] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2525.883057][T11186] usb 4-1: Using ep0 maxpacket: 32 [ 2525.897135][T11186] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2525.925542][T11186] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2525.950880][T11186] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2525.974980][T11186] usb 4-1: Product: syz [ 2525.979236][T11186] usb 4-1: Manufacturer: syz [ 2526.002092][T11186] usb 4-1: SerialNumber: syz [ 2526.031273][T11186] usb 4-1: config 0 descriptor?? [ 2526.053626][T27302] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2526.232923][T20169] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2526.298593][T11186] usb 4-1: USB disconnect, device number 64 [ 2526.404604][T20169] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2526.415901][T20169] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2526.422545][T27328] syz_tun: entered allmulticast mode [ 2526.429607][T20169] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2526.452791][T20169] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2526.456746][T27327] syz_tun: left allmulticast mode [ 2526.487192][T20169] usb 7-1: config 0 descriptor?? [ 2526.762774][T24474] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 2526.925198][T24474] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2526.940372][T24474] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2526.970280][T24474] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2526.981450][T24474] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2526.996104][T24474] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2527.011549][T24474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2527.026202][T24474] usb 4-1: config 0 descriptor?? [ 2527.357308][T20169] hid-led 0003:27B8:01ED.0018: probe with driver hid-led failed with error -32 [ 2527.372198][T20169] usb 7-1: USB disconnect, device number 18 [ 2527.406716][T27346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2527.477019][T27346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2527.579026][T27346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2527.632519][ T30] audit: type=1326 audit(1752560588.305:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27348 comm="syz.4.5251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc573b8e929 code=0x0 [ 2528.001487][T24474] usbhid 4-1:0.0: can't add hid device: -71 [ 2528.011843][T24474] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2528.025559][T24474] usb 4-1: USB disconnect, device number 65 [ 2528.950749][T27381] lo speed is unknown, defaulting to 1000 [ 2528.952498][T27381] lo speed is unknown, defaulting to 1000 [ 2529.072758][ T5902] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2529.236007][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2529.257948][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2529.270271][ T5902] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2529.289868][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2529.309509][ T5902] usb 5-1: config 0 descriptor?? [ 2529.737348][ T5902] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 2529.826346][ T5902] cp2112 0003:10C4:EA90.0019: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 2529.946538][ T30] audit: type=1400 audit(1752560590.625:451): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27401 comm="syz.3.5270" [ 2529.974227][ T5902] cp2112 0003:10C4:EA90.0019: Part Number: 0x82 Device Version: 0xFE [ 2530.120230][T27408] loop2: detected capacity change from 0 to 7 [ 2530.142737][T27408] loop2: [ 2530.145791][T27408] loop2: partition table partially beyond EOD, truncated [ 2530.442875][T11186] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2530.608493][T27374] cp2112 0003:10C4:EA90.0019: Error starting transaction: -38 [ 2530.619343][ T5902] cp2112 0003:10C4:EA90.0019: error reading lock byte: -32 [ 2530.622930][T11186] usb 7-1: Using ep0 maxpacket: 32 [ 2530.634972][T11186] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2530.641663][T11186] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2530.659538][ T5902] usb 5-1: USB disconnect, device number 29 [ 2530.659718][T11186] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2530.679140][T11186] usb 7-1: config 0 descriptor?? [ 2531.258770][T11186] usbhid 7-1:0.0: can't add hid device: -71 [ 2531.303186][T11186] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2531.353569][T11186] usb 7-1: USB disconnect, device number 19 [ 2533.103878][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2533.162437][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2533.176914][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2533.390446][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2533.404122][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2533.415448][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2533.708333][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2533.758770][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2533.799936][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2534.393644][T20445] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2534.407408][T20445] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2534.438145][T20445] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2534.508579][T20445] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2534.517602][T20445] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2536.583617][T20445] Bluetooth: hci0: command tx timeout [ 2537.856787][ T12] team0: Port device bond0 removed [ 2537.879829][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2537.973585][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2538.048089][ T12] bond0 (unregistering): Released all slaves [ 2538.138945][ T12] bond1 (unregistering): Released all slaves [ 2538.338362][T27508] lo speed is unknown, defaulting to 1000 [ 2538.359653][ T12] tipc: Left network mode [ 2538.373634][T27449] lo speed is unknown, defaulting to 1000 [ 2538.385554][T27508] lo speed is unknown, defaulting to 1000 [ 2538.429404][T27449] lo speed is unknown, defaulting to 1000 [ 2538.468911][ T12] IPVS: stopping master sync thread 12798 ... [ 2538.664609][T20445] Bluetooth: hci0: command tx timeout [ 2538.922646][ T12] hsr_slave_0: left promiscuous mode [ 2538.939093][ T12] hsr_slave_1: left promiscuous mode [ 2539.011374][ T12] veth1_macvtap: left promiscuous mode [ 2539.030203][ T12] veth1_vlan: left promiscuous mode [ 2539.048610][ T12] veth0_vlan: left promiscuous mode [ 2539.435471][ T12] pim6reg (unregistering): left allmulticast mode [ 2540.539503][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2540.646572][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2540.745699][T20445] Bluetooth: hci0: command tx timeout [ 2541.267157][T16432] lo speed is unknown, defaulting to 1000 [ 2541.279119][T16432] syz0: Port: 1 Link DOWN [ 2541.595587][ T30] audit: type=1400 audit(1752560602.265:452): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27574 comm="syz.6.5332" dest=2 [ 2541.681095][T27449] chnl_net:caif_netlink_parms(): no params data found [ 2541.923192][T16432] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2542.022158][ T12] IPVS: stop unused estimator thread 0... [ 2542.059213][T27587] overlayfs: failed to clone lowerpath [ 2542.086220][T27587] overlayfs: failed to clone upperpath [ 2542.106625][T27449] bridge0: port 1(bridge_slave_0) entered blocking state [ 2542.115145][T16432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2542.140746][T27449] bridge0: port 1(bridge_slave_0) entered disabled state [ 2542.149008][T16432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2542.162280][T27449] bridge_slave_0: entered allmulticast mode [ 2542.170307][T16432] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2542.181793][T27449] bridge_slave_0: entered promiscuous mode [ 2542.193710][T16432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2542.214182][T27449] bridge0: port 2(bridge_slave_1) entered blocking state [ 2542.221539][T27449] bridge0: port 2(bridge_slave_1) entered disabled state [ 2542.232378][T27449] bridge_slave_1: entered allmulticast mode [ 2542.233650][T16432] usb 5-1: config 0 descriptor?? [ 2542.248896][T27449] bridge_slave_1: entered promiscuous mode [ 2542.416620][T27449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2542.431873][T27449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2542.607500][T27449] team0: Port device team_slave_0 added [ 2542.619192][T27449] team0: Port device team_slave_1 added [ 2542.689472][T27449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2542.698317][T27449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2542.724269][ C1] vkms_vblank_simulate: vblank