last executing test programs: 37m13.723594903s ago: executing program 0 (id=405): r0 = socket$alg(0x26, 0x5, 0x0) unshare(0x20040400) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8) r2 = syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0xbbcf, 0x10100, 0x0, 0x242, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1}) io_uring_enter(r2, 0x353, 0xf9ef, 0x40, 0x0, 0xfea4) signalfd(r1, &(0x7f0000002340), 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}}, 0x24}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x80000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r10 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r10}], 0x0, 0x0, 0x0}) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}], 0x3}, 0x2000000}], 0x2, 0x2120, 0x0) r11 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYRES64=r5], 0xe0}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00fa40", @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a6000000000000000000080001"], 0x3c}}, 0x0) sendmsg$nl_crypto(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x40000) 37m13.490694151s ago: executing program 0 (id=406): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfe}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r3, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x0, 0x0) close(0x3) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(0x3) socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) 37m10.243933569s ago: executing program 0 (id=415): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newlink={0x28, 0x10, 0x801, 0x20, 0x0, {0x0, 0x0, 0x0, r3, 0x4000b, 0x20802}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000130afa0100000000000000001b0000000500010073797a3121000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000810) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000060000000000000010000001000000000000000000"], 0x48) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_buf(r9, 0x1, 0x48, 0x0, &(0x7f0000000240)=0x49) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050a00000000000000000000000005000400000000000900020073797a320000000014006a000800084000005fdc050005090a000000050001000600000011000300686173683a69702c706f72740000000000000000"], 0x60}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) 37m9.20413205s ago: executing program 0 (id=419): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r2) write$UHID_INPUT(r5, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000001040)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80700a, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setns(r7, 0x24020000) 37m7.691754261s ago: executing program 0 (id=423): fsopen(&(0x7f0000000000)='zonefs\x00', 0x1) 37m7.416971826s ago: executing program 0 (id=425): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfe}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r3, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x0, 0x0) close(0x3) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(0x3) socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) 37m5.720427699s ago: executing program 32 (id=425): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfe}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r3, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x0, 0x0) close(0x3) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(0x3) socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) 24m42.751100096s ago: executing program 3 (id=2507): memfd_secret(0x80000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno', @ANYRESHEX=r2]) getsockname$packet(r3, 0x0, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x2f4, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@TCA_STAB={0x130, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x6, 0xe, 0x5, 0x0, 0x4, 0x8, 0x3}}, {0xa, 0x2, [0x6, 0x5, 0xb3]}}, {{0x1c, 0x1, {0xf, 0xf, 0x23, 0x5, 0x0, 0x0, 0xffff8000, 0xa}}, {0x18, 0x2, [0xfff, 0x6, 0x9, 0x4, 0x1, 0x4b36, 0xaf5, 0x3ff, 0xe46e, 0x9]}}, {{0x1c, 0x1, {0x9, 0x0, 0x0, 0x0, 0x1, 0x9, 0x6cc3, 0x3}}, {0xa, 0x2, [0x5, 0x8, 0x7]}}, {{0x1c, 0x1, {0x9, 0x6, 0x1040, 0x9, 0x2, 0xffff, 0x8, 0x5}}, {0xe, 0x2, [0x9, 0x5, 0x2, 0xa, 0x80]}}, {{0x1c, 0x1, {0x40, 0x9, 0x1000, 0x2, 0x1, 0x8, 0x1, 0x2}}, {0x8, 0x2, [0x5, 0xc78f]}}, {{0x1c, 0x1, {0x2, 0x7, 0x100, 0x5, 0x2, 0x6, 0x9, 0x4}}, {0xc, 0x2, [0x8, 0x80, 0x9, 0x3]}}, {{0x1c, 0x1, {0x7, 0x2, 0x0, 0x3, 0x0, 0x2, 0x7, 0x8}}, {0x14, 0x2, [0x2, 0xfffd, 0x4c, 0x3, 0x5eae, 0x1, 0x8001, 0xfff9]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2e}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x2, 0x2, 0x100, 0x0, 0x7, 0x7, 0x5}}, {0xe, 0x2, [0x0, 0x4, 0x3, 0xc, 0x8]}}, {{0x1c, 0x1, {0x0, 0xec, 0xfff, 0xe3ee, 0x1, 0x2, 0x773, 0x1}}, {0x6, 0x2, [0x8001]}}]}, @TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd2, 0x80, 0x2, 0xee7, 0x1, 0x3b, 0x9, 0x5}}, {0xe, 0x2, [0x812, 0x492, 0x9, 0x8001, 0x5]}}, {{0x1c, 0x1, {0x9, 0x5, 0x7a, 0x100, 0x1, 0x3bb9, 0xa, 0x8}}, {0x14, 0x2, [0x81, 0x7fff, 0x4, 0x2, 0x4, 0x64e, 0xfc, 0x2]}}, {{0x1c, 0x1, {0x17, 0x4, 0x1, 0x5, 0x0, 0x6, 0x1, 0x6}}, {0x10, 0x2, [0x7, 0x2, 0xf, 0x7, 0x3, 0x1]}}, {{0x1c, 0x1, {0x8, 0xb, 0x6, 0xfdc, 0x0, 0x6, 0x9, 0x3}}, {0xa, 0x2, [0x8, 0x8, 0x3f91]}}, {{0x1c, 0x1, {0x8, 0x10, 0x8000, 0x9, 0x1, 0x2, 0x400, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x0, 0x8, 0x8000, 0x2, 0x2, 0x4, 0x8, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x1, 0xd, 0x7, 0x5, 0x1, 0x80000000, 0x3, 0x3}}, {0xa, 0x2, [0xf000, 0x9, 0x7]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2f4}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf250b0000006c00058024000280080001001b000000080001000100000008000400b3000000080004000a000000080001"], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40004) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r6, 0x101, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 24m40.74683399s ago: executing program 3 (id=2512): ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000000)=0x4) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0xa68, 0x6}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xaa57}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48011}, 0x24040) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x408040, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f00000001c0)={0xffff, 0x8, 0x7ff}) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_open_dev$usbfs(&(0x7f0000000240), 0x0, 0x80000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x15, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0x3, 0x9, 0x6, 0x8, 0xfffffffffffffff0}, @exit, @map_idx={0x18, 0x4}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x7, 0x57, &(0x7f00000003c0)=""/87, 0x1f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000480)=[{0x5, 0x4, 0x6, 0x8}, {0x3, 0x2, 0x2, 0x2}, {0x1, 0x3, 0xe, 0x7}, {0x5, 0x4, 0xe, 0x3}], 0x10, 0x9, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='afs_flock_op\x00', r2, 0x0, 0x7}, 0x18) unshare(0x2000000) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000005c0)='0', 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) unshare(0x11000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000640)={0x9, 0x4, 0x40, 0x2, 0x4, 0x8, 0x0, 0xf8d}, &(0x7f0000000680)={0x0, 0x7, 0x7, 0x8, 0x800000000000000, 0x1, 0x8001, 0x2}, &(0x7f00000006c0)={0x8, 0x1, 0x2, 0x51, 0x28, 0x8000, 0x800, 0x1}, &(0x7f0000000740)={r5, r6+10000000}, &(0x7f00000007c0)={&(0x7f0000000780), 0x8}) rt_sigprocmask(0x2, &(0x7f0000000800)={[0x8]}, &(0x7f0000000840), 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000880)={0x10000, {{0xa, 0x4e22, 0x3, @local, 0x2}}}, 0x88) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000940)={0x1a, 0x102, 0x7, 0x4, 0x0, 0x9, @local}, 0x10) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000980), 0x50800, 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000009c0)='$:#\xdd\x00', &(0x7f0000000a00)='+,^[:}!*\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a40), 0x200, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r11 = signalfd4(r3, &(0x7f0000000c00)={[0x800]}, 0x8, 0x0) setsockopt$ax25_int(r11, 0x101, 0x6, &(0x7f0000000c40)=0xb, 0x4) connect$unix(r11, &(0x7f0000000c80)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 24m39.368127445s ago: executing program 3 (id=2517): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) writev(r0, &(0x7f0000000b40)=[{&(0x7f0000000a00)='.', 0x1}], 0x1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x84800010}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x905, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe, 0x49}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "31a4edf57efc60a4ab95b57eb7"}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x44800) 24m35.322174569s ago: executing program 3 (id=2522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x2d, 0x0, 0x90) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x154) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x10002, 0x0) chdir(&(0x7f0000000280)='./file0/../file0/../file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x700, 0x1, 0x40000000}, &(0x7f0000000380)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x118, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) writev(r1, &(0x7f0000000040)=[{0x0}], 0x1) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r8 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r5, 0x3f72, 0x74f1, 0x0, 0x0, 0x39) 24m32.076431597s ago: executing program 3 (id=2526): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@gettaction={0x20, 0x32, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xff2e) r1 = syz_clone(0x80100, 0x0, 0xfe13, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x18, r1, 0x9, 0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) read(r3, &(0x7f00000000c0)=""/226, 0xe2) 24m30.384073205s ago: executing program 3 (id=2533): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2d, 0x8f, 0x2, 0x0, 0x40, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x10, 0x7800, 0x8, 0xfffff9d9}}) pipe(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x15, 0x372, 0x5, 0x68, 0x10100, r0, 0x0, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0x0, @void, @value, @value}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (fail_nth: 5) 24m29.58152165s ago: executing program 33 (id=2533): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2d, 0x8f, 0x2, 0x0, 0x40, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x10, 0x7800, 0x8, 0xfffff9d9}}) pipe(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x15, 0x372, 0x5, 0x68, 0x10100, r0, 0x0, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0x0, @void, @value, @value}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (fail_nth: 5) 24m15.755210632s ago: executing program 4 (id=2571): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 24m15.581342051s ago: executing program 4 (id=2573): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffc}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x48, 0x0, 0x0, 0x0, &(0x7f0000903000/0x2000)=nil, 0x2000, 0x15, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 24m15.280100173s ago: executing program 4 (id=2579): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 24m14.720185098s ago: executing program 4 (id=2581): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x400, 0x0, 0xfffffffffffffef8, 0x0, 0x0, 0x0) setpgid(r0, 0x0) r1 = getpgid(r0) setpgid(0x0, r1) open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x120) lseek(r2, 0x6, 0x0) 24m14.304699413s ago: executing program 4 (id=2584): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 24m13.09637061s ago: executing program 4 (id=2588): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd27, 0xfffffffc, {0x0, 0x0, 0x12, r1, {0x7ff8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20002001}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="180100002b000100000000000000000008"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 24m12.383367297s ago: executing program 34 (id=2588): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd27, 0xfffffffc, {0x0, 0x0, 0x12, r1, {0x7ff8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20002001}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="180100002b000100000000000000000008"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3m40.032403051s ago: executing program 6 (id=6360): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x2700) ioctl$EVIOCGABS0(r0, 0x80184540, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="0406"], 0xfe49, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) quotactl_fd$Q_SYNC(r4, 0xffffffff80000100, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r6, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x91}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x1}, 0x40004) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000180)='#[@.[*,&@\x00', 0xa) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784314000200776731000000000000000000000000007000088028000080240001000000000000000000000000000000000000000000000000000000000000000000440000801400040002004e23ffffffff0000000000000000080009800400008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228421bf63c07bc6ae8b28a963c3c0e472c6baeb469617e388108d4ecae6559e9fad4713fdcfe973d5559d553c2bda9fd3a96529293b0ef1fbafdf1781f7"], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3, 0x0, 0x100000001]}) 3m38.754117548s ago: executing program 6 (id=6365): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005180)={0x2020}, 0x2020) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0xf, &(0x7f00000002c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}], &(0x7f0000000340)='syzkaller\x00', 0xa000000, 0xaa, &(0x7f0000000380)=""/170, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x0, 0x8, 0x800}, 0x10, 0x0, r0, 0x1, &(0x7f0000000500)=[r1], &(0x7f0000000540)=[{0x3, 0x1, 0x10, 0x1}], 0x10, 0xffff, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x80000000, 0x8, 0x10000000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x5, &(0x7f0000000180)) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) fremovexattr(r5, &(0x7f0000000280)=@known='user.syz\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000001080)) io_uring_enter(r6, 0x5b81, 0x838a, 0x9, &(0x7f00000000c0)={[0x64]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) socket(0x10, 0x803, 0x0) socket(0x200000100000011, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bfde, 0xe1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x6}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x80}]}}}]}, 0x4c}}, 0x0) 3m37.031331748s ago: executing program 6 (id=6366): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x6, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x1, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x9, 0x5, 0xcff, 0x0, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x7, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x23a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x1fffc000, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x7, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x675, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x2, 0xffffffff, 0x3, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x6, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x9, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0x1, 0xb, 0x0, 0xfffffff3, 0x8, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x100, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x80000001, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x6, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x81e, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0xa4d5, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0xee5, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0x9, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0xc, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x1, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x6, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0xffffff12, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x9, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r3, &(0x7f00000002c0)="8bdb16f2bb54aae9d3615ace06e160ee2234662df10572dfeb7247bd5ecc5bf7b2e712ea32963603359bfe8b2cdae9fb40373b154b1ebecfa4766194bf0924e2582797b4e686e2a1f4f52d747c3cf2c5f64c10446ee2ea5d3a72b3b9bb12c4f49aa03b8b344dcb3a46ac025af06296c9de92e52072b59ea47f3c515d7faea75ca186298cf6367fca3103928bc6e3b11033d98a75c42a24fe5b4cf6b15d1f1dfb37ef95a3961e1f460e976c0579db6e14967b74cafdcce56efdf87b487cdda1ddb4317ee3ac358756d4a9386a726dd0", &(0x7f0000000440)=""/97}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000400)={0x1f, @none}, 0x8) listen(r5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x40044900, 0xffffffffffff830c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='illinois\x00', 0x9) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) sendfile(r4, r7, 0x0, 0x8000002b) write$P9_RSETATTR(r7, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) 3m35.983739813s ago: executing program 6 (id=6367): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) socket$nl_route(0x10, 0x3, 0x0) read(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x74, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffffff}, @CTA_NAT_SRC={0x4}]}, 0x74}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @remote}, 0x2, 0x4, 0x3, 0x3}}, 0x2e) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 3m35.400538849s ago: executing program 6 (id=6369): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x3}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) syz_open_dev$tty20(0xc, 0x4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) creat(&(0x7f00000002c0)='./file1\x00', 0x24) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="20562dc9d21ca8d80b020094ac000044a0c24a39bd3b6b0a0400891df9512dc6f405da286d664fa337c33a81eb2ab2e800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m31.622004354s ago: executing program 6 (id=6379): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000280)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003500)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4e0664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa7666b5ded16ee7025f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b3a2327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6cd28cf28fe2ee593e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c191355391771f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde34ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f2708e09ae8268dcc15411483b8506386aa0ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae4c697bfc674e03231c42f7eaaf5166bbc4653c71805f9448416e379cc1c40f8f866c9b319a849dd00ff9b84857436ed362c4632bfc3fa7357c24f15bbb07bd91893e61df7eb6dc5e071a9cc2faa7a32a91c4d982f5cfb725dca80b23874877a4980dbd70cda040b1ce527e7188159df77b493efbbd7bfe2680bf44e49eb68e5e33a0a5726072b2699d6244cd5c4a82bf18c668a3d43cec78c5fe1f12283d5dde6d0ea0b1b81ee7c065c938577e4ec93f22f1e6106f337625b7f7798011a6"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd4d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002ec0)=@deltfilter={0x38, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xa, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 3m16.386262266s ago: executing program 35 (id=6379): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000280)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd4d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002ec0)=@deltfilter={0x38, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xa, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 2m45.429271897s ago: executing program 5 (id=6510): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote, 0x100000}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0xc}, 0x4040044) 2m45.355893889s ago: executing program 5 (id=6512): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x8}, 0x68) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRESDEC], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, 0x0, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x22040100}, 0x801) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = syz_open_dev$media(&(0x7f0000000180), 0x3e, 0x40) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0x200b}) epoll_pwait(r5, &(0x7f0000000000)=[{}], 0x1, 0xa7f, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000010c0)={0x95, 0x70, 0x20000}, 0x20) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) r7 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d05009044310000000109021200"], 0x0) syz_usb_disconnect(r7) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001840)=0x5d4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) syz_init_net_socket$rose(0xb, 0x5, 0x0) 2m40.725054997s ago: executing program 5 (id=6528): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) flock(r0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000021000040"]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) r6 = io_uring_setup(0x758a, &(0x7f0000000140)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x7c, r8, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x56}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) 2m40.434916215s ago: executing program 5 (id=6531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r3 = io_uring_setup(0x5a81, &(0x7f0000000180)={0x0, 0x13c5, 0x0, 0x0, 0x1, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000002080)=0x64, 0x23b) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x2000000000000047, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0xfffffc01, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x4, 0x561302) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 2m36.421500493s ago: executing program 5 (id=6545): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) bind(r0, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @multicast1, 