last executing test programs: 14m51.706181325s ago: executing program 3 (id=448): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 14m48.785900626s ago: executing program 3 (id=454): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) unshare(0x62040200) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 14m46.266873008s ago: executing program 3 (id=457): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(0x0, 0x100000000ffff, 0x0) socket$netlink(0x10, 0x3, 0x0) io_setup(0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6(0xa, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) 14m44.444894493s ago: executing program 3 (id=462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='gid_map\x00') write$P9_RGETLOCK(r3, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000a40)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000017", 0x58, 0x3a, 0x0, @remote={0xfe, 0xc0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "42a2f9", 0x0, 0x0, 0x0, @empty, @private1, [@dstopts={0x2c, 0x3, '\x00', [@calipso={0x7, 0x8}, @enc_lim, @pad1, @enc_lim, @calipso={0x7, 0x8, {0x0, 0x0, 0x28}}, @generic]}]}}}}}}}, 0x0) 14m43.381973201s ago: executing program 3 (id=465): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) unshare(0x62040200) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 14m39.460416034s ago: executing program 3 (id=470): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x143042, 0x83) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kvm_ioapic_set_irq\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x80000001) 14m23.342803731s ago: executing program 32 (id=470): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x143042, 0x83) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kvm_ioapic_set_irq\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x80000001) 7m36.300359174s ago: executing program 1 (id=1894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000100)={0x2, 0x13, 0x9, 0x8206, "0a425ddbbef352cd0267bbb225ee6269981e324c5af89ca7d930ff7ef24f4eda"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x8, [@float={0x7}, @var={0xc, 0x0, 0x0, 0xe, 0x1, 0x1}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xd}, {0x0, 0x4}, {0x3, 0x3}, {0x10}, {0xb}, {0xa}, {0x7, 0x5}, {0x9, 0x5}]}]}, {0x0, [0x2e, 0x61, 0x30, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000740)=""/35, 0x88, 0x23, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0x7, 0x3, 0x7, 0x92, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000300)={r0, 0x6, 0x5, 0x7}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) poll(&(0x7f0000001280), 0xa4, 0x3) 7m35.721931537s ago: executing program 1 (id=1895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x160000000000000, 0x2000) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000100)={0x2, 0x13, 0x9, 0x8206, "0a425ddbbef352cd0267bbb225ee6269981e324c5af89ca7d930ff7ef24f4eda"}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x8, [@float={0x7}, @var={0xc, 0x0, 0x0, 0xe, 0x1, 0x1}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xd}, {0x0, 0x4}, {0x3, 0x3}, {0x10}, {0xb}, {0xa}, {0x7, 0x5}, {0x9, 0x5}]}]}, {0x0, [0x2e, 0x61, 0x30, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000740)=""/35, 0x88, 0x23, 0x1, 0x0, 0x0, @void, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0x7, 0x3, 0x7, 0x92, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) poll(&(0x7f0000001280), 0xa4, 0x3) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000640)={r4, &(0x7f00000005c0)}, 0x20) 7m33.678325933s ago: executing program 1 (id=1903): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = io_uring_setup(0x6718, &(0x7f0000000340)={0x0, 0x4, 0x80, 0x4, 0x403b6}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/68, 0x44}], 0x1) close(r1) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) 7m30.963689507s ago: executing program 1 (id=1908): syz_open_dev$evdev(0x0, 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy_home_node(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0xffffffffffffff4c}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x34}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0'}, 0xb) 7m29.889316263s ago: executing program 1 (id=1911): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4004014) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc5594286d776c8c5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x10, 0x3, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_delete(r7) 7m28.900693849s ago: executing program 1 (id=1914): socket$inet6(0xa, 0x80001, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, 0x0, 0x64, 0x4000000, &(0x7f0000000380)={0xa, 0x5e23, 0x0, @loopback, 0x1}, 0x1c) 7m13.713659864s ago: executing program 33 (id=1914): socket$inet6(0xa, 0x80001, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, 0x0, 0x64, 0x4000000, &(0x7f0000000380)={0xa, 0x5e23, 0x0, @loopback, 0x1}, 0x1c) 6m28.105746406s ago: executing program 5 (id=2086): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = io_uring_setup(0x6718, &(0x7f0000000340)={0x0, 0x4, 0x80, 0x4, 0x403b6}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000140)=""/68, 0x44}], 0x1) close(r2) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) 6m21.966572477s ago: executing program 5 (id=2101): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x3c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xe}}]}}]}, 0x3c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6m19.897709894s ago: executing program 5 (id=2105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m18.27085295s ago: executing program 5 (id=2110): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x1, 0xeb6) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xe, &(0x7f00000004c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0x7, 0xd, 0x3, 0x1000, 0x695d}, @ringbuf_query, @ldst={0x1, 0x3, 0x1, 0x5, 0x6, 0xfffffffffffffff8, 0x10}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}], &(0x7f0000000540)='syzkaller\x00', 0x6, 0x9f, &(0x7f0000000580)=""/159, 0x40f00, 0x10, '\x00', 0x0, 0x3c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x5, 0xf, 0x9, 0x9}, 0x10, 0x1a54c, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r0, r0, r0, r0], &(0x7f0000000700)=[{0x1, 0x3, 0xe, 0x8}], 0x10, 0x401, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m17.309017601s ago: executing program 5 (id=2114): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)=0x3000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m17.01057856s ago: executing program 5 (id=2115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x160000000000000, 0x2000) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000100)={0x2, 0x13, 0x9, 0x8206, "0a425ddbbef352cd0267bbb225ee6269981e324c5af89ca7d930ff7ef24f4eda"}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x8, [@float={0x7}, @var={0xc, 0x0, 0x0, 0xe, 0x1, 0x1}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xd}, {0x0, 0x4}, {0x3, 0x3}, {0x10}, {0xb}, {0xa}, {0x7, 0x5}, {0x9, 0x5}]}]}, {0x0, [0x2e, 0x61, 0x30, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000740)=""/35, 0x88, 0x23, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0x7, 0x3, 0x7, 0x92, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000300)={r0, 0x6, 0x5, 0x7}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) poll(&(0x7f0000001280), 0xa4, 0x3) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r5) 6m1.452346983s ago: executing program 34 (id=2115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x160000000000000, 0x2000) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000100)={0x2, 0x13, 0x9, 0x8206, "0a425ddbbef352cd0267bbb225ee6269981e324c5af89ca7d930ff7ef24f4eda"}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x8, [@float={0x7}, @var={0xc, 0x0, 0x0, 0xe, 0x1, 0x1}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xd}, {0x0, 0x4}, {0x3, 0x3}, {0x10}, {0xb}, {0xa}, {0x7, 0x5}, {0x9, 0x5}]}]}, {0x0, [0x2e, 0x61, 0x30, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000740)=""/35, 0x88, 0x23, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0x7, 0x3, 0x7, 0x92, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000300)={r0, 0x6, 0x5, 0x7}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) poll(&(0x7f0000001280), 0xa4, 0x3) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r5) 1m53.416608928s ago: executing program 7 (id=2739): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffff50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r6, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x40}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x3400c000) 1m51.490988532s ago: executing program 7 (id=2742): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000080)=ANY=[@ANYBLOB="0c040000000000100000"], 0x0, 0x0, 0x0}, &(0x7f0000000a40)={0x84, 0x0, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0xded6de49ba727f8f, 0x3}}, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @broadcast}, 0x0, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x7}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}}) socket(0x21, 0x2, 0x1000e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0) r2 = open$dir(0x0, 0x10500, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x4000000c, r2, 0x0) r3 = socket(0x2, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x2001}) epoll_pwait(r4, &(0x7f0000000080)=[{}], 0x1, 0x80000001, 0x0, 0x0) close(r4) shutdown(r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) 1m46.334735047s ago: executing program 7 (id=2755): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000080)=ANY=[@ANYBLOB="0c040000000000100000"], 0x0, 0x0, 0x0}, &(0x7f0000000a40)={0x84, 0x0, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0xded6de49ba727f8f, 0x3}}, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @broadcast}, 0x0, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x7}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}}) socket(0x21, 0x2, 0x1000e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0) r2 = open$dir(0x0, 0x10500, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x4000000c, r2, 0x0) r3 = socket(0x2, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x2001}) epoll_pwait(r4, &(0x7f0000000080)=[{}], 0x1, 0x80000001, 0x0, 0x0) close(r4) shutdown(r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) 1m41.017313704s ago: executing program 7 (id=2764): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x3, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140), 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r7, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x51e}) close(r6) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100410086dd608a27f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e0000000080000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000a8780000"], 0x0) 1m39.438131033s ago: executing program 7 (id=2769): socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000080)=ANY=[@ANYBLOB="d000e20008021100"/28], 0x21) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000000080)}, 0x0) syz_emit_ethernet(0x21ae, &(0x7f0000000ec0)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="80800000080211000001000211000001505050505050200000000000000000000000000064000000"], 0x7b) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r7, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) 1m37.401335146s ago: executing program 7 (id=2771): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(0x0, 0x100000000ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x4004010) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6(0xa, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_io_uring_setup(0x115, &(0x7f0000000440)={0x0, 0x182d, 0x880, 0x0, 0x8124}, &(0x7f0000000240), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') socket$packet(0x11, 0x2, 0x300) 1m22.262574446s ago: executing program 35 (id=2771): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(0x0, 0x100000000ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x4004010) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6(0xa, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_io_uring_setup(0x115, &(0x7f0000000440)={0x0, 0x182d, 0x880, 0x0, 0x8124}, &(0x7f0000000240), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') socket$packet(0x11, 0x2, 0x300) 28.517112862s ago: executing program 0 (id=2942): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e8005000100"], 0x48}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xa00, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007015005068a00000000047c0000040000000c00018006000600800a0000100002800c0006"], 0x34}}, 0xc000) 27.810213045s ago: executing program 0 (id=2945): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"/4141], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20024094, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2080) write$FUSE_INIT(r4, &(0x7f00000000c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84a01, 0x120) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 26.802606451s ago: executing program 0 (id=2949): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0xc5d116e9899720b9, {{0x42}}}, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000b03a87ce430940062b7336e0a1e04b8828e47d3f5468d61ee01c932a4580c04a2da5b1e1393453538ec28605ea03288aee935f88447c0cc3649d6f53c705f5be7a8a1aaf40680db8d63c87aef1bd18480f370cd4dd38dd82f7cf6deea9f67d64463c06e8294d0fe3aef024ce965b1d6afa5d997c4080a418819ffc5d78f5e1cabcc0f6546dcff03f45b318e39c47b7784cdba8a457a125ddf3dea3b01090a101ddfcab145a6539093235d31b591a8a22139a8133", @ANYRES16=r2, @ANYBLOB="f6ea2bbd7000fcdbdf2521000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r5 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r5, 0xffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x10, 0x5, 0x508, 0x210, 0x210, 0xffffffff, 0x120, 0x120, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@private0, @private2, [], [], 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@loopback, @ipv6=@private0, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @port, @gre_key}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) fcntl$addseals(r5, 0x409, 0x7) io_setup(0x403, &(0x7f00000004c0)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r8, &(0x7f0000008540)=[{{&(0x7f0000001a00)=@in6={0xa, 0x4e23, 0x5, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=ANY=[@ANYBLOB="100000000000000029000000050000001000"], 0x20}}], 0x1, 0x8000) io_pgetevents(r7, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x100000000) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r9, 0x0, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) write$uinput_user_dev(r9, &(0x7f0000000940)={'syz1\x00', {0x5, 0x7, 0x7, 0xf64e}, 0x8, [0xffffffa0, 0x4, 0x5, 0x4bb, 0x9, 0x9, 0x200, 0x3, 0x1c, 0x7, 0xb9, 0xfff, 0x8, 0x17, 0x7, 0x40, 0x2, 0x834, 0xff, 0x1, 0xa370, 0x9, 0x8, 0x1, 0xe6, 0x6, 0x40000, 0x71, 0x2, 0x6, 0x6, 0x0, 0xffffff4a, 0xfffffffc, 0x0, 0x200000, 0x0, 0x77b, 0x1, 0x80, 0x3ff, 0x8001, 0x21, 0x20000000, 0x0, 0x10001, 0x80000001, 0x10001, 0x8, 0xc5, 0x6, 0x6, 0x3, 0x3, 0x800, 0x6, 0x1, 0x6, 0x385, 0x6, 0x5, 0x6, 0x100, 0x6], [0x8, 0x7, 0x12, 0x6, 0x40, 0x80000000, 0x7, 0x5, 0x200, 0x2, 0x3478, 0x48, 0x68b5, 0xff, 0x45d, 0x3ff, 0x8a, 0xffffffff, 0x41d, 0x2, 0x3, 0x9, 0x3, 0x1dd, 0x7ff, 0x200, 0x3, 0xd497, 0xb3, 0x10000, 0x4, 0x1, 0x2000, 0xfffffffd, 0x7, 0x2c15, 0x8c5, 0x8001, 0x3b5a677d, 0xd9a, 0x6, 0x5, 0x401, 0x8000, 0x9, 0x9, 0x101, 0x8, 0x4, 0xfffffda3, 0x34e1, 0x414, 0x8000, 0x4, 0x7, 0x3, 0xfffffffd, 0x1ff, 0x54, 0x0, 0xb815, 0x400, 0x0, 0xbd], [0x5, 0x80000001, 0x4, 0x101, 0x4d, 0x5, 0x9, 0x3, 0x3, 0x5, 0x8, 0x4, 0xfff, 0xff, 0x6, 0x2, 0x3711, 0x400, 0xf, 0x6, 0x8, 0x1, 0x2, 0x4, 0x2, 0x5, 0x1, 0xb264, 0xc, 0x3, 0x10, 0x9, 0x0, 0x3, 0x81, 0x400, 0x3, 0xc92, 0x7, 0x101, 0x5598, 0x0, 0x9, 0x6, 0x2, 0x7fff, 0x1d, 0x8, 0x0, 0x4, 0x401, 0x5, 0xe, 0x1, 0xfffffff8, 0x4, 0x4, 0xc81, 0xfffffd19, 0xa2, 0x0, 0x7, 0x0, 0x3ff], [0xfff, 0xfffffff9, 0xb, 0xfffffff7, 0x6, 0x8, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x4, 0x1ff, 0xfffffffe, 0x6, 0x5, 0x4, 0x1684, 0x8000, 0x3, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0x9, 0x276b, 0xfff, 0x401, 0xd6, 0x4, 0x5, 0x2, 0x3, 0x8, 0xcec9, 0x0, 0x80000001, 0x8, 0x6, 0x4, 0x8, 0x0, 0x4, 0x3, 0x80000000, 0x7, 0x8, 0x8, 0x10, 0x5, 0x5, 0xfffffff7, 0x7ef1, 0xfffffffd, 0x7ff, 0xffff, 0x7fff, 0x5, 0x2, 0x4, 0x81, 0xc, 0x9]}, 0x45c) r10 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x1000, 0x1000}) r11 = fcntl$dupfd(r10, 0x0, r10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x488, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xd475c744db358847}, 0x8014) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r11}) 26.048973198s ago: executing program 0 (id=2952): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 25.395502122s ago: executing program 0 (id=2955): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0) 11.881968354s ago: executing program 4 (id=2998): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007"], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video(0x0, 0xa7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x208, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000240)={0x2a, 0x3, 0x4001}, 0xc) write$binfmt_script(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000240)=0x8) 10.271205642s ago: executing program 4 (id=3001): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 7.634996422s ago: executing program 6 (id=3006): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x63}]}]}, 0x38}}, 0x0) 7.379489783s ago: executing program 8 (id=3008): r0 = getpid() r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() fanotify_init(0x0, 0x0) setrlimit(0xc, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90324fc601000020071570200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="1400000023000b02d22b836f8c6394f91f24fc60", 0x14}], 0x1}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001440)={r1, &(0x7f0000000440)="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", &(0x7f0000000340)=""/159}, 0x20) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x4, 0x8}]}) sendfile(r2, r1, 0x0, 0x4000000008) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000025006d0000000f0002006e65746495d0d4657673696d3000000800"/50, @ANYRES32=r0, @ANYBLOB], 0x3c}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0xa, 0x4}, 0xc) 7.337650525s ago: executing program 6 (id=3009): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"/4141], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20024094, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2080) write$FUSE_INIT(r5, &(0x7f00000000c0)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84a01, 0x120) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 6.438891935s ago: executing program 8 (id=3010): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0x3) (fail_nth: 1) 5.683919805s ago: executing program 4 (id=3012): getgroups(0x2, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff]) getgroups(0x3, &(0x7f0000000040)=[0x0, 0xffffffffffffffff, r0]) setfsgid(r2) setfsgid(r1) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x60, 0x0, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3, {0x10, 