timer overrun [ 2542.741699][T27449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2542.753563][T16432] hid-steam 0003:28DE:1142.001A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 2542.773017][T27449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2542.783343][T27449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2542.811857][T27449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2542.823474][T20445] Bluetooth: hci0: command tx timeout [ 2542.836330][T16432] hid-steam 0003:28DE:1142.001A: Steam wireless receiver connected [ 2542.860283][T16432] hid-steam 0003:28DE:1142.001B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 2542.956014][T27449] hsr_slave_0: entered promiscuous mode [ 2542.976458][T27449] hsr_slave_1: entered promiscuous mode [ 2543.580786][T27619] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2544.481812][T27633] loop2: detected capacity change from 0 to 7 [ 2544.509730][T27633] loop2: [ 2544.514669][T27633] loop2: partition table partially beyond EOD, truncated [ 2544.632556][T27449] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2544.653893][T27449] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2544.672843][T16432] usb 5-1: USB disconnect, device number 30 [ 2544.690494][T27449] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2544.703756][T16432] hid-steam 0003:28DE:1142.001A: Steam wireless receiver disconnected [ 2544.718110][T27449] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2544.847343][T27647] tipc: Enabling of bearer rejected, failed to enable media [ 2544.920826][T27449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2544.964729][T27449] 8021q: adding VLAN 0 to HW filter on device team0 [ 2544.985610][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 2544.992913][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2545.023690][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 2545.031062][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2545.306374][T27449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2545.626830][T27449] veth0_vlan: entered promiscuous mode [ 2545.642399][T27449] veth1_vlan: entered promiscuous mode [ 2545.675268][T27449] veth0_macvtap: entered promiscuous mode [ 2545.687414][T27449] veth1_macvtap: entered promiscuous mode [ 2545.747229][T27449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2545.770534][T27449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2545.801808][T27449] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2545.808618][T27673] overlayfs: failed to clone upperpath [ 2545.812117][T27449] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2545.827391][T27449] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2545.836806][T27449] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2546.509657][T12971] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2547.324725][T18867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2547.350599][T18867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2547.410537][T18867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2547.563416][T18867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2548.353264][T27690] syz_tun: entered allmulticast mode [ 2548.430834][T27689] syz_tun: left allmulticast mode [ 2548.492928][ T5902] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2548.727860][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 2548.738635][ T5902] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2548.760428][ T5902] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2548.799195][ T5902] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2548.820458][ T5902] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2548.852889][ T5902] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2548.867559][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2549.091070][ T5902] usb 5-1: GET_CAPABILITIES returned 0 [ 2549.114957][T27709] lo speed is unknown, defaulting to 1000 [ 2549.125590][ T5902] usbtmc 5-1:16.0: can't read capabilities [ 2549.570408][ T1211] usb 5-1: USB disconnect, device number 31 [ 2549.915202][T27721] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5379'. [ 2549.943967][T27718] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5379'. [ 2551.992947][ T30] audit: type=1400 audit(1752560612.665:453): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=27753 comm="syz.7.5392" saddr=9e9a:ce5f:fb2e:9fc6:3dd:2821:0:2 daddr=ff02::1 [ 2552.027094][T27756] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5388'. [ 2552.686531][T27778] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5399'. [ 2552.697375][T27778] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5399'. [ 2553.236093][T27777] kvm: vcpu 0: requested 3584 ns lapic timer period limited to 200000 ns [ 2553.952800][T24474] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 2554.322535][T24474] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2554.341529][T24474] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2554.352868][T24474] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2554.362729][T24474] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2554.375885][T24474] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2554.385049][T24474] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2554.395465][T24474] usb 8-1: config 0 descriptor?? [ 2554.657990][T27801] Bluetooth: (null): Invalid header checksum [ 2554.845966][T27809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5412'. [ 2554.867129][T24474] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2555.709415][T27823] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5414'. [ 2555.719561][T27823] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5414'. [ 2557.343594][T24474] usb 8-1: USB disconnect, device number 2 [ 2558.690809][T27860] netlink: 4268 bytes leftover after parsing attributes in process `syz.7.5428'. [ 2558.701077][T27860] netlink: 4268 bytes leftover after parsing attributes in process `syz.7.5428'. [ 2559.460359][T27864] input: syz1 as /devices/virtual/input/input51 [ 2560.095885][T27868] kvm: emulating exchange as write [ 2562.093072][T27915] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5439'. [ 2562.103454][T27915] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5439'. [ 2562.278478][T20445] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 2564.185284][ T30] audit: type=1400 audit(1752560625.861:454): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27927 comm="syz.7.5447" daddr=ff01::1 dest=20000 [ 2564.242782][T20169] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2564.267242][T27934] lo speed is unknown, defaulting to 1000 [ 2564.402749][T20169] usb 7-1: Using ep0 maxpacket: 32 [ 2564.411253][T20169] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2564.428899][T20169] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2564.439234][T20169] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2564.448891][T20169] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2564.460473][T20169] usb 7-1: config 0 descriptor?? [ 2564.468858][T20169] hub 7-1:0.0: USB hub found [ 2564.748123][T20169] hub 7-1:0.0: 1 port detected [ 2565.338546][T27958] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5453'. [ 2565.349402][T27958] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5453'. [ 2566.477700][T24474] usb 7-1: USB disconnect, device number 20 [ 2567.033347][T20169] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 2567.067829][T27955] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5455'. [ 2567.379448][T27961] tipc: Started in network mode [ 2567.385109][T27961] tipc: Node identity 1ebd536e7629, cluster identity 4711 [ 2567.393298][T27961] tipc: Enabled bearer , priority 0 [ 2567.450279][T27961] syzkaller0: entered promiscuous mode [ 2567.458557][T27961] syzkaller0: entered allmulticast mode [ 2567.469749][T27961] tipc: Resetting bearer [ 2567.479419][T27966] dummy0: left allmulticast mode [ 2567.484961][T27966] dummy0: left promiscuous mode [ 2567.494032][T27966] bridge0: port 4(dummy0) entered disabled state [ 2567.505347][T27965] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2567.555014][T27960] tipc: Resetting bearer [ 2568.415495][ T1211] tipc: Node number set to 1754551150 [ 2568.655356][T27986] overlayfs: failed to resolve './file0': -2 [ 2569.438274][T27993] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5466'. [ 2569.447680][T27993] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5466'. [ 2570.672890][ T30] audit: type=1800 audit(1752560632.301:455): pid=28011 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.5473" name="/" dev="fuse" ino=0 res=0 errno=0 [ 2575.564952][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807020f400: rx timeout, send abort [ 2575.575307][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807020e400: rx timeout, send abort [ 2575.584233][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807020f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2575.598694][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807020e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2576.216546][T27960] tipc: Disabling bearer [ 2576.334077][ T30] audit: type=1400 audit(1752560638.001:456): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=28050 comm="syz.4.5487" daddr=::ffff:172.20.20.20 dest=20001 [ 2576.418564][T28054] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2576.567170][T28058] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2576.685991][ T30] audit: type=1400 audit(1752560638.281:457): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=28057 comm="syz.4.5491" daddr=fc02::ff [ 2578.511658][T18867] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2578.978939][T28091] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5498'. [ 2578.989126][T28091] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5498'. [ 2579.002840][T16432] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2579.355341][T16432] usb 5-1: Using ep0 maxpacket: 16 [ 2579.436830][T16432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2579.491420][T16432] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2579.519248][T16432] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2579.540226][T16432] usb 5-1: Product: syz [ 2579.548458][T16432] usb 5-1: Manufacturer: syz [ 2579.559338][T16432] usb 5-1: SerialNumber: syz [ 2579.575086][T16432] usb 5-1: config 0 descriptor?? [ 2579.587007][T16432] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2579.597901][T16432] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 2580.201604][T16432] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 2580.817683][T28122] overlayfs: failed to clone upperpath [ 2581.029067][T16432] em28xx 5-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 2581.037921][T16432] em28xx 5-1:0.0: failed to read eeprom (err=-5) [ 2581.059796][T16432] em28xx 5-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 2581.119249][T28128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5513'. [ 2581.142901][T16432] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2581.160902][T16432] em28xx 5-1:0.0: dvb set to bulk mode. [ 2581.188635][T20169] em28xx 5-1:0.0: Binding DVB extension [ 2581.211350][T16432] usb 5-1: USB disconnect, device number 32 [ 2581.230468][T16432] em28xx 5-1:0.0: Disconnecting em28xx [ 2581.295564][T28137] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5516'. [ 2581.380331][T20169] em28xx 5-1:0.0: Registering input extension [ 2581.417648][T16432] em28xx 5-1:0.0: Closing input extension [ 2581.471166][T16432] em28xx 5-1:0.0: Freeing device [ 2582.483083][ T5836] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2582.658499][ T5836] usb 5-1: config index 0 descriptor too short (expected 34, got 18) [ 2582.671102][ T5836] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2582.681087][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2582.692039][ T5836] usb 5-1: Product: syz [ 2582.696981][ T5836] usb 5-1: Manufacturer: syz [ 2582.701924][ T5836] usb 5-1: SerialNumber: syz [ 2582.711513][ T5836] usb 5-1: config 0 descriptor?? [ 2582.783231][T24474] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 2582.923316][T28187] netlink: 'syz.2.5525': attribute type 15 has an invalid length. [ 2582.956126][T24474] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2583.000546][T24474] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2583.026455][T24474] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2583.044976][T24474] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2583.062042][T24474] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2583.109233][T24474] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2583.136473][T24474] usb 8-1: config 0 descriptor?? [ 2583.278733][ T5836] usb-storage 5-1:0.0: USB Mass Storage device detected [ 2583.349461][ T5836] usb 5-1: USB disconnect, device number 33 [ 2583.576232][T24474] plantronics 0003:047F:FFFF.001D: ignoring exceeding usage max [ 2583.600350][T24474] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2583.689838][ T30] audit: type=1326 audit(1752560645.361:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28209 comm="syz.8.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f3912ab19 code=0x7ffc0000 [ 2583.712235][ T30] audit: type=1326 audit(1752560645.391:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28209 comm="syz.8.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f3912ab19 code=0x7ffc0000 [ 2583.736225][ T30] audit: type=1326 audit(1752560645.421:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28209 comm="syz.8.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f3912ab19 code=0x7ffc0000 [ 2583.759612][ T30] audit: type=1326 audit(1752560645.441:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28209 comm="syz.8.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f3912ab19 code=0x7ffc0000 [ 2583.782292][ T30] audit: type=1326 audit(1752560645.461:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28209 comm="syz.8.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f3912ab19 code=0x7ffc0000 [ 2583.856407][ T30] audit: type=1326 audit(1752560645.531:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28209 comm="syz.8.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3918e929 code=0x7ffc0000 [ 2583.892650][ T30] audit: type=1326 audit(1752560645.561:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28209 comm="syz.8.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f3912ab19 code=0x7ffc0000 [ 2583.915405][ T30] audit: type=1326 audit(1752560645.601:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28209 comm="syz.8.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f3912ab19 code=0x7ffc0000 [ 2583.938589][ T30] audit: type=1326 audit(1752560645.621:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28209 comm="syz.8.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f3912ab19 code=0x7ffc0000 [ 2585.115729][T28227] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5535'. [ 2585.125798][T28227] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5535'. [ 2585.837743][T24474] usb 8-1: USB disconnect, device number 3 [ 2586.356502][T28238] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5536'. [ 2586.366869][T28238] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5536'. [ 2587.336847][T28245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5542'. [ 2587.356955][T28245] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 2587.393767][T28245] bridge0: port 3(netdevsim0) entered disabled state [ 2587.834291][T28245] bridge_slave_1: left allmulticast mode [ 2587.847587][T28245] bridge_slave_1: left promiscuous mode [ 2587.875308][T28245] bridge0: port 2(bridge_slave_1) entered disabled state [ 2588.307076][T28260] netlink: 4268 bytes leftover after parsing attributes in process `syz.7.5546'. [ 2588.317416][T28260] netlink: 4268 bytes leftover after parsing attributes in process `syz.7.5546'. [ 2589.203468][T28245] bridge_slave_0: left allmulticast mode [ 2589.269522][T28245] bridge_slave_0: left promiscuous mode [ 2589.309061][T28245] bridge0: port 1(bridge_slave_0) entered disabled state [ 2589.432771][ T30] audit: type=1800 audit(1752560651.111:467): pid=28265 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.5548" name="file1" dev="tmpfs" ino=228 res=0 errno=0 [ 2591.579900][T28293] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.5555'. [ 2591.590014][T28293] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.5555'. [ 2592.315259][T28296] netlink: 'syz.6.5560': attribute type 4 has an invalid length. [ 2592.362457][T28296] netlink: 'syz.6.5560': attribute type 4 has an invalid length. [ 2592.545468][T28300] netlink: 4268 bytes leftover after parsing attributes in process `syz.7.5558'. [ 2592.555645][T28300] netlink: 4268 bytes leftover after parsing attributes in process `syz.7.5558'. [ 2594.245596][T28325] geneve2: entered allmulticast mode [ 2595.646560][T28349] netlink: 4268 bytes leftover after parsing attributes in process `syz.7.5573'. [ 2595.656330][T28349] netlink: 4268 bytes leftover after parsing attributes in process `syz.7.5573'. [ 2595.715332][T28350] overlayfs: failed to clone upperpath [ 2595.783749][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2595.825590][T28352] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5571'. [ 2595.835595][T28352] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5571'. [ 2596.752785][ T30] audit: type=1400 audit(1752560658.411:468): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=28360 comm="syz.7.5580" daddr=::ffff:0.0.0.0 [ 2598.764890][T28377] vxfs: WRONG superblock magic 00000000 at 1 [ 2598.772970][T28377] vxfs: WRONG superblock magic 00000000 at 8 [ 2598.779277][T28377] vxfs: can't find superblock. [ 2598.882053][T28369] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2599.005775][T20169] Process accounting resumed [ 2599.029361][T28369] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2599.163892][T28369] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2599.383538][T28375] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2599.395452][T28375] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2599.401547][T28375] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2599.431965][T28375] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2599.448391][T28375] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2600.009681][T28397] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5590'. [ 2600.020282][T28397] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5590'. [ 2600.333936][T28400] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5591'. [ 2600.343943][T28400] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5591'. [ 2600.614597][T28369] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2600.797183][T28375] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2601.068308][T12903] Bluetooth: hci3: command 0x0405 tx timeout [ 2601.404396][T28369] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2601.487738][T12903] Bluetooth: hci0: command 0x0c1a tx timeout [ 2601.494420][T12903] Bluetooth: hci1: command 0x0c1a tx timeout [ 2601.500736][T12903] Bluetooth: hci2: command 0x0c1a tx timeout [ 2602.156987][T28369] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2602.270564][T28369] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2602.416278][T28369] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2602.474102][T28423] netlink: 'syz.2.5597': attribute type 4 has an invalid length. [ 2602.532292][T28423] netlink: 'syz.2.5597': attribute type 4 has an invalid length. [ 2603.173009][T28443] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5604'. [ 2603.183162][T28443] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5604'. [ 2603.555376][T20445] Bluetooth: hci0: command 0x0c1a tx timeout [ 2603.992035][T28451] overlayfs: failed to resolve './file0': -2 [ 2604.825082][T28464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5611'. [ 2605.031128][T28464] team0: Port device team_slave_0 removed [ 2605.633384][T20445] Bluetooth: hci0: command 0x0c1a tx timeout [ 2605.780768][T28473] binder: 28471:28473 ioctl c0306201 200000001a80 returned -14 [ 2606.142715][T24474] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2606.309668][T24474] usb 7-1: Using ep0 maxpacket: 32 [ 2606.321198][T24474] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 2606.337622][T24474] usb 7-1: config 0 has no interface number 0 [ 2606.349639][T24474] usb 7-1: config 0 interface 184 has no altsetting 0 [ 2606.451257][T28484] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5617'. [ 2606.460804][T28484] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5617'. [ 2607.135021][T24474] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2607.150310][T24474] usb 7-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 2607.159088][T24474] usb 7-1: Product: syz [ 2607.164669][T24474] usb 7-1: Manufacturer: syz [ 2607.169329][T24474] usb 7-1: SerialNumber: syz [ 2607.177150][T24474] usb 7-1: config 0 descriptor?? [ 2607.185005][T24474] smsc75xx v1.0.0 [ 2607.443341][T28500] input: syz1 as /devices/virtual/input/input53 [ 2608.502779][ T1211] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2608.595625][T24474] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2608.640098][T24474] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2608.773740][ T1211] usb 5-1: Using ep0 maxpacket: 8 [ 2608.788642][ T1211] usb 5-1: config 0 has no interfaces? [ 2608.813797][ T1211] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=a9.dc [ 2608.837164][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2608.846326][ T1211] usb 5-1: Product: syz [ 2608.850726][ T1211] usb 5-1: Manufacturer: syz [ 2608.856927][ T1211] usb 5-1: SerialNumber: syz [ 2608.862931][T28515] batman_adv: batadv0: Adding interface: dummy0 [ 2608.877687][T28515] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2608.903741][T28515] batman_adv: batadv0: Interface activated: dummy0 [ 2608.912319][ T1211] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2608.919343][ T1211] r8152-cfgselector 5-1: config 0 descriptor?? [ 2608.923417][T28517] batadv0: mtu less than device minimum [ 2608.934061][T28517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2608.946977][T28517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2608.959035][T28517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2608.971089][T28517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2608.983144][T28517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2608.995142][T28517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2609.007178][T28517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2609.019187][T28517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2609.031303][T28517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2609.426568][T20169] r8152-cfgselector 5-1: USB disconnect, device number 34 [ 2609.529794][T28528] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5634'. [ 2609.540057][T28528] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5634'. [ 2609.996975][T24474] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2610.154250][T24474] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2610.167335][T24474] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2610.177627][T24474] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 2610.192463][T24474] usb 7-1: USB disconnect, device number 21 [ 2610.299429][T28533] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2610.370005][T28538] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5639'. [ 2610.412764][ T30] audit: type=1326 audit(1752560672.091:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28537 comm="syz.2.5638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe65178e929 code=0x0 [ 2610.466330][T28542] overlayfs: bad index found (index=index/00fb210001d0157409ba6348aca2161f92163baf408fa1b543d505000000000000, ftype=2000, origin ftype=8000). [ 2610.516857][T18867] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2610.631615][T20445] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 2611.212187][T28566] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.5649'. [ 2611.222749][T28566] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.5649'. [ 2613.692832][T28592] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5659'. [ 2613.791915][T28596] netlink: 'syz.2.5660': attribute type 1 has an invalid length. [ 2613.884151][T28596] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2613.899848][T28601] vlan0: entered allmulticast mode [ 2613.906357][T28601] veth1: entered allmulticast mode [ 2613.917597][T28601] bond6: (slave vlan0): making interface the new active one [ 2613.928639][T28601] bond6: (slave vlan0): Enslaving as an active interface with an up link [ 2613.966483][ T30] audit: type=1400 audit(1752560675.641:470): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=28598 comm="syz.8.5661" [ 2614.002478][ T30] audit: type=1400 audit(1752560675.641:471): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=28598 comm="syz.8.5661" [ 2614.422837][T16432] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 2614.595204][T16432] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2614.616751][T16432] usb 7-1: config 0 has no interfaces? [ 2614.624167][T16432] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 2614.662856][T16432] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2614.676676][T16432] usb 7-1: config 0 descriptor?? [ 2614.921159][ T1211] usb 7-1: USB disconnect, device number 22 [ 2616.049412][ T30] audit: type=1800 audit(1752560677.721:472): pid=28634 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.5672" name="/" dev="9p" ino=2 res=0 errno=0 [ 2616.083177][T28634] netfs: Couldn't get user pages (rc=-14) [ 2616.577544][T28634] netfs: Zero-sized read [R=4] [ 2619.438415][T28695] overlayfs: failed to clone upperpath [ 2619.854301][ T30] audit: type=1804 audit(1752560681.521:473): pid=28704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.5697" name="/newroot/277/file1" dev="fuse" ino=1 res=1 errno=0 [ 2619.897217][ T30] audit: type=1800 