0x1}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x48050) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') r2 = socket(0x27, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = creat(&(0x7f0000000280)='./cgroup.net/devices.allow\x00', 0x141) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000c80)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, &(0x7f0000000080)) setresuid(0x0, r3, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8000) io_getevents(r5, 0x2, 0x2, &(0x7f0000000240)=[{}, {}], &(0x7f00000003c0)={0x77359400}) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, 0x0, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) ioctl$PPPIOCATTACH(r1, 0x4004743d, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) 2m34.20755576s ago: executing program 5 (id=6550): syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0x73, 0x60, &(0x7f0000000340)="e8f68636580abd58ca085230e77af266c13ebb032534a300c01684663dba1545f70ca7b7140e3c6f188e9ecb9c775fa962402c0cc7ed51a811d9796e07673736d76bdd551d3c36f05498cfb14e37715dcef4f5186a3b44f6f4dc29b816030ebfbb5ae75e5cfa647acd92d107cf7aa4ce8ff817", &(0x7f00000003c0)=""/96, 0x5, 0x0, 0x2, 0x8a, &(0x7f0000000040)="2e39de4f83", &(0x7f0000000440)="1198d8322d2d8751ddba1a38deee30da4649f0410315246b0cb48a1ebe436840872ef072226b7daa00b7c31a9bf2c5d6a6cfcf090ea1dfd456dfd79695ba89ae7641d88e6beeb3b1491f8cc9c93ec5535a86fb429141484f883d022d2f47f3af57af253788316d59adcda7674d6ea913994480ee8ac60cc05c7711c5e2a9ddf98b54ecd25e2bca624e27", 0x0, 0x0, 0x4}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1200, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={r8, 0xcc}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000005c0)={r8, @in6={{0xa, 0x4e22, 0x7, @mcast2, 0x100}}, [0x5, 0x8, 0x6, 0xb78d, 0x5, 0x4, 0x7, 0x2, 0x1, 0xe61, 0x8, 0x401, 0x9, 0x2]}, &(0x7f00000006c0)=0x100) r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) write$P9_RVERSION(r5, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0x4, 0x6, '9P2000'}, 0x13) ioctl$SG_IO(r9, 0x2285, 0x0) writev(r9, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0bfff00f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 2m19.065988958s ago: executing program 36 (id=6550): syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0x73, 0x60, &(0x7f0000000340)="e8f68636580abd58ca085230e77af266c13ebb032534a300c01684663dba1545f70ca7b7140e3c6f188e9ecb9c775fa962402c0cc7ed51a811d9796e07673736d76bdd551d3c36f05498cfb14e37715dcef4f5186a3b44f6f4dc29b816030ebfbb5ae75e5cfa647acd92d107cf7aa4ce8ff817", &(0x7f00000003c0)=""/96, 0x5, 0x0, 0x2, 0x8a, &(0x7f0000000040)="2e39de4f83", &(0x7f0000000440)="1198d8322d2d8751ddba1a38deee30da4649f0410315246b0cb48a1ebe436840872ef072226b7daa00b7c31a9bf2c5d6a6cfcf090ea1dfd456dfd79695ba89ae7641d88e6beeb3b1491f8cc9c93ec5535a86fb429141484f883d022d2f47f3af57af253788316d59adcda7674d6ea913994480ee8ac60cc05c7711c5e2a9ddf98b54ecd25e2bca624e27", 0x0, 0x0, 0x4}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1200, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={r8, 0xcc}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000005c0)={r8, @in6={{0xa, 0x4e22, 0x7, @mcast2, 0x100}}, [0x5, 0x8, 0x6, 0xb78d, 0x5, 0x4, 0x7, 0x2, 0x1, 0xe61, 0x8, 0x401, 0x9, 0x2]}, &(0x7f00000006c0)=0x100) r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) write$P9_RVERSION(r5, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0x4, 0x6, '9P2000'}, 0x13) ioctl$SG_IO(r9, 0x2285, 0x0) writev(r9, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0bfff00f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 15.489121034s ago: executing program 1 (id=7008): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xd26, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket(0x400000000010, 0x3, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r7, 0x8008551c, &(0x7f0000000000)={0xd616, 0x1, [{0x1, 0x1}]}) r8 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r9 = dup(r8) ioctl$BLKROSET(r9, 0x125d, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc, 0xc3072, 0xffffffffffffffff, 0xfd01000000000000) 9.344086992s ago: executing program 9 (id=7029): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="1d56aaaaaaaaaaaaaaaaaaaa08004500002b000000000002907800000000e00000011100907800000000"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x4800) socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x40, r3, 0x1, 0xfffffffd, 0xfffffffc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0xfffffffc}]}]}]}, 0x40}}, 0x0) r5 = syz_io_uring_setup(0x7f2b, &(0x7f0000000400)={0x0, 0x16fa, 0x8000, 0x4, 0x8}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1, {0x0, r8}}) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000340)={{0x8, @loopback, 0x4e2c, 0x1, 'ovf\x00', 0x14, 0x2, 0x5b}, {@empty, 0x4e22, 0x3, 0x10001, 0x7, 0x8}}, 0x44) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) 8.823193272s ago: executing program 1 (id=7030): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0xf0ffffff}], 0x600, 0x0, 0x0) 8.198278612s ago: executing program 7 (id=7031): socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) unshare(0x6a040000) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x80) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000a9000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002"], 0xa4}, 0x1, 0x0, 0x0, 0xc824}, 0x0) 6.858642804s ago: executing program 1 (id=7033): socket$unix(0x1, 0x1, 0x0) close(0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000000}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000020000000000a900000000000000000000000000000000000000000000000000000000000000ffffdfffffffffff000000000000000000110000000000000000000000000000000a000000000000000000000080400000100000000000080000000000909f182822787d8000000000000000000000009cfcdec89ac37b436308cdcd771a41ced3c9fe9425568d5ae7b914d4a655"], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000000ac1e0001000000000000000000000000000000000000003a0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011007f0000010000000000000000000000000a0101000000000000000000000000000a010100000000000000000000000000640101000000000000000000000000003c000000000000000a000200"], 0xa0}}, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x55}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x314d436, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) 5.979101148s ago: executing program 8 (id=7035): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) syz_emit_ethernet(0x36, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x28, 0x80008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.260241546s ago: executing program 1 (id=7036): r0 = epoll_create(0x2) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x4a500, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x6000001b}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = gettid() r5 = syz_open_dev$vcsu(&(0x7f0000000400), 0x4, 0x309901) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, 0xfffffffffffffffc, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_names\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESHEX=r9, @ANYBLOB="2c776664ee6f3df472e3d3d669", @ANYRESOCT=r8, @ANYBLOB=',\x00']) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r8, &(0x7f00000003c0)={0xa, 0x4, 0xfa00, {r10}}, 0xc) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000080)={0x18, 0x0, {0x4, @remote, 'batadv_slave_1\x00'}}, 0x1e) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0) ioctl$PPPOEIOCSFWD(r11, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'caif0\x00'}}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4000}, 0x18) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x1, 0x6, 0xc1ac, 0x80000}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0xffffffffffffff2d, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_EXPR={0x0, 0x11, 0x0, 0x1, @dup_ipv6={{}, @void}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}]}], {0x14, 0x10}}, 0x6c}}, 0x0) 4.896333514s ago: executing program 8 (id=7038): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x0, 0x2, {0x0}, 0x10000003}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, &(0x7f0000000c40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) r5 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x33, 0x39, 0x36, 0x0, 0x34, 0x33, 0x31, 0x64, 0xc1e688e9b2ae2fc6, 0x61, 0x62, 0x0, 0x63, 0x0, 0x65, 0x5a]}, &(0x7f00000004c0)={0x0, "d1cc36a7f7b46969adcac737ee43395966a4b96ab99dc9152669484465687559a61e3f08e687f5d5f57378ce2ac54ba0e89c8cf04799789b72dd85718f8733af", 0x20}, 0x48, 0xfffffffffffffffe) r6 = request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)='{.+&\x00', 0x0) keyctl$negate(0xd, r5, 0xad0, r6) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@dev={0xac, 0x14, 0x14, 0x3f}}, {@in=@loopback, 0xfffffffc, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x1ff, 0x0, 0x4}, {}, {0x2, 0x6, 0xff}, 0x70bd2d, 0x0, 0x2, 0x0, 0x0, 0xb0}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd26, 0x70bd2d, 0x70bd2b, 0x4}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) 4.752155612s ago: executing program 9 (id=7039): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10001, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) socket$inet6_udplite(0xa, 0x2, 0x88) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x20000004) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 4.031930205s ago: executing program 2 (id=7040): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001b00)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)}], 0x1}, 0x0) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x12}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) semctl$SETALL(0x0, 0x0, 0x11, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="f40000002d00010026bd7000fcdbdf25040000", @ANYRESHEX=r0], 0xf4}, 0x1, 0x0, 0x0, 0x400000c}, 0x2400c810) 3.636447579s ago: executing program 9 (id=7041): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c0002"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4002051) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001280)=ANY=[@ANYBLOB='D'], 0x4c}}, 0x0) write$binfmt_misc(r3, &(0x7f0000001280), 0x6) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x10) r6 = open$dir(&(0x7f0000000280)='./file0\x00', 0x230500, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="0b8393b6167aa5d73dad0a66a7c9277d481343d806b77c2ca991d28a336cca04457118d40ecc80b9e740666d460730b94c5c0f5ade0536edc69b7b01a28dac44547b236e712cfeef6b66091959ab54409799dc141471577771cafeb2", 0x5c) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r8 = fsopen(&(0x7f0000000440)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000200)='source', &(0x7f00000006c0)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/\xb0\t\x00\x00\x00\x00\x00\x00U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/\xb4\x00\x80_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b7\x8aH\xd6\xd8\xbf\xe7\xc4|y\x1b\xd3\x88\x139\x8a/L;)?\x80J\x85\xf0[?\x01\xa3\x02~5*\x94`\x1a\"g\x8aV\xb6q{\xbc\x18\x99Y\x12\xd2\xc2\n>\xbb)\xf6|*\xbb\x14F\nZ\xact\xc5\x12\xdd\xda\xe4\x91\x0f\xdf\xb1\xf4\xf7\xa8?tO\xa6|\x11clY\x02\x17 \xf6\xe7\x8a\x93vr\x80A\xbc\xdd#\xd5y\v\xf5\xd6\xe7B\xf1@\xe1w\xfa[\xa4;\xf6\x99\x02\xa8\xcbu\xf1jdV<\xe4y\xf6\xb9\xadHN\a_w ?\xe7\x83\"\xf5\x1f\xb2\x04\x80\xcay\x03`\xa3\xf0+i2jQ\xea\x00um\xe1g\xa4\xd4\xec;\x87\x9c\xef\xc9\x91\xa8\xb2\xef\xee\x98\x12\xd2!\x89\x98T\xdb%R\'\x01\f\xb4\xf4a\x81\x00X\xea\x1c\x03<\xc05\x0e\xd8\xfe9\xd9\x99\xe7\xf5\xc3\x97.\xf4Y\xb7!/yy\xee\x84\xef\bw=\xab\xea\x18\xdaS\xf2\'S:\x86\xf6o\x89\xf1\xe0\xcc\x13P\xa7\x06\xc6\xe9\xfe\xed\xf7\x04\xadJ\xfd:\x9fL>=\xdbQ\xde\xb0\x1e$\xd1\x17\f\xddiN\xf5\xca\x84\xf3\xd5[\x1e\xb2\x9d6\x89\xc7w\x14\xb6\xb9G\x80\xb3\xd4C', 0x0) write$qrtrtun(r5, &(0x7f0000000780)="9d8dfa5e53b6183d874f9e93a18dd009a09582ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315424fa0a1622da79faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d479ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c720f36d957944b3b979cfaef6a51a7aff0560787261522243b2911ca55d24db82e20b7a9544529", 0xd7) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d40)={r7, 0x0, 0x30, 0xe1515f8735398fb, @val=@tracing={0x0, 0xd01}}, 0x20) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="13000000080000000800"/20, @ANYRES16=0x0, @ANYRES8=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001f00"/19], 0x50) 3.312016078s ago: executing program 7 (id=7042): r0 = socket$nl_route(0x10, 0x3, 0x0) read(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r3) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x10, &(0x7f0000001f00), &(0x7f0000000540), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x510}, 0x1, 0x0, 0x0, 0x5}, 0x4) unshare(0x46000200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a800000000000000000000008001b00", @ANYRES32=0x0, @ANYBLOB="d01ff88b3b4c3a5e047c04588fd5a2aea2fb"], 0x2c}}, 0x0) syz_io_uring_setup(0x90e, &(0x7f0000000400)={0x0, 0x3316, 0x400, 0x801, 0x34e}, &(0x7f0000000240)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 2.904501751s ago: executing program 2 (id=7043): bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x200000000000003c, &(0x7f0000000080)}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x80489439, &(0x7f0000000900)={'batadv_slave_1\x00'}) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xac}}, 0x48004) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) recvfrom$inet6(r5, &(0x7f00000001c0)=""/252, 0xfc, 0x40000000, &(0x7f00000000c0)={0xa, 0x4e23, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfff, 0x1}}, 0x20) syz_emit_ethernet(0x72, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60"], 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(&(0x7f0000000140)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v2={0x2000000, [{}, {0x2, 0x8}]}, 0x14, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000802, 0x0, &(0x7f0000000280)={0xffffffff, 0x5b81, 0x7, 0x0, 0x9, 0x9, 0x20000000000000, 0xa4, 0xde}) signalfd4(r5, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 2.732126933s ago: executing program 8 (id=7044): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000070d4daa9f4af49d1c0ad6b85006aba8744008000"/32, @ANYRES32=0x0, @ANYBLOB="50c3000000000000140012800b00010065727370616e000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRESHEX=r1, @ANYRES32=r1, @ANYRESDEC=r5], 0x50) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)={0x20000001}) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000003c0)="07c1c9a094912ec7343203126b9e659d9fa66e9acef1fa6310b307d1ff875123e1d3c5852b02bd7d885d4bbef476fc6649c13f2043886f57b257ffcd809256465b481e09007e0000000000000000e277b1b7ea56c8a042253339822ea994a65508893ea03ab1ca011869fb5e18f3c1aa40e916191596513d51172d35d9d0e8c9b2769fc04557cdc708df9943764b56874cf468028be3abba60", 0x99, 0x641, &(0x7f0000000040)={0xa, 0x4e2b, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x2}, 0x9c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {0x0, 0xee00}}, './file0\x00'}) setresgid(r7, r7, r7) 2.105427558s ago: executing program 7 (id=7045): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$sg(0x0, 0x0, 0x40080) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.976512403s ago: executing program 2 (id=7046): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) 1.974322035s ago: executing program 9 (id=7047): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000100400000000000010000001500080064010102388a647ee00000010500010000000000080002000700000008000200050000001400062becda93f689bdfb774e712fe3c1945e20f82384994484d66b8643eb4d259cf4dc5298e823dcbf6d896c2e136247b73da4eb4288"], 0x6c}, 0x1, 0x0, 0x0, 0x20008854}, 0xf5dea1023c4299a8) socket$inet(0x2, 0x80000, 0xfffffffc) 1.840064226s ago: executing program 2 (id=7048): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x402, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x2240, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x810, r2, 0x0) syz_io_uring_complete(r3) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x8010, r2, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r4, 0x89e5, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x7813, 0x2, 0x0, 0x81, 0x6, 0x1, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xd50}}], 0x578, 0x9200000000000000) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/210, 0xf6}], 0x1}, 0x61) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xbde, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, r7}}, 0x30) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) 1.839754407s ago: executing program 9 (id=7049): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x36, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0xf231, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0xff000000, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 1.777066937s ago: executing program 1 (id=7050): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x62, 0xcc, 0xe4, 0x40, 0x582, 0x7, 0x3e97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0x9, 0x67, 0xeb}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0xc, 0x0}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) umount2(0x0, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) semctl$SETALL(0x0, 0x0, 0x11, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40000002d00010026bd7000fcdbdf25040000"], 0xf4}, 0x1, 0x0, 0x0, 0x400000c}, 0x20000000) r7 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r8 = dup(r7) write$nbd(r8, &(0x7f0000000140)=ANY=[], 0xdc) copy_file_range(r8, &(0x7f0000000100)=0x9, r7, 0x0, 0x3, 0x0) sendfile(r2, r3, 0x0, 0x5) 1.776656249s ago: executing program 8 (id=7051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000006f2e14746a33f4", @ANYRES16=r1, @ANYBLOB="0100200000000000000005000000180001801400020073797a5f74756e0000000000000000000500020000000000"], 0x34}}, 0x0) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x4001, 0x1) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x1) 1.66122813s ago: executing program 8 (id=7052): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x2700) ioctl$EVIOCGABS0(r0, 0x80184540, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="0406"], 0xfe49, 0x0) quotactl_fd$Q_SYNC(r4, 0xffffffff80000100, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r6, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x91}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x1}, 0x40004) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000180)='#[@.[*,&@\x00', 0xa) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784314000200776731000000000000000000000000007000088028000080240001000000000000000000000000000000000000000000000000000000000000000000440000801400040002004e23ffffffff0000000000000000080009800400008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228421bf63c07bc6ae8b28a963c3c0e472c6baeb469617e388108d4ecae6559e9fad4713fdcfe973d5559d553c2bda9fd3a96529293b0ef1fbafdf1781f7"], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3, 0x0, 0x100000001]}) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000001c0)=""/65) 647.869895ms ago: executing program 2 (id=7053): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000900000000000000175400007f00000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) (async) io_setup(0x2, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="4a00ff", 0x3}]) (async, rerun: 64) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRES8=r3], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x2000f8d1) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket(0x1e, 0xa, 0xfff) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r10, &(0x7f0000000440)=""/102397, 0x18ffd) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) writev(r8, &(0x7f0000000300)=[{&(0x7f0000019440)="2105184611809797664eeab429f79bfc3d7b9e1486031606fa26edec0e68e1345bb849d8af352d8add9bfdcab40d4d512c087ffd827bbf6d005080270a00ab902ab6e3ebecf44abd2b69175223413cfb8fd3e90b868c2bd3e5597d896fb29b93409256e7954d1c3755b47282", 0x6c}, {&(0x7f000001a4c0)="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", 0x1004}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) (async) r12 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r12, 0x29, 0x1e, 0x0, &(0x7f0000000980)) (async, rerun: 32) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r6}) (rerun: 32) 438.762654ms ago: executing program 2 (id=7054): r0 = syz_usb_connect(0x0, 0x3d7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) syz_open_dev$video(0x0, 0x0, 0x10f082) 431.661138ms ago: executing program 8 (id=7055): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fcff0e00000000002100000009001f0070687995e87688000c00050000000000000000000500"], 0x34}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40080c5) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000040)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sm3\x00'}}) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000200010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) write$binfmt_misc(r4, &(0x7f0000000300), 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = fcntl$getown(r3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(0xffffffffffffffff, r7, 0x0, 0x100000500) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) 410.561254ms ago: executing program 7 (id=7056): memfd_secret(0x80000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) getsockname$packet(r3, 0x0, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x2f4, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@TCA_STAB={0x130, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x6, 0xe, 0x5, 0x0, 0x4, 0x8, 0x3}}, {0xa, 0x2, [0x6, 0x5, 0xb3]}}, {{0x1c, 0x1, {0xf, 0xf, 0x23, 0x5, 0x0, 0x0, 0xffff8000, 0xa}}, {0x18, 0x2, [0xfff, 0x6, 0x9, 0x4, 0x1, 0x4b36, 0xaf5, 0x3ff, 0xe46e, 0x9]}}, {{0x1c, 0x1, {0x9, 0x0, 0x0, 0x0, 0x1, 0x9, 0x6cc3, 0x3}}, {0xa, 0x2, [0x5, 0x8, 0x7]}}, {{0x1c, 0x1, {0x9, 0x6, 0x1040, 0x9, 0x2, 0xffff, 0x8, 0x5}}, {0xe, 0x2, [0x9, 0x5, 0x2, 0xa, 0x80]}}, {{0x1c, 0x1, {0x40, 0x9, 0x1000, 0x2, 0x1, 0x8, 0x1, 0x2}}, {0x8, 0x2, [0x5, 0xc78f]}}, {{0x1c, 0x1, {0x2, 0x7, 0x100, 0x5, 0x2, 0x6, 0x9, 0x4}}, {0xc, 0x2, [0x8, 0x80, 0x9, 0x3]}}, {{0x1c, 0x1, {0x7, 0x2, 0x0, 0x3, 0x0, 0x2, 0x7, 0x7}}, {0x12, 0x2, [0x2, 0xfffd, 0x4c, 0x3, 0x5eae, 0x8001, 0xfff9]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2e}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x2, 0x2, 0x100, 0x0, 0x7, 0x7, 0x5}}, {0xe, 0x2, [0x0, 0x4, 0x3, 0xc, 0x8]}}, {{0x1c, 0x1, {0x0, 0xec, 0xfff, 0xe3ee, 0x1, 0x2, 0x773, 0x1}}, {0x6, 0x2, [0x8001]}}]}, @TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd2, 0x80, 0x2, 0xee7, 0x1, 0x3b, 0x9, 0x5}}, {0xe, 0x2, [0x812, 0x492, 0x9, 0x8001, 0x5]}}, {{0x1c, 0x1, {0x9, 0x5, 0x7a, 0x100, 0x1, 0x3bb9, 0xa, 0x7}}, {0x12, 0x2, [0x81, 0x7fff, 0x4, 0x2, 0x4, 0xfc, 0x2]}}, {{0x1c, 0x1, {0x17, 0x4, 0x1, 0x5, 0x0, 0x6, 0x1, 0x6}}, {0x10, 0x2, [0x7, 0x2, 0xf, 0x7, 0x3, 0x1]}}, {{0x1c, 0x1, {0x8, 0xb, 0x6, 0xfdc, 0x0, 0x6, 0x9, 0x3}}, {0xa, 0x2, [0x8, 0x8, 0x3f91]}}, {{0x1c, 0x1, {0x8, 0x10, 0x8000, 0x9, 0x1, 0x2, 0x400, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x0, 0x8, 0x8000, 0x2, 0x2, 0x4, 0x8, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x1, 0xd, 0x7, 0x5, 0x1, 0x80000000, 0x3, 0x3}}, {0xa, 0x2, [0xf000, 0x9, 0x7]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2f4}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf250b0000006c00058024000280080001001b000000080001000100000008000400b3000000080004000a000000080001"], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40004) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r6, 0x101, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 0s ago: executing program 9 (id=7057): r0 = io_uring_setup(0x2471, &(0x7f0000000280)={0x0, 0x4170, 0x1000, 0x0, 0x2e6}) io_uring_setup(0x2a5a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) msgsnd(0x0, 0x0, 0x0, 0x800) r2 = syz_open_dev$sg(0x0, 0x6, 0x41c005) sendfile(r0, 0xffffffffffffffff, 0x0, 0xb) ioctl$SG_IO(r2, 0x2285, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x34}, 0x10) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @val=@netkit={@void, @value}}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x3000000, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c00"], 0x1d8}}, 0x0) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc) kernel console output (not intermixed with test programs): ="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8081d8e969 code=0x7fc00000 [ 2240.365381][T31248] veth1_to_bridge: entered promiscuous mode [ 2240.467456][T31253] 9pnet_fd: Insufficient options for proto=fd [ 2240.496769][T31253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6399'. [ 2240.505936][T31253] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6399'. [ 2240.729641][T31254] netlink: 'syz.2.6396': attribute type 5 has an invalid length. [ 2241.260189][ T30] audit: type=1400 audit(2000001894.565:1877): avc: denied { create } for pid=31249 comm="syz.5.6400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 2241.276629][T31239] veth1_to_bridge: left promiscuous mode [ 2241.377207][ T30] audit: type=1326 audit(2000001894.925:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31239 comm="syz.2.