last executing test programs: 42m1.685625306s ago: executing program 32 (id=237): socket(0x840000000002, 0x3, 0xfa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) keyctl$session_to_parent(0x12) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet(0x2, 0x801, 0x0) pause() pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x7ffff000, 0x0) 35m50.317309461s ago: executing program 33 (id=905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 29m51.610129743s ago: executing program 34 (id=1494): userfaultfd(0x1) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa43, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='tlb_flush\x00', r2, 0x0, 0x8000000000000001}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x19, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x7, 0x1ff}, 0x10, 0x0, r2, 0x3, &(0x7f0000000800)=[r2, r2], &(0x7f0000000840)=[{0x2, 0x3, 0x8, 0x7}, {0x3, 0x3, 0xe, 0x4}, {0x0, 0x2, 0x8, 0x3}], 0x10, 0x7, @void, @value}, 0x94) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x44, 0x0, 0x0, 0x0, 0x53fc, &(0x7f0000000240)='geneve0\x00', 0x5, 0x3, 0x81}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000002c0), 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 27m40.622503848s ago: executing program 35 (id=1693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x113, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x80}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r7 = accept$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{}, [@null, @bcast, @bcast, @bcast, @rose, @netrom, @remote, @netrom]}, &(0x7f0000000000)=0x48) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r7, 0x0, &(0x7f0000000340)="5df9b5abc0b528f3db4cb82e625b22bde09b3401b3b6ba6c6c5fd1ff43221ec411d33214926bfcb745b4b43cc3b54ca517bc63c10ee234549572c08baf36792b0da57eb277c11a126133f8913691d283128e6fbb0ec70088af7a0668bb7a9c4e08e67bcbfdaee2b95d0dbcd2d25e21de77976a4e9164221044777e1618af51a39ca52b5f1d222e7ad55fb36ef3f882af11404f49deb6f8411393187187064d3b", 0xa0, 0x23, 0x1, {0x0, r8}}) io_uring_enter(r4, 0x8aa, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, 0x0, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008000}, 0x48000) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r10, 0x4b4d, &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r11}]}, 0x6c}}, 0x4080) 24m39.789769951s ago: executing program 2 (id=2023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 24m38.356318229s ago: executing program 2 (id=2026): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) keyctl$reject(0x13, 0x0, 0x2, 0xbaf, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, &(0x7f00000001c0)=0x3f) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) syz_open_procfs(0x0, 0x0) r2 = socket(0x10, 0x6, 0x3) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001500010300000000000000000b000000c7f202267632154f1d66a71e29c19d8b39453cbf047bfe81634c935aae849b70009b4f539dc1f6894c88533a794cadfc2e0c2a06e55deaeafe4cb9458f9ed79bc63c75598414"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) socket(0x28, 0x800, 0x1) clock_gettime(0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000004000)) close(0xffffffffffffffff) 24m36.73502278s ago: executing program 2 (id=2030): r0 = socket(0x1000000000000010, 0x80802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x80, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)}, 0xc091) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=""/63, 0x39, 0x3f, 0x1, 0xe7, 0x0, @void, @value}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x29) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) r4 = semget$private(0x0, 0x4, 0xa0) semtimedop(r4, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(r4, &(0x7f0000000180)=[{}], 0x1) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)) 24m34.865432503s ago: executing program 2 (id=2032): syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000440)={@multicast1, @multicast1, @local}, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, 0x0}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffff7fffffff]}, 0x8) fcntl$lock(r7, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x100000000000, 0x0, 0xffffffffffffffff}) fcntl$lock(r7, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r5, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000080)={0x18, r5}) 24m33.208117878s ago: executing program 2 (id=2035): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x23, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000299000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000002000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40080004, 0x10}) ioctl$BLKTRACESETUP(r7, 0x1276, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000180)='nodecompose'}, 0x30) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) 24m30.77764369s ago: executing program 2 (id=2039): syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180000000000086dd602c96ed00103c00fe8000000000"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x6, 0x30}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', 0x0, 0x0, 0x2) syz_fuse_handle_req(r5, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x5bff671e76f00a82, 0x0, 0x0, {0x7, 0x29, 0xfffffffd, 0x290c2000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 24m14.547783903s ago: executing program 36 (id=2039): syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180000000000086dd602c96ed00103c00fe8000000000"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x6, 