0x18, 0x2}}, @val={0x25, 0x3, {0x0, 0x34, 0x10}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xb8, 0x8}}, @void, @void, @void, @void}}]]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000004570b0867479bfffe7126ce9c02561d56b4b49c339adec4ea6f4569b588abb9e7a2f07ba8c467da667f440428b05828caf9ff6ff3b1f5a2b600674bb6bb2dc0a928f00ca10af6edeebe094a90b8d71ad7c907664a543cedb65754be5bd246da6e6f25ddab2109a6ae42cffbf0e0877b13a98ec8fda933800e8e653b0a302d9543976252300db935ce8aaa5ecace85949cfffffffff000000007dc3de89bd2763ce3aaa9be199a9eb85467ada7df3b9e3c7c31c1209630525b8f45bf1836a3e9763e547d8ad5f96e29e3a06d082afa1126fa1f012a30221b39deb1774b7c6930000000000000000", @ANYRES16=r4, @ANYBLOB="00042abd7000fddbdf25730000000500ee00080000000800ef00060000000500ee000f000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=@ipv6_getaddr={0x18, 0x16, 0x1}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 5.554613268s ago: executing program 8 (id=3013): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) clock_adjtime(0x6, &(0x7f0000000b80)={0x5, 0x1, 0xe3, 0x7f, 0x0, 0x2, 0xffff, 0xfffffffffffffffa, 0x7, 0x5, 0x7, 0x5f, 0xffffffffffffff39, 0x1, 0x2, 0xfffffffffffffff9, 0x5, 0x401, 0xf84, 0x6, 0xc, 0xd00, 0xa9b, 0xfffffffffffffffc, 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000120c190325bd7002fddbdf2507000008", @ANYRES32=0x0, @ANYBLOB="00020000400000000800290002000000"], 0x28}}, 0x0) r3 = syz_usb_connect$uac1(0x1, 0xe9, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x3, 0x1, 0x0, 0xa0, 0x30, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x1}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x4, 0x1, "95"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x100, 0x3, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x4, 0x2, 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x5, 0x0, 0x2, 0x8e, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x5, 0x1, 0x2}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x0, 'd('}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0xe, 0x6, "faad"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x4, 0x1, 0x3b, "bd00", "835d"}, @as_header={0x7, 0x24, 0x1, 0xdd, 0xb, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x2, 0x4, {0x7, 0x25, 0x1, 0x2, 0x5, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0x70, 0x0, "650e78d1c321"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0x1b, 0x99}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xff, 0x4c, 0x3, "7a468333e8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x9, 0x2, {0x7, 0x25, 0x1, 0x81, 0x4, 0x607}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x54, 0x6, 0x2, 0x40, 0x2}, 0xc, &(0x7f0000000040)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0x6, 0x2}]}, 0x8, [{0x47, &(0x7f00000000c0)=@string={0x47, 0x3, "105db0e904424b696710a4efbf6d4ebdf90593081a590619750964e30c69b3e536fd0aa6bb6315ad455cddff89dc89d5ec65b3db4b430ccd7c99368bd08cb373ea9ceeb101"}}, {0x22, &(0x7f0000000280)=@string={0x22, 0x3, "80409fb37ff91d8fc92cc4c41af807e339c2275c0d1378810dab1e7397a2b2e9"}}, {0x4, &(0x7f00000002c0)=@string={0x4, 0x3, "70a4"}}, {0xa7, &(0x7f0000000340)=@string={0xa7, 0x3, "bf5427fd7c72c54756e8a89cd95c8240a67dde89fcb87889a27ef61e4bf42c58fc59d2d4c70e903fb59dcd21771c046c2e0fe39b79efc419249ca3effabd6d8f8b982f25082e35966f051acc70ca409515249cb78a4a355ac4179b056abe3f199ec38a7156b829c87b62567ebebae469b9190de784863747dd7d11fba93fc5666fb765373d359dccba3ee27e2d3ec03f7ea3a1b8511bff25ce8b5d40b4471c534f1c7ec5b5"}}, {0x5e, &(0x7f0000000400)=@string={0x5e, 0x3, "60d060ea61bd00415ec90b0f1eb56f8c10adbf2df2acb69b9c5b51390ba58c1f3d379a8a1840943639407ddc1c19aa07e384c2631565078800fa4bde442400976aa3995b45a4919fee467f9f202b6b96d81bba38d6c007f559e11273"}}, {0x78, &(0x7f0000000480)=@string={0x78, 0x3, "317e64f2c7d4ac891192c13c7dbb45830e99c65d3381d0e6e59be5898cc6afc3a84f5b2cc4c6ef79eeb1a7036adf3c8db24e47d7aed0a7917a77d949d4750a0e94cc92f83e6651f933738b26e6a42f7e5e2d8e24d42e45975ed617fd0e7e1ec74fe2635b62ed0142906e0dcc8d178f64fcc662deb831"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x34}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000000740)={0x14, &(0x7f0000000600)={0x20, 0x6, 0xd8, {0xd8, 0x30, "967565f62ff089c770ec35e9052b2ffb9af30c24506c6789c41cb80676b96db9acdbeb32511fb752cd2488af965f8afc0edc7d41f3db7d46da69c316656eb301bcdfd29b5a7fce43ef57b3d3c0c64f0cca4c63b2efe813bf04b8609260d8acabf8f560f4a9840f77008c01f135e167c3596f8f57d0f1791b5dbb5451587ab0f8cc1e603ed5b3461510c10cb1f92233d28dd4b26309cc666343a16debf5f18bb494e7b98b3d2d06999ac5c7c9e55aef1a291c29c3adcc76fb7e3839cd975325a52131effeeb2efb1826fa06eba615d5c276e7d2cf7697"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440e}}}, &(0x7f0000000980)={0x44, &(0x7f0000000780)={0x20, 0x0, 0x19, "255f059a3a1416fbc7980baff1082efda34000744cfffbad65"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x81, 0x2, "2b8a"}, &(0x7f0000000880)={0x20, 0x82, 0x2, "57f3"}, &(0x7f00000008c0)={0x20, 0x83, 0x3, "850b4a"}, &(0x7f0000000900)={0x20, 0x84, 0x4, "c9df43db"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "86c793"}}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x90, 0xa, 0x6, 0x3, 0x0, 0x0, {0x9, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff885a}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x90}}, 0x8000) 5.519849127s ago: executing program 4 (id=3014): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004'], 0x2a, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="06000000040000ecff000000b82fbd1bcdc3fa548a78ea5e57e3ad50cf577bacfa76686c234d4842a384446ed3a6ca660f57c8720fe32f91fd1ef39e5087ec1c334c16d6a6bc41b2a3352c6baacda40c2f5245f677f39a150a30fee20ce7beb33cfa5e0ef887a3d93b594d93eba657a811d80654c2dfff59e58328d548b5187128e66643e68e6b9c44e58772f70e", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0x0, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x40000, 0x0, 0x2, 0x0, 0xc}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100005070100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="1800128008000100736974000c000280080002"], 0x40}, 0x1, 0x4c00000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="000000000000000120001280080001"], 0x40}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x8, 0x7, 0x4, 0x10}]}) r5 = syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100000841"], 0x0) syz_usb_control_io(r5, &(0x7f00000027c0)={0x2c, 0x0, &(0x7f0000002600)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 5.428688489s ago: executing program 2 (id=3016): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 1) close(0x3) 5.421852688s ago: executing program 6 (id=3017): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20024094, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2080) write$FUSE_INIT(r5, &(0x7f00000000c0)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000005240)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84a01, 0x120) 3.837252277s ago: executing program 2 (id=3018): r0 = landlock_create_ruleset(&(0x7f00000004c0)={0x8008, 0x1, 0x1}, 0x18, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x44, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.836359098s ago: executing program 6 (id=3019): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0], 0x44}}, 0x0) 3.662775732s ago: executing program 2 (id=3020): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014"], 0xd4}}, 0x0) 3.396913162s ago: executing program 2 (id=3021): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000080)=ANY=[@ANYBLOB="10010000", @ANYRES16=r2, @ANYBLOB="050427bd70007edbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="f40002"], 0x110}, 0x1, 0x0, 0x0, 0x881}, 0x2004c0a4) 3.144565102s ago: executing program 2 (id=3022): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x5, 0x1, 0x3, "46a19109814f1f7f75fe5128d79d408e495d19c53f872aa29e67de217611a519", 0x33424752}) 3.028234118s ago: executing program 2 (id=3023): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socket$inet6(0xa, 0x2, 0x3a) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000900)=ANY=[@ANYBLOB="52010000ead4a320d118af1e6309010203010902240001f60720400904a67602ab52634a09050b002000f84c090905aa46"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000f40)={0x14, 0x0, &(0x7f0000000f00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000001880)={0x2c, &(0x7f0000000000)={0x0, 0x13, 0x2, "17c0"}, 0x0, 0x0, 0x0, 0x0}) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'batadv0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x0, 0x7ffb}}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000010100800c0001"], 0x114}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000080)) 2.422836404s ago: executing program 8 (id=3024): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000400168008000100bc"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40) (async) r4 = dup(r2) ioctl$KVM_SET_MSRS(r4, 0xc008aec1, &(0x7f00000000c0)=ANY=[@ANYBLOB="82"]) 2.379955544s ago: executing program 4 (id=3025): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = gettid() setpgid(0xffffffffffffffff, r1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 1.77808817s ago: executing program 8 (id=3026): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002e00)=ANY=[@ANYBLOB="620af8ff0c011021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c767056a982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf9943134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2eed44d69fe32b0142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000070000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6a04006bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b17690158969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583584acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb4d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f8957727da5122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0ae500000000000000dc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6eada31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000d58c08acaf30235b918a31d2eca55f74a23641f6022d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7c48de61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e4000000000d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb8434503680300383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718fd02cde45eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff1500000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9ab48620f144ff72ac579e4a5240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df651bc25070b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5500ff49d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e9611d2e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b08faa4bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef6853f35c28bc57665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f2d5d71778acbd4eee53a3996cb0de84bd2b0504789d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100000000000000000000000000000000000000000000000070a45784f793e88e477e48f7d87acf12a6731eb5350831f500461ed55897f517923c73f731c139464c6383e580ce222a3250dd12ba25f71de8c94f56f418460dff5678c7c3f51ab4ddc29ffdf496bd8c579401c734fd5ac11a1008ce1d63f5b516d92bf5d718b267017b3ecd7200a7db0ef6b3a8e1f22186961f8c86c29b3144aa71d1623f9053dcf2a445c69d0f14b24884e83a94ad02647b8959c4eef7516546040c83e04484d7f2b65456e2da0dcc7f5a9024b8f4d35cbb03da118cb5f25b97894eafca8140fadcac67c5b17efea5a65b9a66cedb68619f2622733254650fe28f8233f40bed514bdfb199bf21cf421f2f70b1a285e86b542947cba56e23c3ae82d62e99d20d803bab995faae7389946ac0773194a5c2dcb3b57f6dcc6cb564e1dc7f0499df2b10bb50b470197ea7e8892c600"/4141], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20024094, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2080) write$FUSE_INIT(r5, &(0x7f00000000c0)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84a01, 0x120) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 1.122681965s ago: executing program 4 (id=3027): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfe, 0x2, 0x0, '\x00', 0x0, 0x8000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) prlimit64(0x0, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x7, 0x0, &(0x7f00000007c0)="9f449487219195", 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700), &(0x7f0000000000), 0x1}, 0x50) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x11, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) 358.659638ms ago: executing program 8 (id=3028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x30, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @ndisc_redir={0x89, 0x2, 0x0, '\x00', @private0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}, 0xfdef) (fail_nth: 1) 338.031014ms ago: executing program 0 (id=2983): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@empty, @initdev, 0x0}, &(0x7f00000002c0)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private0, 0x7b, r0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x80) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000002c000097000040"]) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) bind$inet(r8, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r9 = socket$inet(0x2, 0x2, 0x1) r10 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) fcntl$lock(r10, 0x7, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x8000000000000002}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000240)=r10, 0x4) bind$inet(r9, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) sendto$packet(r1, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc0398062f2405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair(0x1e, 0x80000, 0x8, &(0x7f0000000200)) getsockopt$inet6_tcp_buf(r11, 0x6, 0x1f, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x4010, r11, 0x282c6000) r12 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$FBIO_WAITFORVSYNC(r12, 0x40044620, 0x0) getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x1fc) 222.650002ms ago: executing program 6 (id=3029): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=@deltfilter={0xc70, 0x2d, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0x0, 0xb}, {0x9, 0xffe0}}, [@f_rsvp6={{0xa}, {0xc40, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xb, 0x8}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0x0, 0x7fff}, {0x3, 0xfab, 0x8001}, 0x73, 0x91, 0xdc}}, @TCA_RSVP_ACT={0x4}, @TCA_RSVP_POLICE={0xc10, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x8, 0xfffffff6, 0x5, 0x1, 0x8, 0x1, 0x6, 0xa, 0x14000, 0x9, 0x2, 0x17d4, 0x93, 0x0, 0x3, 0xc, 0xfffffff9, 0x8, 0x8, 0xffffffff, 0x5, 0x8, 0x891, 0x9, 0x9, 0x8, 0xffffff04, 0x7, 0x100, 0xa, 0x7, 0x2, 0x80000000, 0x5, 0x6, 0x8, 0xa25, 0x8, 0x7, 0x0, 0x101, 0x17, 0x3, 0x6, 0x6, 0xa, 0x8, 0x2, 0x1, 0x7, 0x1, 0x2, 0x91dc, 0x8, 0x0, 0x2, 0x80000001, 0x1, 0x4, 0x8, 0x7, 0xef99, 0xb7bd, 0x7, 0xfffffffc, 0x8001, 0x40, 0xd31a, 0xfffffffe, 0x410, 0x9, 0x6, 0x1, 0x9a7, 0x7, 0x273c7bd6, 0xffff, 0x7, 0x10001, 0xc, 0x9, 0x1, 0x9, 0xff800, 0x7fffffff, 0x80, 0x8, 0x3800, 0xffff7fff, 0x6, 0x0, 0x664, 0x7, 0x6, 0x8, 0x1, 0x2, 0x4, 0x4, 0x7fff, 0x2, 0x2, 0x12f, 0xff, 0x7, 0x4, 0xfff, 0xffffff59, 0x9, 0x3, 0xfffffffc, 0x2, 0x8, 0xfffffffd, 0x240000, 0x6, 0xfffff2af, 0x8, 0x4, 0x5, 0x2, 0xffffffc0, 0x3, 0x6, 0x6, 0x80000000, 0x3, 0x620d9452, 0x9, 0x5, 0x7, 0x6, 0x7ff, 0x9, 0x8, 0xa0000, 0x5, 0x1b, 0x3, 0x1, 0xfffffffd, 0x3, 0x5, 0xdde, 0x800, 0x1d89c67f, 0x2, 0x8, 0x7c0, 0x5, 0x485, 0xed1, 0x4, 0x0, 0x3, 0x1, 0x7, 0x9, 0xffff7fff, 0xff, 0x7, 0x80000000, 0x6, 0xbd32, 0xf, 0x8, 0x0, 0x9, 0x9, 0xeed, 0x4, 0x80000001, 0xffffffff, 0x7fffffff, 0x5, 0x10001, 0x1, 0x200, 0x2, 0x3, 0x2, 0x9, 0x5a26, 0x8000, 0x33, 0x5, 0x1, 0x3d, 0x5, 0x7, 0xfffffffe, 0x1, 0x7, 0x3, 0x9, 0x400, 0x3, 0x8, 0x9, 0x9, 0xe3d6, 0x227e, 0x6f5, 0x2, 0x3, 0x1, 0x8001, 0x8, 0x9, 0x27d0, 0x10, 0x5, 0xe960, 0x9, 0x3, 0x3, 0x401, 0x9b69, 0xa0d41f9, 0x7fffffff, 0x100, 0x400, 0x3, 0xffffffff, 0x40, 0xb0e, 0x56c, 0xfffffffd, 0x31, 0x8, 0x40, 0x4, 0x1, 0x5, 0x9, 0x4f3, 0x10001, 0x9, 0x7, 0x0, 0x1f, 0x7fff, 0x80, 0x3c, 0x5, 0x4, 0xa76, 0x4, 0x1000, 0xcf5, 0x1, 0x9, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8f, 0x5, 0xc1ca, 0xffffb0fa, 0x1, 0x7, 0x8001, 0x6, 0x6, 0x800, 0x7, 0x3, 0x9, 0x5, 0x5, 0x0, 0x7f, 0xe, 0x5, 0x9, 0x80, 0x5, 0x7, 0x0, 0x1, 0x7fee, 0x2, 0x10001, 0x8, 0x7, 0x7, 0x90000000, 0x9, 0x10000, 0x8, 0x7ff, 0xffffff8e, 0xa, 0x5, 0x0, 0x100, 0x2, 0x8001, 0x9, 0xd, 0x3ff, 0x0, 0x80000001, 0x2, 0x1, 0x0, 0x1, 0xffffffff, 0x9, 0x6, 0x84, 0xa, 0x0, 0x7, 0xe, 0x4, 0x2, 0x0, 0x3, 0x9, 0x2, 0x800, 0x3, 0xfff, 0x1, 0xda3, 0x2, 0x7, 0x55f, 0x80000000, 0xffff, 0x9, 0x81, 0x1, 0x1, 0xb, 0x2, 0x8, 0x1000, 0x80000000, 0xfffffff8, 0xc, 0x0, 0xffffff01, 0x3, 0x4, 0x1, 0x5, 0x200, 0xa0d, 0x2, 0xfffff001, 0x1, 0x8001, 0x3, 0xfffeffff, 0x4, 0x0, 0x8001, 0x80, 0x80000001, 0x4, 0x7, 0x45, 0x0, 0x0, 0x0, 0x5626, 0x902, 0x8, 0x8, 0x1, 0x5f, 0xe, 0x81, 0x10, 0x3, 0xfd3, 0x3, 0x7, 0x4, 0x9, 0x9, 0x7, 0x6, 0x6, 0x3e4e, 0xf, 0x4, 0x3, 0x5, 0x21, 0x1, 0x3ff, 0x8, 0x6, 0x9, 0x2, 0x7, 0x80000000, 0xffff3775, 0x1, 0x2, 0x5, 0x7ff, 0x1, 0x3, 0x1000, 0xf, 0x0, 0x6, 0x0, 0x1, 0x1, 0x5b, 0xffffffff, 0x8, 0xa881, 0x4, 0x1, 0xfe, 0x2, 0x4, 0xc, 0xfffffff9, 0x3, 0xffff, 0x7, 0xffffffbd, 0xffff, 0x3, 0x7, 0x10000, 0xa, 0x81, 0x4, 0x100, 0x8, 0x3104, 0xd, 0x401, 0x67fb4ff2, 0x9, 0x7, 0xb, 0x8, 0xb61, 0x5, 0x8, 0x3, 0x1baa, 0x2, 0x6, 0x9, 0x2, 0x400, 0x1000, 0x1, 0x620, 0x9, 0x8, 0xff, 0x8, 0x0, 0x7, 0xb5, 0x9, 0x80000001, 0x101, 0x7, 0x1000, 0x1, 0x40, 0x224, 0xfca, 0xe, 0x9, 0x7, 0x8, 0xb, 0x80, 0x7, 0x2, 0x0, 0xa, 0x1, 0xfff, 0x5, 0x7fff, 0x4, 0x3, 0xfffffff8, 0x9, 0x7ff, 0x124, 0x7, 0x5, 0x1, 0x0, 0x4, 0x8, 0x401, 0x1, 0x9, 0x1, 0x7, 0x9, 0x9054, 0x2, 0x8, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x5, 0x2, 0x3, 0xe, 0x3, 0x8, 0x5, 0x1, 0x8001, 0x2, 0x9, 0x2, 0x7, 0xeefa, 0x0, 0x5, 0x0, 0x3, 0x10001, 0x0, 0x0, 0xffffffec, 0x9, 0x3ff, 0x4, 0xf1b4, 0x60, 0x0, 0x2, 0x991, 0xfffffc00, 0x5, 0xff9, 0x1, 0x27ec, 0x8cf, 0x80000000, 0x9, 0x34cc1300, 0x7, 0x8, 0x8, 0x6, 0x4, 0x91, 0x800, 0x1b83, 0x8, 0x6, 0x2, 0x1, 0xed25, 0xfffffffb, 0xb44, 0x721, 0x0, 0x8, 0x200, 0xfffffffb, 0xffffffff, 0x3, 0x9, 0xffff, 0x5, 0x9, 0x113e, 0x0, 0x3ff, 0x10001, 0x0, 0x7, 0x6, 0x62d, 0x2, 0x206, 0x0, 0xd, 0x3, 0x6, 0xffffff61, 0x82cf, 0x7, 0x3f80000, 0xfffffffe, 0x8, 0x1, 0x9, 0x6, 0xfff, 0xd, 0x80000000, 0x6, 0x2, 0x1, 0x5, 0x8, 0x8, 0x5, 0xd, 0xf, 0x6, 0xb, 0x227d, 0x4, 0xc1, 0x9268, 0xe, 0x8, 0x23, 0x1, 0xa, 0x1, 0xa6, 0xfffffb1d, 0x9, 0x0, 0x5, 0x2, 0x5b, 0xd, 0x1, 0x16efc85b, 0xc, 0x8, 0x11, 0x3, 0x3, 0x3, 0x5, 0x10000, 0x7, 0x7, 0x2, 0x6, 0x10000, 0x1, 0x9, 0x2, 0x5, 0x4, 0x43e, 0x27, 0x51c, 0x3, 0x1, 0x3, 0x1, 0x400, 0x20000, 0x3, 0x6, 0x3, 0x1, 0xd7400000, 0x1, 0x3c22, 0x80000000, 0x3, 0xa, 0x7d03, 0x3, 0x968, 0x6, 0x9, 0xb744, 0xff, 0xe, 0x7, 0xbd, 0xfffffffb, 0x6, 0x4, 0x8000, 0xffff, 0x1, 0x19d5, 0x54, 0x10, 0x7fff, 0x6, 0x4, 0x200, 0x80000000, 0xff, 0x8, 0x3, 0x9, 0x1, 0x6, 0x1, 0xeace, 0x3, 0x2a, 0x1, 0x2, 0x28, 0x7fffffff, 0x7, 0x5, 0x80000000, 0x100, 0x2, 0x3, 0x6d, 0x10, 0x7, 0x7, 0x80, 0xf, 0x7f, 0xa0000, 0x5c, 0x5, 0x401, 0x5, 0x8, 0x3, 0x1, 0x7f, 0xa3, 0x5f7, 0x5, 0x4, 0x8, 0x8, 0xd6, 0x13, 0x7, 0x5, 0x9, 0x94f, 0x1, 0x2, 0x3, 0x1000, 0x3, 0x8, 0xe, 0x0, 0x10001, 0x8, 0x1, 0x80, 0x5, 0x4, 0x1, 0x1, 