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8081d8e969 code=0x7fc00000 [ 2242.190871][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2242.411868][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2242.421008][ T9] usb 6-1: config 1 has an invalid interface number: 121 but max is 0 [ 2242.429212][ T9] usb 6-1: config 1 has no interface number 0 [ 2242.438351][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 2242.450042][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2242.458065][ T9] usb 6-1: Product: syz [ 2242.462514][ T9] usb 6-1: Manufacturer: syz [ 2242.467604][ T9] usb 6-1: SerialNumber: syz [ 2242.479630][ T9] hub 6-1:1.121: bad descriptor, ignoring hub [ 2242.485915][ T9] hub 6-1:1.121: probe with driver hub failed with error -5 [ 2243.100287][T31277] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6401'. [ 2243.161199][T31271] netlink: 'syz.7.6405': attribute type 27 has an invalid length. [ 2243.169058][T31271] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6405'. [ 2243.457628][T31273] lo speed is unknown, defaulting to 1000 [ 2243.476482][T31273] lo speed is unknown, defaulting to 1000 [ 2243.620322][ T9] usb 6-1: USB disconnect, device number 23 [ 2244.333502][T31273] lo speed is unknown, defaulting to 1000 [ 2244.436070][T31287] bridge_slave_0: left allmulticast mode [ 2244.442009][T31287] bridge_slave_0: left promiscuous mode [ 2244.447711][T31287] bridge0: port 1(bridge_slave_0) entered disabled state [ 2244.457636][T31287] bridge_slave_1: left allmulticast mode [ 2244.464184][T31287] bridge_slave_1: left promiscuous mode [ 2244.472396][T31287] bridge0: port 2(bridge_slave_1) entered disabled state [ 2244.487661][T31287] bond0: (slave bond_slave_0): Releasing backup interface [ 2244.498400][T31287] bond0: (slave bond_slave_1): Releasing backup interface [ 2244.560652][T31287] team0: Port device team_slave_0 removed [ 2244.573978][T31287] team0: Port device team_slave_1 removed [ 2244.581943][T31287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2244.589404][T31287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2244.603189][T31287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2244.613668][T31287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2248.289922][T31320] 9pnet_fd: Insufficient options for proto=fd [ 2248.310210][T31320] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6418'. [ 2248.320696][T31320] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6418'. [ 2248.880317][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2249.039222][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2249.099020][ T9] usb 3-1: config 1 has an invalid interface number: 121 but max is 0 [ 2249.155401][ T9] usb 3-1: config 1 has no interface number 0 [ 2249.215666][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 2249.227557][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2249.230736][T12344] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2249.355935][T12344] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2249.356218][ T9] usb 3-1: Product: syz [ 2249.369560][T12344] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2249.378283][ T9] usb 3-1: Manufacturer: syz [ 2249.399629][ T9] usb 3-1: SerialNumber: syz [ 2249.404481][T12344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2249.409549][T19140] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2249.424978][T12344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2249.462829][ T9] hub 3-1:1.121: bad descriptor, ignoring hub [ 2249.475201][ T9] hub 3-1:1.121: probe with driver hub failed with error -5 [ 2249.547747][T31328] lo speed is unknown, defaulting to 1000 [ 2249.581464][T19140] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2249.608910][T31328] lo speed is unknown, defaulting to 1000 [ 2249.667241][T19140] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2249.830065][T31336] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6419'. [ 2250.156584][T31340] netlink: 'syz.5.6422': attribute type 21 has an invalid length. [ 2250.289618][ T47] usb 3-1: USB disconnect, device number 42 [ 2250.330267][T19140] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2250.924032][T31328] lo speed is unknown, defaulting to 1000 [ 2251.662263][T26110] Bluetooth: hci2: command tx timeout [ 2252.467573][T31367] syz.7.6423: attempt to access beyond end of device [ 2252.467573][T31367] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2252.481746][T31367] (syz.7.6423,31367,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 2252.489421][T31367] (syz.7.6423,31367,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 2252.496928][T31367] (syz.7.6423,31367,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 2252.505671][T31367] (syz.7.6423,31367,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 2253.460968][T31328] chnl_net:caif_netlink_parms(): no params data found [ 2254.042820][T26110] Bluetooth: hci2: command tx timeout [ 2255.340472][T31402] netlink: 'syz.2.6438': attribute type 1 has an invalid length. [ 2256.083378][T26110] Bluetooth: hci2: command tx timeout [ 2256.391967][T19140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2256.410165][T19140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2256.427367][T19140] bond0 (unregistering): Released all slaves [ 2256.519683][T31421] input: syz1 as /devices/virtual/input/input137 [ 2258.168736][T26110] Bluetooth: hci2: command tx timeout [ 2258.283126][T31328] bridge0: port 1(bridge_slave_0) entered blocking state [ 2258.293811][T31436] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6446'. [ 2258.303030][T31328] bridge0: port 1(bridge_slave_0) entered disabled state [ 2258.407286][T31328] bridge_slave_0: entered allmulticast mode [ 2258.426018][T31328] bridge_slave_0: entered promiscuous mode [ 2258.930398][ T9] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 2258.961158][T31328] bridge0: port 2(bridge_slave_1) entered blocking state [ 2258.968938][T31328] bridge0: port 2(bridge_slave_1) entered disabled state [ 2258.976344][T31328] bridge_slave_1: entered allmulticast mode [ 2258.984339][T31328] bridge_slave_1: entered promiscuous mode [ 2259.028847][T31328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2259.067771][T31328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2259.084411][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2259.109510][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 2259.123425][ T9] usb 3-1: config 129 has an invalid interface number: 145 but max is 0 [ 2259.143142][ T9] usb 3-1: config 129 has no interface number 0 [ 2259.156483][ T9] usb 3-1: config 129 interface 145 has no altsetting 0 [ 2259.171645][ T9] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= d.2f [ 2259.200179][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.228818][ T9] usb 3-1: Product: syz [ 2259.235135][ T9] usb 3-1: Manufacturer: syz [ 2259.248401][ T9] usb 3-1: SerialNumber: syz [ 2259.343752][T31328] team0: Port device team_slave_0 added [ 2259.367348][T31328] team0: Port device team_slave_1 added [ 2259.607890][T31328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2259.635041][T31328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2259.662524][T31328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2259.677809][ T9] usb 3-1: USB disconnect, device number 43 [ 2259.678026][T31328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2259.692274][T31328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2259.719596][T31328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2259.751020][T19140] hsr_slave_0: left promiscuous mode [ 2259.793763][T19140] hsr_slave_1: left promiscuous mode [ 2259.810150][T19140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2259.822500][T19140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2259.833424][T19140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2259.841830][T19140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2259.881080][T19140] veth1_macvtap: left promiscuous mode [ 2259.886887][T19140] veth0_macvtap: left promiscuous mode [ 2259.893018][T19140] veth1_vlan: left promiscuous mode [ 2259.898577][T19140] veth0_vlan: left promiscuous mode [ 2261.453894][T31473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6457'. [ 2261.765054][T31477] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2262.924141][T19140] team0 (unregistering): Port device team_slave_1 removed [ 2262.979687][T19140] team0 (unregistering): Port device team_slave_0 removed [ 2264.078156][ T8601] smc: removing ib device sz1 [ 2264.172692][T14584] lo speed is unknown, defaulting to 1000 [ 2264.223246][T14584] sz1: Port: 1 Link DOWN [ 2264.260697][T31491] overlayfs: bad index found (index=index/00fb210001a3d114efbe4e451c9b1a1d1e9cf6ff2f2f7a119e8c00000000000000, ftype=2000, origin ftype=8000). [ 2264.537090][T31500] random: crng reseeded on system resumption [ 2264.756108][T31328] hsr_slave_0: entered promiscuous mode [ 2265.258079][T31328] hsr_slave_1: entered promiscuous mode [ 2265.298787][T31328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2265.342562][T31328] Cannot create hsr debugfs directory [ 2265.629311][ T30] audit: type=1400 audit(2000001919.165:1879): avc: denied { write } for pid=31497 comm="syz.5.6465" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2266.236309][ T30] audit: type=1400 audit(2000001919.695:1880): avc: denied { add_name } for pid=31497 comm="syz.5.6465" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2266.308222][ T30] audit: type=1400 audit(2000001919.785:1881): avc: denied { create } for pid=31497 comm="syz.5.6465" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2266.415584][ T30] audit: type=1400 audit(2000001919.785:1882): avc: denied { associate } for pid=31497 comm="syz.5.6465" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2267.027719][T31328] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2267.070445][T31328] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2267.097543][T31328] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2267.118573][T31328] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2268.162898][T31328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2268.212438][T31328] 8021q: adding VLAN 0 to HW filter on device team0 [ 2268.275686][ T8601] bridge0: port 1(bridge_slave_0) entered blocking state [ 2268.282896][ T8601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2268.306362][ T8601] bridge0: port 2(bridge_slave_1) entered blocking state [ 2268.313618][ T8601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2268.878514][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2269.248093][T31540] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6475'. [ 2269.338846][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2269.357456][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 2269.585743][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2269.616661][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2269.625263][ T9] usb 3-1: SerialNumber: syz [ 2269.633772][ T9] usb 3-1: bad CDC descriptors [ 2269.850904][ T9] usb 3-1: USB disconnect, device number 44 [ 2269.924125][T31328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2270.077806][T12344] Bluetooth: hci3: command 0x0406 tx timeout [ 2270.567407][T31328] veth0_vlan: entered promiscuous mode [ 2270.577237][T31328] veth1_vlan: entered promiscuous mode [ 2270.599384][T31328] veth0_macvtap: entered promiscuous mode [ 2270.611437][T31328] veth1_macvtap: entered promiscuous mode [ 2270.656707][T31328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2270.682968][T31328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2270.835235][T31328] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2270.845503][T31328] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2270.859053][T31328] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2270.869132][T31328] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2271.132419][T31577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=31577 comm=syz.5.6479 [ 2272.007277][T19171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2272.086113][T19171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2272.351399][T31587] netlink: 'syz.1.6482': attribute type 21 has an invalid length. [ 2272.436544][T31588] netlink: 'syz.1.6482': attribute type 21 has an invalid length. [ 2272.733955][T31587] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6482'. [ 2272.743676][T31588] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6482'. [ 2272.926109][ T8601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2273.016902][T31593] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 2273.023742][ T8601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2273.348648][T31598] syz.5.6487: attempt to access beyond end of device [ 2273.348648][T31598] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2273.362887][T31598] SQUASHFS error: Failed to read block 0x0: -5 [ 2273.370240][T31598] unable to read squashfs_super_block [ 2273.488111][T31599] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6488'. [ 2275.593266][T31625] FAULT_INJECTION: forcing a failure. [ 2275.593266][T31625] name failslab, interval 1, probability 0, space 0, times 0 [ 2275.607284][T31625] CPU: 1 UID: 0 PID: 31625 Comm: syz.7.6495 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 2275.607310][T31625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2275.607322][T31625] Call Trace: [ 2275.607328][T31625] [ 2275.607336][T31625] dump_stack_lvl+0x16c/0x1f0 [ 2275.607368][T31625] should_fail_ex+0x512/0x640 [ 2275.607398][T31625] should_failslab+0xc2/0x120 [ 2275.607418][T31625] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2275.607440][T31625] ? skb_clone+0x190/0x3f0 [ 2275.607464][T31625] skb_clone+0x190/0x3f0 [ 2275.607487][T31625] netlink_deliver_tap+0xabd/0xd30 [ 2275.607516][T31625] netlink_unicast+0x5df/0x7f0 [ 2275.607543][T31625] ? __pfx_netlink_unicast+0x10/0x10 [ 2275.607579][T31625] netlink_sendmsg+0x8d1/0xdd0 [ 2275.607608][T31625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2275.607642][T31625] ____sys_sendmsg+0xa98/0xc70 [ 2275.607669][T31625] ? copy_msghdr_from_user+0x10a/0x160 [ 2275.607690][T31625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2275.607728][T31625] ___sys_sendmsg+0x134/0x1d0 [ 2275.607750][T31625] ? __pfx____sys_sendmsg+0x10/0x10 [ 2275.607806][T31625] __sys_sendmsg+0x16d/0x220 [ 2275.607827][T31625] ? __pfx___sys_sendmsg+0x10/0x10 [ 2275.607857][T31625] ? rcu_is_watching+0x12/0xc0 [ 2275.607888][T31625] do_syscall_64+0xcd/0x260 [ 2275.607917][T31625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2275.607936][T31625] RIP: 0033:0x7f94ce38e969 [ 2275.607951][T31625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2275.607968][T31625] RSP: 002b:00007f94cf227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2275.607987][T31625] RAX: ffffffffffffffda RBX: 00007f94ce5b5fa0 RCX: 00007f94ce38e969 [ 2275.607998][T31625] RDX: 0000000004020000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2275.608010][T31625] RBP: 00007f94cf227090 R08: 0000000000000000 R09: 0000000000000000 [ 2275.608021][T31625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2275.608032][T31625] R13: 0000000000000000 R14: 00007f94ce5b5fa0 R15: 00007ffe28f03268 [ 2275.608058][T31625] [ 2276.348223][T31638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6500'. [ 2276.938454][T31631] macsec2: entered promiscuous mode [ 2276.944825][T31631] macsec2: entered allmulticast mode [ 2277.063030][T31644] syz.5.6501: attempt to access beyond end of device [ 2277.063030][T31644] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2277.076398][T31644] SQUASHFS error: Failed to read block 0x0: -5 [ 2277.082908][T31644] unable to read squashfs_super_block [ 2278.589896][ T5871] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2279.111848][ T5871] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 2279.120663][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2279.143140][ T5871] usb 3-1: config 0 has no interface number 0 [ 2279.164077][ T5871] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2279.174290][ T5871] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2279.196552][ T5871] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2279.208598][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2279.220955][ T5871] usb 3-1: Product: syz [ 2279.225185][ T5871] usb 3-1: Manufacturer: syz [ 2279.227836][T31678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2279.232287][ T5871] usb 3-1: SerialNumber: syz [ 2279.245198][T31678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2279.250977][ T5871] usb 3-1: config 0 descriptor?? [ 2279.322343][T31680] syz.8.6514: attempt to access beyond end of device [ 2279.322343][T31680] nbd8: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2279.340017][T31680] SQUASHFS error: Failed to read block 0x0: -5 [ 2279.348288][T31680] unable to read squashfs_super_block [ 2279.482679][T22333] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 2279.523785][T31683] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 2279.770827][T22333] usb 6-1: config 18 has an invalid descriptor of length 0, skipping remainder of the config [ 2279.784974][T22333] usb 6-1: config 18 has no interfaces? [ 2279.790732][T22333] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 2279.837789][T30303] Bluetooth: hci5: command 0x0406 tx timeout [ 2279.941446][T31683] ptrace attach of ""[31685] was attempted by "./syz-executor exec"[31683] [ 2280.137463][T31688] netlink: 'syz.8.6516': attribute type 21 has an invalid length. [ 2280.145699][T31688] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6516'. [ 2280.174398][T31688] netlink: 'syz.8.6516': attribute type 21 has an invalid length. [ 2280.182524][T31688] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6516'. [ 2280.422674][T22333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2280.647833][ T24] usb 6-1: USB disconnect, device number 24 [ 2280.867076][T31699] syz.1.6520: attempt to access beyond end of device [ 2280.867076][T31699] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2280.883289][T31699] SQUASHFS error: Failed to read block 0x0: -5 [ 2280.889691][T31699] unable to read squashfs_super_block [ 2280.897664][T22333] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2281.191365][T22333] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2281.203573][T22333] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2281.227351][T22333] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2281.242726][T22333] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2281.256267][T22333] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2281.271957][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2281.289205][T22333] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2281.316823][T22333] usb 