audit(1752560681.541:474): pid=28704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.5697" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2619.938954][ T30] audit: type=1800 audit(1752560681.551:475): pid=28701 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.5697" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2628.034769][T28792] 9pnet_fd: Insufficient options for proto=fd [ 2628.178059][T28794] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5721'. [ 2628.611260][T28800] gtp0: entered promiscuous mode [ 2630.094081][ T30] audit: type=1800 audit(1752560691.761:476): pid=28816 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.5735" name="file1" dev="tmpfs" ino=1626 res=0 errno=0 [ 2631.488796][T28837] net_ratelimit: 10 callbacks suppressed [ 2631.488817][T28837] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2632.847396][T28854] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5744'. [ 2632.857402][T28854] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5744'. [ 2633.136498][T28857] 9pnet_fd: Insufficient options for proto=fd [ 2633.719574][T12903] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2633.732286][T12903] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2633.741647][T12903] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2633.752125][T12903] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2633.763047][T12903] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2633.813531][T28865] lo speed is unknown, defaulting to 1000 [ 2634.263743][T28865] chnl_net:caif_netlink_parms(): no params data found [ 2635.220665][T28873] delete_channel: no stack [ 2635.806455][T28865] bridge0: port 1(bridge_slave_0) entered blocking state [ 2635.865867][T20445] Bluetooth: hci5: command tx timeout [ 2636.012203][T28865] bridge0: port 1(bridge_slave_0) entered disabled state [ 2636.038665][T28865] bridge_slave_0: entered allmulticast mode [ 2636.061527][T28865] bridge_slave_0: entered promiscuous mode [ 2636.111897][T28865] bridge0: port 2(bridge_slave_1) entered blocking state [ 2636.202426][T28865] bridge0: port 2(bridge_slave_1) entered disabled state [ 2636.481276][T28865] bridge_slave_1: entered allmulticast mode [ 2636.611933][T28865] bridge_slave_1: entered promiscuous mode [ 2637.018810][T28901] geneve2: entered allmulticast mode [ 2637.039971][T28865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2637.210606][T28899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5758'. [ 2637.235856][T28865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2637.327086][T28907] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5760'. [ 2637.336897][T28907] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5760'. [ 2637.943202][T20445] Bluetooth: hci5: command tx timeout [ 2638.467755][T28865] team0: Port device team_slave_0 added [ 2638.478012][T28865] team0: Port device team_slave_1 added [ 2639.136519][T28865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2639.143919][T28865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2639.225428][T28865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2639.316589][T28865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2639.382262][T28865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2639.457030][T28865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2639.759073][T28865] hsr_slave_0: entered promiscuous mode [ 2639.766715][T28865] hsr_slave_1: entered promiscuous mode [ 2639.773688][T28865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2639.784537][T28865] Cannot create hsr debugfs directory [ 2639.844673][T28934] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5767'. [ 2640.027809][T20445] Bluetooth: hci5: command tx timeout [ 2641.487699][ T30] audit: type=1400 audit(1752560703.152:477): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=28956 comm="syz.2.5776" daddr=::ffff:172.20.20.32 dest=20003 [ 2641.556985][ T30] audit: type=1400 audit(1752560703.162:478): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=28956 comm="syz.2.5776" daddr=fe80::aa [ 2641.875760][T13127] kworker/u8:4 (13127) used greatest stack depth: 17888 bytes left [ 2642.116376][T20445] Bluetooth: hci5: command tx timeout [ 2642.136534][T28865] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2642.541350][T28952] lo speed is unknown, defaulting to 1000 [ 2642.553050][T24559] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2642.716309][ T30] audit: type=1326 audit(1752560704.392:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28950 comm="syz.4.5773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc573b8e929 code=0x0 [ 2642.766955][T28865] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2642.985608][T28865] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2643.351617][T28865] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2643.476837][T28988] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2643.484362][T28988] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2643.815726][T28865] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2644.682406][T28865] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2644.718339][T28865] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2644.739056][T28865] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2644.950922][T29002] geneve2: entered allmulticast mode [ 2645.214405][T28865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2645.324183][T28865] 8021q: adding VLAN 0 to HW filter on device team0 [ 2645.374586][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 2645.381848][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2645.396708][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 2645.403990][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2645.720095][T29023] netlink: 4268 bytes leftover after parsing attributes in process `syz.7.5797'. [ 2645.729478][T29023] netlink: 4268 bytes leftover after parsing attributes in process `syz.7.5797'. [ 2645.884219][T28865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2645.917297][T28865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2648.585893][T29045] geneve2: entered allmulticast mode [ 2650.096445][T29063] overlayfs: failed to clone upperpath [ 2650.233412][T12903] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2650.245208][T12903] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2650.269063][T28865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2650.269119][T12903] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2650.298272][T12903] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2650.311236][T12903] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2650.363109][T29068] lo speed is unknown, defaulting to 1000 [ 2650.507790][T29077] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5811'. [ 2650.669304][T29068] chnl_net:caif_netlink_parms(): no params data found [ 2650.948125][T29089] geneve2: entered allmulticast mode [ 2650.964723][T29068] bridge0: port 1(bridge_slave_0) entered blocking state [ 2650.982955][T29068] bridge0: port 1(bridge_slave_0) entered disabled state [ 2651.020618][T29068] bridge_slave_0: entered allmulticast mode [ 2651.055563][T29068] bridge_slave_0: entered promiscuous mode [ 2651.104467][T29068] bridge0: port 2(bridge_slave_1) entered blocking state [ 2651.111702][T29068] bridge0: port 2(bridge_slave_1) entered disabled state [ 2651.138483][T29068] bridge_slave_1: entered allmulticast mode [ 2651.150617][T29068] bridge_slave_1: entered promiscuous mode [ 2651.290075][T29068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2651.325642][T29068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2651.598145][T29068] team0: Port device team_slave_0 added [ 2651.619374][T29068] team0: Port device team_slave_1 added [ 2652.295912][ T30] audit: type=1400 audit(1752560713.882:480): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=29104 comm="syz.7.5819" dest=2 [ 2652.372860][T20445] Bluetooth: hci6: command tx timeout [ 2652.819951][T29068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2652.832656][T29068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2652.933035][T29068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2652.955286][T29068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2652.962295][T29068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2653.031752][T29068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2653.106523][T28865] veth0_vlan: entered promiscuous mode [ 2653.130091][T28865] veth1_vlan: entered promiscuous mode [ 2653.154456][T29117] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2653.170698][T29117] bridge0: port 2(bridge_slave_1) entered disabled state [ 2653.178641][T29117] bridge0: port 1(bridge_slave_0) entered disabled state [ 2654.221910][T29068] hsr_slave_0: entered promiscuous mode [ 2654.241985][T29068] hsr_slave_1: entered promiscuous mode [ 2654.261402][T29068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2654.288170][T29068] Cannot create hsr debugfs directory [ 2654.415716][ T30] audit: type=1400 audit(1752560716.092:481): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=29130 comm="syz.2.5827" [ 2654.432649][T20445] Bluetooth: hci6: command tx timeout [ 2654.449142][T28865] veth0_macvtap: entered promiscuous mode [ 2654.647435][T28865] veth1_macvtap: entered promiscuous mode [ 2654.813971][T28865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2655.835805][T28865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2656.257092][T28865] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2656.302757][T28865] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2656.331562][T28865] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2656.361385][T28865] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2656.502757][T20445] Bluetooth: hci6: command tx timeout [ 2656.716237][T29148] netlink: 277 bytes leftover after parsing attributes in process `syz.4.5831'. [ 2657.375812][ T30] audit: type=1400 audit(1752560719.042:482): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=29153 comm="syz.7.5834" daddr=fe80::1b dest=16385 [ 2657.680632][T29152] netlink: 'syz.2.5833': attribute type 13 has an invalid length. [ 2658.385186][T29161] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5835'. [ 2658.395382][T29161] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5835'. [ 2658.582769][T20445] Bluetooth: hci6: command tx timeout [ 2659.136302][T10810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2659.166390][T10810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2659.255695][T24559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2659.264071][T24559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2660.638791][T29068] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2660.780981][T29068] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2660.820099][T29068] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2660.860859][T29068] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2661.012171][T29068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2661.060159][T29068] 8021q: adding VLAN 0 to HW filter on device team0 [ 2661.101382][T24559] bridge0: port 1(bridge_slave_0) entered blocking state [ 2661.108572][T24559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2661.177482][ T6097] bridge0: port 2(bridge_slave_1) entered blocking state [ 2661.184703][ T6097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2661.697116][T29202] netlink: 4268 bytes leftover after parsing attributes in process `syz.7.5844'. [ 2661.707433][T29202] netlink: 4268 bytes leftover after parsing attributes in process `syz.7.5844'. [ 2664.896650][ T30] audit: type=1400 audit(1752560726.572:483): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=29218 comm="syz.4.5848" [ 2665.508771][T29221] can0: slcan on ttyS3. [ 2665.641072][T29068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2665.664096][T29218] can0 (unregistered): slcan off ttyS3. [ 2670.344091][T29282] tipc: Failed to remove unknown binding: 66,1,1/1754551150:3323713436/3323713438 [ 2670.543723][ T30] audit: type=1326 audit(1752560732.222:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29276 comm="syz.4.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc573b8e929 code=0x7fc00000 [ 2670.778328][T29291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5867'. [ 2672.617373][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2672.630475][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2672.689278][T29294] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2672.701443][T29294] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2672.722066][T29294] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2672.735848][T29294] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2672.745947][T29294] geneve2: entered allmulticast mode [ 2673.052970][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2673.064579][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2674.300702][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2674.398073][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2674.503600][T29302] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2674.646609][T29068] veth0_vlan: entered promiscuous mode [ 2675.403363][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2675.415028][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2675.440881][T29068] veth1_vlan: entered promiscuous mode [ 2675.729588][T29068] veth0_macvtap: entered promiscuous mode [ 2675.759067][T29068] veth1_macvtap: entered promiscuous mode [ 2675.838974][T29068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2676.175587][T29068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2676.249392][T29068] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.288137][T29068] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.334996][T29068] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.391291][T29068] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.687769][ T12] bridge_slave_1: left allmulticast mode [ 2676.708292][ T12] bridge_slave_1: left promiscuous mode [ 2677.820863][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2677.908364][ T12] bridge_slave_0: left allmulticast mode [ 2677.921296][ T12] bridge_slave_0: left promiscuous mode [ 2677.952104][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2678.331041][ T30] audit: type=1400 audit(1752560740.002:485): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=29366 comm="syz.4.5887" daddr=ff02::1 dest=20010 [ 2679.912428][ T12] bond2 (unregistering): (slave gretap1): Releasing active interface [ 2682.154472][T29398] /dev/nullb0: Can't lookup blockdev [ 2683.131664][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2683.143640][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2683.155486][ T12] bond0 (unregistering): Released all slaves [ 2683.716982][ T12] bond1 (unregistering): Released all slaves [ 2683.736422][ T12] bond2 (unregistering): Released all slaves [ 2683.860706][T29380] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2683.870485][T29380] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2683.878921][T29380] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2683.887656][T29380] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2683.896078][T29380] geneve2: entered allmulticast mode [ 2684.079914][ T12] : left promiscuous mode [ 2685.378618][ T6097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2685.378645][ T6097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2686.048645][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2686.088418][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2688.498197][ T12] hsr_slave_0: left promiscuous mode [ 2688.529067][ T12] hsr_slave_1: left promiscuous mode [ 2688.538538][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2688.552950][T11186] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2688.554180][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2688.582453][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2688.618567][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2688.758857][ T12] veth1_macvtap: left promiscuous mode [ 2688.785567][ T12] veth0_macvtap: left promiscuous mode [ 2688.791347][ T12] veth1_vlan: left promiscuous mode [ 2688.847802][ T12] veth0_vlan: left promiscuous mode [ 2688.863611][T11186] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2688.892570][T11186] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2688.953575][T11186] usb 10-1: config 0 descriptor?? [ 2688.984105][T11186] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2689.055209][T29447] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5909'. [ 2690.088228][T29467] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5915'. [ 2690.422374][T11186] gspca_stv06xx: HDCS-1020 sensor detected [ 2691.041018][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2691.139726][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2691.173595][T11186] STV06xx 10-1:0.0: probe with driver STV06xx failed with error -71 [ 2691.192116][T11186] usb 10-1: USB disconnect, device number 4 [ 2694.186350][T29451] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2694.215595][T29451] bridge0: port 2(bridge_slave_1) entered disabled state [ 2694.223589][T29451] bridge0: port 1(bridge_slave_0) entered disabled state [ 2695.617772][ T12] IPVS: stop unused estimator thread 0... [ 2696.027477][T29508] netlink: 4268 bytes leftover after parsing attributes in process `syz.5.5923'. [ 