0x30}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', 0x0, 0x0, 0x2) syz_fuse_handle_req(r5, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x5bff671e76f00a82, 0x0, 0x0, {0x7, 0x29, 0xfffffffd, 0x290c2000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22m12.819341859s ago: executing program 8 (id=2249): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000005c0)={0x0, 0x4, 0x0, 0x8, 0x4}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r2 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) fcntl$addseals(r2, 0x409, 0x7) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x10000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) unshare(0x20000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) 22m6.078975228s ago: executing program 8 (id=2259): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639a", 0x51, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[]) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/44, 0x10b8c}], 0x1}}], 0x1, 0x2001, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b23, &(0x7f0000000040)) 22m3.539792492s ago: executing program 8 (id=2264): syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone(0x10000400, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = gettid() clock_nanosleep(0xb, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) rt_sigqueueinfo(r6, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) ioctl$VIDIOC_QUERYSTD(r7, 0x8008563f, &(0x7f0000000100)) 21m59.870475779s ago: executing program 8 (id=2268): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_usb_connect(0x6, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000280)=0x100, 0x4) userfaultfd(0x801) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4}, 0x14) 21m55.130472673s ago: executing program 8 (id=2277): r0 = io_uring_setup(0x410d, &(0x7f0000000200)={0x0, 0x23cf, 0x0, 0xfffffffc}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x5e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sw_sync_info(0xffffff9c, 0x0, 0x1450c0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x2000c8c5}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='setgroups\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000580)={0x3, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000080)={0x1, 0x6, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 21m52.117409521s ago: executing program 8 (id=2283): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x6}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000021c0)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000fc0), 0x802, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 21m35.984256677s ago: executing program 37 (id=2283): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x6}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000021c0)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000fc0), 0x802, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 18m49.349212122s ago: executing program 9 (id=2598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000013a40)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 18m47.423816312s ago: executing program 9 (id=2600): r0 = userfaultfd(0x801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c", @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x4040810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) sysfs$1(0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x0, 0x80, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1}}, {{0xa, 0x100, 0x9, @private2, 0x4}}}, 0x108) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r4, 0x89e2) get_robust_list(0x0, 0x0, 0x0) syz_emit_ethernet(0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a7", 0x32}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}], 0x300, 0x48, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x8084) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000002000000200ffff0300000082b0cfc4337965941538be02000000000000000000007400a391793ba711f10c414fcfa921b22842709233e35ef40000000000fdf700"], 0x40) ioctl$TUNSETIFINDEX(r5, 0x400454da, 0x0) ioctl$UFFDIO_COPY(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000adb000/0x2000)=nil, &(0x7f0000fee000/0x11000)=nil, 0x2000}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0800009f536322e6659c2c000522cb143a813db1a0c32f06e0fc65000000570800", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000020000000500"/28], 0x50) 18m46.219364888s ago: executing program 9 (id=2604): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000280)=0xfffffffd, 0x4) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) preadv(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x7, 0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000005000500000040000500060007000000080003000100"], 0x2c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000b00)=[{0x0}], 0x1}}], 0x1, 0x4008440) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x8902, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) 18m44.586899559s ago: executing program 9 (id=2606): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0x0) getpid() syz_emit_ethernet(0x5e, &(0x7f0000000140)={@remote, @random="2f097d6a0c8a", @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x1f}}, {@canfd={0xd, {{0x3, 0x1, 0x1}, 0x3e, 0x2, 0x0, 