9-1: config 0 descriptor?? [ 2281.445739][ T24] usb 6-1: config 18 has an invalid descriptor of length 0, skipping remainder of the config [ 2281.486483][ T24] usb 6-1: config 18 has no interfaces? [ 2281.497809][ T24] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 2281.523671][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2281.738280][T22333] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 2281.752686][T22333] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 2282.270857][ T47] usb 3-1: USB disconnect, device number 45 [ 2282.678017][T31723] nfs: Unknown parameter ' ' [ 2282.895981][T31724] netlink: 'syz.8.6517': attribute type 1 has an invalid length. [ 2282.913430][T31724] ip6erspan0: entered promiscuous mode [ 2283.147119][T22333] usb 9-1: USB disconnect, device number 2 [ 2283.676678][ T5871] usb 6-1: USB disconnect, device number 25 [ 2283.754034][T22333] kernel write not supported for file /249/attr/exec (pid: 22333 comm: kworker/0:3) [ 2283.962596][ T8601] Bluetooth: (null): Too short H5 packet [ 2284.009247][ T8601] Bluetooth: (null): Invalid header checksum [ 2284.031528][ T8601] Bluetooth: (null): Invalid header checksum [ 2284.070761][T19138] Bluetooth: (null): Invalid header checksum [ 2284.183047][T19138] Bluetooth: (null): Invalid header checksum [ 2284.306267][T30387] Bluetooth: (null): Invalid header checksum [ 2284.810976][T30387] Bluetooth: (null): Invalid header checksum [ 2284.823635][T30387] Bluetooth: (null): Invalid header checksum [ 2284.829728][T30387] Bluetooth: (null): Invalid header checksum [ 2284.836648][T30387] Bluetooth: (null): Invalid header checksum [ 2284.895845][T31750] lo speed is unknown, defaulting to 1000 [ 2284.925051][T31750] lo speed is unknown, defaulting to 1000 [ 2286.779677][T31780] syz.2.6539: attempt to access beyond end of device [ 2286.779677][T31780] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2286.800031][T31780] SQUASHFS error: Failed to read block 0x0: -5 [ 2286.822001][T31780] unable to read squashfs_super_block [ 2288.161738][ T30] audit: type=1400 audit(2000001941.715:1883): avc: denied { setattr } for pid=31796 comm="syz.7.6547" name="NETLINK" dev="sockfs" ino=138742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2288.489115][T31803] lo speed is unknown, defaulting to 1000 [ 2288.512332][T31803] lo speed is unknown, defaulting to 1000 [ 2288.513145][T31809] netlink: 'syz.2.6546': attribute type 27 has an invalid length. [ 2289.069945][T31809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6546'. [ 2289.594242][T31816] netlink: 152 bytes leftover after parsing attributes in process `syz.8.6544'. [ 2290.783342][ T30] audit: type=1400 audit(2000001944.335:1884): avc: denied { setattr } for pid=31820 comm="syz.5.6550" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2291.178899][T31827] 9pnet_fd: Insufficient options for proto=fd [ 2291.196078][T31827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6552'. [ 2291.205408][T31827] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6552'. [ 2293.263491][T31843] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 2295.430036][T31867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6564'. [ 2296.741058][T14584] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2297.042716][T14584] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2297.346169][T14584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2297.357112][T31877] 9pnet_fd: Insufficient options for proto=fd [ 2297.364397][T14584] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2297.366973][T31877] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6566'. [ 2297.382783][T31877] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6566'. [ 2297.451383][T14584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2297.479033][T14584] usb 3-1: config 0 descriptor?? [ 2297.511703][T31881] macsec1: entered promiscuous mode [ 2297.516976][T31881] macsec1: entered allmulticast mode [ 2298.145971][T31901] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6571'. [ 2298.550266][T14584] ath6kl: Failed to submit usb control message: -110 [ 2298.558079][T14584] ath6kl: unable to send the bmi data to the device: -110 [ 2298.681162][T14584] ath6kl: Unable to send get target info: -110 [ 2298.709084][T14584] ath6kl: Failed to init ath6kl core: -110 [ 2299.206267][T14584] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 2299.267712][ T47] usb 3-1: USB disconnect, device number 46 [ 2300.919560][T31928] 9pnet_fd: Insufficient options for proto=fd [ 2300.943572][T31928] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6579'. [ 2300.955381][T31928] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6579'. [ 2301.127299][T31929] lo speed is unknown, defaulting to 1000 [ 2301.142342][T31929] lo speed is unknown, defaulting to 1000 [ 2301.205932][ T30] audit: type=1400 audit(2000001954.755:1885): avc: denied { mounton } for pid=31917 comm="syz.8.6577" path="/sys/power/pm_trace" dev="sysfs" ino=1405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 2301.344279][T31921] netlink: 'syz.2.6578': attribute type 27 has an invalid length. [ 2301.352250][T31921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6578'. [ 2303.047706][T28540] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 2303.251871][T31966] netlink: 'syz.2.6591': attribute type 1 has an invalid length. [ 2303.279271][T31966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2303.354236][T31947] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6586'. [ 2304.481120][T31977] 9pnet_fd: Insufficient options for proto=fd [ 2304.501694][T31977] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6593'. [ 2304.510915][T31977] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6593'. [ 2304.819313][T28540] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2304.910638][T28540] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 2304.931637][T28540] usb 9-1: can't read configurations, error -71 [ 2305.042511][T31982] syz.2.6594: attempt to access beyond end of device [ 2305.042511][T31982] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2305.059387][T31982] SQUASHFS error: Failed to read block 0x0: -5 [ 2305.065918][T31982] unable to read squashfs_super_block [ 2305.157854][T31982] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2306.097281][T30303] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2306.110308][T30303] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2306.119513][T30303] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2306.129308][T30303] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2306.138986][T30303] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2306.199466][T31993] lo speed is unknown, defaulting to 1000 [ 2306.207315][T31993] lo speed is unknown, defaulting to 1000 [ 2307.010109][T31993] chnl_net:caif_netlink_parms(): no params data found [ 2307.324268][T31993] bridge0: port 1(bridge_slave_0) entered blocking state [ 2307.341939][T31993] bridge0: port 1(bridge_slave_0) entered disabled state [ 2307.359370][T31993] bridge_slave_0: entered allmulticast mode [ 2307.377922][T31993] bridge_slave_0: entered promiscuous mode [ 2307.408510][T31993] bridge0: port 2(bridge_slave_1) entered blocking state [ 2307.427359][T31993] bridge0: port 2(bridge_slave_1) entered disabled state [ 2307.446177][T31993] bridge_slave_1: entered allmulticast mode [ 2307.459287][T31993] bridge_slave_1: entered promiscuous mode [ 2307.503011][T31993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2307.532583][T31993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2307.902333][T31993] team0: Port device team_slave_0 added [ 2307.926826][T31993] team0: Port device team_slave_1 added [ 2308.082813][T32023] syz.2.6605: attempt to access beyond end of device [ 2308.082813][T32023] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2308.096248][T32023] SQUASHFS error: Failed to read block 0x0: -5 [ 2308.102779][T32023] unable to read squashfs_super_block [ 2308.201598][T31993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2308.219230][T31993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2308.230078][T30303] Bluetooth: hci4: command tx timeout [ 2308.528215][T31993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2308.596882][T32023] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2308.675462][T31993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2308.685689][T31993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2308.749835][T31993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2309.241977][T32043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6607'. [ 2309.406211][ T30] audit: type=1400 audit(2000001962.905:1886): avc: denied { checkpoint_restore } for pid=32021 comm="syz.2.6605" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2309.605996][T31993] hsr_slave_0: entered promiscuous mode [ 2309.646564][T31993] hsr_slave_1: entered promiscuous mode [ 2309.668383][T31993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2309.746411][T31993] Cannot create hsr debugfs directory [ 2310.309882][T30303] Bluetooth: hci4: command tx timeout [ 2310.890295][T31993] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2310.907561][T31993] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2310.930536][T31993] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2310.946869][T31993] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2311.059570][T31993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2311.095036][T31993] 8021q: adding VLAN 0 to HW filter on device team0 [ 2311.134566][T27480] bridge0: port 1(bridge_slave_0) entered blocking state [ 2311.141788][T27480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2311.238723][T27480] bridge0: port 2(bridge_slave_1) entered blocking state [ 2311.245937][T27480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2311.514163][T32072] tmpfs: Bad value for 'mpol' [ 2311.678038][T31993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2312.312649][T31993] veth0_vlan: entered promiscuous mode [ 2312.327343][T31993] veth1_vlan: entered promiscuous mode [ 2312.399981][T30303] Bluetooth: hci4: command tx timeout [ 2312.560100][T31993] veth0_macvtap: entered promiscuous mode [ 2312.793710][T31993] veth1_macvtap: entered promiscuous mode [ 2312.846982][T31993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2312.881976][T32095] lo speed is unknown, defaulting to 1000 [ 2312.890672][T32095] lo speed is unknown, defaulting to 1000 [ 2312.947125][T32096] lo speed is unknown, defaulting to 1000 [ 2312.962676][T31993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2312.997813][T32094] netlink: 'syz.8.6623': attribute type 27 has an invalid length. [ 2313.005703][T32094] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6623'. [ 2313.035817][T32096] lo speed is unknown, defaulting to 1000 [ 2313.156237][T31993] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2313.173136][T31993] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2313.206310][T31993] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2313.230013][T31993] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2313.728833][T31380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2313.919963][T32113] netlink: 'syz.2.6626': attribute type 27 has an invalid length. [ 2313.927837][T32113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6626'. [ 2313.975114][T31380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2314.103796][T32112] lo speed is unknown, defaulting to 1000 [ 2314.113874][ T8601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2314.125167][T32112] lo speed is unknown, defaulting to 1000 [ 2314.129861][ T8601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2314.439217][T32121] random: crng reseeded on system resumption [ 2314.482144][T30303] Bluetooth: hci4: command tx timeout [ 2314.575770][T32123] netlink: 'syz.1.6627': attribute type 21 has an invalid length. [ 2314.583977][T32123] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6627'. [ 2314.614298][T32123] netlink: 'syz.1.6627': attribute type 21 has an invalid length. [ 2314.622471][T32123] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6627'. [ 2315.076450][T32128] lo speed is unknown, defaulting to 1000 [ 2315.116370][T32128] lo speed is unknown, defaulting to 1000 [ 2315.230680][T32132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6629'. [ 2315.313581][T32132] bridge_slave_1: left allmulticast mode [ 2315.343906][T32132] bridge_slave_1: left promiscuous mode [ 2315.352406][T32132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2315.383489][T32132] bridge_slave_0: left allmulticast mode [ 2315.394536][T32132] bridge_slave_0: left promiscuous mode [ 2315.424943][T32132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2317.185217][T32153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6635'. [ 2317.194795][T32153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6635'. [ 2318.520736][T22333] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2318.706286][T22333] usb 10-1: Using ep0 maxpacket: 32 [ 2319.183065][T22333] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2319.225269][T22333] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2319.324622][T32180] 9pnet_fd: Insufficient options for proto=fd [ 2319.372024][T32180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6642'. [ 2319.381176][T32180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6642'. [ 2319.573246][T22333] usb 10-1: Product: syz [ 2319.577567][T22333] usb 10-1: Manufacturer: syz [ 2319.610413][T22333] usb 10-1: SerialNumber: syz [ 2319.643574][T22333] usb 10-1: config 0 descriptor?? [ 2319.662481][T22333] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2319.880010][T32187] random: crng reseeded on system resumption [ 2319.956187][T32188] netlink: 'syz.2.6644': attribute type 21 has an invalid length. [ 2319.964479][T32188] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6644'. [ 2320.002609][T32188] netlink: 'syz.2.6644': attribute type 21 has an invalid length. [ 2320.010808][T32188] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6644'. [ 2320.358728][T32191] lo speed is unknown, defaulting to 1000 [ 2320.377655][T32191] lo speed is unknown, defaulting to 1000 [ 2320.955765][T32198] netlink: 'syz.2.6648': attribute type 21 has an invalid length. [ 2320.964204][T32198] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6648'. [ 2320.989543][T32198] netlink: 'syz.2.6648': attribute type 21 has an invalid length. [ 2320.997927][T32198] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6648'. [ 2321.375328][T22333] gspca_ov534_9: reg_w failed -110 [ 2321.760283][T22333] gspca_ov534_9: Unknown sensor 0000 [ 2321.772438][T32202] RDS: rds_bind could not find a transport for ::ffff:172.30.0.10, load rds_tcp or rds_rdma? [ 2321.792658][T22333] ov534_9 10-1:0.0: probe with driver ov534_9 failed with error -22 [ 2322.150613][T22333] usb 10-1: USB disconnect, device number 2 [ 2322.197115][T32201] ptrace attach of ""[32203] was attempted by "./syz-executor exec"[32201] [ 2322.456341][T32212] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 2322.580948][T32214] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 2323.005661][T32210] ptrace attach of ""[32217] was attempted by "./syz-executor exec"[32210] [ 2323.375437][T32225] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6655'. [ 2324.380935][T32234] binder: 32233:32234 ioctl c0306201 200000000540 returned -22 [ 2324.442063][T32235] RDS: rds_bind could not find a transport for ::ffff:172.30.0.10, load rds_tcp or rds_rdma? [ 2325.400993][T32245] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(14) [ 2325.407631][T32245] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2325.425583][T32245] vhci_hcd vhci_hcd.0: Device attached [ 2325.562190][T32253] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(20) [ 2325.568850][T32253] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2325.605177][T32245] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(16) [ 2325.611828][T32245] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2325.620099][T32245] vhci_hcd vhci_hcd.0: Device attached [ 2325.630333][T32253] vhci_hcd vhci_hcd.0: Device attached [ 2325.635990][T14584] vhci_hcd: vhci_device speed not set [ 2325.641423][T32251] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(17) [ 2325.648008][T32251] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2325.793316][T14584] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 2325.921447][T32251] vhci_hcd vhci_hcd.0: Device attached [ 2325.949689][T32245] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(24) [ 2325.956347][T32245] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2326.060409][T32245] vhci_hcd vhci_hcd.0: Device attached [ 2326.385899][T32266] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2326.458996][T32245] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2326.534102][T32245] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2326.648252][T32263] vhci_hcd: connection closed [ 2326.648639][ T3500] vhci_hcd: stop threads [ 2326.670408][T32248] vhci_hcd: connection reset by peer [ 2326.676386][T32255] vhci_hcd: connection closed [ 2326.676628][T32252] vhci_hcd: connection closed [ 2326.690032][T32258] vhci_hcd: connection closed [ 2326.729896][ T3500] vhci_hcd: release socket [ 2326.759846][ T3500] vhci_hcd: disconnect device [ 2326.771603][ T3500] vhci_hcd: stop threads [ 2326.776004][ T3500] vhci_hcd: release socket [ 2326.876785][ T3500] vhci_hcd: disconnect device [ 2326.960082][T32276] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 2327.229954][ T3500] vhci_hcd: stop threads [ 2327.239881][ T3500] vhci_hcd: release socket [ 2327.244987][ T3500] vhci_hcd: disconnect device [ 2327.254984][ T3500] vhci_hcd: stop threads [ 2327.271448][ T3500] vhci_hcd: release socket [ 2327.532646][ T3500] vhci_hcd: disconnect device [ 2327.570195][ T3500] vhci_hcd: stop threads [ 2327.595221][ T3500] vhci_hcd: release socket [ 2327.625783][ T3500] vhci_hcd: disconnect device [ 2328.045564][T32288] lo speed is unknown, defaulting to 1000 [ 2328.053218][T32288] lo speed is unknown, defaulting to 1000 [ 2328.136261][T32288] netlink: 'syz.8.6672': attribute type 27 has an invalid length. [ 2328.144233][T32288] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6672'. [ 2328.611624][T32304] syz.1.6668: attempt to access beyond end of device [ 2328.611624][T32304] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2328.631215][T32304] SQUASHFS error: Failed to read block 0x0: -5 [ 2328.639811][T32304] unable to read squashfs_super_block [ 2328.926289][T32300] input: syz0 as /devices/virtual/input/input141 [ 2328.983288][T32300] sp0: Synchronizing with TNC [ 2329.239860][ T47] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2329.242560][T32320] 9pnet_fd: Insufficient options for proto=fd [ 2329.299241][T32320] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6680'. [ 2329.308391][T32320] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6680'. [ 2329.914077][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2329.932402][ T47] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2329.973444][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2330.010474][ T47] usb 3-1: Product: syz [ 2330.017153][ T47] usb 3-1: Manufacturer: syz [ 2330.033883][ T47] usb 3-1: SerialNumber: syz [ 2330.042962][ T47] usb 3-1: config 0 descriptor?? [ 2330.126432][T32314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=32314 comm=syz.9.6675 [ 2330.203606][ T47] adutux 3-1:0.0: interrupt endpoints not found [ 2331.049175][T26110] Bluetooth: hci0: command 0x0405 tx timeout [ 2331.049192][T14584] vhci_hcd: vhci_device speed not set [ 2331.479908][T32345] syz.7.6684: attempt to access beyond end of device [ 2331.479908][T32345] nbd7: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2331.493957][T32345] SQUASHFS error: Failed to read block 0x0: -5 [ 2331.500365][T32345] unable to read squashfs_super_block [ 2331.542468][T32345] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2331.837060][T32333] netlink: 'syz.1.6682': attribute type 27 has an invalid length. [ 2331.845296][T32333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6682'. [ 2331.922740][T32342] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2332.070564][T32342] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2332.105233][T32338] lo speed is unknown, defaulting to 1000 [ 2332.184642][ T30] audit: type=1326 audit(2000001985.735:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32348 comm="syz.8.6688" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd12298e969 code=0x0 [ 2332.305382][T32342] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2332.347406][T32338] lo speed is unknown, defaulting to 1000 [ 2332.351509][T32350] bond0: entered promiscuous mode [ 2332.359787][T32350] bond_slave_0: entered promiscuous mode [ 2332.391212][T32350] bond_slave_1: entered promiscuous mode [ 2332.415153][T32298] [U] è [ 2332.420623][T28061] usb 3-1: USB disconnect, device number 47 [ 2332.441105][T28573] usb usb50-port1: attempt power cycle [ 2332.487972][T32342] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2332.599876][T22333] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 2332.738939][T32342] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2332.754422][T32342] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2332.762760][T22333] usb 9-1: Using ep0 maxpacket: 32 [ 2332.769484][T32342] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2332.786814][T32342] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2332.859267][T22333] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 