0x7, 0x25, 0x1ff, 0x9, 0xda84, 0x6, 0x4, 0xfffffffa]}]}]}}]}, 0xc70}}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002000000008000300", @ANYRES32=r2, @ANYBLOB="24002d8005000100000000000500040000000000080002"], 0x40}}, 0x0) (fail_nth: 1) 0s ago: executing program 6 (id=3030): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) syz_emit_ethernet(0x5f, &(0x7f00000003c0)={@broadcast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x29, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local, [{0x2, 0x1, "042788ca7c5f"}, {0x2, 0x1, "562f7ff4783b8d"}]}}}}}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xdb42) sendfile(r0, r1, 0x0, 0x8000002b) kernel console output (not intermixed with test programs): upported [ 852.328727][T14389] kvm: pic: non byte read [ 852.382645][T14389] kvm: pic: non byte read [ 852.401525][T14385] kvm: pic: non byte read [ 852.420650][T14389] kvm: pic: non byte read [ 852.433742][T14385] kvm: pic: single mode not supported [ 852.433849][T14385] kvm: pic: non byte read [ 852.455252][T14389] kvm: pic: single mode not supported [ 852.461150][T14389] kvm: pic: non byte read [ 852.498598][T14385] kvm: pic: non byte read [ 852.520711][T14389] kvm: pic: non byte read [ 852.578346][T14385] kvm: pic: level sensitive irq not supported [ 852.584750][T14385] kvm: pic: single mode not supported [ 852.591379][T14385] kvm: pic: level sensitive irq not supported [ 853.290998][T14406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.261961][T14406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.648289][T14421] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2360'. [ 855.769779][ T29] audit: type=1326 audit(1731655168.153:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d60f7e719 code=0x7ffc0000 [ 856.824191][ T29] audit: type=1326 audit(1731655168.153:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d60f7e719 code=0x7ffc0000 [ 856.933575][ T29] audit: type=1326 audit(1731655168.153:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1d60f7e719 code=0x7ffc0000 [ 856.977330][ T29] audit: type=1326 audit(1731655168.153:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d60f7e719 code=0x7ffc0000 [ 856.999015][ C1] vkms_vblank_simulate: vblank timer overrun [ 857.029277][ T29] audit: type=1326 audit(1731655168.153:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d60f7e719 code=0x7ffc0000 [ 857.060288][ T29] audit: type=1326 audit(1731655168.153:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1d60f7e719 code=0x7ffc0000 [ 857.107106][ T29] audit: type=1326 audit(1731655168.153:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d60f7e719 code=0x7ffc0000 [ 857.900351][T14446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 857.995257][ T29] audit: type=1326 audit(1731655168.153:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d60f7e719 code=0x7ffc0000 [ 858.017030][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.165469][ T29] audit: type=1326 audit(1731655168.153:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f1d60f7e719 code=0x7ffc0000 [ 858.197595][ T29] audit: type=1326 audit(1731655168.153:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.2.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 859.819034][T14457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2369'. [ 863.223977][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 863.223997][ T29] audit: type=1326 audit(1731655175.603:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14479 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 863.337717][T14487] 9pnet_fd: Insufficient options for proto=fd [ 863.380236][ T29] audit: type=1326 audit(1731655175.603:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14479 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 863.726564][ T29] audit: type=1326 audit(1731655175.603:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14479 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc5e59805ac code=0x7ffc0000 [ 863.748141][ C1] vkms_vblank_simulate: vblank timer overrun [ 863.789776][ T29] audit: type=1326 audit(1731655175.603:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14479 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc5e59804e4 code=0x7ffc0000 [ 863.839684][ T29] audit: type=1326 audit(1731655175.603:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14479 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 863.879900][ T29] audit: type=1326 audit(1731655175.603:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14479 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 863.913302][ T29] audit: type=1326 audit(1731655175.603:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14479 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc5e5980637 code=0x7ffc0000 [ 863.935053][ T29] audit: type=1326 audit(1731655175.603:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14479 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc5e59805ac code=0x7ffc0000 [ 863.957199][ T29] audit: type=1326 audit(1731655175.603:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14479 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc5e59804e4 code=0x7ffc0000 [ 863.979132][ T29] audit: type=1326 audit(1731655175.603:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14479 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc5e59804e4 code=0x7ffc0000 [ 864.000672][ C1] vkms_vblank_simulate: vblank timer overrun [ 865.946402][T14515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 866.022432][T14516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 868.649822][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2387'. [ 868.658752][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2387'. [ 868.669063][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2387'. [ 870.445346][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.451758][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.736731][T14558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.377110][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2392'. [ 875.679774][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2401'. [ 875.688688][T14594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2401'. [ 875.697858][T14594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2401'. [ 878.895374][T14628] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2410'. [ 879.146915][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 879.146934][ T29] audit: type=1326 audit(1731655191.543:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14623 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 879.182242][ T29] audit: type=1326 audit(1731655191.543:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14623 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 879.223599][ T29] audit: type=1326 audit(1731655191.543:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14623 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 879.245201][ C1] vkms_vblank_simulate: vblank timer overrun [ 879.289781][ T29] audit: type=1326 audit(1731655191.543:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14623 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 879.289825][ T29] audit: type=1326 audit(1731655191.543:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14623 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 879.289858][ T29] audit: type=1326 audit(1731655191.543:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14623 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 879.289889][ T29] audit: type=1326 audit(1731655191.543:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14623 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 879.289920][ T29] audit: type=1326 audit(1731655191.543:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14623 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 879.289951][ T29] audit: type=1326 audit(1731655191.543:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14623 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 879.289982][ T29] audit: type=1326 audit(1731655191.543:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14623 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 879.731817][ C1] vkms_vblank_simulate: vblank timer overrun [ 879.778691][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.377782][T14663] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 884.573791][T14693] rtc_cmos 00:00: Alarms can be up to one day in the future [ 886.492359][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 886.492378][ T29] audit: type=1326 audit(1731655198.903:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14705 comm="syz.0.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 886.529926][ T29] audit: type=1326 audit(1731655198.903:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14705 comm="syz.0.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 886.582408][ T29] audit: type=1326 audit(1731655198.903:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14705 comm="syz.0.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 886.721206][ T29] audit: type=1326 audit(1731655198.903:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14705 comm="syz.0.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 886.745694][T14714] binder: BINDER_SET_CONTEXT_MGR already set [ 886.751816][T14714] binder: 14713:14714 ioctl 4018620d 20000040 returned -16 [ 886.769690][ T29] audit: type=1326 audit(1731655198.903:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14705 comm="syz.0.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 886.803798][ T29] audit: type=1326 audit(1731655198.933:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14705 comm="syz.0.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 886.825772][ T29] audit: type=1326 audit(1731655198.933:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14705 comm="syz.0.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 886.847726][ T29] audit: type=1326 audit(1731655198.933:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14705 comm="syz.0.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 886.870325][ T29] audit: type=1326 audit(1731655198.933:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14705 comm="syz.0.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 886.908020][ T29] audit: type=1326 audit(1731655198.933:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14705 comm="syz.0.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 891.937621][T14764] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 895.297756][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 895.297776][ T29] audit: type=1326 audit(1731655207.703:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14795 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d60f7e719 code=0x7ffc0000 [ 895.329067][ T29] audit: type=1326 audit(1731655207.743:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14795 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d60f756e7 code=0x7ffc0000 [ 895.359661][ T29] audit: type=1326 audit(1731655207.743:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14795 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d60f1a099 code=0x7ffc0000 [ 895.423558][ T29] audit: type=1326 audit(1731655207.743:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14795 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f1d60f7e719 code=0x7ffc0000 [ 895.519831][ T29] audit: type=1326 audit(1731655207.743:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14795 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d60f7e719 code=0x7ffc0000 [ 895.542545][ T29] audit: type=1326 audit(1731655207.743:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14795 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1d60f7e719 code=0x7ffc0000 [ 895.564109][ C1] vkms_vblank_simulate: vblank timer overrun [ 895.570888][ T29] audit: type=1326 audit(1731655207.743:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14795 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d60f7e719 code=0x7ffc0000 [ 895.594419][ T29] audit: type=1326 audit(1731655207.743:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14795 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f1d60f7e719 code=0x7ffc0000 [ 895.690489][ T29] audit: type=1326 audit(1731655207.763:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14795 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d60f756e7 code=0x7ffc0000 [ 895.720051][ T29] audit: type=1326 audit(1731655207.763:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14795 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d60f1a099 code=0x7ffc0000 [ 895.744985][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2454'. [ 897.499519][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2458'. [ 897.508549][T14822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2458'. [ 897.517633][T14822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2458'. [ 901.250560][T14857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 901.895402][T14856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 902.703707][T14865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 903.217745][T14877] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2469'. [ 907.644573][T14920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2484'. [ 911.572331][T14954] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 911.682983][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 911.683002][ T29] audit: type=1326 audit(1731655224.093:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14949 comm="syz.7.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5fb7e719 code=0x7ffc0000 [ 911.710839][ C1] vkms_vblank_simulate: vblank timer overrun [ 911.789032][ T29] audit: type=1326 audit(1731655224.093:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14949 comm="syz.7.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5fb7e719 code=0x7ffc0000 [ 911.810755][ C1] vkms_vblank_simulate: vblank timer overrun [ 911.888284][ T29] audit: type=1326 audit(1731655224.133:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14949 comm="syz.7.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7f5fb7e719 code=0x7ffc0000 [ 911.909943][ C1] vkms_vblank_simulate: vblank timer overrun [ 911.956664][ T29] audit: type=1326 audit(1731655224.133:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14949 comm="syz.7.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5fb7e719 code=0x7ffc0000 [ 911.978409][ C1] vkms_vblank_simulate: vblank timer overrun [ 912.015878][ T29] audit: type=1326 audit(1731655224.133:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14949 comm="syz.7.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5fb7e719 code=0x7ffc0000 [ 912.068674][ T29] audit: type=1326 audit(1731655224.143:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14949 comm="syz.7.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7f5fb7e719 code=0x7ffc0000 [ 912.118269][ T29] audit: type=1326 audit(1731655224.143:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14949 comm="syz.7.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5fb7e719 code=0x7ffc0000 [ 912.409875][ T29] audit: type=1326 audit(1731655224.143:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14949 comm="syz.7.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5fb7e719 code=0x7ffc0000 [ 912.487725][ T29] audit: type=1326 audit(1731655224.143:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14949 comm="syz.7.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f7f5fb7e719 code=0x7ffc0000 [ 912.549168][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2495'. [ 912.589678][ T29] audit: type=1326 audit(1731655224.143:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14949 comm="syz.7.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 915.283298][T14990] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2500'. [ 917.517647][T15015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2508'. [ 917.575293][T15008] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 918.424517][T15021] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2509'. [ 918.993413][T15027] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 920.223712][T15045] netlink: 'syz.7.2517': attribute type 29 has an invalid length. [ 920.253127][T15045] netlink: 'syz.7.2517': attribute type 29 has an invalid length. [ 921.122454][T15050] 9pnet_fd: Insufficient options for proto=fd [ 922.935573][ T5922] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 923.813121][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 923.832771][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.845842][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 923.863279][ T5922] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 923.892414][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.006197][ T5922] usb 1-1: config 0 descriptor?? [ 924.063117][ T5922] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 925.663981][T15102] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2534'. [ 925.848299][T15102] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2534'. [ 926.637732][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 926.637749][ T29] audit: type=1326 audit(1731655239.043:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15099 comm="syz.4.2533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18fe17e719 code=0x0 [ 926.666653][ T29] audit: type=1326 audit(1731655239.043:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15099 comm="syz.4.2533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18fe17e719 code=0x0 [ 927.041622][ T29] audit: type=1326 audit(1731655239.433:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15099 comm="syz.4.2533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18fe17e719 code=0x0 [ 927.062765][ C1] vkms_vblank_simulate: vblank timer overrun [ 927.120978][ T5882] usb 1-1: USB disconnect, device number 11 [ 927.135417][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2535'. [ 927.144471][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2535'. [ 927.153569][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2535'. [ 927.652281][T15119] xt_TCPMSS: Only works on TCP SYN packets [ 929.360412][T15131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2538'. [ 929.369328][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2538'. [ 929.378493][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2538'. [ 931.832274][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.839247][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.311791][ T5922] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 934.426739][T15160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2548'. [ 934.436023][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2548'. [ 934.445113][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2548'. [ 934.688638][T15164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2550'. [ 935.172125][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 936.398092][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.450040][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 936.480202][ T5922] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 936.499850][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.546922][ T5922] usb 5-1: config 0 descriptor?? [ 936.784386][ T5922] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 938.616108][ T5882] usb 5-1: USB disconnect, device number 13 [ 941.232605][T15216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2564'. [ 941.241621][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2564'. [ 941.250879][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2564'. [ 942.354372][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2567'. [ 942.363453][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2567'. [ 942.373182][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2567'. [ 944.052317][T15245] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2573'. [ 945.908904][T15266] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2578'. [ 946.037572][T15266] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2578'. [ 946.703413][T15271] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2580'. [ 949.413782][T15280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 949.691622][T15291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 951.041373][T15304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2589'. [ 954.992447][T15346] xt_TCPMSS: Only works on TCP SYN packets [ 957.460678][T15353] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 958.432890][T15365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2605'. [ 958.492020][T15369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 960.138692][T15369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.678716][T15451] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2627'. [ 974.009498][T15462] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 974.908579][T15465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2631'. [ 976.794984][ T29] audit: type=1326 audit(1731655289.183:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.6.