0x0, "35373db596b74c91e3d1f15c7b95567de62d73ccfa2267d697e39a321aa7b0aaa795a8fd703d2c47c4c31456cc61071666bc724881159722d24389808132b99a"}}}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, 0x0}) capset(&(0x7f0000000300)={0x19980330, r3}, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) 18m42.711117207s ago: executing program 9 (id=2610): r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x2, @dev={0xac, 0x14, 0x14, 0x1f}, 0x4e24, 0x2, 'wrr\x00', 0x6, 0x4, 0x17}, {@remote, 0x4e22, 0x10000, 0x6, 0x8}}, 0x44) io_submit(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbad362baa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c8d5ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a30000000000900020073797a320000000044000580080002400000000208000140000000ff0800014000000088080001400000000d0800024000000003"], 0x2d4}}, 0x4048010) 18m39.985871897s ago: executing program 9 (id=2612): r0 = socket(0x1000000000000010, 0x80802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x80, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)}, 0xc091) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=""/63, 0x39, 0x3f, 0x1, 0xe7, 0x0, @void, @value}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) mkdir(0x0, 0x29) r4 = semget$private(0x0, 0x4, 0xa0) semtimedop(r4, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(r4, &(0x7f0000000180)=[{}], 0x1) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)) 18m23.881204293s ago: executing program 38 (id=2612): r0 = socket(0x1000000000000010, 0x80802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x80, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)}, 0xc091) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=""/63, 0x39, 0x3f, 0x1, 0xe7, 0x0, @void, @value}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) mkdir(0x0, 0x29) r4 = semget$private(0x0, 0x4, 0xa0) semtimedop(r4, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(r4, &(0x7f0000000180)=[{}], 0x1) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)) 10m4.134592488s ago: executing program 4 (id=3429): mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x2a, 0x2, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb00000000000100090000007fe708000000bdc8a0930136388520a54a95a0a1094ada47f103d4dda5db7d9eddd63c0d1832120bb29b66c45420de69818b4a042d06"]) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r1) r2 = socket(0x40000000015, 0x5, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x84, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffc}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x50) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) socket$kcm(0x2, 0x3, 0x84) syz_open_dev$char_usb(0xc, 0xb4, 0x5) 9m59.741845213s ago: executing program 4 (id=3437): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0xfffffffd, 0xfffffffd, {{0x5, 0x4, 0x0, 0x4, 0xa, 0x4, 0x0, 0xfe, 0x2f, 0x0, @empty, @rand_addr=0x64010101}}}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x220c) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece0195", 0x6c}], 0x1}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) prlimit64(r1, 0xe, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r7, 0xc008551a, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0x18, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {0x0, 0x0, 0xfffffffc}, {0xfffffffc}, {}, {0x0, 0x0, 0x0, 0xe9}, {}, {}, {}, {0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000}, {0x55, 0x3}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0xe4}, {0x0, 0x0, 0x800000, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x58}, {}, {}, {}, {0x0, 0x401}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8000000}, {}, {}, {0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {0x8}, {}, {0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x20000000) 9m56.741073113s ago: executing program 4 (id=3442): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) keyctl$reject(0x13, 0x0, 0x2, 0xbaf, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, &(0x7f00000001c0)=0x3f) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) syz_open_procfs(0x0, 0x0) r2 = socket(0x10, 0x6, 0x3) sendmsg$NL80211_CMD_TDLS_MGMT(r2, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001500010300000000000000000b000000c7f202267632154f1d66a71e29c19d8b39453cbf047bfe81634c935aae849b70009b4f539dc1f6894c88533a794cadfc2e0c2a06e55deaeafe4cb9458f9ed79bc6"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) socket(0x28, 0x800, 0x1) clock_gettime(0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000004000)) close(0xffffffffffffffff) 9m54.017321728s ago: executing program 4 (id=3446): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000000, 0x4010, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = mq_open(&(0x7f0000000240)='rmdF\x17\x16\xbd\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x4, &(0x7f000010d000/0x3000)=nil) openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)={0x515302, 0xda}, 0x18) mq_notify(r5, &(0x7f0000001700)={0x0, 0x3d, 0x2, @thr={&(0x7f0000000440)="e3f92b7c75cd4dda705ab2f4031bfb9c797703ff70bfb85ae49fe649c9a1a98896b18e93c9006dce8780a290079ff66b05d9559522a02a1e1e6d46b1ce8220f60ea3d4d5650b9dba6efbfad854ea5490d64c6011d7ae7325ee0ab099dacb4fc756faf6a6798697dfe48fda513f7fe44cc30fab5bfe88dcf3f40d9b66efe76f865d20590811956b1f984425bfe83d2a54581a0881df7bbd", &(0x7f0000000500)="e2686d3ff155e8fd8da24a96b58a3a8cef7db894e9c86846f41f164a4e496a89435e5d33e99cee136a942793a521f777de96b7e83e79741e6335ff081cdcba7897e35d9c9fb0cd6e685a0d82de3c37349859c977af137071580c8c2d5aa7a8bb953aa432d6cb1b5d01060170c11dc6b03581503f28c3e16cad5b69a930e7ab4a997c6992adb51bf417768cd79d85e9705664280be123c733267d008d4212a47dd65175b52f60a8f8653e37a12bc15bfab803545b9bc6cb4461cbe25f206982eef74920150e9c7b8396254cceddc3d5ac2c58bb6783197d4e28"}}) mq_timedsend(r5, 