2332.897083][T22333] usb 9-1: config 0 has no interface number 0 [ 2332.926410][T22333] usb 9-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice= 5.78 [ 2332.944113][T22333] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2333.067236][T28573] usb usb50-port1: unable to enumerate USB device [ 2333.071178][T32362] syz.9.6690: attempt to access beyond end of device [ 2333.071178][T32362] nbd9: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2333.090301][T32362] SQUASHFS error: Failed to read block 0x0: -5 [ 2333.096691][T32362] unable to read squashfs_super_block [ 2333.291736][T22333] usb 9-1: Product: syz [ 2333.295957][T22333] usb 9-1: Manufacturer: syz [ 2333.319938][T22333] usb 9-1: SerialNumber: syz [ 2333.363879][T22333] usb 9-1: config 0 descriptor?? [ 2333.396418][T22333] iguanair 9-1:0.2: probe with driver iguanair failed with error -12 [ 2333.530782][ T30] audit: type=1400 audit(2000001987.075:1888): avc: denied { view } for pid=32365 comm="syz.9.6692" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2334.178006][T32372] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 2335.234998][T22333] usb 9-1: USB disconnect, device number 5 [ 2336.656925][T32407] netlink: 'syz.8.6702': attribute type 21 has an invalid length. [ 2336.664882][T32407] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6702'. [ 2336.677229][T32407] netlink: 'syz.8.6702': attribute type 21 has an invalid length. [ 2336.685895][T32407] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6702'. [ 2336.734597][T32412] nbd: couldn't find a device at index 1996488704 [ 2338.406937][T32415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2338.440390][T32415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2338.642543][T32415] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2338.659818][T32415] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2338.668208][T32415] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2338.694972][T32415] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2338.740654][T17076] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2338.817728][T32417] team0: Device gtp0 is of different type [ 2338.874980][T32427] batadv_slave_0: entered promiscuous mode [ 2338.880975][T32427] macvtap1: entered allmulticast mode [ 2338.886389][T32427] batadv_slave_0: entered allmulticast mode [ 2338.973305][T17076] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2339.085348][T17076] usb 10-1: config 1 has an invalid interface number: 121 but max is 0 [ 2339.092735][T32433] 9pnet_fd: Insufficient options for proto=fd [ 2339.103021][T17076] usb 10-1: config 1 has no interface number 0 [ 2339.106772][T32433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6710'. [ 2339.118792][T32433] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6710'. [ 2339.165057][T17076] usb 10-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 2339.350210][T32421] lo speed is unknown, defaulting to 1000 [ 2339.356659][T32421] lo speed is unknown, defaulting to 1000 [ 2339.378326][T17076] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2339.388554][T17076] usb 10-1: Product: syz [ 2339.394770][T17076] usb 10-1: Manufacturer: syz [ 2339.400252][T17076] usb 10-1: SerialNumber: syz [ 2340.376791][T17076] hub 10-1:1.121: bad descriptor, ignoring hub [ 2340.386662][T17076] hub 10-1:1.121: probe with driver hub failed with error -5 [ 2341.506114][T32449] netlink: 224 bytes leftover after parsing attributes in process `syz.9.6709'. [ 2342.310818][T28061] usb 10-1: USB disconnect, device number 3 [ 2343.230085][ T5901] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2343.355453][T30303] Bluetooth: hci1: unexpected event for opcode 0x040e [ 2343.392293][ T30] audit: type=1400 audit(2000001996.945:1889): avc: denied { mount } for pid=32469 comm="syz.7.6716" name="/" dev="pstore" ino=2377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 2343.420833][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2343.430959][ T5901] usb 3-1: config 1 has an invalid interface number: 121 but max is 0 [ 2343.441265][ T5901] usb 3-1: config 1 has no interface number 0 [ 2343.447264][T32473] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:0 [ 2343.449379][ T5901] usb 3-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 2343.464614][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2343.472915][ T5901] usb 3-1: Product: syz [ 2343.477216][ T5901] usb 3-1: Manufacturer: syz [ 2343.486173][ T5901] usb 3-1: SerialNumber: syz [ 2343.494668][ T5901] hub 3-1:1.121: bad descriptor, ignoring hub [ 2343.501079][ T5901] hub 3-1:1.121: probe with driver hub failed with error -5 [ 2343.844766][T22333] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 2344.109218][T32483] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6720'. [ 2344.463144][T22333] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2344.488665][T22333] usb 9-1: config 1 has an invalid interface number: 121 but max is 0 [ 2344.659956][T22333] usb 9-1: config 1 has no interface number 0 [ 2344.691297][T22333] usb 9-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 2344.793953][T28540] usb 3-1: USB disconnect, device number 48 [ 2344.795807][T32489] syz.9.6725: attempt to access beyond end of device [ 2344.795807][T32489] nbd9: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2344.815419][T32489] SQUASHFS error: Failed to read block 0x0: -5 [ 2344.821938][T32489] unable to read squashfs_super_block [ 2344.845001][T32490] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2344.879916][T22333] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2344.891018][T22333] usb 9-1: Product: syz [ 2344.895252][T22333] usb 9-1: Manufacturer: syz [ 2344.900518][T22333] usb 9-1: SerialNumber: syz [ 2344.908930][T22333] hub 9-1:1.121: bad descriptor, ignoring hub [ 2344.915338][T22333] hub 9-1:1.121: probe with driver hub failed with error -5 [ 2345.222295][T32491] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6722'. [ 2345.546094][T32496] 9pnet_fd: Insufficient options for proto=fd [ 2345.850394][ T30] audit: type=1400 audit(2000001999.395:1890): avc: denied { unmount } for pid=27882 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 2346.087709][T22333] usb 9-1: USB disconnect, device number 6 [ 2346.552503][T32502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6727'. [ 2346.592632][T32512] netlink: 'syz.9.6730': attribute type 27 has an invalid length. [ 2346.600709][T32512] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6730'. [ 2346.675479][T32507] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.6727'. [ 2346.802793][T32515] FAULT_INJECTION: forcing a failure. [ 2346.802793][T32515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2346.816002][T32515] CPU: 0 UID: 0 PID: 32515 Comm: syz.1.6731 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 2346.816026][T32515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2346.816033][T32515] Call Trace: [ 2346.816037][T32515] [ 2346.816042][T32515] dump_stack_lvl+0x16c/0x1f0 [ 2346.816064][T32515] should_fail_ex+0x512/0x640 [ 2346.816082][T32515] _copy_to_user+0x32/0xd0 [ 2346.816101][T32515] simple_read_from_buffer+0xcb/0x170 [ 2346.816120][T32515] proc_fail_nth_read+0x197/0x270 [ 2346.816138][T32515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2346.816157][T32515] ? rw_verify_area+0xcf/0x680 [ 2346.816172][T32515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2346.816189][T32515] vfs_read+0x1e1/0xc70 [ 2346.816208][T32515] ? __pfx___mutex_lock+0x10/0x10 [ 2346.816225][T32515] ? __pfx_vfs_read+0x10/0x10 [ 2346.816246][T32515] ? __fget_files+0x20e/0x3c0 [ 2346.816261][T32515] ksys_read+0x12a/0x240 [ 2346.816278][T32515] ? __pfx_ksys_read+0x10/0x10 [ 2346.816300][T32515] do_syscall_64+0xcd/0x260 [ 2346.816318][T32515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2346.816330][T32515] RIP: 0033:0x7f933d38d37c [ 2346.816340][T32515] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2346.816351][T32515] RSP: 002b:00007f933e132030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2346.816362][T32515] RAX: ffffffffffffffda RBX: 00007f933d5b6080 RCX: 00007f933d38d37c [ 2346.816370][T32515] RDX: 000000000000000f RSI: 00007f933e1320a0 RDI: 0000000000000007 [ 2346.816376][T32515] RBP: 00007f933e132090 R08: 0000000000000000 R09: 0000000000000000 [ 2346.816383][T32515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2346.816390][T32515] R13: 0000000000000000 R14: 00007f933d5b6080 R15: 00007ffc4cef7d68 [ 2346.816404][T32515] [ 2347.199156][T32511] lo speed is unknown, defaulting to 1000 [ 2347.227217][T32511] lo speed is unknown, defaulting to 1000 [ 2347.700273][T32524] netlink: 'syz.2.6736': attribute type 32 has an invalid length. [ 2348.083002][T32530] random: crng reseeded on system resumption [ 2349.689541][T32549] 9pnet_fd: Insufficient options for proto=fd [ 2349.713043][T32549] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6740'. [ 2349.723278][T32549] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6740'. [ 2350.218112][T32555] trusted_key: encrypted_key: master key parameter 'dOfault' is invalid [ 2350.666062][T32556] FAULT_INJECTION: forcing a failure. [ 2350.666062][T32556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2350.679541][T32556] CPU: 1 UID: 0 PID: 32556 Comm: syz.1.6743 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 2350.679565][T32556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2350.679575][T32556] Call Trace: [ 2350.679581][T32556] [ 2350.679588][T32556] dump_stack_lvl+0x16c/0x1f0 [ 2350.679617][T32556] should_fail_ex+0x512/0x640 [ 2350.679643][T32556] _copy_from_user+0x2e/0xd0 [ 2350.679669][T32556] sctp_setsockopt+0x2045/0xb870 [ 2350.679689][T32556] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 2350.679718][T32556] ? proc_fail_nth_write+0x9f/0x250 [ 2350.679747][T32556] ? __pfx_sctp_setsockopt+0x10/0x10 [ 2350.679764][T32556] ? __lock_acquire+0x5ca/0x1ba0 [ 2350.679798][T32556] ? selinux_socket_setsockopt+0x6a/0x80 [ 2350.679819][T32556] ? sock_common_setsockopt+0x2e/0xf0 [ 2350.679843][T32556] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2350.679865][T32556] do_sock_setsockopt+0x224/0x470 [ 2350.679887][T32556] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2350.679921][T32556] __sys_setsockopt+0x1a0/0x230 [ 2350.679942][T32556] __x64_sys_setsockopt+0xbd/0x160 [ 2350.679958][T32556] ? do_syscall_64+0x91/0x260 [ 2350.679981][T32556] ? lockdep_hardirqs_on+0x7c/0x110 [ 2350.680003][T32556] do_syscall_64+0xcd/0x260 [ 2350.680027][T32556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2350.680043][T32556] RIP: 0033:0x7f933d38e969 [ 2350.680058][T32556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2350.680074][T32556] RSP: 002b:00007f933e132038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2350.680091][T32556] RAX: ffffffffffffffda RBX: 00007f933d5b6080 RCX: 00007f933d38e969 [ 2350.680103][T32556] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000005 [ 2350.680113][T32556] RBP: 00007f933e132090 R08: 0000000000000008 R09: 0000000000000000 [ 2350.680124][T32556] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 2350.680134][T32556] R13: 0000000000000000 R14: 00007f933d5b6080 R15: 00007ffc4cef7d68 [ 2350.680158][T32556] [ 2350.881700][ C1] vkms_vblank_simulate: vblank timer overrun [ 2352.892991][T32580] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6751'. [ 2353.250241][T32584] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(15) [ 2353.257013][T32584] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2353.332093][T32584] vhci_hcd vhci_hcd.0: Device attached [ 2353.346873][T32592] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(17) [ 2353.353544][T32592] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2353.361514][T32592] vhci_hcd vhci_hcd.0: Device attached [ 2353.512933][T22333] vhci_hcd: vhci_device speed not set [ 2353.791642][T32584] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(19) [ 2353.798267][T32584] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2353.846558][T32584] vhci_hcd vhci_hcd.0: Device attached [ 2354.000170][T22333] usb 49-1: new full-speed USB device number 3 using vhci_hcd [ 2354.078746][T32592] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(22) [ 2354.085420][T32592] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2354.283959][T32608] 9pnet_fd: Insufficient options for proto=fd [ 2354.490604][T32592] vhci_hcd vhci_hcd.0: Device attached [ 2354.521101][T32602] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(21) [ 2354.527737][T32602] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2354.540416][T32602] vhci_hcd vhci_hcd.0: Device attached [ 2354.548701][T32584] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2354.659265][T32584] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2354.669296][T32584] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2354.679502][T32584] vhci_hcd vhci_hcd.0: pdev(8) rhport(7) sockfd(31) [ 2354.686106][T32584] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2354.694465][T32584] vhci_hcd vhci_hcd.0: Device attached [ 2354.706655][T32601] vhci_hcd: connection closed [ 2354.706871][T32593] vhci_hcd: connection closed [ 2354.707611][T32597] vhci_hcd: connection closed [ 2354.712096][T32605] vhci_hcd: connection closed [ 2354.712296][T32587] vhci_hcd: connection reset by peer [ 2354.763988][T27480] vhci_hcd: stop threads [ 2354.769065][T27480] vhci_hcd: release socket [ 2354.775826][T27480] vhci_hcd: disconnect device [ 2354.786502][T27480] vhci_hcd: stop threads [ 2354.794583][T27480] vhci_hcd: release socket [ 2354.812948][T27480] vhci_hcd: disconnect device [ 2354.817960][T27480] vhci_hcd: stop threads [ 2354.822559][T30303] Bluetooth: hci5: unexpected event for opcode 0x1804 [ 2354.829513][T27480] vhci_hcd: release socket [ 2354.834221][T27480] vhci_hcd: disconnect device [ 2354.840231][T32614] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 2354.840378][T27480] vhci_hcd: stop threads [ 2354.846763][T32614] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2354.851140][T27480] vhci_hcd: release socket [ 2354.863569][T27480] vhci_hcd: disconnect device [ 2354.869204][T27480] vhci_hcd: stop threads [ 2354.874647][T27480] vhci_hcd: release socket [ 2354.879214][T27480] vhci_hcd: disconnect device [ 2354.919240][T32614] vhci_hcd vhci_hcd.0: Device attached [ 2355.212427][T32616] vhci_hcd: connection closed [ 2355.216138][T27480] vhci_hcd: stop threads [ 2355.235889][T27480] vhci_hcd: release socket [ 2355.240927][T27480] vhci_hcd: disconnect device [ 2355.270160][ T5901] usb 38-1: enqueue for inactive port 0 [ 2355.298607][ T30] audit: type=1326 audit(2000002008.845:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32619 comm="syz.9.6758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048578e969 code=0x7ffc0000 [ 2355.527032][ T30] audit: type=1326 audit(2000002008.845:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32619 comm="syz.9.6758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048578e969 code=0x7ffc0000 [ 2355.641728][T32610] vhci_hcd: connection closed [ 2355.705180][T27480] vhci_hcd: stop threads [ 2355.756385][T27480] vhci_hcd: release socket [ 2355.771576][T27480] vhci_hcd: disconnect device [ 2355.844944][ T5901] usb usb38-port1: attempt power cycle [ 2355.845623][T32632] netlink: 'syz.1.6761': attribute type 27 has an invalid length. [ 2355.858680][T32632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6761'. [ 2356.029777][ T30] audit: type=1326 audit(2000002008.875:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32619 comm="syz.9.6758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f048578e969 code=0x7ffc0000 [ 2356.244573][ T30] audit: type=1326 audit(2000002008.875:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32619 comm="syz.9.6758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048578e969 code=0x7ffc0000 [ 2356.278554][ T30] audit: type=1326 audit(2000002008.875:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32619 comm="syz.9.6758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f048578e969 code=0x7ffc0000 [ 2356.931111][ T30] audit: type=1326 audit(2000002008.875:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32619 comm="syz.9.6758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048578e969 code=0x7ffc0000 [ 2356.968817][ T30] audit: type=1326 audit(2000002008.875:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32619 comm="syz.9.6758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f048578e969 code=0x7ffc0000 [ 2357.005329][T30303] Bluetooth: hci4: link tx timeout [ 2357.011811][T30303] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 2357.062865][ T5901] usb usb38-port1: unable to enumerate USB device [ 2357.140442][ T30] audit: type=1326 audit(2000002008.875:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32619 comm="syz.9.6758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048578e969 code=0x7ffc0000 [ 2357.175431][ T30] audit: type=1326 audit(2000002008.875:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32619 comm="syz.9.6758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f048578e969 code=0x7ffc0000 [ 2357.309625][ T30] audit: type=1326 audit(2000002008.875:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32619 comm="syz.9.6758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048578e969 code=0x7ffc0000 [ 2357.648604][T32651] netlink: 'syz.1.6765': attribute type 27 has an invalid length. [ 2357.658065][T32651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6765'. [ 2357.792203][T32650] lo speed is unknown, defaulting to 1000 [ 2357.879706][T32656] netlink: 'syz.9.6766': attribute type 27 has an invalid length. [ 2357.890081][T32656] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6766'. [ 2358.124809][T32650] lo speed is unknown, defaulting to 1000 [ 2358.320797][T32658] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6769'. [ 2358.542902][T32663] syz.8.6770: attempt to access beyond end of device [ 2358.542902][T32663] nbd8: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2358.559902][T32663] SQUASHFS error: Failed to read block 0x0: -5 [ 2358.568981][T32663] unable to read squashfs_super_block [ 2359.013105][T32667] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(15) [ 2359.019725][T32667] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2359.028881][T32667] vhci_hcd vhci_hcd.0: Device attached [ 2359.041716][T32667] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(17) [ 2359.048374][T32667] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2359.056207][T32667] vhci_hcd vhci_hcd.0: Device attached [ 2359.062686][T32661] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2359.109961][T26110] Bluetooth: hci4: command 0x0406 tx timeout [ 2359.135216][T32667] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(19) [ 2359.141871][T32667] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2359.193663][T32667] vhci_hcd vhci_hcd.0: Device attached [ 2359.199880][ T5901] vhci_hcd: vhci_device speed not set [ 2359.221982][T32675] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(22) [ 2359.228642][T32675] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2359.273609][T22333] vhci_hcd: vhci_device speed not set [ 2359.288094][T32675] vhci_hcd vhci_hcd.0: Device attached [ 2359.303286][T32667] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(21) [ 2359.309933][T32667] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2359.318883][T32682] netlink: 'syz.8.6774': attribute type 28 has an invalid length. [ 2359.328145][T32682] netlink: 'syz.8.6774': attribute type 3 has an invalid length. [ 2359.337180][T32667] vhci_hcd vhci_hcd.0: Device attached [ 2359.340570][ T5901] usb 51-1: new full-speed USB device number 2 using vhci_hcd [ 2359.344303][T32675] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2359.385875][T32675] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2359.396419][T32682] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6774'. [ 2359.410373][T32667] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2359.451141][T32667] vhci_hcd vhci_hcd.0: pdev(9) rhport(7) sockfd(31) [ 2359.457802][T32667] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2359.487844][T32667] vhci_hcd vhci_hcd.0: Device attached [ 2359.714247][T32672] vhci_hcd: connection closed [ 2359.714478][T32670] vhci_hcd: connection closed [ 2359.715932][T32680] vhci_hcd: connection closed [ 2359.719507][T32668] vhci_hcd: connection reset by peer [ 2359.726237][T31380] vhci_hcd: stop threads [ 2359.747310][T32676] vhci_hcd: connection closed [ 2359.831409][T32693] syz.7.6776: attempt to access beyond end of device [ 2359.831409][T32693] nbd7: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2360.308741][T32697] netlink: 'syz.1.6775': attribute type 27 has an invalid length. [ 2360.314956][T31380] vhci_hcd: release socket [ 2360.320061][T32697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6775'. [ 2360.322733][T32693] SQUASHFS error: Failed to read block 0x0: -5 [ 2360.400527][T31380] vhci_hcd: disconnect device [ 2360.427039][T31380] vhci_hcd: stop threads [ 2360.430436][T32692] lo speed is unknown, defaulting to 1000 [ 2360.457384][T32693] unable to read squashfs_super_block [ 2360.467337][T32698] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2360.481888][T31380] vhci_hcd: release socket [ 2360.486611][T31380] vhci_hcd: disconnect device [ 2360.596340][T31380] vhci_hcd: stop threads [ 2360.606717][T31380] vhci_hcd: release socket [ 2360.611305][T31380] vhci_hcd: disconnect device [ 2360.905473][T28540] usb usb50-port1: attempt power cycle [ 2360.916133][T31380] vhci_hcd: stop threads [ 2360.932359][T31380] vhci_hcd: release socket [ 2360.944840][T32692] lo speed is unknown, defaulting to 1000 [ 2360.959601][T31380] vhci_hcd: disconnect device [ 2360.970083][T31380] vhci_hcd: stop threads [ 2360.975488][T31380] vhci_hcd: release socket [ 2360.989812][T31380] vhci_hcd: disconnect device [ 2361.074470][T32687] vhci_hcd: connection closed [ 2361.082953][T27480] vhci_hcd: stop threads [ 2361.149872][T27480] vhci_hcd: release socket [ 2361.171007][T27480] vhci_hcd: disconnect device [ 2361.189822][T28061] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 2361.620264][T32708] [U] ÁÏ:æ2,:nî/ÊK뼕°•WD¤x'²&L,my0e¿=yQ•s^SSÒœ­·_c-“CÍ¡yJçæˆø<øƒíS*OGÉàÔX'á!