2696.036919][T29508] netlink: 4268 bytes leftover after parsing attributes in process `syz.5.5923'. [ 2700.481904][T29553] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5938'. [ 2700.491783][T29553] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5938'. [ 2706.576359][T29302] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2706.708108][T29599] delete_channel: no stack [ 2708.054755][T29615] delete_channel: no stack [ 2711.613769][T29648] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5967'. [ 2711.624062][T29648] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5967'. [ 2715.154379][ T30] audit: type=1326 audit(1752560776.832:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29672 comm="syz.4.5977" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc573b8e929 code=0x0 [ 2716.398854][T12903] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2716.409823][T12903] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2716.420781][T12903] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2716.429944][T12903] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2716.440983][T12903] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2716.540071][T29676] syz.4.5977: vmalloc error: size 100663296, failed to allocated page array size 196608, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2716.669684][T29676] CPU: 0 UID: 0 PID: 29676 Comm: syz.4.5977 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 2716.669709][T29676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2716.669720][T29676] Call Trace: [ 2716.669727][T29676] [ 2716.669735][T29676] dump_stack_lvl+0x189/0x250 [ 2716.669759][T29676] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 2716.669785][T29676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2716.669803][T29676] ? __pfx__printk+0x10/0x10 [ 2716.669824][T29676] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2716.669843][T29676] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2716.669869][T29676] warn_alloc+0x214/0x310 [ 2716.669888][T29676] ? __pfx_warn_alloc+0x10/0x10 [ 2716.669910][T29676] ? __get_vm_area_node+0x28f/0x300 [ 2716.669933][T29676] ? bpf_uprobe_multi_link_attach+0x585/0xf10 [ 2716.669960][T29676] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 2716.670007][T29676] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2716.670036][T29676] ? rcu_is_watching+0x15/0xb0 [ 2716.670053][T29676] ? bpf_uprobe_multi_link_attach+0x585/0xf10 [ 2716.670075][T29676] ? bpf_uprobe_multi_link_attach+0x585/0xf10 [ 2716.670096][T29676] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 2716.670120][T29676] ? bpf_uprobe_multi_link_attach+0x585/0xf10 [ 2716.670143][T29676] ? bpf_uprobe_multi_link_attach+0x566/0xf10 [ 2716.670169][T29676] bpf_uprobe_multi_link_attach+0x585/0xf10 [ 2716.670202][T29676] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 2716.670223][T29676] ? __fget_files+0x2a/0x420 [ 2716.670240][T29676] ? __fget_files+0x2a/0x420 [ 2716.670254][T29676] ? __fget_files+0x2a/0x420 [ 2716.670276][T29676] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 2716.670297][T29676] link_create+0x70a/0x8a0 [ 2716.670316][T29676] __sys_bpf+0x599/0x860 [ 2716.670341][T29676] ? __pfx___sys_bpf+0x10/0x10 [ 2716.670379][T29676] ? rcu_is_watching+0x15/0xb0 [ 2716.670401][T29676] __x64_sys_bpf+0x7c/0x90 [ 2716.670423][T29676] do_syscall_64+0xfa/0x3b0 [ 2716.670439][T29676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2716.670454][T29676] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2716.670469][T29676] ? clear_bhb_loop+0x60/0xb0 [ 2716.670488][T29676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2716.670503][T29676] RIP: 0033:0x7fc573b8e929 [ 2716.670518][T29676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2716.670532][T29676] RSP: 002b:00007fc574a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2716.670549][T29676] RAX: ffffffffffffffda RBX: 00007fc573db6160 RCX: 00007fc573b8e929 [ 2716.670561][T29676] RDX: 0000000000000040 RSI: 00002000000012c0 RDI: 000000000000001c [ 2716.670571][T29676] RBP: 00007fc573c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 2716.670581][T29676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2716.670590][T29676] R13: 0000000000000000 R14: 00007fc573db6160 R15: 00007fffd6d23018 [ 2716.670614][T29676] [ 2716.670621][T29676] Mem-Info: [ 2716.996885][T29676] active_anon:10110 inactive_anon:4076 isolated_anon:0 [ 2716.996885][T29676] active_file:17192 inactive_file:41473 isolated_file:0 [ 2716.996885][T29676] unevictable:768 dirty:184 writeback:0 [ 2716.996885][T29676] slab_reclaimable:8255 slab_unreclaimable:139879 [ 2716.996885][T29676] mapped:35695 shmem:11242 pagetables:1219 [ 2716.996885][T29676] sec_pagetables:0 bounce:0 [ 2716.996885][T29676] kernel_misc_reclaimable:0 [ 2716.996885][T29676] free:1232172 free_pcp:19797 free_cma:0 [ 2717.053129][T29676] Node 0 active_anon:40440kB inactive_anon:16304kB active_file:68460kB inactive_file:165892kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142676kB dirty:736kB writeback:0kB shmem:43432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12780kB pagetables:4732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2717.088797][T29676] Node 1 active_anon:0kB inactive_anon:0kB active_file:308kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2717.152063][T29681] lo speed is unknown, defaulting to 1000 [ 2717.181650][T29676] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2717.282674][T29676] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 2717.400277][T29687] overlayfs: failed to resolve './file1': -2 [ 2717.538373][T29676] Node 0 DMA32 free:999972kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40436kB inactive_anon:27572kB active_file:66684kB inactive_file:165824kB unevictable:1536kB writepending:752kB present:3129332kB managed:2560896kB mlocked:0kB bounce:0kB free_pcp:52348kB local_pcp:15740kB free_cma:0kB [ 2718.358500][T29676] lowmem_reserve[]: 0 0 1 1 1 [ 2718.363626][T29676] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1776kB inactive_file:68kB unevictable:0kB writepending:4kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2718.413391][T29676] lowmem_reserve[]: 0 0 0 0 0 [ 2718.423006][T29676] Node 1 Normal free:3905660kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:308kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22232kB local_pcp:14956kB free_cma:0kB [ 2718.474256][T29676] lowmem_reserve[]: 0 0 0 0 0 [ 2718.503268][T20445] Bluetooth: hci3: command tx timeout [ 2718.523220][T29676] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2718.538936][T29676] Node 0 DMA32: 410*4kB (UME) 88*8kB (UE) 793*16kB (UME) 723*32kB (ME) 260*64kB (UME) 78*128kB (UME) 44*256kB (UME) 21*512kB (UM) 16*1024kB (UME) 9*2048kB (UME) 214*4096kB (UM) = 998168kB [ 2718.558398][T29676] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2718.597199][T29676] Node 1 Normal: 124*4kB (UME) 58*8kB (UME) 47*16kB (UME) 224*32kB (UME) 106*64kB (UME) 39*128kB (UME) 12*256kB (UM) 4*512kB (UM) 1*1024kB (U) 0*2048kB 947*4096kB (ME) = 3905712kB [ 2718.611796][T29302] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2718.682185][T29676] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2718.717048][T29676] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2718.750492][T29676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2718.792648][T29676] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2719.056909][T29676] 72755 total pagecache pages [ 2719.061645][T29676] 0 pages in swap cache [ 2720.373102][T29676] Free swap = 124996kB [ 2720.377670][T29676] Total swap = 124996kB [ 2720.442534][T29676] 2097051 pages RAM [ 2720.446456][T29676] 0 pages HighMem/MovableOnly [ 2720.451137][T29676] 424720 pages reserved [ 2720.530092][T29676] 0 pages cma reserved [ 2720.584634][T20445] Bluetooth: hci3: command tx timeout [ 2721.788694][T29302] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2722.720823][T20445] Bluetooth: hci3: command tx timeout [ 2723.746783][T29302] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2723.840148][T29681] chnl_net:caif_netlink_parms(): no params data found [ 2724.047059][T29302] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2724.117920][T29725] overlayfs: failed to clone upperpath [ 2724.130730][T29743] kvm: pic: non byte write [ 2724.148532][T29743] kvm: pic: non byte write [ 2724.171142][T29743] kvm: pic: single mode not supported [ 2724.171448][T29743] kvm: pic: level sensitive irq not supported [ 2724.180639][T29743] kvm: pic: single mode not supported [ 2724.196538][T29743] kvm: pic: single mode not supported [ 2724.206166][T29743] kvm: pic: non byte write [ 2724.222895][T29743] kvm: pic: non byte write [ 2724.227787][T29743] kvm: pic: single mode not