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a18f7e719 code=0x7ffc0000 [ 976.817899][ T29] audit: type=1326 audit(1731655289.183:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.6.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8a18f7e719 code=0x7ffc0000 [ 976.839743][ T29] audit: type=1326 audit(1731655289.183:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.6.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a18f7e719 code=0x7ffc0000 [ 976.861940][ T29] audit: type=1326 audit(1731655289.183:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.6.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8a18f7e719 code=0x7ffc0000 [ 977.023865][ T29] audit: type=1326 audit(1731655289.413:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.6.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a18f756e7 code=0x7ffc0000 [ 977.046482][ T29] audit: type=1326 audit(1731655289.433:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.6.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a18f1a099 code=0x7ffc0000 [ 977.068706][ T29] audit: type=1326 audit(1731655289.433:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.6.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a18f756e7 code=0x7ffc0000 [ 977.090363][ C1] vkms_vblank_simulate: vblank timer overrun [ 977.096665][ T29] audit: type=1326 audit(1731655289.433:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.6.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a18f1a099 code=0x7ffc0000 [ 977.118773][ T29] audit: type=1326 audit(1731655289.433:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.6.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8a18f7e719 code=0x7ffc0000 [ 977.140562][ C1] vkms_vblank_simulate: vblank timer overrun [ 977.163464][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2634'. [ 977.174110][T15484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2634'. [ 977.186881][ T29] audit: type=1326 audit(1731655289.593:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.6.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a18f756e7 code=0x7ffc0000 [ 977.208511][ C1] vkms_vblank_simulate: vblank timer overrun [ 977.388591][T15492] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2637'. [ 978.715902][T15504] xt_TCPMSS: Only works on TCP SYN packets [ 982.075507][T15528] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 982.430990][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2648'. [ 982.440130][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2648'. [ 982.449798][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2648'. [ 990.577910][T15590] rtc_cmos 00:00: Alarms can be up to one day in the future [ 991.250008][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 991.250029][ T29] audit: type=1326 audit(1731655303.643:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15592 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 991.266386][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2658'. [ 991.278728][ T29] audit: type=1326 audit(1731655303.643:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15592 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 991.309128][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.323046][T15589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2658'. [ 991.336600][T15589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2658'. [ 991.347463][ T29] audit: type=1326 audit(1731655303.643:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15592 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 991.459734][ T29] audit: type=1326 audit(1731655303.643:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15592 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 991.551010][ T29] audit: type=1326 audit(1731655303.643:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15592 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 991.572713][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.615372][ T29] audit: type=1326 audit(1731655303.663:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15592 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5e59756e7 code=0x7ffc0000 [ 991.653299][ T29] audit: type=1326 audit(1731655303.663:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15592 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5e591a099 code=0x7ffc0000 [ 991.674903][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.759987][ T29] audit: type=1326 audit(1731655303.663:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15592 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fc5e597e719 code=0x7ffc0000 [ 991.799984][ T29] audit: type=1326 audit(1731655303.753:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15592 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5e59756e7 code=0x7ffc0000 [ 991.821562][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.903324][ T29] audit: type=1326 audit(1731655303.753:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15592 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5e591a099 code=0x7ffc0000 [ 991.944296][T15603] syz.0.2665 (15603): drop_caches: 2 [ 991.954119][T15605] syz.6.2666 (15605): drop_caches: 2 [ 993.966600][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.973129][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.201594][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2668'. [ 994.210804][T15627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2668'. [ 994.219968][T15627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2668'. [ 995.426343][T15636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 995.444670][T15636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 999.297295][T15655] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2679'. [ 999.718215][ T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1001.421633][T15651] overlayfs: overlapping lowerdir path [ 1001.680780][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 1001.719021][ T8] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.827376][T15667] syz.4.2681 (15667): drop_caches: 2 [ 1001.856429][ T8] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1001.891758][ T8] usb 8-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1001.905270][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.975870][ T8] usb 8-1: config 0 descriptor?? [ 1002.088028][ T8] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1002.333429][ T8] usb 8-1: USB disconnect, device number 2 [ 1003.625795][T15691] syz.4.2690 (15691): drop_caches: 2 [ 1007.044356][T15715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2692'. [ 1014.088773][T15776] binder: 15775:15776 ioctl c0306201 0 returned -14 [ 1015.537691][T15786] binder: 15782:15786 ioctl c0306201 0 returned -14 [ 1015.866704][T15783] xt_TCPMSS: Only works on TCP SYN packets [ 1016.099235][T12919] Bluetooth: hci0: command 0x0406 tx timeout [ 1018.466687][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1018.466706][ T29] audit: type=1326 audit(1731655329.843:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15795 comm="syz.4.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18fe17e719 code=0x7ffc0000 [ 1018.588634][ T29] audit: type=1326 audit(1731655329.843:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15795 comm="syz.4.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18fe17e719 code=0x7ffc0000 [ 1018.688949][ T29] audit: type=1326 audit(1731655330.873:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15795 comm="syz.4.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f18fe17e719 code=0x7ffc0000 [ 1018.716898][ T29] audit: type=1326 audit(1731655330.873:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15795 comm="syz.4.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18fe17e719 code=0x7ffc0000 [ 1018.738601][ C1] vkms_vblank_simulate: vblank timer overrun [ 1019.153487][ T29] audit: type=1326 audit(1731655330.873:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15795 comm="syz.4.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18fe17e719 code=0x7ffc0000 [ 1019.179810][ T29] audit: type=1326 audit(1731655331.023:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15795 comm="syz.4.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f18fe17e719 code=0x7ffc0000 [ 1019.431838][T15814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1019.531787][ T29] audit: type=1326 audit(1731655331.083:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15795 comm="syz.4.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18fe17e719 code=0x7ffc0000 [ 1019.553705][ C1] vkms_vblank_simulate: vblank timer overrun [ 1019.688909][T15812] overlayfs: overlapping lowerdir path [ 1019.694805][ T29] audit: type=1326 audit(1731655331.083:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15795 comm="syz.4.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18fe17e719 code=0x7ffc0000 [ 1020.220274][T15823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1020.297186][T15824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1024.075309][T15850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1024.451559][T15851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1024.472448][ T8] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1024.609992][ T5882] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1024.629957][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 1024.636667][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.659677][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1024.681184][ T8] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1024.691858][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.751149][ T8] usb 7-1: config 0 descriptor?? [ 1025.383900][ T8] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1025.395607][ T5882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.417109][ T5882] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1025.450227][ T5882] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1025.495499][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.535371][ T5882] usb 5-1: config 0 descriptor?? [ 1027.258732][T13877] usb 5-1: USB disconnect, device number 14 [ 1028.545424][T13877] usb 7-1: USB disconnect, device number 10 [ 1029.495444][T15903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1029.629334][T15902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1034.020257][T15948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2757'. [ 1034.147453][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2757'. [ 1034.165943][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2757'. [ 1038.388530][T15977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1039.255423][T15980] overlayfs: overlapping lowerdir path [ 1039.893578][T15986] overlayfs: overlapping lowerdir path [ 1040.151348][T15991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1040.183725][T15991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1042.192119][T15998] overlayfs: overlapping lowerdir path [ 1042.233369][T16002] xt_HMARK: spi-set and port-set can't be combined [ 1042.347718][T16004] syz.6.2773 (16004): drop_caches: 2 [ 1043.359252][T16025] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1044.355378][T16033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1044.430110][T16034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1045.510381][T16050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1045.583230][T16051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1046.878032][T16066] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2782'. [ 1046.887271][T16066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2782'. [ 1046.896361][T16066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2782'. [ 1047.116105][T16060] syz.2.2785 (16060): drop_caches: 2 [ 1049.089480][T16086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1051.718534][T16103] netlink: 4364 bytes leftover after parsing attributes in process `syz.0.2797'. [ 1051.961013][T16103] netlink: 4364 bytes leftover after parsing attributes in process `syz.0.2797'. [ 1052.652358][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2795'. [ 1054.738856][T16131] xt_TCPMSS: Only works on TCP SYN packets [ 1054.853044][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.205115][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.266649][T12919] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1057.278534][T12919] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1057.289284][T12919] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1057.297774][T12919] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1057.468426][T16150] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1057.501255][T16150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1057.509116][T16150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1057.540100][T16150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1057.548413][T16150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1057.559077][T16150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1057.567168][T16150] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1057.584521][T16150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1057.832401][T16148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2807'. [ 1057.841935][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2807'. [ 1057.851022][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2807'. [ 1058.165209][T10827] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.778491][T16152] Bluetooth: hci0: command tx timeout [ 1059.786032][T16152] Bluetooth: hci1: command tx timeout [ 1059.806774][T10827] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.019158][T10827] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.995756][T10827] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.027440][T16149] chnl_net:caif_netlink_parms(): no params data found [ 1061.308169][T16146] chnl_net:caif_netlink_parms(): no params data found [ 1061.388159][T16191] syz.0.2817 (16191): drop_caches: 2 [ 1061.449882][ T5879] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1061.495753][T16149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.504606][T16149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.519344][T16149] bridge_slave_0: entered allmulticast mode [ 1061.526955][T16149] bridge_slave_0: entered promiscuous mode [ 1061.558165][T16149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.569938][T16149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.577145][T16149] bridge_slave_1: entered allmulticast mode [ 1061.585824][T16149] bridge_slave_1: entered promiscuous mode [ 1061.615002][T10827] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.621552][ T5879] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.636864][ T5879] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1061.660063][ T5879] usb 7-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1061.669179][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.712202][ T5879] usb 7-1: config 0 descriptor?? [ 1061.746229][T10827] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.821681][T16146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.828816][T16146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.836883][T12919] Bluetooth: hci1: command tx timeout [ 1061.840310][T16152] Bluetooth: hci0: command tx timeout [ 1061.853132][T16146] bridge_slave_0: entered allmulticast mode [ 1061.870728][T16146] bridge_slave_0: entered promiscuous mode [ 1061.894923][T16146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.914403][T16146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.927114][T16146] bridge_slave_1: entered allmulticast mode [ 1061.942954][T16146] bridge_slave_1: entered promiscuous mode [ 1062.715698][T16149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.808941][T10827] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1062.905322][T16204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2819'. [ 1062.914569][T16204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2819'. [ 1062.923856][T16204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2819'. [ 1063.125568][T10827] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1063.159372][T16146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.206735][T16149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.231788][T16146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.778112][T16149] team0: Port device team_slave_0 added [ 1063.835078][T16149] team0: Port device team_slave_1 added [ 1063.904352][T16149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.911963][T16152] Bluetooth: hci0: command tx timeout [ 1063.919893][T16152] Bluetooth: hci1: command tx timeout [ 1063.949050][T16149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1063.989585][T16149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.030983][T16146] team0: Port device team_slave_0 added [ 1064.093598][T16149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.101828][T16149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.128154][T16149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.297676][ T9] usb 7-1: USB disconnect, device number 11 [ 