0x0, 0x0, 0x1005, 0x0) 9m51.060525907s ago: executing program 4 (id=3450): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = eventfd2(0xc, 0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r1, 0x15, 0x0, r1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x47, [0x8000, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x4, 0x3, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x0, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xffffffff, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x5, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x3, 0x5, 0x8000, 0x9, 0x400, 0x80000000, 0x6, 0x1, 0xff, 0x5, 0x3, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x80004, 0x9, 0x2, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x80000000, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7bff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x0, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb0, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x3, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0xfffffffe, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x197e24b7, 0x4, 0x15, 0xb1c, 0x1, 0x200, 0xffff3443, 0xffc]}, 0x45c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r4, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002340)="6b093db1947bc296cf697e335c7aa0e9afc07b5f0c819e3522eaad2a74224b7a5bed182fec91c96271033eec5d14ede20a6d1c36c3e7a445ccb5b158ffaec30b8b846de0d5b327a6b1d322a80d00b5c08428fb6ef0d6bdfef436fd9a0027a7cce11f65f633449199149e065a48b3f6bb51b5e305aa20ec347027ace732178271cb92f3e4bdda6732a10715efe7a7eae23413207a9cd1c24ea5ad8f333bfedf8e93e880fc51fb9051917d5488a13c22f1a575b1767424074c84444b29becb98de0e479ae50c12711cc5e26973d496458de4969e51dd5aee7ae9ca5da879f96737d626b447cdf675bc4af3e1ffec688c6945d0786b8ff146cab2e441e3438f3ddd2832b9ac4c9693141785b844f706c8137d0ebf12347ee82f9bd1968c51803a81998a14917895", 0x126}], 0x1}}], 0x1, 0x81) shutdown(r4, 0x1) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x6, 0x8, 0x8}]}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x2000000000, 0x7fffffff}, 0x0, 0x0) close_range(r0, r3, 0x0) 9m48.963625512s ago: executing program 4 (id=3456): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) keyctl$reject(0x13, 0x0, 0x2, 0xbaf, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, &(0x7f00000001c0)=0x3f) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) syz_open_procfs(0x0, 0x0) r2 = socket(0x10, 0x6, 0x3) sendmsg$NL80211_CMD_TDLS_MGMT(r2, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001500010300000000000000000b000000c7f202267632154f1d66a71e29c19d8b39453cbf047bfe81634c935aae849b70009b4f539dc1f6894c88533a794cadfc2e0c2a06e55deaeafe4cb9458f9ed79bc6"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) socket(0x28, 0x800, 0x1) clock_gettime(0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000004000)) close(0xffffffffffffffff) 9m33.391097908s ago: executing program 39 (id=3456): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) keyctl$reject(0x13, 0x0, 0x2, 0xbaf, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, &(0x7f00000001c0)=0x3f) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) syz_open_procfs(0x0, 0x0) r2 = socket(0x10, 0x6, 0x3) sendmsg$NL80211_CMD_TDLS_MGMT(r2, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001500010300000000000000000b000000c7f202267632154f1d66a71e29c19d8b39453cbf047bfe81634c935aae849b70009b4f539dc1f6894c88533a794cadfc2e0c2a06e55deaeafe4cb9458f9ed79bc6"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) socket(0x28, 0x800, 0x1) clock_gettime(0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000004000)) close(0xffffffffffffffff) 2m41.434124458s ago: executing program 0 (id=5259): set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x138, 0x30, 0x1, 0x70bd2c, 0x0, {}, [{0x124, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xec, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0xc1, 0x6, "a7d7fca4bb14c5c6b14377320989c49729c7bb68b81e4e2eed95fb834b79c7e5b94bad4a8bf8e1ab7bf109000000000000000d0d60230a81f1e0406ff9286a1bf2a243010000004a70b3de97003467855a9aa1d1685958f7ef1d8e45b3d688e2fdc1e0ac97e0f0e8a0fd3f7f9198c4a723027a43bf358822d3ea7b6cb44df30143c95eebd070c7090e0b1fc04f54d04fd3de3d3226cd7b29c8017f0d0dc052eb9f94ebb0165ba3fcab030407c560d4ab6690e9b39c6b3b383bbab4f8ae"}, {0xc}, {0xc}}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4801}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000008c0)=[{0x16}]}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) 2m41.076307825s ago: executing program 0 (id=5263): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x48, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000b000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, 0x0, 0x0, 0x4) timer_settime(0x0, 0x1, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82) close_range(r0, 0xffffffffffffffff, 0x0) 2m39.804431616s ago: executing program 0 (id=5275): syz_open_dev$mouse(0x0, 0x0, 0x2042) r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r1 