ö›Ê_þ›0¾‚öek)œ,4á„8|zaB䯓LÒ5µì^È}Àg/˜ðøÒ°LŒkŠ8Ø›º]„hvýöÖÚ¯<Æ[ŽÀeS. [ 2361.669799][T28061] usb 9-1: Using ep0 maxpacket: 16 [ 2361.691278][T28061] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 2361.715718][T28061] usb 9-1: config 0 has no interface number 0 [ 2361.738389][T28061] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2361.771334][T28061] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2361.786508][T28061] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2361.810930][T28540] usb usb50-port1: unable to enumerate USB device [ 2361.817533][T28061] usb 9-1: Product: syz [ 2361.826441][T28061] usb 9-1: SerialNumber: syz [ 2361.865200][T28061] usb 9-1: config 0 descriptor?? [ 2361.874372][T28061] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 2362.301552][T28061] usb 9-1: USB disconnect, device number 7 [ 2362.410244][T32725] batadv_slave_0: entered promiscuous mode [ 2362.416478][T32725] macvtap1: entered allmulticast mode [ 2362.422056][T32725] batadv_slave_0: entered allmulticast mode [ 2362.487095][T32727] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(14) [ 2362.493757][T32727] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2362.520865][T32727] vhci_hcd vhci_hcd.0: Device attached [ 2362.534321][T32727] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(16) [ 2362.540963][T32727] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2362.549555][T32727] vhci_hcd vhci_hcd.0: Device attached [ 2362.559644][T32727] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(18) [ 2362.566287][T32727] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2362.693682][T32727] vhci_hcd vhci_hcd.0: Device attached [ 2362.705590][T32737] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(21) [ 2362.712234][T32737] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2362.720796][T32737] vhci_hcd vhci_hcd.0: Device attached [ 2362.728793][T32727] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(20) [ 2362.735434][T32727] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2362.820958][T32727] vhci_hcd vhci_hcd.0: Device attached [ 2363.137996][T28061] vhci_hcd: vhci_device speed not set [ 2363.157188][T32737] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2363.168531][T32727] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2363.183721][T32727] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2363.209495][T32740] vhci_hcd: connection closed [ 2363.209546][T32738] vhci_hcd: connection closed [ 2363.209625][T32734] vhci_hcd: connection closed [ 2363.219043][T28061] usb 49-1: new full-speed USB device number 4 using vhci_hcd [ 2363.229122][T32732] vhci_hcd: connection closed [ 2363.231548][T32728] vhci_hcd: connection closed [ 2363.232847][T31380] vhci_hcd: stop threads [ 2363.264253][T31380] vhci_hcd: release socket [ 2363.270768][T31380] vhci_hcd: disconnect device [ 2363.276621][T31380] vhci_hcd: stop threads [ 2363.279043][T32729] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 2363.283516][T31380] vhci_hcd: release socket [ 2363.292638][T31380] vhci_hcd: disconnect device [ 2363.312487][T31380] vhci_hcd: stop threads [ 2363.327185][T31380] vhci_hcd: release socket [ 2363.331795][T31380] vhci_hcd: disconnect device [ 2363.346512][T31380] vhci_hcd: stop threads [ 2363.350926][T31380] vhci_hcd: release socket [ 2363.355432][T31380] vhci_hcd: disconnect device [ 2363.433032][T31380] vhci_hcd: stop threads [ 2363.452179][T31380] vhci_hcd: release socket [ 2363.460304][T31380] vhci_hcd: disconnect device [ 2363.635064][T32751] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(15) [ 2363.641704][T32751] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2363.676271][T32751] vhci_hcd vhci_hcd.0: Device attached [ 2363.684670][T32751] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(17) [ 2363.691318][T32751] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2363.702683][T32751] vhci_hcd vhci_hcd.0: Device attached [ 2363.712440][T32751] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(19) [ 2363.719061][T32751] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2363.832019][T32751] vhci_hcd vhci_hcd.0: Device attached [ 2363.879847][T32765] xt_addrtype: ipv6 does not support BROADCAST matching [ 2363.949510][T32765] tmpfs: Bad value for 'mpol' [ 2363.950558][T32751] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2363.966307][T32764] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(22) [ 2363.972929][T32764] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2363.986949][T32767] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(21) [ 2363.993576][T32767] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2364.049466][T32764] vhci_hcd vhci_hcd.0: Device attached [ 2364.118687][T32767] vhci_hcd vhci_hcd.0: Device attached [ 2364.139000][T32751] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2364.154791][T32751] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2364.191740][T32751] vhci_hcd vhci_hcd.0: pdev(9) rhport(7) sockfd(31) [ 2364.198391][T32751] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2364.217450][ T306] macvtap1: entered allmulticast mode [ 2364.222938][ T306] batadv_slave_0: entered allmulticast mode [ 2364.260100][T32751] vhci_hcd vhci_hcd.0: Device attached [ 2364.267257][ T300] vhci_hcd: connection closed [ 2364.268566][T32762] vhci_hcd: connection closed [ 2364.269797][T32754] vhci_hcd: connection closed [ 2364.274562][T32766] vhci_hcd: connection closed [ 2364.281937][T32758] vhci_hcd: connection closed [ 2364.288235][T31380] vhci_hcd: stop threads [ 2364.298621][T31380] vhci_hcd: release socket [ 2364.304289][T31380] vhci_hcd: disconnect device [ 2364.320585][T31380] vhci_hcd: stop threads [ 2364.324893][T31380] vhci_hcd: release socket [ 2364.334618][T31380] vhci_hcd: disconnect device [ 2364.460043][ T5901] vhci_hcd: vhci_device speed not set [ 2364.647438][T31380] vhci_hcd: stop threads [ 2364.655043][T31380] vhci_hcd: release socket [ 2364.659645][T31380] vhci_hcd: disconnect device [ 2364.790719][ T319] syz.8.6797: attempt to access beyond end of device [ 2364.790719][ T319] nbd8: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2364.804155][ T319] SQUASHFS error: Failed to read block 0x0: -5 [ 2364.810650][ T319] unable to read squashfs_super_block [ 2364.860377][T31380] vhci_hcd: stop threads [ 2364.864769][T31380] vhci_hcd: release socket [ 2364.869417][T31380] vhci_hcd: disconnect device [ 2364.875237][T31380] vhci_hcd: stop threads [ 2364.910016][ T307] vhci_hcd: connection closed [ 2364.929371][ T323] FAULT_INJECTION: forcing a failure. [ 2364.929371][ T323] name failslab, interval 1, probability 0, space 0, times 0 [ 2364.948692][T31380] vhci_hcd: release socket [ 2364.954438][T31380] vhci_hcd: disconnect device [ 2365.022084][ T323] CPU: 0 UID: 0 PID: 323 Comm: syz.9.6799 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 2365.022112][ T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2365.022121][ T323] Call Trace: [ 2365.022127][ T323] [ 2365.022134][ T323] dump_stack_lvl+0x16c/0x1f0 [ 2365.022167][ T323] should_fail_ex+0x512/0x640 [ 2365.022190][ T323] ? __kmalloc_noprof+0xbf/0x510 [ 2365.022208][ T323] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 2365.022233][ T323] should_failslab+0xc2/0x120 [ 2365.022252][ T323] __kmalloc_noprof+0xd2/0x510 [ 2365.022270][ T323] ? avc_has_perm_noaudit+0x149/0x3b0 [ 2365.022292][ T323] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 2365.022322][ T323] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 2365.022348][ T323] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2365.022379][ T323] ? bpf_lsm_capable+0x9/0x10 [ 2365.022395][ T323] ? security_capable+0x7e/0x260 [ 2365.022418][ T323] ? ns_capable+0xd7/0x110 [ 2365.022442][ T323] genl_rcv_msg+0x55c/0x800 [ 2365.022470][ T323] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2365.022492][ T323] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2365.022517][ T323] ? __pfx_wg_set_device+0x10/0x10 [ 2365.022539][ T323] ? __lock_acquire+0xaa4/0x1ba0 [ 2365.022571][ T323] netlink_rcv_skb+0x16a/0x440 [ 2365.022593][ T323] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2365.022617][ T323] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2365.022650][ T323] ? __pfx_down_read+0x10/0x10 [ 2365.022668][ T323] ? netlink_deliver_tap+0x1ae/0xd30 [ 2365.022693][ T323] genl_rcv+0x28/0x40 [ 2365.022715][ T323] netlink_unicast+0x53d/0x7f0 [ 2365.022739][ T323] ? __pfx_netlink_unicast+0x10/0x10 [ 2365.022768][ T323] netlink_sendmsg+0x8d1/0xdd0 [ 2365.022794][ T323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2365.022824][ T323] ____sys_sendmsg+0xa98/0xc70 [ 2365.022845][ T323] ? copy_msghdr_from_user+0x10a/0x160 [ 2365.022862][ T323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2365.022899][ T323] ___sys_sendmsg+0x134/0x1d0 [ 2365.022920][ T323] ? __pfx____sys_sendmsg+0x10/0x10 [ 2365.022973][ T323] __sys_sendmsg+0x16d/0x220 [ 2365.022992][ T323] ? __pfx___sys_sendmsg+0x10/0x10 [ 2365.023016][ T323] ? rcu_is_watching+0x12/0xc0 [ 2365.023043][ T323] do_syscall_64+0xcd/0x260 [ 2365.023074][ T323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2365.023092][ T323] RIP: 0033:0x7f048578e969 [ 2365.023108][ T323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2365.023124][ T323] RSP: 002b:00007f0486601038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2365.023142][ T323] RAX: ffffffffffffffda RBX: 00007f04859b5fa0 RCX: 00007f048578e969 [ 2365.023154][ T323] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2365.023165][ T323] RBP: 00007f0486601090 R08: 0000000000000000 R09: 0000000000000000 [ 2365.023176][ T323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2365.023186][ T323] R13: 0000000000000000 R14: 00007f04859b5fa0 R15: 00007fffeeb4e938 [ 2365.023212][ T323] [ 2365.029674][T31380] vhci_hcd: stop threads [ 2365.353268][T31380] vhci_hcd: release socket [ 2365.359858][T31380] vhci_hcd: disconnect device [ 2365.963233][T14584] usb usb52-port1: attempt power cycle [ 2366.568188][ T336] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(14) [ 2366.574854][ T336] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2366.601256][T14584] usb usb52-port1: unable to enumerate USB device [ 2366.601840][ T336] vhci_hcd vhci_hcd.0: Device attached [ 2366.628537][ T343] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(17) [ 2366.635236][ T343] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2366.680762][ T343] vhci_hcd vhci_hcd.0: Device attached [ 2366.913844][ T5901] vhci_hcd: vhci_device speed not set [ 2366.914017][ T350] random: crng reseeded on system resumption [ 2366.991441][ T5901] usb 51-1: new full-speed USB device number 3 using vhci_hcd [ 2367.058412][ T336] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(16) [ 2367.065069][ T336] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2367.100947][ T357] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(24) [ 2367.107604][ T357] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2367.115232][ T343] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(21) [ 2367.121854][ T343] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2367.173960][ T363] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6809'. [ 2367.179853][ T343] vhci_hcd vhci_hcd.0: Device attached [ 2367.186974][ T336] vhci_hcd vhci_hcd.0: Device attached [ 2367.285155][ T343] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2367.308139][ T343] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2367.352078][ T343] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2367.389998][ T357] vhci_hcd vhci_hcd.0: Device attached [ 2367.401005][ T358] vhci_hcd: connection closed [ 2367.401235][ T360] vhci_hcd: connection closed [ 2367.406292][T30387] vhci_hcd: stop threads [ 2367.417558][T30387] vhci_hcd: release socket [ 2367.421966][ T344] vhci_hcd: connection closed [ 2367.422080][ T337] vhci_hcd: connection reset by peer [ 2367.433094][ T352] vhci_hcd: connection closed [ 2367.437424][T30387] vhci_hcd: disconnect device [ 2367.448158][T30387] vhci_hcd: stop threads [ 2367.455556][T30387] vhci_hcd: release socket [ 2367.461169][T30387] vhci_hcd: disconnect device [ 2367.465973][T30387] vhci_hcd: stop threads [ 2367.474199][T30387] vhci_hcd: release socket [ 2367.478722][T30387] vhci_hcd: disconnect device [ 2367.484266][T30387] vhci_hcd: stop threads [ 2367.488549][T30387] vhci_hcd: release socket [ 2367.499021][T30387] vhci_hcd: disconnect device [ 2367.506357][T30387] vhci_hcd: stop threads [ 2367.522208][T30387] vhci_hcd: release socket [ 2367.526878][T30387] vhci_hcd: disconnect device [ 2367.630582][ T368] 9pnet_fd: Insufficient options for proto=fd [ 2367.659946][ T368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6810'. [ 2367.670755][ T368] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6810'. [ 2368.379854][T28061] vhci_hcd: vhci_device speed not set [ 2368.440974][ T378] can0: slcan on ttyprintk. [ 2368.497318][ T382] netlink: 120 bytes leftover after parsing attributes in process `syz.8.6815'. [ 2368.740199][T28540] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2368.886984][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 2368.887005][ T30] audit: type=1400 audit(2000002022.435:1921): avc: denied { read } for pid=377 comm="syz.2.6814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2369.070015][T28540] usb 10-1: Using ep0 maxpacket: 32 [ 2369.357980][T28540] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2369.369671][T28540] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2369.394573][T28540] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2369.407031][T28540] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2369.417505][T28540] usb 10-1: config 0 descriptor?? [ 2369.427078][T28540] hub 10-1:0.0: USB hub found [ 2370.061303][ T377] can0 (unregistered): slcan off ttyprintk. [ 2371.221550][T28540] hub 10-1:0.0: config failed, can't read hub descriptor (err -22) [ 2371.250479][T28540] usbhid 10-1:0.0: can't add hid device: -71 [ 2371.257629][T28540] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2371.315203][T28540] usb 10-1: USB disconnect, device number 4 [ 2372.210300][ T5901] vhci_hcd: vhci_device speed not set [ 2372.335404][ T408] random: crng reseeded on system resumption [ 2372.967307][ T416] batadv_slave_0: entered promiscuous mode [ 2372.973841][ T416] macvtap1: entered allmulticast mode [ 2372.979335][ T416] batadv_slave_0: entered allmulticast mode [ 2373.412748][ T424] hub 9-0:1.0: USB hub found [ 2373.418376][ T424] hub 9-0:1.0: 1 port detected [ 2373.597319][ T400] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 2373.876464][ T400] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2373.905677][ T400] usb 10-1: config 1 has an invalid interface number: 121 but max is 0 [ 2373.916216][ T400] usb 10-1: config 1 has no interface number 0 [ 2373.933682][ T400] usb 10-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 2373.947160][ T400] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2373.956244][ T400] usb 10-1: Product: syz [ 2373.961153][ T400] usb 10-1: Manufacturer: syz [ 2373.965953][ T400] usb 10-1: SerialNumber: syz [ 2373.975467][ T400] hub 10-1:1.121: bad descriptor, ignoring hub [ 2373.978827][ T428] usb usb1: usbfs: process 428 (syz.7.6829) did not claim interface 0 before use [ 2373.981978][ T400] hub 10-1:1.121: probe with driver hub failed with error -5 [ 2374.183079][ T432] lo speed is unknown, defaulting to 1000 [ 2374.210904][ T432] lo speed is unknown, defaulting to 1000 [ 2374.221679][ T434] netlink: 'syz.2.6825': attribute type 27 has an invalid length. [ 2374.229640][ T434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6825'. [ 2374.463049][ T435] netlink: 224 bytes leftover after parsing attributes in process `syz.9.6828'. [ 2375.048071][ T448] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 2375.910057][T28061] usb 10-1: USB disconnect, device number 5 [ 2376.277448][ T461] lo speed is unknown, defaulting to 1000 [ 2376.279212][ T459] netlink: 'syz.2.6836': attribute type 27 has an invalid length. [ 2376.284567][ T461] lo speed is unknown, defaulting to 1000 [ 2376.291308][ T459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6836'. [ 2376.383015][ T463] input: syz0 as /devices/virtual/input/input143 [ 2376.561366][ T444] raw_sendmsg: syz.1.6831 forgot to set AF_INET. Fix it! [ 2376.569134][ T444] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2376.982795][ T474] syz.9.6839: attempt to access beyond end of device [ 2376.982795][ T474] nbd9: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2376.996203][ T474] SQUASHFS error: Failed to read block 0x0: -5 [ 2377.002790][ T474] unable to read squashfs_super_block [ 2377.045379][ T476] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2377.271211][ T478] random: crng reseeded on system resumption [ 2378.555367][ T487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6843'. [ 2378.592039][ T487] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 2378.600851][ T487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2379.025090][ T493] macsec1: entered promiscuous mode [ 2379.030545][ T493] macsec1: entered allmulticast mode [ 2379.720485][ T30] audit: type=1400 audit(2000002033.215:1922): avc: granted { setsecparam } for pid=489 comm="syz.1.6845" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2379.757048][ T494] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 2381.752064][T26110] Bluetooth: hci4: command 0x0406 tx timeout [ 2382.380256][ T522] syz.2.6852: attempt to access beyond end of device [ 2382.380256][ T522] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2382.394150][ T522] SQUASHFS error: Failed to read block 0x0: -5 [ 2382.400658][ T522] unable to read squashfs_super_block [ 2382.479938][ T522] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2383.375445][ T536] batadv_slave_0: entered promiscuous mode [ 2383.382600][ T536] macvtap1: entered allmulticast mode [ 2383.388544][ T536] batadv_slave_0: entered allmulticast mode [ 2383.863249][ T539] random: crng reseeded on system resumption [ 2384.179524][ T552] FAULT_INJECTION: forcing a failure. [ 2384.179524][ T552] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.192565][ T552] CPU: 0 UID: 0 PID: 552 Comm: syz.2.6862 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 2384.192591][ T552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2384.192602][ T552] Call Trace: [ 2384.192608][ T552] [ 2384.192616][ T552] dump_stack_lvl+0x16c/0x1f0 [ 2384.192646][ T552] should_fail_ex+0x512/0x640 [ 2384.192671][ T552] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2384.192700][ T552] should_failslab+0xc2/0x120 [ 2384.192721][ T552] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2384.192748][ T552] ? alloc_super+0x52/0xbd0 [ 2384.192775][ T552] ? __pfx_super_s_dev_test+0x10/0x10 [ 2384.192799][ T552] alloc_super+0x52/0xbd0 [ 2384.192823][ T552] ? sget_fc+0xd3/0xc20 [ 2384.192850][ T552] ? __pfx_super_s_dev_test+0x10/0x10 [ 2384.192873][ T552] sget_fc+0x116/0xc20 [ 2384.192899][ T552] ? __pfx_super_s_dev_set+0x10/0x10 [ 2384.192925][ T552] get_tree_bdev_flags+0x1ba/0x620 [ 2384.192951][ T552] ? __pfx_minix_fill_super+0x10/0x10 [ 2384.192971][ T552] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 2384.193003][ T552] ? bpf_lsm_capable+0x9/0x10 [ 2384.193019][ T552] ? security_capable+0x7e/0x260 [ 2384.193045][ T552] vfs_get_tree+0x8e/0x340 [ 2384.193069][ T552] path_mount+0x14d4/0x1f20 [ 2384.193096][ T552] ? kmem_cache_free+0x2d4/0x4d0 [ 2384.193123][ T552] ? __pfx_path_mount+0x10/0x10 [ 2384.193147][ T552] ? putname+0x154/0x1a0 [ 2384.193170][ T552] __x64_sys_mount+0x28d/0x310 [ 2384.193191][ T552] ? __pfx___x64_sys_mount+0x10/0x10 [ 2384.193219][ T552] do_syscall_64+0xcd/0x260 [ 2384.193248][ T552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2384.193267][ T552] RIP: 0033:0x7f8081d8e969 [ 2384.193284][ T552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2384.193302][ T552] RSP: 002b:00007f8082c53038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2384.193321][ T552] RAX: ffffffffffffffda RBX: 00007f8081fb6080 RCX: 00007f8081d8e969 [ 2384.193334][ T552] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00002000000000c0 [ 2384.193345][ T552] RBP: 00007f8082c53090 R08: 0000000000000000 R09: 0000000000000000 [ 2384.193357][ T552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2384.193368][ T552] R13: 0000000000000000 R14: 00007f8081fb6080 R15: 00007ffffb23dae8 [ 2384.193393][ T552] [ 2384.423236][ C0] vkms_vblank_simulate: vblank timer overrun [ 2384.500338][ T554] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6862'. [ 2385.560021][ T5901] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 2385.750290][ T5901] usb 10-1: Using ep0 maxpacket: 8 [ 2385.771495][ T5901] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2385.781582][ T5901] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2385.811060][ T5901] usb 10-1: config 0 descriptor?? [ 2386.026124][ T5901] asix 10-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2386.423975][ T571] program syz.2.6868 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2386.539019][ T574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6868'. [ 2386.540689][ T575] input input144: cannot allocate more than FF_MAX_EFFECTS effects [ 2386.548092][ T574] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 2386.565012][ T574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2386.687550][ T5901] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2386.705159][ T5901] asix 10-1:0.0: probe with driver asix failed with error -61 [ 2386.999088][ T5901] usb 10-1: USB disconnect, device number 6 [ 2387.590480][ T581] syz.8.6871: attempt to access beyond end of device [ 2387.590480][ T581] nbd8: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2387.605406][ T581] SQUASHFS error: Failed to read block 0x0: -5 [ 2387.614726][ T581] unable to read squashfs_super_block [ 2387.868760][ T586] syz.1.6872: attempt to access beyond end of device [ 2387.868760][ T586] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2387.882248][ T586] SQUASHFS error: Failed to read block 0x0: -5 [ 2387.893028][ T586] unable to read squashfs_super_block [ 2388.385172][ T590] ptrace attach of ""[593] was attempted by "./syz-executor exec"[590] [ 2388.832207][ T597] macvtap2: entered allmulticast mode [ 2389.580713][ T5901] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 2389.771726][ T5901] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2389.931280][ T5901] usb 9-1: config 1 has an invalid interface number: 121 but max is 0 [ 2389.964473][ T5901] usb 9-1: config 1 has no interface number 0 [ 2390.199861][T22333] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2390.424655][ T5901] usb 9-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 2390.434283][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2390.442369][ T5901] usb 9-1: Product: syz [ 2390.446552][ T5901] usb 9-1: Manufacturer: syz [ 2390.451444][ T5901] usb 9-1: SerialNumber: syz [ 2390.467128][ T5901] hub 9-1:1.121: bad descriptor, ignoring hub [ 2390.493415][ T5901] hub 9-1:1.121: probe with driver hub failed with error -5 [ 2390.622984][T22333] usb 3-1: Using ep0 maxpacket: 16 [ 2390.717274][T22333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2390.728953][T22333] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 2390.748327][T22333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2390.828019][ T614] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6877'. [ 2391.090755][T22333] usb 3-1: config 0 descriptor?? [ 2391.250028][ T5901] usb 9-1: USB disconnect, device number 8 [ 2392.297114][T22333] hid-led 0003:1294:1320.001F: hidraw0: USB HID v0.03 Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0 [ 2392.463523][T22333] hid-led 0003:1294:1320.001F: Riso Kagaku Webmail Notifier initialized [ 2393.245764][ T5901] usb 3-1: USB disconnect, device number 49 [ 2393.334792][ T639] 9pnet_fd: Insufficient options for proto=fd [ 2393.358085][ T639] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6888'. [ 2393.367252][ T639] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6888'. [ 2393.602050][ T53] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 2393.647563][ T3500] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 2393.684412][ T3500] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 2395.497853][ T658] lo speed is unknown, defaulting to 1000 [ 2395.511867][ T658] lo speed is unknown, defaulting to 1000 [ 2395.811288][ T647] netlink: 'syz.7.6891': attribute type 27 has an invalid length. [ 2395.819128][ T647] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6891'. [ 2395.997073][ T654] netlink: 'syz.8.6895': attribute type 27 has an invalid length. [ 2396.005185][ T654] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6895'. [ 2396.237372][ T648] lo speed is unknown, defaulting to 1000 [ 2396.291741][ T648] lo speed is unknown, defaulting to 1000 [ 2396.443800][ T667] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 2396.450462][ T667] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2396.499405][ T667] vhci_hcd vhci_hcd.0: Device attached [ 2396.509855][ T672] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(16) [ 2396.516506][ T672] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2396.566702][ T672] vhci_hcd vhci_hcd.0: Device attached [ 2396.586519][ T667] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(15) [ 2396.593143][ T667] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2396.609631][ T667] vhci_hcd vhci_hcd.0: Device attached [ 2396.651630][ T672] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18) [ 2396.658281][ T672] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2396.671542][ T672] vhci_hcd vhci_hcd.0: Device attached [ 2396.680347][T22333] vhci_hcd: vhci_device speed not set [ 2396.721848][ T685] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6887'. [ 2396.734264][ T672] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2396.742843][T22333] usb 37-1: new full-speed USB device number 10 using vhci_hcd [ 2396.757678][ T672] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2396.760588][ T685] bridge_slave_1: left allmulticast mode [ 2396.766079][ T667] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(22) [ 2396.778055][ T667] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2397.218822][ T5901] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 2397.313270][ T685] bridge_slave_1: left promiscuous mode [ 2397.492309][ T5901] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2397.580266][ T667] vhci_hcd vhci_hcd.0: Device attached [ 2397.587906][ T692] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2397.597693][ T5901] usb 9-1: config 1 has an invalid interface number: 121 but max is 0 [ 2397.607233][ T685] bridge0: port 2(bridge_slave_1) entered disabled state [ 2397.621069][ T5901] usb 9-1: config 1 has no interface number 0 [ 2397.641555][ T5901] usb 9-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 2397.659875][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2397.672470][ T673] vhci_hcd: connection closed [ 2397.673611][ T669] vhci_hcd: connection reset by peer [ 2397.683797][ T686] vhci_hcd: connection closed [ 2397.684451][ T5901] usb 9-1: Product: syz [ 2397.689957][ T676] vhci_hcd: connection closed [ 2397.693400][ T680] vhci_hcd: connection closed [ 2397.698265][T27480] vhci_hcd: stop threads [ 2397.739640][ T685] bridge_slave_0: left allmulticast mode [ 2397.746738][T27480] vhci_hcd: release socket [ 2397.751587][T27480] vhci_hcd: disconnect device [ 2397.756664][T27480] vhci_hcd: stop threads [ 2397.763848][ T685] bridge_slave_0: left promiscuous mode [ 2397.779480][T27480] vhci_hcd: release socket [ 2397.780429][ T685] bridge0: port 1(bridge_slave_0) entered disabled state [ 2397.789112][T27480] vhci_hcd: disconnect device [ 2397.793095][ T5901] usb 9-1: Manufacturer: syz [ 2397.800650][ T5901] usb 9-1: SerialNumber: syz [ 2397.809302][ T5901] hub 9-1:1.121: bad descriptor, ignoring hub [ 2397.816061][ T5901] hub 9-1:1.121: probe with driver hub failed with error -5 [ 2397.908536][T27480] vhci_hcd: stop threads [ 2397.913505][T27480] vhci_hcd: release socket [ 2397.918177][T27480] vhci_hcd: disconnect device [ 2397.927351][T27480] vhci_hcd: stop threads [ 2397.932093][T27480] vhci_hcd: release socket [ 2397.936676][T27480] vhci_hcd: disconnect device [ 2397.945868][T27480] vhci_hcd: stop threads [ 2397.951166][T27480] vhci_hcd: release socket [ 2397.955792][T27480] vhci_hcd: disconnect device [ 2398.279367][ T694] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6897'. [ 2399.390202][T28061] usb 9-1: USB disconnect, device number 9 [ 2399.936214][ T713] lo speed is unknown, defaulting to 1000 [ 2399.942881][ T713] lo speed is unknown, defaulting to 1000 [ 2400.349657][ T712] netlink: 'syz.7.6903': attribute type 27 has an invalid length. [ 2400.357712][ T712] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6903'. [ 2402.113897][T22333] vhci_hcd: vhci_device speed not set [ 2402.620566][ T744] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(18) [ 2402.627233][ T744] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2402.649342][ T740] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 2402.656001][ T740] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2402.741726][ T734] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 2402.748386][ T734] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2402.968971][ T740] vhci_hcd vhci_hcd.0: Device attached [ 2403.233784][T22333] vhci_hcd: vhci_device speed not set [ 2403.399937][T22333] usb 37-2: new low-speed USB device number 11 using vhci_hcd [ 2403.490745][ T744] vhci_hcd vhci_hcd.0: Device attached [ 2403.499239][ T734] vhci_hcd vhci_hcd.0: Device attached [ 2404.101067][ T761] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(17) [ 2404.107722][ T761] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2404.151115][ T740] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2404.161931][ T740] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2404.173356][ T740] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2404.233412][ T734] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(22) [ 2404.240058][ T734] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2404.303398][ T761] vhci_hcd vhci_hcd.0: Device attached [ 2404.328132][ T734] vhci_hcd vhci_hcd.0: Device attached [ 2404.363980][ T765] vhci_hcd: connection closed [ 2404.364064][ T748] vhci_hcd: connection closed [ 2404.364183][ T764] vhci_hcd: connection closed [ 2404.382620][ T746] vhci_hcd: connection closed [ 2404.388094][ T747] vhci_hcd: connection reset by peer [ 2404.399989][T19171] vhci_hcd: stop threads [ 2404.480780][T19171] vhci_hcd: release socket [ 2404.509825][T19171] vhci_hcd: disconnect device [ 2404.670302][T19171] vhci_hcd: stop threads [ 2404.756566][T19171] vhci_hcd: release socket [ 2404.774869][T19171] vhci_hcd: disconnect device [ 2404.805424][T19171] vhci_hcd: stop threads [ 2404.819926][T19171] vhci_hcd: release socket [ 2404.841431][T19171] vhci_hcd: disconnect device [ 2404.957448][T19171] vhci_hcd: stop threads [ 2404.964524][T19171] vhci_hcd: release socket [ 2405.195293][T19171] vhci_hcd: disconnect device [ 2405.325706][T19171] vhci_hcd: stop threads [ 2405.343261][T19171] vhci_hcd: release socket [ 2405.349114][T19171] vhci_hcd: disconnect device [ 2405.367263][ T787] FAULT_INJECTION: forcing a failure. [ 2405.367263][ T787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2405.404464][ T787] CPU: 1 UID: 0 PID: 787 Comm: syz.1.6920 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 2405.404486][ T787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2405.404493][ T787] Call Trace: [ 2405.404498][ T787] [ 2405.404502][ T787] dump_stack_lvl+0x16c/0x1f0 [ 2405.404524][ T787] should_fail_ex+0x512/0x640 [ 2405.404543][ T787] _copy_from_user+0x2e/0xd0 [ 2405.404561][ T787] kstrtouint_from_user+0xd6/0x1d0 [ 2405.404574][ T787] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2405.404586][ T787] ? __lock_acquire+0xaa4/0x1ba0 [ 2405.404611][ T787] proc_fail_nth_write+0x83/0x250 [ 2405.404629][ T787] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2405.404650][ T787] vfs_write+0x25f/0x1180 [ 2405.404667][ T787] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2405.404686][ T787] ? __pfx___mutex_lock+0x10/0x10 [ 2405.404704][ T787] ? __pfx_vfs_write+0x10/0x10 [ 2405.404724][ T787] ? __fget_files+0x20e/0x3c0 [ 2405.404739][ T787] ksys_write+0x12a/0x240 [ 2405.404757][ T787] ? __pfx_ksys_write+0x10/0x10 [ 2405.404778][ T787] do_syscall_64+0xcd/0x260 [ 2405.404801][ T787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2405.404812][ T787] RIP: 0033:0x7f933d38d41f [ 2405.404823][ T787] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2405.404834][ T787] RSP: 002b:00007f933e153030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2405.404846][ T787] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f933d38d41f [ 2405.404853][ T787] RDX: 0000000000000001 RSI: 00007f933e1530a0 RDI: 0000000000000004 [ 2405.404860][ T787] RBP: 00007f933e153090 R08: 0000000000000000 R09: 0000000000000000 [ 2405.404867][ T787] R10: 0000200000000300 R11: 0000000000000293 R12: 0000000000000001 [ 2405.404874][ T787] R13: 0000000000000000 R14: 00007f933d5b5fa0 R15: 00007ffc4cef7d68 [ 2405.404888][ T787] [ 2405.993452][ T794] SELinux: failed to load policy [ 2406.309520][ T800] netlink: 'syz.8.6923': attribute type 27 has an invalid length. [ 2406.314168][ T799] lo speed is unknown, defaulting to 1000 [ 2406.323693][ T800] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6923'. [ 2406.344762][ T799] lo speed is unknown, defaulting to 1000 [ 2406.496615][ T803] 9pnet_fd: Insufficient options for proto=fd [ 2406.546732][ T803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6924'. [ 2406.557430][ T803] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6924'. [ 2406.799943][ T802] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6925'. [ 2406.920928][ T802] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6925'. [ 2406.945738][ T815] loop6: detected capacity change from 0 to 524287999 [ 2406.964365][ T815] buffer_io_error: 6 callbacks suppressed [ 2406.964381][ T815] Buffer I/O error on dev loop6, logical block 0, async page read [ 2406.973758][ T810] input: syz0 as /devices/virtual/input/input145 [ 2406.980479][ T802] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6925'. [ 2406.999082][ T815] Buffer I/O error on dev loop6, logical block 0, async page read [ 2407.007295][ T815] Buffer I/O error on dev loop6, logical block 0, async page read [ 2407.017015][ T815] Buffer I/O error on dev loop6, logical block 0, async page read [ 2407.035153][ T815] Buffer I/O error on dev loop6, logical block 0, async page read [ 2407.050903][ T815] Buffer I/O error on dev loop6, logical block 0, async page read [ 2407.071809][ T802] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6925'. [ 2407.085487][ T802] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6925'. [ 2407.095756][ T818] Invalid logical block size (3) [ 2407.099770][ T815] Buffer I/O error on dev loop6, logical block 0, async page read [ 2407.109071][ T815] Buffer I/O error on dev loop6, logical block 0, async page read [ 2407.122417][ T802] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6925'. [ 2407.122721][ T815] ldm_validate_partition_table(): Disk read failed. [ 2407.149157][ T815] Buffer I/O error on dev loop6, logical block 0, async page read [ 2407.158544][ T815] Buffer I/O error on dev loop6, logical block 0, async page read [ 2407.167629][ T815] Dev loop6: unable to read RDB block 0 [ 2407.173874][ T815] loop6: unable to read partition table [ 2407.180046][ T815] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 2407.183225][ T802] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6925'. [ 2407.237540][ T823] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 2407.244116][ T823] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2407.254998][ T823] vhci_hcd vhci_hcd.0: Device attached [ 2407.377326][ T802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2407.391455][ T802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2407.455091][ T802] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2407.464455][ T802] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2407.474938][ T802] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2407.485195][ T802] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2407.518509][ T802] batadv_slave_0: left allmulticast mode [ 2407.949128][ T833] random: crng reseeded on system resumption [ 2408.072629][ T824] vhci_hcd: connection closed [ 2408.203452][T19156] vhci_hcd: stop threads [ 2408.310035][T26110] Bluetooth: hci2: command 0x0406 tx timeout [ 2408.404684][T19156] vhci_hcd: release socket [ 2408.409352][T19156] vhci_hcd: disconnect device [ 2408.640729][T22333] vhci_hcd: vhci_device speed not set [ 2409.600650][ T857] RDS: rds_bind could not find a transport for ::ffff:172.30.0.10, load rds_tcp or rds_rdma? [ 2409.976628][ T863] netlink: 'syz.8.6938': attribute type 21 has an invalid length. [ 2410.002343][ T863] netlink: 'syz.8.6938': attribute type 21 has an invalid length. [ 2410.650222][T28573] usb usb38-port1: attempt power cycle [ 2411.514775][T28573] usb usb38-port1: unable to enumerate USB device [ 2411.969936][ T30] audit: type=1400 audit(2000002065.505:1923): avc: denied { name_bind } for pid=877 comm="syz.7.6942" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 2412.399814][ T47] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 2412.899175][ T897] program syz.2.6946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2412.930703][ T47] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2412.983288][ T47] usb 10-1: config 1 has an invalid interface number: 121 but max is 0 [ 2413.021471][ T905] __nla_validate_parse: 70 callbacks suppressed [ 2413.027785][ T905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6946'. [ 2413.037929][ T905] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 2413.045771][ T905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2413.374111][ T892] lo speed is unknown, defaulting to 1000 [ 2413.381111][ T47] usb 10-1: config 1 has no interface number 0 [ 2413.412172][ T47] usb 10-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 2413.462400][ T47] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2413.491918][ T911] syz.7.6950: attempt to access beyond end of device [ 2413.491918][ T911] nbd7: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2413.505401][ T911] SQUASHFS error: Failed to read block 0x0: -5 [ 2413.512155][ T911] unable to read squashfs_super_block [ 2413.783372][ T892] lo speed is unknown, defaulting to 1000 [ 2413.792171][ T47] usb 10-1: Product: syz [ 2413.805615][ T47] usb 10-1: Manufacturer: syz [ 2413.877281][ T889] netlink: 'syz.1.6945': attribute type 27 has an invalid length. [ 2413.885670][ T889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6945'. [ 2413.939780][ T47] usb 10-1: SerialNumber: syz [ 2414.019826][ T918] syz.2.6951: attempt to access beyond end of device [ 2414.019826][ T918] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2414.033629][ T918] SQUASHFS error: Failed to read block 0x0: -5 [ 2414.040213][ T918] unable to read squashfs_super_block [ 2414.182524][ T920] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2414.433873][ T47] hub 10-1:1.121: bad descriptor, ignoring hub [ 2414.542297][ T47] hub 10-1:1.121: probe with driver hub failed with error -5 [ 2414.693396][ T926] netlink: 224 bytes leftover after parsing attributes in process `syz.9.6941'. [ 2416.020222][ T945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6956'. [ 2416.310336][T28061] usb 10-1: USB disconnect, device number 7 [ 2416.580115][ T963] syz.9.6962: attempt to access beyond end of device [ 2416.580115][ T963] nbd9: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2416.594043][ T963] SQUASHFS error: Failed to read block 0x0: -5 [ 2416.600546][ T963] unable to read squashfs_super_block [ 2416.895047][ T966] FAULT_INJECTION: forcing a failure. [ 2416.895047][ T966] name failslab, interval 1, probability 0, space 0, times 0 [ 2416.907990][ T966] CPU: 1 UID: 0 PID: 966 Comm: syz.2.6963 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 2416.908007][ T966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2416.908014][ T966] Call Trace: [ 2416.908018][ T966] [ 2416.908023][ T966] dump_stack_lvl+0x16c/0x1f0 [ 2416.908044][ T966] should_fail_ex+0x512/0x640 [ 2416.908061][ T966] ? __kmalloc_noprof+0xbf/0x510 [ 2416.908073][ T966] ? iovec_from_user+0x108/0x140 [ 2416.908090][ T966] should_failslab+0xc2/0x120 [ 2416.908102][ T966] __kmalloc_noprof+0xd2/0x510 [ 2416.908116][ T966] iovec_from_user+0x108/0x140 [ 2416.908134][ T966] __import_iovec+0x88/0x660 [ 2416.908152][ T966] ? __fget_files+0x20e/0x3c0 [ 2416.908163][ T966] import_iovec+0x109/0x140 [ 2416.908182][ T966] __do_sys_vmsplice+0x1f9/0x1210 [ 2416.908204][ T966] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 2416.908226][ T966] ? restore_sigcontext+0x4d1/0x6a0 [ 2416.908244][ T966] ? __pfx_restore_sigcontext+0x10/0x10 [ 2416.908269][ T966] ? __pfx_restore_altstack+0x10/0x10 [ 2416.908288][ T966] ? _raw_spin_unlock_irq+0x23/0x50 [ 2416.908302][ T966] ? lockdep_hardirqs_on+0x7c/0x110 [ 2416.908319][ T966] ? restore_signal_shadow_stack+0x63/0x420 [ 2416.908336][ T966] ? __do_sys_rt_sigreturn+0x16b/0x230 [ 2416.908352][ T966] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 2416.908372][ T966] ? do_syscall_64+0xcd/0x260 [ 2416.908387][ T966] do_syscall_64+0xcd/0x260 [ 2416.908405][ T966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2416.908417][ T966] RIP: 0033:0x7f8081d8e969 [ 2416.908427][ T966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2416.908438][ T966] RSP: 002b:00007f8082c74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 2416.908449][ T966] RAX: ffffffffffffffda RBX: 00007f8081fb5fa0 RCX: 00007f8081d8e969 [ 2416.908456][ T966] RDX: 000000000000000f RSI: 00002000000014c0 RDI: 0000000000000005 [ 2416.908463][ T966] RBP: 00007f8082c74090 R08: 0000000000000000 R09: 0000000000000000 [ 2416.908469][ T966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2416.908476][ T966] R13: 0000000000000000 R14: 00007f8081fb5fa0 R15: 00007ffffb23dae8 [ 2416.908489][ T966] [ 2417.128456][ C1] vkms_vblank_simulate: vblank timer overrun [ 2419.825141][ T1013] SELinux: ebitmap: high bit 5243520 is not equal to the expected value 768 [ 2420.307752][ T1023] random: crng reseeded on system resumption [ 2420.783374][ T1013] SELinux: failed to load policy [ 2420.912756][ T1031] syz.2.6978: attempt to access beyond end of device [ 2420.912756][ T1031] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2420.926104][ T1031] SQUASHFS error: Failed to read block 0x0: -5 [ 2420.933523][ T1031] unable to read squashfs_super_block [ 2420.936952][ T1030] loop6: detected capacity change from 0 to 524287999 [ 2421.077229][ T1031] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2421.081913][ T1030] buffer_io_error: 6 callbacks suppressed [ 2421.081929][ T1030] Buffer I/O error on dev loop6, logical block 0, async page read [ 2421.271673][ T1032] Invalid logical block size (3) [ 2421.283375][ T1030] Buffer I/O error on dev loop6, logical block 0, async page read [ 2421.309052][ T1030] Buffer I/O error on dev loop6, logical block 0, async page read [ 2421.319768][ T1030] Buffer I/O error on dev loop6, logical block 0, async page read [ 2421.348105][ T1030] Buffer I/O error on dev loop6, logical block 0, async page read [ 2421.378485][ T1030] Buffer I/O error on dev loop6, logical block 0, async page read [ 2421.427375][ T1030] Buffer I/O error on dev loop6, logical block 0, async page read [ 2421.482895][ T1030] Buffer I/O error on dev loop6, logical block 0, async page read [ 2421.496637][ T1030] ldm_validate_partition_table(): Disk read failed. [ 2421.503487][ T1030] Buffer I/O error on dev loop6, logical block 0, async page read [ 2421.503573][ T1030] Buffer I/O error on dev loop6, logical block 0, async page read [ 2421.523425][ T1030] Dev loop6: unable to read RDB block 0 [ 2421.529413][ T1030] loop6: unable to read partition table [ 2421.548527][ T1030] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 2422.309869][T26110] Bluetooth: hci4: command 0x0406 tx timeout [ 2422.784308][T28061] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2423.664229][ T1064] usb usb8: usbfs: process 1064 (syz.1.6987) did not claim interface 0 before use [ 2424.385978][ T1072] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(15) [ 2424.392642][ T1072] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2424.439861][ T1072] vhci_hcd vhci_hcd.0: Device attached [ 2424.460880][ T1081] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(18) [ 2424.467533][ T1081] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2424.495877][ T1081] vhci_hcd vhci_hcd.0: Device attached [ 2424.516968][ T1072] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(17) [ 2424.523626][ T1072] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2424.559946][ T1072] vhci_hcd vhci_hcd.0: Device attached [ 2424.572810][ T1072] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(20) [ 2424.579464][ T1072] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2424.606202][ T1072] vhci_hcd vhci_hcd.0: Device attached [ 2424.619907][T28061] vhci_hcd: vhci_device speed not set [ 2424.630069][ T1081] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(24) [ 2424.636711][ T1081] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2424.676250][ T1081] vhci_hcd vhci_hcd.0: Device attached [ 2424.690086][ T1072] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2424.981962][T28061] usb 49-1: new full-speed USB device number 5 using vhci_hcd [ 2424.990406][T26110] Bluetooth: hci3: unexpected event for opcode 0x2028 [ 2425.024731][ T1081] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2425.049386][ T1072] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2425.066383][ T1072] vhci_hcd vhci_hcd.0: pdev(8) rhport(7) sockfd(31) [ 2425.073018][ T1072] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2425.088462][ T1072] vhci_hcd vhci_hcd.0: Device attached [ 2425.198852][ T1088] vhci_hcd: connection closed [ 2425.199299][T19171] vhci_hcd: stop threads [ 2425.209320][ T1076] vhci_hcd: connection reset by peer [ 2425.214915][ T1084] vhci_hcd: connection closed [ 2425.215126][ T1086] vhci_hcd: connection closed [ 2425.219888][ T1082] vhci_hcd: connection closed [ 2425.223373][T19171] vhci_hcd: release socket [ 2425.341893][T19171] vhci_hcd: disconnect device [ 2425.350073][T19171] vhci_hcd: stop threads [ 2425.360899][T19171] vhci_hcd: release socket [ 2425.462078][T19171] vhci_hcd: disconnect device [ 2425.552519][T19171] vhci_hcd: stop threads [ 2425.585641][T19171] vhci_hcd: release socket [ 2425.631582][T19171] vhci_hcd: disconnect device [ 2425.720115][T19171] vhci_hcd: stop threads [ 2425.724433][T19171] vhci_hcd: release socket [ 2425.739581][T19171] vhci_hcd: disconnect device [ 2425.754021][T19171] vhci_hcd: stop threads [ 2425.760644][T19171] vhci_hcd: release socket [ 2425.773809][T19171] vhci_hcd: disconnect device [ 2425.809770][ T1096] vhci_hcd: connection closed [ 2426.239923][ T3500] vhci_hcd: stop threads [ 2426.248850][ T3500] vhci_hcd: release socket [ 2426.292206][ T3500] vhci_hcd: disconnect device [ 2426.640083][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 2426.814021][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2426.842618][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2426.876559][ T9] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2426.899866][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2426.962367][ T9] usb 9-1: Product: syz [ 2426.993389][ T9] usb 9-1: Manufacturer: syz [ 2426.998039][ T9] usb 9-1: SerialNumber: syz [ 2427.497259][ T9] usb 9-1: config 0 descriptor?? [ 2427.707391][ T9] usb 9-1: USB disconnect, device number 10 [ 2428.724147][T30387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2428.734476][T30387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2428.749218][T30387] bond0 (unregistering): Released all slaves [ 2428.804793][T30387] bond1 (unregistering): Released all slaves [ 2428.940125][T30387] tipc: Left network mode [ 2429.084560][ T1159] loop7: detected capacity change from 0 to 16384 [ 2429.175308][ T1159] I/O error, dev loop7, sector 5888 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 2429.201148][ T1159] I/O error, dev loop7, sector 6144 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 2429.404305][ T1159] I/O error, dev loop7, sector 5888 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2429.609779][ T1159] buffer_io_error: 6 callbacks suppressed [ 2429.609798][ T1159] Buffer I/O error on dev loop7, logical block 736, async page read [ 2429.645160][ T1159] I/O error, dev loop7, sector 5896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2429.756058][ T1159] Buffer I/O error on dev loop7, logical block 737, async page read [ 2430.329864][T28061] vhci_hcd: vhci_device speed not set [ 2430.414619][ T1159] I/O error, dev loop7, sector 5904 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2430.434825][ T1159] Buffer I/O error on dev loop7, logical block 738, async page read [ 2430.577127][ T1159] I/O error, dev loop7, sector 5912 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2430.668802][ T1159] Buffer I/O error on dev loop7, logical block 739, async page read [ 2430.703355][ T1159] I/O error, dev loop7, sector 5920 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2430.736967][ T1159] Buffer I/O error on dev loop7, logical block 740, async page read [ 2430.754207][ T1159] I/O error, dev loop7, sector 5928 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2430.771344][ T1159] Buffer I/O error on dev loop7, logical block 741, async page read [ 2430.780228][ T1159] I/O error, dev loop7, sector 5936 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2430.819896][ T30] audit: type=1400 audit(2000002084.365:1924): avc: denied { shutdown } for pid=1186 comm="syz.8.7016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2430.843087][ T1159] Buffer I/O error on dev loop7, logical block 742, async page read [ 2430.874160][ T1159] I/O error, dev loop7, sector 5944 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2430.887980][ T1159] Buffer I/O error on dev loop7, logical block 743, async page read [ 2430.897555][ T1159] Buffer I/O error on dev loop7, logical block 744, async page read [ 2430.908565][ T1159] Buffer I/O error on dev loop7, logical block 745, async page read [ 2431.743817][T22333] usb usb50-port1: attempt power cycle [ 2432.312812][ T30] audit: type=1400 audit(2000002085.035:1925): avc: denied { bind } for pid=1197 comm="syz.8.7019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2432.657021][ T1210] syz_tun: entered allmulticast mode [ 2432.890794][T22333] usb usb50-port1: unable to enumerate USB device [ 2433.992925][T30387] hsr_slave_0: left promiscuous mode [ 2434.029376][T30387] hsr_slave_1: left promiscuous mode [ 2434.790049][T30303] Bluetooth: hci4: command 0x0406 tx timeout [ 2434.807311][T28573] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 2435.045754][ T1241] usb usb8: usbfs: process 1241 (syz.7.7028) did not claim interface 0 before use [ 2435.092654][T28573] usb 9-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 2435.138151][T28573] usb 9-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 2435.394717][T28573] usb 9-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 2435.428088][T28573] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2435.629742][T28573] usb 9-1: Product: syz [ 2435.633963][T28573] usb 9-1: Manufacturer: syz [ 2435.638576][T28573] usb 9-1: SerialNumber: syz [ 2436.264366][ T400] usb 9-1: USB disconnect, device number 11 [ 2436.809388][T30387] team0 (unregistering): Port device team_slave_1 removed [ 2437.025217][T30387] team0 (unregistering): Port device team_slave_0 removed [ 2438.405013][ T1229] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 2438.413581][ T1258] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7032'. [ 2439.557479][ T1248] lo speed is unknown, defaulting to 1000 [ 2439.579639][ T1248] lo speed is unknown, defaulting to 1000 [ 2439.708859][T30303] Bluetooth: hci4: link tx timeout [ 2439.714426][T30303] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2439.724974][ T1277] [U] [ 2439.727731][ T1277] [U] [ 2439.730447][ T1277] [U] [ 2439.733161][ T1277] [U] [ 2439.735866][ T1277] [U] [ 2439.738563][ T1277] [U] [ 2439.741265][ T1277] [U] [ 2439.743964][ T1277] [U] [ 2440.206404][ T1277] [U] [ 2440.209163][ T1277] [U] [ 2440.211869][ T1277] [U] [ 2440.403119][ T1275] [U] [ 2440.456435][T30387] IPVS: stop unused estimator thread 0... [ 2440.926333][ T1301] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7040'. [ 2441.417645][ T1304] lo speed is unknown, defaulting to 1000 [ 2441.432043][ T1304] lo speed is unknown, defaulting to 1000 [ 2441.613149][ T30] audit: type=1400 audit(2000002095.165:1926): avc: denied { append } for pid=1305 comm="syz.2.7043" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2441.637721][ T30] audit: type=1400 audit(2000002095.165:1927): avc: denied { ioctl } for pid=1305 comm="syz.2.7043" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2441.750149][T26110] Bluetooth: hci4: command 0x0406 tx timeout [ 2441.826920][ T1303] netlink: 'syz.7.7042': attribute type 27 has an invalid length. [ 2441.834890][ T1303] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7042'. [ 2442.455828][ T1316] Bluetooth: MGMT ver 1.23 [ 2442.527375][ T1318] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7047'. [ 2443.836779][ T1341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2443.875045][ T1340] veth0_vlan: entered allmulticast mode [ 2444.758458][ T1348] 9pnet_fd: Insufficient options for proto=fd [ 2444.775623][ T1348] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7056'. [ 2444.784820][ T1348] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7056'. [ 2444.794091][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 2444.811867][ T31] Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 [ 2444.846930][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2444.889802][ T31] task:kworker/1:0 state:D stack:21448 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2444.956923][ T1354] netlink: 452 bytes leftover after parsing attributes in process `syz.9.7057'. [ 2445.185133][ T31] Workqueue: events p9_write_work [ 2445.212078][ T31] Call Trace: [ 2445.224306][ T1354] pim6reg: entered allmulticast mode [ 2445.229039][ T31] [ 2445.237677][ T31] __schedule+0x116f/0x5de0 [ 2445.243685][ T31] ? __lock_acquire+0xea1/0x1ba0 [ 2445.268085][ T31] ? __pfx___schedule+0x10/0x10 [ 2445.273180][ T31] ? find_held_lock+0x2b/0x80 [ 2445.277867][ T31] ? schedule+0x2d7/0x3a0 [ 2445.282230][ T31] schedule+0xe7/0x3a0 [ 2445.286296][ T31] schedule_preempt_disabled+0x13/0x30 [ 2445.294503][ T31] __mutex_lock+0x6c7/0xb90 [ 2445.299056][ T31] ? anon_pipe_write+0x15d/0x1a70 [ 2445.304137][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2445.309173][ T31] ? find_held_lock+0x2b/0x80 [ 2445.313922][ T31] ? avc_has_perm_noaudit+0x149/0x3b0 [ 2445.319295][ T31] ? anon_pipe_write+0x15d/0x1a70 [ 2445.324334][ T31] anon_pipe_write+0x15d/0x1a70 [ 2445.329167][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 2445.334972][ T31] ? avc_has_perm+0x11a/0x1c0 [ 2445.339690][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 2445.344711][ T31] ? __pfx_anon_pipe_write+0x10/0x10 [ 2445.350070][ T31] ? inode_has_perm+0x16f/0x1d0 [ 2445.354929][ T31] ? file_has_perm+0x27d/0x350 [ 2445.359816][ T31] ? __pfx_file_has_perm+0x10/0x10 [ 2445.364919][ T31] ? __pfx_anon_pipe_write+0x10/0x10 [ 2445.370223][ T31] __kernel_write_iter+0x31a/0xa90 [ 2445.375358][ T31] ? __pfx___kernel_write_iter+0x10/0x10 [ 2445.380994][ T31] ? selinux_file_permission+0x11f/0x580 [ 2445.386619][ T31] ? bpf_lsm_file_permission+0x9/0x10 [ 2445.392035][ T31] ? security_file_permission+0x71/0x210 [ 2445.397684][ T31] ? rw_verify_area+0xcf/0x680 [ 2445.403442][ T31] kernel_write+0x1f4/0x6c0 [ 2445.407990][ T31] ? __pfx_kernel_write+0x10/0x10 [ 2445.413068][ T31] ? p9_write_work+0x7d6/0xc10 [ 2445.417827][ T31] p9_write_work+0x258/0xc10 [ 2445.422464][ T31] process_one_work+0x9cf/0x1b70 [ 2445.427392][ T31] ? __pfx_process_one_work+0x10/0x10 [ 2445.432874][ T31] ? assign_work+0x1a0/0x250 [ 2445.438268][ T31] worker_thread+0x6c8/0xf10 [ 2445.442947][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2445.448059][ T31] kthread+0x3c2/0x780 [ 2445.452157][ T31] ? __pfx_kthread+0x10/0x10 [ 2445.456742][ T31] ? __pfx_kthread+0x10/0x10 [ 2445.461507][ T31] ? __pfx_kthread+0x10/0x10 [ 2445.466088][ T31] ? __pfx_kthread+0x10/0x10 [ 2445.470704][ T31] ? rcu_is_watching+0x12/0xc0 [ 2445.475481][ T31] ? __pfx_kthread+0x10/0x10 [ 2445.480089][ T31] ret_from_fork+0x45/0x80 [ 2445.484495][ T31] ? __pfx_kthread+0x10/0x10 [ 2445.489073][ T31] ret_from_fork_asm+0x1a/0x30 [ 2445.493860][ T31] [ 2445.497076][ T31] [ 2445.497076][ T31] Showing all locks held in the system: [ 2445.504922][ T31] 3 locks held by kworker/1:0/24: [ 2445.510074][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2445.520576][ T31] #1: ffffc900001e7d18 ((work_completion)(&m->wq)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2445.531359][ T31] #2: ffff888035107868 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x15d/0x1a70 [ 2445.541592][ T31] 1 lock held by khungtaskd/31: [ 2445.546459][ T31] #0: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 2445.556351][ T31] 2 locks held by getty/5577: [ 2445.561026][ T31] #0: ffff888036b290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2445.570979][ T31] #1: ffffc900030062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 2445.581134][ T31] 2 locks held by kworker/u8:0/27480: [ 2445.586492][ T31] #0: ffff88801d316948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2445.597141][ T31] #1: ffffc9000d5afd18 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2445.608693][ T31] 2 locks held by syz.5.6550/31821: [ 2445.613900][ T31] #0: ffff888035107868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 2445.622648][ T31] #1: ffff88805ab507b8 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: netfs_start_io_direct+0x116/0x260 [ 2445.633944][ T31] [ 2445.636255][ T31] ============================================= [ 2445.636255][ T31] [ 2445.645397][ T31] NMI backtrace for cpu 0 [ 2445.645413][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 2445.645434][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2445.645445][ T31] Call Trace: [ 2445.645451][ T31] [ 2445.645459][ T31] dump_stack_lvl+0x116/0x1f0 [ 2445.645490][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 2445.645510][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2445.645525][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2445.645539][ T31] watchdog+0xf70/0x12c0 [ 2445.645553][ T31] ? __pfx_watchdog+0x10/0x10 [ 2445.645563][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2445.645580][ T31] ? __kthread_parkme+0x19e/0x250 [ 2445.645598][ T31] ? __pfx_watchdog+0x10/0x10 [ 2445.645609][ T31] kthread+0x3c2/0x780 [ 2445.645620][ T31] ? __pfx_kthread+0x10/0x10 [ 2445.645630][ T31] ? __pfx_kthread+0x10/0x10 [ 2445.645641][ T31] ? __pfx_kthread+0x10/0x10 [ 2445.645656][ T31] ? __pfx_kthread+0x10/0x10 [ 2445.645672][ T31] ? rcu_is_watching+0x12/0xc0 [ 2445.645692][ T31] ? __pfx_kthread+0x10/0x10 [ 2445.645710][ T31] ret_from_fork+0x45/0x80 [ 2445.645726][ T31] ? __pfx_kthread+0x10/0x10 [ 2445.645740][ T31] ret_from_fork_asm+0x1a/0x30 [ 2445.645762][ T31] [ 2445.645766][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2445.785649][ C1] NMI backtrace for cpu 1 [ 2445.785664][ C1] CPU: 1 UID: 0 PID: 1327 Comm: syz.1.7050 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 2445.785681][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2445.785689][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x70 [ 2445.785709][ C1] Code: 00 00 5b e9 b2 c8 15 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 65 48 8b 15 c8 c9 e8 11 <65> 8b 05 d9 c9 e8 11 a9 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 [ 2445.785722][ C1] RSP: 0018:ffffc9000d527670 EFLAGS: 00000293 [ 2445.785734][ C1] RAX: 0000000000000000 RBX: ffffea0001e6b500 RCX: ffffffff8217f178 [ 2445.785743][ C1] RDX: ffff8880127ea440 RSI: ffffffff8217c88a RDI: ffffea0001e6b500 [ 2445.785752][ C1] RBP: ffffea0001e6b500 R08: 0000000000000007 R09: 0000000000000000 [ 2445.785760][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 2445.785768][ C1] R13: ffff888061f59060 R14: ffffea0001e6b500 R15: 0000000000000000 [ 2445.785777][ C1] FS: 0000000000000000(0000) GS:ffff888124adf000(0000) knlGS:0000000000000000 [ 2445.785791][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2445.785799][ C1] CR2: 00007fd122b80178 CR3: 000000005c392000 CR4: 00000000003526f0 [ 2445.785808][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2445.785815][ C1] DR3: 00000000000032e7 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2445.785824][ C1] Call Trace: [ 2445.785829][ C1] [ 2445.785833][ C1] const_folio_flags.constprop.0+0xa/0x70 [ 2445.785854][ C1] free_swap_cache+0x16/0x2d0 [ 2445.785871][ C1] free_pages_and_swap_cache+0x168/0x4a0 [ 2445.785889][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 2445.785921][ C1] ? __pfx___might_resched+0x10/0x10 [ 2445.785940][ C1] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 2445.785961][ C1] tlb_finish_mmu+0x168/0x7b0 [ 2445.785981][ C1] exit_mmap+0x403/0xb90 [ 2445.785998][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 2445.786017][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 2445.786044][ C1] __mmput+0x12a/0x410 [ 2445.786060][ C1] mmput+0x62/0x70 [ 2445.786075][ C1] do_exit+0x9d1/0x2c30 [ 2445.786092][ C1] ? schedule_timeout+0x160/0x290 [ 2445.786117][ C1] ? __pfx_do_exit+0x10/0x10 [ 2445.786134][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 2445.786146][ C1] ? find_held_lock+0x2b/0x80 [ 2445.786162][ C1] do_group_exit+0xd3/0x2a0 [ 2445.786181][ C1] get_signal+0x2673/0x26d0 [ 2445.786198][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 2445.786211][ C1] ? find_held_lock+0x2b/0x80 [ 2445.786225][ C1] ? __pfx_get_signal+0x10/0x10 [ 2445.786240][ C1] ? rcu_is_watching+0x12/0xc0 [ 2445.786255][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2445.786271][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2445.786290][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 2445.786308][ C1] ? raw_ioctl+0x106/0x2c30 [ 2445.786321][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2445.786341][ C1] ? selinux_file_ioctl+0xb4/0x270 [ 2445.786364][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 2445.786382][ C1] do_syscall_64+0xda/0x260 [ 2445.786401][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2445.786414][ C1] RIP: 0033:0x7f933d38e56b [ 2445.786424][ C1] Code: Unable to access opcode bytes at 0x7f933d38e541. [ 2445.786430][ C1] RSP: 002b:00007f933e150f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2445.786443][ C1] RAX: fffffffffffffffc RBX: 0000000000000005 RCX: 00007f933d38e56b [ 2445.786451][ C1] RDX: 00007f933e151fe0 RSI: 0000000080085502 RDI: 0000000000000005 [ 2445.786459][ C1] RBP: 00007f933e151fe0 R08: 0000000000000000 R09: 00312e6364755f79 [ 2445.786468][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 2445.786476][ C1] R13: 0000000800000000 R14: 00002000000001c0 R15: 00007f933d41ba1e [ 2445.786489][ C1] [ 2445.788481][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2446.159861][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 2446.171658][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2446.181712][ T31] Call Trace: [ 2446.185002][ T31] [ 2446.187932][ T31] dump_stack_lvl+0x3d/0x1f0 [ 2446.192525][ T31] panic+0x71c/0x800 [ 2446.196414][ T31] ? __pfx_panic+0x10/0x10 [ 2446.200821][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2446.206181][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2446.212145][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2446.217503][ T31] ? watchdog+0xdda/0x12c0 [ 2446.221903][ T31] ? watchdog+0xdcd/0x12c0 [ 2446.226305][ T31] watchdog+0xdeb/0x12c0 [ 2446.230538][ T31] ? __pfx_watchdog+0x10/0x10 [ 2446.235197][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2446.240390][ T31] ? __kthread_parkme+0x19e/0x250 [ 2446.245407][ T31] ? __pfx_watchdog+0x10/0x10 [ 2446.250071][ T31] kthread+0x3c2/0x780 [ 2446.254125][ T31] ? __pfx_kthread+0x10/0x10 [ 2446.258697][ T31] ? __pfx_kthread+0x10/0x10 [ 2446.263273][ T31] ? __pfx_kthread+0x10/0x10 [ 2446.267847][ T31] ? __pfx_kthread+0x10/0x10 [ 2446.272421][ T31] ? rcu_is_watching+0x12/0xc0 [ 2446.277172][ T31] ? __pfx_kthread+0x10/0x10 [ 2446.281745][ T31] ret_from_fork+0x45/0x80 [ 2446.286143][ T31] ? __pfx_kthread+0x10/0x10 [ 2446.290718][ T31] ret_from_fork_asm+0x1a/0x30 [ 2446.295481][ T31] [ 2446.298682][ T31] Kernel Offset: disabled [ 2446.302990][ T31] Rebooting in 86400 seconds..