1064.314458][T16146] team0: Port device team_slave_1 added [ 1065.077725][T16146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.103551][T16146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.151464][T16146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.164925][T10827] bridge_slave_1: left allmulticast mode [ 1065.171680][T10827] bridge_slave_1: left promiscuous mode [ 1065.177594][T10827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.229381][T10827] bridge_slave_0: left allmulticast mode [ 1065.249302][T10827] bridge_slave_0: left promiscuous mode [ 1065.370347][T10827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.408053][T10827] bridge_slave_1: left allmulticast mode [ 1065.428808][T10827] bridge_slave_1: left promiscuous mode [ 1065.447270][T10827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.490285][T10827] bridge_slave_0: left allmulticast mode [ 1065.495983][T10827] bridge_slave_0: left promiscuous mode [ 1065.502794][T10827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.194967][T16152] Bluetooth: hci1: command tx timeout [ 1066.207059][T16152] Bluetooth: hci0: command tx timeout [ 1066.365768][T16242] netlink: 4988 bytes leftover after parsing attributes in process `syz.2.2828'. [ 1066.977632][T16248] kvm: kvm [16247]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6d00000800 [ 1066.990402][T16248] kvm: kvm [16247]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x14500000800 [ 1067.000310][T16248] kvm: kvm [16247]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x14600000000 [ 1067.011515][T16248] kvm: kvm [16247]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1cd00000800 [ 1067.024577][T16248] kvm: kvm [16247]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x2e500000800 [ 1067.037969][T16248] kvm: kvm [16247]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x45e00000000 [ 1067.069241][T16248] kvm: kvm [16247]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x6ce00000000 [ 1068.898607][T10827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.911990][T10827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.924179][T10827] bond0 (unregistering): Released all slaves [ 1069.013780][T16258] syz.2.2833 (16258): drop_caches: 2 [ 1069.129146][T10827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1069.157299][T10827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1069.167317][T10827] bond0 (unregistering): Released all slaves [ 1069.188325][T16149] hsr_slave_0: entered promiscuous mode [ 1069.195639][T16149] hsr_slave_1: entered promiscuous mode [ 1069.202296][T16149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1069.210008][T16149] Cannot create hsr debugfs directory [ 1069.230281][T16146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.237308][T16146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1069.277551][T16146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.377423][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2830'. [ 1069.404532][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2830'. [ 1069.425437][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2830'. [ 1069.559086][T10827] tipc: Left network mode [ 1069.631375][T16146] hsr_slave_0: entered promiscuous mode [ 1069.650030][T16146] hsr_slave_1: entered promiscuous mode [ 1069.661768][T16146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1069.671709][T16146] Cannot create hsr debugfs directory [ 1071.057289][T10827] hsr_slave_0: left promiscuous mode [ 1071.076927][T10827] hsr_slave_1: left promiscuous mode [ 1071.116067][T10827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1071.134870][T10827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1071.154796][T10827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1071.833298][T10827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1071.914552][T10827] hsr_slave_0: left promiscuous mode [ 1071.928588][T10827] hsr_slave_1: left promiscuous mode [ 1071.939131][T10827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1071.980067][T10827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1072.019558][T10827] veth1_macvtap: left promiscuous mode [ 1072.025417][T10827] veth0_macvtap: left promiscuous mode [ 1072.031328][T10827] veth1_vlan: left promiscuous mode [ 1072.036834][T10827] veth0_vlan: left promiscuous mode [ 1073.240550][T10827] team0 (unregistering): Port device team_slave_1 removed [ 1073.301673][T10827] team0 (unregistering): Port device team_slave_0 removed [ 1075.148219][T10827] team0 (unregistering): Port device team_slave_1 removed [ 1075.195266][T10827] team0 (unregistering): Port device team_slave_0 removed [ 1075.686484][T16149] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1075.711065][T16149] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1075.754441][T16149] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1075.806665][T16311] syz.2.2849 (16311): drop_caches: 2 [ 1075.826614][T16149] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1075.891095][T16313] syz.6.2850 (16313): drop_caches: 2 [ 1076.057845][T16149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.096299][T16149] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.127263][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.134490][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.206253][ T2935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.213439][ T2935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.222160][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1076.286865][T16146] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1076.316606][T16146] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1076.333081][T16146] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1076.352192][T16146] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1076.381873][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.406929][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1076.428312][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1076.450524][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.479234][ T9] usb 3-1: config 0 descriptor?? [ 1076.553957][T16146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.592060][T16146] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.608068][T16149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1076.618781][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.625900][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.649972][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.657173][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.957762][T16149] veth0_vlan: entered promiscuous mode [ 1078.023354][T16149] veth1_vlan: entered promiscuous mode [ 1078.095140][T16146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1078.196601][T16345] xt_TCPMSS: Only works on TCP SYN packets [ 1078.374156][T16149] veth0_macvtap: entered promiscuous mode [ 1078.610783][T16149] veth1_macvtap: entered promiscuous mode [ 1078.843577][T16149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.888590][T16149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.907672][T16149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.948754][T16149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.960500][T16149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.066311][ T8] usb 3-1: USB disconnect, device number 19 [ 1079.072493][T16149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1079.102130][T16149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.132758][T16149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1079.168092][T16149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.218562][T16149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.242646][T16149] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.260371][T16149] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.269166][T16149] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.278764][T16357] netlink: 4968 bytes leftover after parsing attributes in process `syz.2.2857'. [ 1079.298540][T16149] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.949213][T16146] veth0_vlan: entered promiscuous mode [ 1081.284578][T16146] veth1_vlan: entered promiscuous mode [ 1081.334448][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.343177][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.211314][T16146] veth0_macvtap: entered promiscuous mode [ 1082.222303][T16146] veth1_macvtap: entered promiscuous mode [ 1082.237951][T16146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.248602][T16146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.258534][T16146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.269109][T16146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.279017][T16146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.289556][T16146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.301437][T16146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.311642][T16146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.322220][T16146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.332102][T16146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.342647][T16146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.352585][T16146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.363323][T16146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.374465][T16146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.386140][T16146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.394996][T16146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.404235][T16146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.413296][T16146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.496878][T10817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.506257][T10817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.521914][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.531107][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.591019][T10817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.599103][T10817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.811544][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1083.599943][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1083.624868][ T9] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1083.649707][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.668982][ T9] usb 1-1: config 0 has no interface number 0 [ 1083.675332][ T9] usb 1-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1083.688482][ T9] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1083.793596][ T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1083.800229][T16401] sctp: [Deprecated]: syz.8.2868 (pid 16401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1083.800229][T16401] Use struct sctp_sack_info instead [ 1083.803003][ T9] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1083.827259][ T9] usb 1-1: Manufacturer: syz [ 1083.883275][ T9] usb 1-1: config 0 descriptor?? [ 1084.036971][T16404] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2869'. [ 1084.047640][T16404] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 1084.180785][ T9] usb 1-1: Can not set alternate setting to 1, error: -71 [ 1084.203674][ T5881] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1084.212374][ T9] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1084.400810][ T5881] usb 9-1: Using ep0 maxpacket: 8 [ 1084.490160][ T9] usb 1-1: USB disconnect, device number 12 [ 1084.498550][ T5881] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.528728][ T5881] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.558580][ T5881] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1084.600702][ T5881] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1084.624768][ T5881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1084.639729][ T5881] usb 9-1: SerialNumber: syz [ 1086.150126][ T5881] usb 9-1: bad CDC descriptors [ 1086.155797][ T5881] usbtest 9-1:1.0: Linux gadget zero [ 1086.162234][ T5881] usbtest 9-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 1086.174293][ T5881] usb 9-1: USB disconnect, device number 2 [ 1088.162816][T16449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2880'. [ 1088.171881][T16449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2880'. [ 1088.181703][T16449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2880'. [ 1088.991582][T16152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1089.281096][T16152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1089.291133][T16152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1089.299126][T16152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1089.461958][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2884'. [ 1089.471853][T16459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2884'. [ 1090.021192][T16152] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1090.031240][T16152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1090.666618][T16468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1090.801998][T16472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1091.266694][ T5838] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1091.440194][ T5838] usb 5-1: Using ep0 maxpacket: 8 [ 1091.451249][ T5838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.468038][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1091.586160][T16454] syz.6.2883 (16454): drop_caches: 2 [ 1091.635806][ T5838] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1091.656272][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.667370][T16450] chnl_net:caif_netlink_parms(): no params data found [ 1091.687788][ T5838] usb 5-1: config 0 descriptor?? [ 1091.706410][ T5838] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1091.992355][T16450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.000056][T16450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.010139][T16450] bridge_slave_0: entered allmulticast mode [ 1092.017179][T16450] bridge_slave_0: entered promiscuous mode [ 1092.035184][T16450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.043086][T16450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.051946][T16450] bridge_slave_1: entered allmulticast mode [ 1092.066629][T16450] bridge_slave_1: entered promiscuous mode [ 1092.271938][T16152] Bluetooth: hci2: command tx timeout [ 1093.181353][T16450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.216174][T16450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.857265][T16500] sctp: [Deprecated]: syz.0.2892 (pid 16500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1093.857265][T16500] Use struct sctp_sack_info instead [ 1093.904918][T16450] team0: Port device team_slave_0 added [ 1093.913545][T16450] team0: Port device team_slave_1 added [ 1093.944769][T16450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.951994][T16450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.980413][T16450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.052288][T16450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.069440][T16450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.139792][T16450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.169804][ T5881] usb 5-1: USB disconnect, device number 15 [ 1094.253912][ T5838] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1094.318183][T16152] Bluetooth: hci2: command tx timeout [ 1094.393441][T16450] hsr_slave_0: entered promiscuous mode [ 1095.323753][T16450] hsr_slave_1: entered promiscuous mode [ 1095.743931][ T5838] usb 1-1: Using ep0 maxpacket: 8 [ 1095.781094][ T5838] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.791429][ T5838] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.802891][ T5838] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1095.841327][ T5838] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1095.879885][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1095.887930][ T5838] usb 1-1: SerialNumber: syz [ 1096.487202][T16152] Bluetooth: hci2: command tx timeout [ 1096.914100][T16450] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1096.973652][T16450] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.540159][T16450] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1097.610940][T16450] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.680909][T16450] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1097.691932][T16450] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.762684][T16450] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1097.783568][T16450] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.953941][T16450] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1097.986953][T16450] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1098.010234][T16450] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1098.068679][T16450] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1098.321733][T16450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.387576][T16450] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.401037][ T5838] usb 1-1: bad CDC descriptors [ 1098.406683][ T5838] usbtest 1-1:1.0: Linux gadget zero [ 1098.430521][ T5838] usbtest 1-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 1098.477448][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.484671][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.493608][ T5838] usb 1-1: USB disconnect, device number 13 [ 1098.546126][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.553329][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.557321][T16152] Bluetooth: hci2: command tx timeout [ 1099.282924][T16450] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1099.293409][T16450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1099.478100][T16450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.525840][T16450] veth0_vlan: entered promiscuous mode [ 1099.540326][T16450] veth1_vlan: entered promiscuous mode [ 1099.563145][T16450] veth0_macvtap: entered promiscuous mode [ 1099.573078][T16450] veth1_macvtap: entered promiscuous mode [ 1099.588111][T16450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.598976][T16450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.610147][T16450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.620693][T16450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.631011][T16450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.641830][T16450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.651875][T16450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.662402][T16450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.673811][T16450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.684509][T16450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.695115][T16450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.705616][T16450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.716702][T16450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.726598][T16450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.737171][T16450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.747291][T16450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.757921][T16450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.769103][T16450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.811898][T16450] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.821095][T16450] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.847178][T16450] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.869735][T16450] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.217516][T10823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.251595][T10823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.295957][T10817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.304242][T10817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.001400][T16589] sctp: [Deprecated]: syz.6.2915 (pid 16589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1101.001400][T16589] Use struct sctp_sack_info instead [ 1101.430187][ T5879] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1101.609746][ T5879] usb 7-1: Using ep0 maxpacket: 8 [ 1101.637239][ T5879] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.686612][ T5879] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.730403][ T5879] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1101.775147][ T5879] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1101.801979][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1101.824177][ T5879] usb 7-1: SerialNumber: syz [ 1103.169755][T13950] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1103.382612][T16622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.433797][T16622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.086281][T13950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.138794][T13950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.159783][T13950] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1104.173001][T13950] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1104.182275][T13950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.220704][T13950] usb 1-1: config 0 descriptor?? [ 1104.806456][T13950] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1104.814585][T13950] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1104.823148][T13950] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 1104.860117][T13950] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1104.940487][T16610] openvswitch: netlink: Actions may not be safe on all matching packets [ 1104.980641][ T5879] usb 7-1: bad CDC descriptors [ 1104.986271][ T5879] usbtest 7-1:1.0: Linux gadget zero [ 1105.002521][ T9] usb 1-1: USB disconnect, device number 14 [ 1105.009538][ T5879] usbtest 7-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 1105.033919][ T5879] usb 7-1: USB disconnect, device number 12 [ 1105.059851][ T5881] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1105.219771][ T5881] usb 9-1: Using ep0 maxpacket: 8 [ 1105.228074][ T5881] usb 9-1: config 0 has no interfaces? [ 1105.241437][ T5881] usb 9-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1105.252354][ T5881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.262478][ T5881] usb 9-1: config 0 descriptor?? [ 1105.790094][T13950] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1106.003950][T13950] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.165790][T13950] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1106.180053][T13950] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1106.196571][T13950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1106.347333][T13950] usb 7-1: SerialNumber: syz [ 1107.277880][T16654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2928'. [ 1107.325655][T13950] usb 7-1: 0:2 : does not exist [ 1107.374823][T13950] usb 7-1: unit 5: unexpected type 0x0e [ 1107.425329][T13950] usb 7-1: USB disconnect, device number 13 [ 1107.965577][ T9] usb 9-1: USB disconnect, device number 3 [ 1108.870332][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2934'. [ 1108.910143][T16671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2934'. [ 1108.930526][T16674] netlink: 'syz.8.2935': attribute type 5 has an invalid length. [ 1108.950177][T16671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2934'. [ 1108.968859][T16674] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2935'. [ 1110.410119][T16687] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2939'. [ 1110.449483][T16687] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2939'. [ 1110.459197][T16687] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2939'. [ 1110.700137][T13950] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1110.899738][T13950] usb 3-1: Using ep0 maxpacket: 8 [ 1110.960201][T13950] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1110.991683][T16695] openvswitch: netlink: Actions may not be safe on all matching packets [ 1111.026504][T13950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.069894][T13950] usb 3-1: config 0 descriptor?? [ 1111.222711][T16706] FAULT_INJECTION: forcing a failure. [ 1111.222711][T16706] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1111.249722][T16706] CPU: 0 UID: 0 PID: 16706 Comm: syz.6.2946 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1111.260532][T16706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1111.270629][T16706] Call Trace: [ 1111.273937][T16706] [ 1111.276893][T16706] dump_stack_lvl+0x241/0x360 [ 1111.281619][T16706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1111.286845][T16706] ? __pfx__printk+0x10/0x10 [ 1111.291459][T16706] ? __pfx_lock_release+0x10/0x10 [ 1111.296518][T16706] should_fail_ex+0x3b0/0x4e0 [ 1111.301216][T16706] _copy_from_user+0x2f/0xc0 [ 1111.305822][T16706] copy_msghdr_from_user+0xae/0x680 [ 1111.311044][T16706] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1111.316883][T16706] __sys_sendmmsg+0x36d/0x730 [ 1111.321589][T16706] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1111.326834][T16706] ? __pfx_lock_release+0x10/0x10 [ 1111.331891][T16706] ? kstrtouint_from_user+0x128/0x190 [ 1111.337311][T16706] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1111.343233][T16706] ? ksys_write+0x229/0x2b0 [ 1111.347768][T16706] ? __pfx_lock_release+0x10/0x10 [ 1111.352830][T16706] ? vfs_write+0x730/0xd30 [ 1111.357286][T16706] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1111.362950][T16706] ? __fget_files+0x3f3/0x470 [ 1111.367664][T16706] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1111.373677][T16706] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1111.380040][T16706] ? do_syscall_64+0x100/0x230 [ 1111.384835][T16706] __x64_sys_sendmmsg+0xa0/0xb0 [ 1111.389732][T16706] do_syscall_64+0xf3/0x230 [ 1111.394265][T16706] ? clear_bhb_loop+0x35/0x90 [ 1111.398970][T16706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.404885][T16706] RIP: 0033:0x7f8a18f7e719 [ 1111.409331][T16706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1111.428957][T16706] RSP: 002b:00007f8a19db3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1111.437390][T16706] RAX: ffffffffffffffda RBX: 00007f8a19135f80 RCX: 00007f8a18f7e719 [ 1111.445370][T16706] RDX: 0000000000000001 RSI: 0000000020000c00 RDI: 0000000000000003 [ 1111.453350][T16706] RBP: 00007f8a19db3090 R08: 0000000000000000 R09: 0000000000000000 [ 1111.461334][T16706] R10: 00000000240080e4 R11: 0000000000000246 R12: 0000000000000001 [ 1111.469400][T16706] R13: 0000000000000000 R14: 00007f8a19135f80 R15: 00007ffcf75d5548 [ 1111.477463][T16706] [ 1111.941138][T13950] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1111.963764][T13950] asix 3-1:0.0: probe with driver asix failed with error -61 [ 1112.222139][T16713] ip6t_srh: unknown srh match flags 4000 [ 1112.710045][T13950] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1112.919815][T13950] usb 5-1: Using ep0 maxpacket: 8 [ 1112.964645][T13950] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.989721][T13950] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.000772][T13950] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1113.060208][T13950] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1113.069351][T13950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1113.077472][T13950] usb 5-1: SerialNumber: syz [ 1113.879049][T16745] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2955'. [ 1113.890151][T16745] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 1114.536254][T16748] FAULT_INJECTION: forcing a failure. [ 1114.536254][T16748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1114.593571][T16748] CPU: 0 UID: 0 PID: 16748 Comm: syz.8.2956 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1114.604397][T16748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1114.614511][T16748] Call Trace: [ 1114.617814][T16748] [ 1114.620766][T16748] dump_stack_lvl+0x241/0x360 [ 1114.625480][T16748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1114.630704][T16748] ? __pfx__printk+0x10/0x10 [ 1114.635324][T16748] ? snprintf+0xda/0x120 [ 1114.639773][T16748] should_fail_ex+0x3b0/0x4e0 [ 1114.644474][T16748] _copy_to_user+0x31/0xb0 [ 1114.648924][T16748] simple_read_from_buffer+0xca/0x150 [ 1114.654332][T16748] proc_fail_nth_read+0x1e9/0x250 [ 1114.659395][T16748] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1114.664968][T16748] ? rw_verify_area+0x55e/0x6f0 [ 1114.669963][T16748] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1114.675519][T16748] vfs_read+0x1fc/0xb70 [ 1114.679680][T16748] ? fdget_pos+0x24e/0x320 [ 1114.684191][T16748] ? __pfx_vfs_read+0x10/0x10 [ 1114.688917][T16748] ? __fget_files+0x3f3/0x470 [ 1114.693604][T16748] ? fdget_pos+0x24e/0x320 [ 1114.698023][T16748] ksys_read+0x183/0x2b0 [ 1114.702268][T16748] ? __pfx_ksys_read+0x10/0x10 [ 1114.707035][T16748] ? do_syscall_64+0x100/0x230 [ 1114.711806][T16748] ? do_syscall_64+0xb6/0x230 [ 1114.716489][T16748] do_syscall_64+0xf3/0x230 [ 1114.721009][T16748] ? clear_bhb_loop+0x35/0x90 [ 1114.725690][T16748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.731588][T16748] RIP: 0033:0x7ff51697d15c [ 1114.736011][T16748] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1114.755615][T16748] RSP: 002b:00007ff5177c3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1114.764218][T16748] RAX: ffffffffffffffda RBX: 00007ff516b35f80 RCX: 00007ff51697d15c [ 1114.772194][T16748] RDX: 000000000000000f RSI: 00007ff5177c30a0 RDI: 0000000000000004 [ 1114.780169][T16748] RBP: 00007ff5177c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.788224][T16748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.796194][T16748] R13: 0000000000000000 R14: 00007ff516b35f80 R15: 00007fff853681b8 [ 1114.804180][T16748] [ 1115.018360][ T5879] usb 3-1: USB disconnect, device number 20 [ 1116.232765][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.239203][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.688165][T13950] usb 5-1: bad CDC descriptors [ 1116.694107][T13950] usbtest 5-1:1.0: Linux gadget zero [ 1116.699444][T13950] usbtest 5-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 1116.793392][T16767] FAULT_INJECTION: forcing a failure. [ 1116.793392][T16767] name failslab, interval 1, probability 0, space 0, times 1 [ 1116.806753][T16767] CPU: 1 UID: 0 PID: 16767 Comm: syz.2.2961 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1116.817546][T16767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1116.827636][T16767] Call Trace: [ 1116.830934][T16767] [ 1116.833884][T16767] dump_stack_lvl+0x241/0x360 [ 1116.838594][T16767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1116.843820][T16767] ? __pfx__printk+0x10/0x10 [ 1116.848444][T16767] ? fs_reclaim_acquire+0x93/0x130 [ 1116.853585][T16767] ? __pfx___might_resched+0x10/0x10 [ 1116.858900][T16767] should_fail_ex+0x3b0/0x4e0 [ 1116.863603][T16767] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1116.869344][T16767] should_failslab+0xac/0x100 [ 1116.874036][T16767] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1116.879784][T16767] __kmalloc_noprof+0xd8/0x400 [ 1116.884576][T16767] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1116.890156][T16767] tomoyo_path_number_perm+0x23a/0x880 [ 1116.895644][T16767] ? tomoyo_path_number_perm+0x208/0x880 [ 1116.901306][T16767] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1116.907368][T16767] ? __fget_files+0x29/0x470 [ 1116.911996][T16767] ? __fget_files+0x3f3/0x470 [ 1116.916698][T16767] security_file_ioctl+0xc6/0x2a0 [ 1116.921733][T16767] __se_sys_ioctl+0x47/0x170 [ 1116.926331][T16767] do_syscall_64+0xf3/0x230 [ 1116.930835][T16767] ? clear_bhb_loop+0x35/0x90 [ 1116.935513][T16767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.941404][T16767] RIP: 0033:0x7fbffff7e719 [ 1116.945828][T16767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1116.965430][T16767] RSP: 002b:00007fc000e2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1116.973841][T16767] RAX: ffffffffffffffda RBX: 00007fc000135f80 RCX: 00007fbffff7e719 [ 1116.981813][T16767] RDX: 0000000020000280 RSI: 000000000000891c RDI: 0000000000000003 [ 1116.989864][T16767] RBP: 00007fc000e2c090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.997826][T16767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.005788][T16767] R13: 0000000000000000 R14: 00007fc000135f80 R15: 00007ffc6594ab88 [ 1117.013774][T16767] [ 1117.016859][ C1] vkms_vblank_simulate: vblank timer overrun [ 1117.023602][T13950] usb 5-1: USB disconnect, device number 16 [ 1117.112199][T16767] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1117.159285][T16775] FAULT_INJECTION: forcing a failure. [ 1117.159285][T16775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1117.213032][T16775] CPU: 0 UID: 0 PID: 16775 Comm: syz.4.2965 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1117.223820][T16775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1117.233879][T16775] Call Trace: [ 1117.237147][T16775] [ 1117.240068][T16775] dump_stack_lvl+0x241/0x360 [ 1117.244738][T16775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1117.249937][T16775] ? __pfx__printk+0x10/0x10 [ 1117.254516][T16775] ? __pfx_lock_release+0x10/0x10 [ 1117.259528][T16775] should_fail_ex+0x3b0/0x4e0 [ 1117.264189][T16775] _copy_from_user+0x2f/0xc0 [ 1117.268763][T16775] rose_setsockopt+0x17d/0x6a0 [ 1117.273517][T16775] ? __pfx_rose_setsockopt+0x10/0x10 [ 1117.278812][T16775] ? do_sys_openat2+0x17a/0x1d0 [ 1117.283650][T16775] ? __pfx_rose_setsockopt+0x10/0x10 [ 1117.288921][T16775] do_sock_setsockopt+0x3af/0x720 [ 1117.293938][T16775] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1117.299476][T16775] __sys_setsockopt+0x1a2/0x250 [ 1117.304316][T16775] __x64_sys_setsockopt+0xb5/0xd0 [ 1117.309325][T16775] do_syscall_64+0xf3/0x230 [ 1117.313816][T16775] ? clear_bhb_loop+0x35/0x90 [ 1117.318485][T16775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.324368][T16775] RIP: 0033:0x7fbd8197e719 [ 1117.328768][T16775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1117.348390][T16775] RSP: 002b:00007fbd8283b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1117.356803][T16775] RAX: ffffffffffffffda RBX: 00007fbd81b35f80 RCX: 00007fbd8197e719 [ 1117.364769][T16775] RDX: 0000000000000002 RSI: 0000000000000104 RDI: 0000000000000004 [ 1117.372732][T16775] RBP: 00007fbd8283b090 R08: 0000000000000004 R09: 0000000000000000 [ 1117.380699][T16775] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 1117.388659][T16775] R13: 0000000000000000 R14: 00007fbd81b35f80 R15: 00007ffcf893bc98 [ 1117.396647][T16775] [ 1117.750798][T16780] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2967'. [ 1117.760197][T16780] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2967'. [ 1118.008760][T16785] FAULT_INJECTION: forcing a failure. [ 1118.008760][T16785] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.321912][T16785] CPU: 0 UID: 0 PID: 16785 Comm: syz.2.2968 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1118.332742][T16785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1118.342831][T16785] Call Trace: [ 1118.346127][T16785] [ 1118.349073][T16785] dump_stack_lvl+0x241/0x360 [ 1118.353781][T16785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1118.359008][T16785] ? __pfx__printk+0x10/0x10 [ 1118.363694][T16785] ? fs_reclaim_acquire+0x93/0x130 [ 1118.368851][T16785] ? __pfx___might_resched+0x10/0x10 [ 1118.374173][T16785] should_fail_ex+0x3b0/0x4e0 [ 1118.378875][T16785] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1118.384623][T16785] should_failslab+0xac/0x100 [ 1118.389320][T16785] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1118.395072][T16785] __kmalloc_noprof+0xd8/0x400 [ 1118.399951][T16785] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1118.405537][T16785] tomoyo_path_number_perm+0x23a/0x880 [ 1118.411022][T16785] ? tomoyo_path_number_perm+0x208/0x880 [ 1118.416683][T16785] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1118.422691][T16785] ? __fget_files+0x29/0x470 [ 1118.427291][T16785] ? __fget_files+0x3f3/0x470 [ 1118.431976][T16785] security_file_ioctl+0xc6/0x2a0 [ 1118.437005][T16785] __se_sys_ioctl+0x47/0x170 [ 1118.441597][T16785] do_syscall_64+0xf3/0x230 [ 1118.446108][T16785] ? clear_bhb_loop+0x35/0x90 [ 1118.450797][T16785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.456695][T16785] RIP: 0033:0x7fbffff7e719 [ 1118.461134][T16785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1118.480750][T16785] RSP: 002b:00007fc000e2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1118.489167][T16785] RAX: ffffffffffffffda RBX: 00007fc000135f80 RCX: 00007fbffff7e719 [ 1118.497153][T16785] RDX: 0000000020000340 RSI: 0000000000008b1b RDI: 0000000000000003 [ 1118.505121][T16785] RBP: 00007fc000e2c090 R08: 0000000000000000 R09: 0000000000000000 [ 1118.513087][T16785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1118.521057][T16785] R13: 0000000000000000 R14: 00007fc000135f80 R15: 00007ffc6594ab88 [ 1118.529034][T16785] [ 1118.816581][T16789] 9pnet_fd: Insufficient options for proto=fd [ 1118.831039][T16789] warning: `syz.8.2970' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1119.196406][T16785] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1121.370473][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1121.490579][T16820] tmpfs: User quota inode hardlimit too large. [ 1121.522455][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.538402][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.584198][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1121.624129][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.654959][ T9] usb 3-1: config 0 descriptor?? [ 1122.044157][T16829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2982'. [ 1122.053224][T16829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2982'. [ 1122.143933][ T9] magicmouse 0003:05AC:0269.0007: item fetching failed at offset 6/7 [ 1122.175902][ T9] magicmouse 0003:05AC:0269.0007: magicmouse hid parse failed [ 1122.201928][ T9] magicmouse 0003:05AC:0269.0007: probe with driver magicmouse failed with error -22 [ 1122.345679][ T9] usb 3-1: USB disconnect, device number 21 [ 1122.579107][T12919] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1122.601183][T12919] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1122.618759][T12919] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1122.626831][T12919] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1122.636213][T16645] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1122.637464][T12919] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1122.653475][T12919] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1122.679000][T16835] FAULT_INJECTION: forcing a failure. [ 1122.679000][T16835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1122.692636][T16835] CPU: 0 UID: 0 PID: 16835 Comm: syz.4.2984 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1122.703421][T16835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1122.713675][T16835] Call Trace: [ 1122.716961][T16835] [ 1122.719899][T16835] dump_stack_lvl+0x241/0x360 [ 1122.724602][T16835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1122.729813][T16835] ? __pfx__printk+0x10/0x10 [ 1122.734417][T16835] ? __pfx_lock_release+0x10/0x10 [ 1122.739469][T16835] should_fail_ex+0x3b0/0x4e0 [ 1122.744164][T16835] _copy_from_user+0x2f/0xc0 [ 1122.748768][T16835] copy_msghdr_from_user+0xae/0x680 [ 1122.753989][T16835] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1122.759995][T16835] __sys_sendmsg+0x22d/0x380 [ 1122.764604][T16835] ? __pfx___sys_sendmsg+0x10/0x10 [ 1122.769744][T16835] ? __pfx_vfs_write+0x10/0x10 [ 1122.774981][T16835] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1122.781325][T16835] ? do_syscall_64+0x100/0x230 [ 1122.786110][T16835] ? do_syscall_64+0xb6/0x230 [ 1122.790806][T16835] do_syscall_64+0xf3/0x230 [ 1122.795323][T16835] ? clear_bhb_loop+0x35/0x90 [ 1122.800022][T16835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.805939][T16835] RIP: 0033:0x7fbd8197e719 [ 1122.810365][T16835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1122.829976][T16835] RSP: 002b:00007fbd8283b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1122.838391][T16835] RAX: ffffffffffffffda RBX: 00007fbd81b35f80 RCX: 00007fbd8197e719 [ 1122.846368][T16835] RDX: 0000000004004080 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1122.854359][T16835] RBP: 00007fbd8283b090 R08: 0000000000000000 R09: 0000000000000000 [ 1122.862421][T16835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1122.870387][T16835] R13: 0000000000000000 R14: 00007fbd81b35f80 R15: 00007ffcf893bc98 [ 1122.878366][T16835] [ 1123.040763][T16645] usb 9-1: device descriptor read/64, error -71 [ 1123.248836][T16832] chnl_net:caif_netlink_parms(): no params data found [ 1123.375325][T16645] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1123.383323][ T5879] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1123.590200][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 1123.628212][T16645] usb 9-1: device descriptor read/64, error -71 [ 1123.648500][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.753650][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1123.823123][T16645] usb usb9-port1: attempt power cycle [ 1123.877662][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1123.896032][ T5879] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1123.914919][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1123.942492][ T5879] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1123.971841][T16832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.979873][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.987873][T16832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.988079][T16832] bridge_slave_0: entered allmulticast mode [ 1124.002507][ T5879] usb 5-1: config 0 descriptor?? [ 1124.009352][ T5879] hso 5-1:0.0: Can't find BULK OUT endpoint [ 1124.017697][T16832] bridge_slave_0: entered promiscuous mode [ 1124.037444][T16832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.053628][T16832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.075842][T16832] bridge_slave_1: entered allmulticast mode [ 1124.161839][T16832] bridge_slave_1: entered promiscuous mode [ 1124.220215][T16645] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1124.264122][T16645] usb 9-1: device descriptor read/8, error -71 [ 1124.531734][T16645] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1124.635491][T16832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.670616][T16645] usb 9-1: device descriptor read/8, error -71 [ 1124.689223][T16832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.757980][ T9] usb 5-1: USB disconnect, device number 17 [ 1124.779537][T16832] team0: Port device team_slave_0 added [ 1124.779944][T16645] usb usb9-port1: unable to enumerate USB device [ 1124.814024][T16832] team0: Port device team_slave_1 added [ 1124.829343][T10817] bridge_slave_1: left allmulticast mode [ 1124.842665][T10817] bridge_slave_1: left promiscuous mode [ 1124.848415][T10817] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.898790][T10817] bridge_slave_0: left allmulticast mode [ 1124.905426][T10817] bridge_slave_0: left promiscuous mode [ 1124.917965][T16863] FAULT_INJECTION: forcing a failure. [ 1124.917965][T16863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.931553][T10817] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.944996][T16863] CPU: 0 UID: 0 PID: 16863 Comm: syz.4.2990 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1124.955805][T16863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1124.965878][T16863] Call Trace: [ 1124.969146][T16863] [ 1124.972081][T16863] dump_stack_lvl+0x241/0x360 [ 1124.976784][T16863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1124.982013][T16863] ? __pfx__printk+0x10/0x10 [ 1124.986596][T16863] ? __pfx_lock_release+0x10/0x10 [ 1124.991617][T16863] should_fail_ex+0x3b0/0x4e0 [ 1124.996290][T16863] _copy_from_user+0x2f/0xc0 [ 1125.000905][T16863] copy_msghdr_from_user+0xae/0x680 [ 1125.006127][T16863] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1125.011941][T16863] __sys_sendmsg+0x22d/0x380 [ 1125.016532][T16863] ? __pfx___sys_sendmsg+0x10/0x10 [ 1125.021648][T16863] ? __pfx_vfs_write+0x10/0x10 [ 1125.026429][T16863] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1125.032758][T16863] ? do_syscall_64+0x100/0x230 [ 1125.037520][T16863] ? do_syscall_64+0xb6/0x230 [ 1125.042279][T16863] do_syscall_64+0xf3/0x230 [ 1125.046782][T16863] ? clear_bhb_loop+0x35/0x90 [ 1125.051469][T16863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.057367][T16863] RIP: 0033:0x7fbd8197e719 [ 1125.061795][T16863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1125.081403][T16863] RSP: 002b:00007fbd8283b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1125.089820][T16863] RAX: ffffffffffffffda RBX: 00007fbd81b35f80 RCX: 00007fbd8197e719 [ 1125.097962][T16863] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 1125.105940][T16863] RBP: 00007fbd8283b090 R08: 0000000000000000 R09: 0000000000000000 [ 1125.113912][T16863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.121880][T16863] R13: 0000000000000000 R14: 00007fbd81b35f80 R15: 00007ffcf893bc98 [ 1125.129877][T16863] [ 1125.136920][T16152] Bluetooth: hci3: command tx timeout [ 1125.282926][T16872] FAULT_INJECTION: forcing a failure. [ 1125.282926][T16872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1125.298000][T16872] CPU: 0 UID: 0 PID: 16872 Comm: syz.6.2993 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1125.308797][T16872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1125.318854][T16872] Call Trace: [ 1125.322145][T16872] [ 1125.325075][T16872] dump_stack_lvl+0x241/0x360 [ 1125.329764][T16872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1125.334965][T16872] ? __pfx__printk+0x10/0x10 [ 1125.339561][T16872] ? snprintf+0xda/0x120 [ 1125.343818][T16872] should_fail_ex+0x3b0/0x4e0 [ 1125.348584][T16872] _copy_to_user+0x31/0xb0 [ 1125.353002][T16872] simple_read_from_buffer+0xca/0x150 [ 1125.358378][T16872] proc_fail_nth_read+0x1e9/0x250 [ 1125.363410][T16872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1125.368957][T16872] ? rw_verify_area+0x55e/0x6f0 [ 1125.373804][T16872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1125.379346][T16872] vfs_read+0x1fc/0xb70 [ 1125.383501][T16872] ? fdget_pos+0x24e/0x320 [ 1125.387919][T16872] ? __pfx_vfs_read+0x10/0x10 [ 1125.392596][T16872] ? __fget_files+0x3f3/0x470 [ 1125.397278][T16872] ? fdget_pos+0x24e/0x320 [ 1125.401698][T16872] ksys_read+0x183/0x2b0 [ 1125.405981][T16872] ? __pfx_ksys_read+0x10/0x10 [ 1125.410763][T16872] ? do_syscall_64+0x100/0x230 [ 1125.415543][T16872] ? do_syscall_64+0xb6/0x230 [ 1125.420229][T16872] do_syscall_64+0xf3/0x230 [ 1125.424752][T16872] ? clear_bhb_loop+0x35/0x90 [ 1125.429436][T16872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.435330][T16872] RIP: 0033:0x7f8a18f7d15c [ 1125.439741][T16872] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1125.459431][T16872] RSP: 002b:00007f8a19db3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1125.467845][T16872] RAX: ffffffffffffffda RBX: 00007f8a19135f80 RCX: 00007f8a18f7d15c [ 1125.475813][T16872] RDX: 000000000000000f RSI: 00007f8a19db30a0 RDI: 0000000000000007 [ 1125.483778][T16872] RBP: 00007f8a19db3090 R08: 0000000000000000 R09: 0000000000000000 [ 1125.491760][T16872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.499728][T16872] R13: 0000000000000000 R14: 00007f8a19135f80 R15: 00007ffcf75d5548 [ 1125.507707][T16872] [ 1125.512097][T16645] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1126.301667][T16645] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1126.310868][T16645] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.321618][T16645] usb 9-1: config 0 descriptor?? [ 1126.329955][T16645] cp210x 9-1:0.0: cp210x converter detected [ 1126.530861][T16645] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1126.539962][T16645] cp210x 9-1:0.0: querying part number failed [ 1126.550128][T16645] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1126.909880][T10817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1126.920352][T10817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1126.930674][T10817] bond0 (unregistering): Released all slaves [ 1127.046166][T16832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1127.060208][T16832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1127.086120][ C1] vkms_vblank_simulate: vblank timer overrun [ 1127.118846][T16832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.186807][T16832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.194980][T16152] Bluetooth: hci3: command tx timeout [ 1127.211738][T16832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1127.287492][T16887] 9pnet_fd: Insufficient options for proto=fd [ 1127.311998][T16832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.348362][T16862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.358999][T16862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.134899][T16893] Bluetooth: MGMT ver 1.23 [ 1128.598293][ T5882] usb 9-1: USB disconnect, device number 8 [ 1128.611007][ T5882] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1128.622904][ T5882] cp210x 9-1:0.0: device disconnected [ 1128.652320][T16832] hsr_slave_0: entered promiscuous mode [ 1128.790276][T16832] hsr_slave_1: entered promiscuous mode [ 1128.843601][T16832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1128.858711][T16832] Cannot create hsr debugfs directory [ 1128.931515][T16899] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.993384][T16906] capability: warning: `syz.8.3002' uses 32-bit capabilities (legacy support in use) [ 1129.009904][T10817] hsr_slave_0: left promiscuous mode [ 1129.018396][T10817] hsr_slave_1: left promiscuous mode [ 1129.024794][T10817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.042708][T10817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.270331][T16152] Bluetooth: hci3: command tx timeout [ 1129.840495][T16919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1130.581612][T10817] team0 (unregistering): Port device team_slave_1 removed [ 1130.600079][ T5881] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1130.659392][T10817] team0 (unregistering): Port device team_slave_0 removed [ 1130.764799][ T5881] usb 3-1: device descriptor read/64, error -71 [ 1131.012544][ T5881] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1131.149890][ T5881] usb 3-1: device descriptor read/64, error -71 [ 1131.189568][T16899] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.296337][ T5881] usb usb3-port1: attempt power cycle [ 1131.297383][T16927] FAULT_INJECTION: forcing a failure. [ 1131.297383][T16927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1131.315987][T16927] CPU: 1 UID: 0 PID: 16927 Comm: syz.8.3007 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1131.326788][T16927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1131.336868][T16927] Call Trace: [ 1131.340164][T16927] [ 1131.343112][T16927] dump_stack_lvl+0x241/0x360 [ 1131.347816][T16927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1131.353034][T16927] ? __pfx__printk+0x10/0x10 [ 1131.354979][T16152] Bluetooth: hci3: command tx timeout [ 1131.357648][T16927] ? __pfx_lock_release+0x10/0x10 [ 1131.357689][T16927] should_fail_ex+0x3b0/0x4e0 [ 1131.372782][T16927] _copy_from_user+0x2f/0xc0 [ 1131.377425][T16927] copy_msghdr_from_user+0xae/0x680 [ 1131.382645][T16927] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1131.388480][T16927] __sys_sendmsg+0x22d/0x380 [ 1131.393096][T16927] ? __pfx___sys_sendmsg+0x10/0x10 [ 1131.398229][T16927] ? __pfx_vfs_write+0x10/0x10 [ 1131.403021][T16927] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1131.409365][T16927] ? do_syscall_64+0x100/0x230 [ 1131.414152][T16927] ? do_syscall_64+0xb6/0x230 [ 1131.418848][T16927] do_syscall_64+0xf3/0x230 [ 1131.423362][T16927] ? clear_bhb_loop+0x35/0x90 [ 1131.428052][T16927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.433946][T16927] RIP: 0033:0x7ff51697e719 [ 1131.438366][T16927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1131.458060][T16927] RSP: 002b:00007ff5177c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1131.466473][T16927] RAX: ffffffffffffffda RBX: 00007ff516b35f80 RCX: 00007ff51697e719 [ 1131.474453][T16927] RDX: 0000000000000000 RSI: 0000000020000c40 RDI: 0000000000000004 [ 1131.482525][T16927] RBP: 00007ff5177c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.490519][T16927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.498503][T16927] R13: 0000000000000000 R14: 00007ff516b35f80 R15: 00007fff853681b8 [ 1131.506478][T16927] [ 1131.509583][ C1] vkms_vblank_simulate: vblank timer overrun [ 1131.546623][T16899] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.566633][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3006'. [ 1131.682175][ T5881] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1131.712328][ T5881] usb 3-1: device descriptor read/8, error -71 [ 1131.727975][T16934] netlink: 'syz.8.3008': attribute type 2 has an invalid length. [ 1131.736163][T16934] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.3008'. [ 1131.814580][T16935] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3008'. [ 1131.867973][T16899] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.193951][ T5881] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1132.250513][ T5881] usb 3-1: device descriptor read/8, error -71 [ 1132.360172][ T5881] usb usb3-port1: unable to enumerate USB device [ 1132.483812][T16899] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.528268][T16899] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.651832][T16899] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.675724][T16939] FAULT_INJECTION: forcing a failure. [ 1132.675724][T16939] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.688854][T16939] CPU: 1 UID: 0 PID: 16939 Comm: syz.8.3010 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1132.699648][T16939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1132.709734][T16939] Call Trace: [ 1132.713043][T16939] [ 1132.715988][T16939] dump_stack_lvl+0x241/0x360 [ 1132.720782][T16939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1132.726010][T16939] ? __pfx__printk+0x10/0x10 [ 1132.730631][T16939] ? inet_csk_listen_stop+0x43d/0xb00 [ 1132.736028][T16939] ? __fput+0x23f/0x880 [ 1132.740199][T16939] ? do_syscall_64+0xf3/0x230 [ 1132.744913][T16939] should_fail_ex+0x3b0/0x4e0 [ 1132.749613][T16939] should_failslab+0xac/0x100 [ 1132.754319][T16939] ? __alloc_skb+0x1c3/0x440 [ 1132.759024][T16939] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1132.764866][T16939] __alloc_skb+0x1c3/0x440 [ 1132.769311][T16939] ? __pfx_inet6_sk_rebuild_header+0x10/0x10 [ 1132.775323][T16939] ? __pfx___alloc_skb+0x10/0x10 [ 1132.780295][T16939] ? lockdep_hardirqs_on+0x90/0x150 [ 1132.785517][T16939] ? __local_bh_enable_ip+0x168/0x200 [ 1132.790918][T16939] ? ipv6_portaddr_hash+0xe3/0x350 [ 1132.796071][T16939] ? inet_put_port+0x5d1/0x7b0 [ 1132.800865][T16939] sock_wmalloc+0xab/0x120 [ 1132.804196][T16943] FAULT_INJECTION: forcing a failure. [ 1132.804196][T16943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1132.805293][T16939] dccp_send_reset+0xe0/0x250 [ 1132.822990][T16939] dccp_disconnect+0x262/0x9a0 [ 1132.827779][T16939] ? __pfx_reuseport_migrate_sock+0x10/0x10 [ 1132.833698][T16939] inet_child_forget+0x72/0x260 [ 1132.838575][T16939] inet_csk_listen_stop+0x43d/0xb00 [ 1132.843795][T16939] ? trace_inet_sock_set_state+0x90/0x230 [ 1132.849527][T16939] ? inet_csk_listen_stop+0x164/0xb00 [ 1132.854938][T16939] dccp_close+0x55d/0x1070 [ 1132.859403][T16939] ? __pfx_dccp_close+0x10/0x10 [ 1132.864294][T16939] ? down_write+0x18c/0x220 [ 1132.868824][T16939] ? ip_mc_drop_socket+0x25f/0x280 [ 1132.873971][T16939] inet_release+0x17d/0x200 [ 1132.878506][T16939] sock_close+0xbc/0x240 [ 1132.882766][T16939] ? __pfx_sock_close+0x10/0x10 [ 1132.887630][T16939] __fput+0x23f/0x880 [ 1132.891655][T16939] __x64_sys_close+0x7f/0x110 [ 1132.896406][T16939] do_syscall_64+0xf3/0x230 [ 1132.900933][T16939] ? clear_bhb_loop+0x35/0x90 [ 1132.905636][T16939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.911550][T16939] RIP: 0033:0x7ff51697e719 [ 1132.915983][T16939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1132.935608][T16939] RSP: 002b:00007ff5177c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1132.944039][T16939] RAX: ffffffffffffffda RBX: 00007ff516b35f80 RCX: 00007ff51697e719 [ 1132.952023][T16939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1132.959997][T16939] RBP: 00007ff5177c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1132.967969][T16939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1132.975940][T16939] R13: 0000000000000000 R14: 00007ff516b35f80 R15: 00007fff853681b8 [ 1132.983921][T16939] [ 1132.987026][ C1] vkms_vblank_simulate: vblank timer overrun [ 1132.987464][T16943] CPU: 0 UID: 0 PID: 16943 Comm: syz.2.3011 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1133.003786][T16943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1133.013868][T16943] Call Trace: [ 1133.017166][T16943] [ 1133.020113][T16943] dump_stack_lvl+0x241/0x360 [ 1133.024826][T16943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1133.030050][T16943] ? __pfx__printk+0x10/0x10 [ 1133.034672][T16943] ? __pfx_lock_release+0x10/0x10 [ 1133.039726][T16943] should_fail_ex+0x3b0/0x4e0 [ 1133.044438][T16943] _copy_from_user+0x2f/0xc0 [ 