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x40a04) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) syz_open_dev$cec(0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) close_range(r4, 0xffffffffffffffff, 0x0) 2m39.704416901s ago: executing program 0 (id=5276): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_usb_connect(0x6, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000280)=0x100, 0x4) userfaultfd(0x801) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000b7fabd01e756126d5d3163e06a34070eccd6d9b201a67781fa362b2248abd6a641ff6f84b3898e22f754195fd0f222addf6d"], 0x8) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4}, 0x14) 2m36.262505026s ago: executing program 0 (id=5296): openat$pidfd(0xffffffffffffff9c, 0x0, 0xac63094eb3328933, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x3, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x2, 0x2, r3}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={r2, 0xd, 0x3, r2}) 2m35.963586334s ago: executing program 0 (id=5299): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) close_range(r0, 0xffffffffffffffff, 0x0) 2m20.755890105s ago: executing program 40 (id=5299): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) close_range(r0, 0xffffffffffffffff, 0x0) 16.886271777s ago: executing program 1 (id=5712): openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) memfd_create(0x0, 0xfe4f7789b86302de) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 16.836477719s ago: executing program 5 (id=5713): mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x2a, 0x2, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb00000000000100090000007fe708000000bdc8a0930136388520a54a95a0a1094ada47f103d4dda5db7d9eddd63c0d1832120bb29b66c45420de69818b4a042d06"]) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r1) r2 = socket(0x40000000015, 0x5, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="20000000320009000000000000000000010000000c0001800600000005470000f472669ce95d6b590bd8e3e1c953dec6fdb5cf0cf62179b7d0703e5e4019c3d51dd8be138dceefc7542b010c8093f6e160dfb63c581e71785b2f2b9772707c499240968f7542204bd060a303220beae8b9cc42060023815ff9084a46f661bf22f0cf5026d5d25165b1f066b46df8b4c1b4c73c422004a4848b55c8c13b43813d9d5e8e3b712cbe28c91d640ec4c812cedb3a411c06e5bce8de1420f3b4d989f479fd9d3a06c25ae7b7304dca0d5c1d42f01e95047b0921d6e1b3ed75930a817f67b3c7d0ec68"], 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x2004810) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x84, r6, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffc}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x50) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() tkill(r7, 0xb) socket$kcm(0x2, 0x3, 0x84) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) ptrace$pokeuser(0x6, r7, 0xfffffffffffffff8, 0x0) read$char_usb(r8, &(0x7f0000000080)=""/63, 0x3f) 15.870710715s ago: executing program 5 (id=5715): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) ftruncate(r2, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 15.622790113s ago: executing program 6 (id=5717): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) 13.892551959s ago: executing program 6 (id=5718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_io_uring_setup(0x69b6, &(0x7f0000000240)={0x0, 0xf1eb, 0x8, 0x0, 0x322}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071121100"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13.889825086s ago: executing program 5 (id=5728): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x72f140, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 12.916702892s ago: executing program 1 (id=5720): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 11.15130174s ago: executing program 5 (id=5722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r3, 0x0, 0x27}, 0x18) syz_init_net_socket$x25(0x9, 0x5, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x0, 0x2, @thr={&(0x7f0000000440)="8b7a798b259e906772e54107a2c0f20bbc865517a0d8398cae87c3fe7b2fced8e796663a70f5827e7b632fc15ea39bbb0e463c610140be51ad47aa9dc289a5fca7ea1919c71ce65589d5a11585e18d035fcb4fa9af7f4c4f10aff2b2687ce0e0bfc2c333a6f20859b8e2219dfedc1172ee33b0fb9c9d680009e56b9c9e", 0x0}}, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 11.150077227s ago: executing program 6 (id=5733): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x2, 0xe}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000004c0)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7, 0x4022, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x4, 0xd8, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 11.104687647s ago: executing program 3 (id=5723): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x332b, 0x0, 0x0, 0x0, 0x2a2}, [@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x93}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc2, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 10.030770148s ago: executing program 1 (id=5724): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0xa, 0x2, 0x0) r1 = io_uring_setup(0xadf, &(0x7f0000000080)={0x0, 0x5c54, 0x0, 0xfffffffe}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 10.014254774s ago: executing program 7 (id=5725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x24040000) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x4}, &(0x7f0000001200)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x23, 0x6000, @fd_index=0x6, 0x75a5, 0x0, 0x0, 0xa, 0x1}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) 9.795721927s