supported [ 2724.228072][T29743] kvm: pic: single mode not supported [ 2724.234157][T29743] kvm: pic: level sensitive irq not supported [ 2724.745178][T20445] Bluetooth: hci3: command tx timeout [ 2724.820218][T29681] bridge0: port 1(bridge_slave_0) entered blocking state [ 2724.876501][T29681] bridge0: port 1(bridge_slave_0) entered disabled state [ 2724.927345][T29681] bridge_slave_0: entered allmulticast mode [ 2724.967174][T29681] bridge_slave_0: entered promiscuous mode [ 2724.978398][T29756] netfs: Couldn't get user pages (rc=-14) [ 2725.002308][T29681] bridge0: port 2(bridge_slave_1) entered blocking state [ 2725.044457][T29681] bridge0: port 2(bridge_slave_1) entered disabled state [ 2725.075324][T29681] bridge_slave_1: entered allmulticast mode [ 2725.124747][T29681] bridge_slave_1: entered promiscuous mode [ 2727.488001][T29681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2727.587458][ T30] audit: type=1400 audit(1752560789.252:487): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=29767 comm="syz.2.6004" daddr=::ffff:172.20.20.0 [ 2727.658305][T29681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2728.108860][T29681] team0: Port device team_slave_0 added [ 2728.165819][T29681] team0: Port device team_slave_1 added [ 2728.196831][T29302] bridge_slave_1: left allmulticast mode [ 2728.225281][T29302] bridge_slave_1: left promiscuous mode [ 2728.298261][T29302] bridge0: port 2(bridge_slave_1) entered disabled state [ 2728.373636][T29302] bridge_slave_0: left allmulticast mode [ 2728.447544][T29302] bridge_slave_0: left promiscuous mode [ 2728.467022][T29302] bridge0: port 1(bridge_slave_0) entered disabled state [ 2733.018611][T29302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2733.053697][T29302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2733.091549][T29302] bond0 (unregistering): Released all slaves [ 2733.657933][T29804] syz_tun: entered allmulticast mode [ 2733.682840][T29804] syz_tun: left allmulticast mode [ 2733.723308][T29806] dvmrp1: entered allmulticast mode [ 2733.813414][T29823] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2733.938110][T29681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2734.017364][T29681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2734.296111][T29681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2734.473750][T29846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6028'. [ 2734.572021][T29681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2734.617059][T29681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2734.714678][T29681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2736.019337][T29302] hsr_slave_0: left promiscuous mode [ 2736.045922][T29302] hsr_slave_1: left promiscuous mode [ 2736.058998][T29302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2736.074157][T29302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2736.257920][T29302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2736.364894][T29302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2736.727969][T29302] veth1_macvtap: left promiscuous mode [ 2736.784838][T29302] veth0_macvtap: left promiscuous mode [ 2736.864597][T29302] veth1_vlan: left promiscuous mode [ 2736.913016][T29302] veth0_vlan: left promiscuous mode [ 2737.895075][T29883] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 2738.773223][T20169] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2739.144008][ T7284] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2739.155154][T20169] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2739.193164][T20169] usb 6-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 2739.203371][ T7284] ------------[ cut here ]------------ [ 2739.208891][ T7284] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2739.247513][T20169] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2739.275625][ T7284] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 2739.315926][ T7284] CPU: 0 UID: 0 PID: 7284 Comm: kworker/u8:19 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 2739.315958][ T7284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2739.315972][ T7284] Workqueue: events_unbound cfg80211_wiphy_work [ 2739.316001][ T7284] Call Trace: [ 2739.316009][ T7284] [ 2739.316018][ T7284] dump_stack_lvl+0x189/0x250 [ 2739.316047][ T7284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2739.316072][ T7284] ? __pfx__printk+0x10/0x10 [ 2739.316114][ T7284] ubsan_epilogue+0xa/0x40 [ 2739.316142][ T7284] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 2739.316174][ T7284] ieee80211_request_ibss_scan+0x600/0x8b0 [ 2739.316223][ T7284] ieee80211_ibss_work+0xd85/0x1060 [ 2739.316254][ T7284] ? lockdep_hardirqs_on+0x9c/0x150 [ 2739.316289][ T7284] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2739.316320][ T7284] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2739.316350][ T7284] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 2739.316387][ T7284] ? skb_dequeue+0x10e/0x150 [ 2739.316405][ T7284] ? ieee80211_iface_work+0xcdb/0xfe0 [ 2739.316456][ T7284] ? ieee80211_iface_work+0xf39/0xfe0 [ 2739.316491][ T7284] ? rcu_is_watching+0x15/0xb0 [ 2739.316521][ T7284] cfg80211_wiphy_work+0x2df/0x460 [ 2739.316546][ T7284] ? process_scheduled_works+0x9ef/0x17b0 [ 2739.316573][ T7284] process_scheduled_works+0xade/0x17b0 [ 2739.316629][ T7284] ? __pfx_process_scheduled_works+0x10/0x10 [ 2739.316672][ T7284] worker_thread+0x8a0/0xda0 [ 2739.316726][ T7284] kthread+0x711/0x8a0 [ 2739.316758][ T7284] ? __pfx_worker_thread+0x10/0x10 [ 2739.316781][ T7284] ? __pfx_kthread+0x10/0x10 [ 2739.316812][ T7284] ? _raw_spin_unlock_irq+0x23/0x50 [ 2739.316841][ T7284] ? lockdep_hardirqs_on+0x9c/0x150 [ 2739.316871][ T7284] ? __pfx_kthread+0x10/0x10 [ 2739.316900][ T7284] ret_from_fork+0x3fc/0x770 [ 2739.316924][ T7284] ? __pfx_ret_from_fork+0x10/0x10 [ 2739.316953][ T7284] ? __switch_to_asm+0x39/0x70 [ 2739.316978][ T7284] ? __switch_to_asm+0x33/0x70 [ 2739.317002][ T7284] ? __pfx_kthread+0x10/0x10 [ 2739.317032][ T7284] ret_from_fork_asm+0x1a/0x30 [ 2739.317076][ T7284] [ 2739.317085][ T7284] ---[ end trace ]--- [ 2739.784482][T20169] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2740.032807][ T7284] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 2740.040107][ T7284] CPU: 0 UID: 0 PID: 7284 Comm: kworker/u8:19 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 2740.052444][ T7284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2740.062565][ T7284] Workqueue: events_unbound cfg80211_wiphy_work [ 2740.068882][ T7284] Call Trace: [ 2740.072186][ T7284] [ 2740.075137][ T7284] dump_stack_lvl+0x99/0x250 [ 2740.079758][ T7284] ? __asan_memcpy+0x40/0x70 [ 2740.084383][ T7284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2740.089609][ T7284] ? __pfx__printk+0x10/0x10 [ 2740.094248][ T7284] panic+0x2db/0x790 [ 2740.098182][ T7284] ? __pfx_panic+0x10/0x10 [ 2740.102628][ T7284] ? _printk+0xcf/0x120 [ 2740.106831][ T7284] ? __pfx__printk+0x10/0x10 [ 2740.111459][ T7284] check_panic_on_warn+0x89/0xb0 [ 2740.116432][ T7284] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 2740.122187][ T7284] ieee80211_request_ibss_scan+0x600/0x8b0 [ 2740.128062][ T7284] ieee80211_ibss_work+0xd85/0x1060 [ 2740.133312][ T7284] ? lockdep_hardirqs_on+0x9c/0x150 [ 2740.138542][ T7284] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2740.144464][ T7284] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2740.150819][ T7284] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 2740.156487][ T7284] ? skb_dequeue+0x10e/0x150 [ 2740.161636][ T7284] ? ieee80211_iface_work+0xcdb/0xfe0 [ 2740.167066][ T7284] ? ieee80211_iface_work+0xf39/0xfe0 [ 2740.172481][ T7284] ? rcu_is_watching+0x15/0xb0 [ 2740.177274][ T7284] cfg80211_wiphy_work+0x2df/0x460 [ 2740.182508][ T7284] ? process_scheduled_works+0x9ef/0x17b0 [ 2740.188267][ T7284] process_scheduled_works+0xade/0x17b0 [ 2740.193859][ T7284] ? __pfx_process_scheduled_works+0x10/0x10 [ 2740.199968][ T7284] worker_thread+0x8a0/0xda0 [ 2740.204610][ T7284] kthread+0x711/0x8a0 [ 2740.208714][ T7284] ? __pfx_worker_thread+0x10/0x10 [ 2740.213870][ T7284] ? __pfx_kthread+0x10/0x10 [ 2740.218515][ T7284] ? _raw_spin_unlock_irq+0x23/0x50 [ 2740.223855][ T7284] ? lockdep_hardirqs_on+0x9c/0x150 [ 2740.229112][ T7284] ? __pfx_kthread+0x10/0x10 [ 2740.233743][ T7284] ret_from_fork+0x3fc/0x770 [ 2740.238513][ T7284] ? __pfx_ret_from_fork+0x10/0x10 [ 2740.243684][ T7284] ? __switch_to_asm+0x39/0x70 [ 2740.248491][ T7284] ? __switch_to_asm+0x33/0x70 [ 2740.253287][ T7284] ? __pfx_kthread+0x10/0x10 [ 2740.257909][ T7284] ret_from_fork_asm+0x1a/0x30 [ 2740.262712][ T7284] [ 2740.266029][ T7284] Kernel Offset: disabled [ 2740.270466][ T7284] Rebooting in 86400 seconds..