1133.049047][T16943] copy_msghdr_from_user+0xae/0x680 [ 1133.054276][T16943] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1133.060117][T16943] __sys_sendmsg+0x22d/0x380 [ 1133.064716][T16943] ? __pfx___sys_sendmsg+0x10/0x10 [ 1133.069844][T16943] ? __pfx_vfs_write+0x10/0x10 [ 1133.074623][T16943] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1133.080955][T16943] ? do_syscall_64+0x100/0x230 [ 1133.085723][T16943] ? do_syscall_64+0xb6/0x230 [ 1133.090414][T16943] do_syscall_64+0xf3/0x230 [ 1133.094922][T16943] ? clear_bhb_loop+0x35/0x90 [ 1133.099606][T16943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.105503][T16943] RIP: 0033:0x7fbffff7e719 [ 1133.109913][T16943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1133.129516][T16943] RSP: 002b:00007fc000dea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1133.137936][T16943] RAX: ffffffffffffffda RBX: 00007fc000136130 RCX: 00007fbffff7e719 [ 1133.145918][T16943] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1133.153887][T16943] RBP: 00007fc000dea090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.161854][T16943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.169819][T16943] R13: 0000000000000001 R14: 00007fc000136130 R15: 00007ffc6594ab88 [ 1133.177796][T16943] [ 1133.211426][T16899] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.374584][T16832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1133.414434][T16832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1133.464286][T16832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1133.484208][T16832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1133.588333][T16954] FAULT_INJECTION: forcing a failure. [ 1133.588333][T16954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.747293][T16954] CPU: 0 UID: 0 PID: 16954 Comm: syz.2.3016 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1133.758122][T16954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1133.768200][T16954] Call Trace: [ 1133.771493][T16954] [ 1133.774433][T16954] dump_stack_lvl+0x241/0x360 [ 1133.779141][T16954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1133.784397][T16954] ? __pfx__printk+0x10/0x10 [ 1133.789024][T16954] should_fail_ex+0x3b0/0x4e0 [ 1133.793727][T16954] _copy_from_user+0x2f/0xc0 [ 1133.798331][T16954] move_addr_to_kernel+0x82/0x150 [ 1133.803374][T16954] __sys_connect+0xc1/0x300 [ 1133.807903][T16954] ? __pfx___sys_connect+0x10/0x10 [ 1133.813065][T16954] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1133.813139][ T5879] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 1133.819399][T16954] ? do_syscall_64+0x100/0x230 [ 1133.831542][T16954] __x64_sys_connect+0x7a/0x90 [ 1133.836325][T16954] do_syscall_64+0xf3/0x230 [ 1133.840832][T16954] ? clear_bhb_loop+0x35/0x90 [ 1133.845508][T16954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.851402][T16954] RIP: 0033:0x7fbffff7e719 [ 1133.855837][T16954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1133.875437][T16954] RSP: 002b:00007fc000e2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1133.883847][T16954] RAX: ffffffffffffffda RBX: 00007fc000135f80 RCX: 00007fbffff7e719 [ 1133.891822][T16954] RDX: 000000000000001c RSI: 00000000200000c0 RDI: 0000000000000005 [ 1133.899788][T16954] RBP: 00007fc000e2c090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.907846][T16954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.915821][T16954] R13: 0000000000000000 R14: 00007fc000135f80 R15: 00007ffc6594ab88 [ 1133.923801][T16954] [ 1133.989902][T16959] ubi0: attaching mtd0 [ 1134.002926][T16959] ubi0: scanning is finished [ 1134.007995][T16959] ubi0: empty MTD device detected [ 1134.068307][T16961] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1134.933905][T16959] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1134.941685][T16959] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1134.948954][T16959] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1134.956002][T16959] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1134.963443][T16959] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1134.970435][T16959] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1134.978444][T16959] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 459808140 [ 1134.988433][T16959] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1135.000646][T16965] ubi0: background thread "ubi_bgt0d" started, PID 16965 [ 1135.097619][ T5879] usb 9-1: Invalid ep0 maxpacket: 16 [ 1135.106316][T16832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.142555][T16832] 8021q: adding VLAN 0 to HW filter on device team0 [ 1135.164067][T10823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.171232][T10823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.172145][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1135.180954][T10823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.193207][T10823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.231500][ T5879] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 1135.247856][T16832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1135.258518][T16832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1135.419934][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1135.590181][ T5879] usb 9-1: Invalid ep0 maxpacket: 16 [ 1135.604755][ T5879] usb usb9-port1: attempt power cycle [ 1135.628539][T16977] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3019'. [ 1135.676929][T16832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.717420][T16979] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3021'. [ 1135.840766][T16832] veth0_vlan: entered promiscuous mode [ 1135.867125][T16832] veth1_vlan: entered promiscuous mode [ 1135.959831][ T5879] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 1135.961260][T16832] veth0_macvtap: entered promiscuous mode [ 1135.991713][ T5879] usb 9-1: Invalid ep0 maxpacket: 16 [ 1136.023086][T16832] veth1_macvtap: entered promiscuous mode [ 1136.073424][T16832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.098417][T16832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.112898][T16832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.123985][T16832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.135940][T16832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.140107][ T5879] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 1136.147416][T16832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.167859][T16832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.178846][T16832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.189665][T16832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.195733][ T5879] usb 9-1: Invalid ep0 maxpacket: 16 [ 1136.200696][T16832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.212622][ T5879] usb usb9-port1: unable to enumerate USB device [ 1136.235062][T16832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.267935][T16832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.289850][ T5882] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1136.299198][T16832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.326071][T16832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.340410][T16832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.351355][T16832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.362582][T16832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.373904][T16832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.385607][T16832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.428382][T16832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.462001][ T5882] usb 3-1: config 246 has an invalid interface number: 166 but max is 0 [ 1136.492309][ T5882] usb 3-1: config 246 has no interface number 0 [ 1136.499955][T16832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.515163][ T9] usb 5-1: device descriptor read/all, error -71 [ 1136.532052][ T5882] usb 3-1: config 246 interface 166 altsetting 118 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 1136.566080][T16832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1136.609796][ T5882] usb 3-1: config 246 interface 166 altsetting 118 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1136.632811][T16832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.650885][ T5882] usb 3-1: config 246 interface 166 has no altsetting 0 [ 1136.658089][T16832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.667653][T16832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.678270][T16832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.690018][ T5882] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 1136.704037][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.715197][ T5882] usb 3-1: Product: syz [ 1136.719394][ T5882] usb 3-1: Manufacturer: syz [ 1136.727092][ T5882] usb 3-1: SerialNumber: syz [ 1137.649996][T16852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.723186][T16852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.741693][ T5882] usb 3-1: Limiting number of CPorts to U8_MAX [ 1137.748532][ T5882] usb 3-1: Unknown endpoint type found, address 0x0b [ 1137.791949][ T5882] usb 3-1: Not enough endpoints found in device, aborting! [ 1137.821525][T16998] netlink: 'syz.2.3023': attribute type 1 has an invalid length. [ 1137.858006][T16998] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3023'. [ 1137.895582][T16852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.135118][T16852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.598284][ T8] usb 3-1: USB disconnect, device number 26 [ 1138.699026][T17014] FAULT_INJECTION: forcing a failure. [ 1138.699026][T17014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1138.712608][T17014] CPU: 1 UID: 0 PID: 17014 Comm: syz.6.3029 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1138.723458][T17014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1138.733544][T17014] Call Trace: [ 1138.736844][T17014] [ 1138.739796][T17014] dump_stack_lvl+0x241/0x360 [ 1138.744505][T17014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1138.749741][T17014] ? __pfx__printk+0x10/0x10 [ 1138.754359][T17014] ? __pfx_lock_release+0x10/0x10 [ 1138.759419][T17014] should_fail_ex+0x3b0/0x4e0 [ 1138.764124][T17014] _copy_from_user+0x2f/0xc0 [ 1138.768745][T17014] copy_msghdr_from_user+0xae/0x680 [ 1138.773972][T17014] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1138.779820][T17014] __sys_sendmsg+0x22d/0x380 [ 1138.784436][T17014] ? __pfx___sys_sendmsg+0x10/0x10 [ 1138.789566][T17014] ? __pfx_vfs_write+0x10/0x10 [ 1138.794335][T17014] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1138.800661][T17014] ? do_syscall_64+0x100/0x230 [ 1138.805420][T17014] ? do_syscall_64+0xb6/0x230 [ 1138.810091][T17014] do_syscall_64+0xf3/0x230 [ 1138.814586][T17014] ? clear_bhb_loop+0x35/0x90 [ 1138.819270][T17014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.825175][T17014] RIP: 0033:0x7f8a18f7e719 [ 1138.829586][T17014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1138.849204][T17014] RSP: 002b:00007f8a19db3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1138.849898][T17016] ------------[ cut here ]------------ [ 1138.857611][T17014] RAX: ffffffffffffffda RBX: 00007f8a19135f80 RCX: 00007f8a18f7e719 [ 1138.857634][T17014] RDX: 0000000000000000 RSI: 0000000020001b40 RDI: 0000000000000005 [ 1138.857646][T17014] RBP: 00007f8a19db3090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.857658][T17014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.857670][T17014] R13: 0000000000000000 R14: 00007f8a19135f80 R15: 00007ffcf75d5548 [ 1138.857693][T17014] [ 1138.863556][T17016] platform vkms: [drm] vblank wait timed out on crtc 0 [ 1138.871385][ C1] vkms_vblank_simulate: vblank timer overrun [ 1138.982555][T17016] WARNING: CPU: 0 PID: 17016 at drivers/gpu/drm/drm_vblank.c:1307 drm_wait_one_vblank+0x97c/0xa00 [ 1138.993383][T17016] Modules linked in: [ 1138.997272][T17016] CPU: 0 UID: 0 PID: 17016 Comm: syz.0.2983 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1139.008081][T17016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1139.018219][T17016] RIP: 0010:drm_wait_one_vblank+0x97c/0xa00 [ 1139.024204][T17016] Code: 80 3c 08 00 74 08 4c 89 ff e8 d0 12 98 fc 49 8b 1f 48 c7 c7 00 d1 72 8c 4c 89 f6 48 89 da 8b 5c 24 0c 89 d9 e8 25 4f f2 fb 90 <0f> 0b 90 90 49 be 00 00 00 00 00 fc ff df e9 68 fb ff ff 44 89 e9 [ 1139.035116][T17015] FAULT_INJECTION: forcing a failure. [ 1139.035116][T17015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1139.044514][T17016] RSP: 0018:ffffc9000c0efac0 EFLAGS: 00010246 [ 1139.063793][T17016] RAX: d1df4547390aa200 RBX: 0000000000000000 RCX: 0000000000040000 [ 1139.071847][T17016] RDX: ffffc9000ce36000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1139.079883][T17016] RBP: ffffc9000c0efc00 R08: ffffffff8155e222 R09: fffffbfff1cf9fd0 [ 1139.087867][T17016] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: 1ffff9200181df64 [ 1139.095916][T17016] R13: 0000000000010955 R14: ffffffff8c860ec0 R15: ffff888024fde010 [ 1139.104499][T17016] FS: 00007f64ca70b6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1139.113685][T17016] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1139.120305][T17016] CR2: 0000000020000180 CR3: 0000000032d5e000 CR4: 00000000003526f0 [ 1139.128615][T17016] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1139.136867][T17016] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1139.144913][T17016] Call Trace: [ 1139.148190][T17016] [ 1139.151170][T17016] ? __warn+0x168/0x4e0 [ 1139.155321][T17016] ? drm_wait_one_vblank+0x97c/0xa00 [ 1139.160653][T17016] ? report_bug+0x2b3/0x500 [ 1139.165151][T17016] ? drm_wait_one_vblank+0x97c/0xa00 [ 1139.170618][T17016] ? handle_bug+0x60/0x90 [ 1139.175048][T17016] ? exc_invalid_op+0x1a/0x50 [ 1139.179811][T17016] ? asm_exc_invalid_op+0x1a/0x20 [ 1139.184858][T17016] ? __warn_printk+0x292/0x360 [ 1139.192105][T17016] ? drm_wait_one_vblank+0x97c/0xa00 [ 1139.197445][T17016] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1139.203326][T17016] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1139.209412][T17016] ? __pfx___mutex_lock+0x10/0x10 [ 1139.214506][T17016] ? kfree+0x1a0/0x440 [ 1139.218569][T17016] ? drm_vblank_get+0x173/0x270 [ 1139.223460][T17016] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 1139.229182][T17016] drm_fb_helper_ioctl+0x114/0x140 [ 1139.234563][T17016] do_fb_ioctl+0x40a/0x7b0 [ 1139.239006][T17016] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1139.244226][T17016] ? smk_tskacc+0x300/0x370 [ 1139.248735][T17016] ? smack_file_ioctl+0x29e/0x3a0 [ 1139.253789][T17016] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1139.259171][T17016] ? __pfx_fb_ioctl+0x10/0x10 [ 1139.263877][T17016] __se_sys_ioctl+0xf9/0x170 [ 1139.268473][T17016] do_syscall_64+0xf3/0x230 [ 1139.273294][T17016] ? clear_bhb_loop+0x35/0x90 [ 1139.277977][T17016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.283925][T17016] RIP: 0033:0x7f64c997e719 [ 1139.288341][T17016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1139.308015][T17016] RSP: 002b:00007f64ca70b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1139.316480][T17016] RAX: ffffffffffffffda RBX: 00007f64c9b36058 RCX: 00007f64c997e719 [ 1139.324525][T17016] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000008 [ 1139.332830][T17016] RBP: 00007f64c99f175e R08: 0000000000000000 R09: 0000000000000000 [ 1139.341105][T17016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1139.349087][T17016] R13: 0000000000000000 R14: 00007f64c9b36058 R15: 00007ffe6fe70768 [ 1139.357120][T17016] [ 1139.360222][T17016] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1139.367528][T17016] CPU: 0 UID: 0 PID: 17016 Comm: syz.0.2983 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1139.378284][T17016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1139.388346][T17016] Call Trace: [ 1139.391619][T17016] [ 1139.394543][T17016] dump_stack_lvl+0x241/0x360 [ 1139.399228][T17016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1139.404421][T17016] ? __pfx__printk+0x10/0x10 [ 1139.409013][T17016] ? vscnprintf+0x5d/0x90 [ 1139.413336][T17016] panic+0x349/0x880 [ 1139.417225][T17016] ? __warn+0x177/0x4e0 [ 1139.421373][T17016] ? __pfx_panic+0x10/0x10 [ 1139.425790][T17016] __warn+0x34b/0x4e0 [ 1139.429762][T17016] ? drm_wait_one_vblank+0x97c/0xa00 [ 1139.435048][T17016] report_bug+0x2b3/0x500 [ 1139.439503][T17016] ? drm_wait_one_vblank+0x97c/0xa00 [ 1139.444793][T17016] handle_bug+0x60/0x90 [ 1139.448942][T17016] exc_invalid_op+0x1a/0x50 [ 1139.453437][T17016] asm_exc_invalid_op+0x1a/0x20 [ 1139.458279][T17016] RIP: 0010:drm_wait_one_vblank+0x97c/0xa00 [ 1139.464163][T17016] Code: 80 3c 08 00 74 08 4c 89 ff e8 d0 12 98 fc 49 8b 1f 48 c7 c7 00 d1 72 8c 4c 89 f6 48 89 da 8b 5c 24 0c 89 d9 e8 25 4f f2 fb 90 <0f> 0b 90 90 49 be 00 00 00 00 00 fc ff df e9 68 fb ff ff 44 89 e9 [ 1139.484111][T17016] RSP: 0018:ffffc9000c0efac0 EFLAGS: 00010246 [ 1139.490172][T17016] RAX: d1df4547390aa200 RBX: 0000000000000000 RCX: 0000000000040000 [ 1139.498148][T17016] RDX: ffffc9000ce36000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1139.506105][T17016] RBP: ffffc9000c0efc00 R08: ffffffff8155e222 R09: fffffbfff1cf9fd0 [ 1139.514064][T17016] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: 1ffff9200181df64 [ 1139.522027][T17016] R13: 0000000000010955 R14: ffffffff8c860ec0 R15: ffff888024fde010 [ 1139.529998][T17016] ? __warn_printk+0x292/0x360 [ 1139.534759][T17016] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1139.540386][T17016] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1139.546470][T17016] ? __pfx___mutex_lock+0x10/0x10 [ 1139.551506][T17016] ? kfree+0x1a0/0x440 [ 1139.555573][T17016] ? drm_vblank_get+0x173/0x270 [ 1139.560418][T17016] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 1139.566057][T17016] drm_fb_helper_ioctl+0x114/0x140 [ 1139.571165][T17016] do_fb_ioctl+0x40a/0x7b0 [ 1139.575597][T17016] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1139.580536][T17016] ? smk_tskacc+0x300/0x370 [ 1139.585036][T17016] ? smack_file_ioctl+0x29e/0x3a0 [ 1139.590053][T17016] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1139.595426][T17016] ? __pfx_fb_ioctl+0x10/0x10 [ 1139.600098][T17016] __se_sys_ioctl+0xf9/0x170 [ 1139.604695][T17016] do_syscall_64+0xf3/0x230 [ 1139.609186][T17016] ? clear_bhb_loop+0x35/0x90 [ 1139.613857][T17016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.619752][T17016] RIP: 0033:0x7f64c997e719 [ 1139.624167][T17016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1139.643770][T17016] RSP: 002b:00007f64ca70b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1139.652178][T17016] RAX: ffffffffffffffda RBX: 00007f64c9b36058 RCX: 00007f64c997e719 [ 1139.660136][T17016] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000008 [ 1139.668098][T17016] RBP: 00007f64c99f175e R08: 0000000000000000 R09: 0000000000000000 [ 1139.676059][T17016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1139.684020][T17016] R13: 0000000000000000 R14: 00007f64c9b36058 R15: 00007ffe6fe70768 [ 1139.691991][T17016] [ 1139.695286][T17016] Kernel Offset: disabled [ 1139.699674][T17016] Rebooting in 86400 seconds..