ago: executing program 5 (id=5726): mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x2a, 0x2, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb00000000000100090000007fe708000000bdc8a0930136388520a54a95a0a1094ada47f103d4dda5db7d9eddd63c0d1832120bb29b66c45420de69818b4a042d06"]) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r1) r2 = socket(0x40000000015, 0x5, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="20000000320009000000000000000000010000000c0001800600000005470000f472669ce95d6b590bd8e3e1c953dec6fdb5cf0cf62179b7d0703e5e4019c3d51dd8be138dceefc7542b010c8093f6e160dfb63c581e71785b2f2b9772707c499240968f7542204bd060a303220beae8b9cc42060023815ff9084a46f661bf22f0cf5026d5d25165b1f066b46df8b4c1b4c73c422004a4848b55c8c13b43813d9d5e8e3b712cbe28c91d640ec4c812cedb3a411c06e5bce8de1420f3b4d989f479fd9d3a06c25ae7b7304dca0d5c1d42f01e95047b0921d6e1b3ed75930a817f67b3c7d0ec68"], 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x2004810) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x84, r6, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffc}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x50) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() tkill(r7, 0xb) socket$kcm(0x2, 0x3, 0x84) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) ptrace$pokeuser(0x6, r7, 0xfffffffffffffff8, 0x0) read$char_usb(r8, &(0x7f0000000080)=""/63, 0x3f) 9.794933833s ago: executing program 3 (id=5727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 8.511367027s ago: executing program 1 (id=5729): openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 8.276299068s ago: executing program 6 (id=5730): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000001880)={0xc, {"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", 0x1000}}, 0x1006) 6.331542983s ago: executing program 7 (id=5731): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r5, 0x615, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) 6.241489294s ago: executing program 3 (id=5732): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f0000000180)=[0x7ff, 0x1e1337fc, 0x3, 0x3, 0x54ad, 0x3, 0x2, 0x3]) r3 = fsmount(r1, 0x0, 0x8) pread64(r3, &(0x7f0000000140)=""/89, 0x59, 0x4) faccessat(r3, &(0x7f0000000040)='./file0\x00', 0x7) 6.220917091s ago: executing program 5 (id=5734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0003ce000000ab03bbf41da67ff8d0caf50829237808ff41b0afc0c15773e27809c290662befceaffcf005738ee626103fc1e000de57ac64b3baaeb5fcedc4142255cefa8e2b37bce2badfd2ef62b154aa153fab5475a564709154c923eba183c36a17ecdc2a869b5775380673062a5ad0846c2b0f6e5c2788c6c509d9f9550811aa0b950e11e09a706edd176f4d4d4bd453b0b1a6834cccf8b552f3654851a99d307bc5bfb3"]}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket(0x11, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') read$FUSE(r3, &(0x7f0000005b40)={0x2020}, 0x2020) 4.969887903s ago: executing program 1 (id=5735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_io_uring_setup(0x69b6, &(0x7f0000000240)={0x0, 0xf1eb, 0x8, 0x0, 0x322}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071121100"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 4.724015674s ago: executing program 6 (id=5736): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44008044}, 0x4000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x1d}) r4 = open(0x0, 0x141afd, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r4, 0x0, 0x0}, 0x10) 4.68819254s ago: executing program 3 (id=5737): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) close(0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(0x3) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x35}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.404568509s ago: executing program 7 (id=5738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r4, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 2.759519771s ago: executing program 6 (id=5739): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2.675367069s ago: executing program 3 (id=5740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xf, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.859416465s ago: executing program 7 (id=5741): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r4, &(0x7f0000000300)=""/154, 0x9a) 280.619911ms ago: executing program 7 (id=5742): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002580), 0x0, 0x0) shutdown(r3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) 259.661247ms ago: executing program 3 (id=5743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x3c, @multicast1, 0x4e24, 0x3, 'dh\x00', 0x4, 0x9, 0x2a}, 0x2c) socket$isdn(0x22, 0x2, 0x26) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 183.215763ms ago: executing program 1 (id=5744): mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x2a, 0x2, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb00000000000100090000007fe708000000bdc8a0930136388520a54a95a0a1094ada47f103d4dda5db7d9eddd63c0d1832120bb29b66c45420de69818b4a042d06"]) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r1) r2 = socket(0x40000000015, 0x5, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="20000000320009000000000000000000010000000c0001800600000005470000f472669ce95d6b590bd8e3e1c953dec6fdb5cf0cf62179b7d0703e5e4019c3d51dd8be138dceefc7542b010c8093f6e160dfb63c581e71785b2f2b9772707c499240968f7542204bd060a303220beae8b9cc42060023815ff9084a46f661bf22f0cf5026d5d25165b1f066b46df8b4c1b4c73c422004a4848b55c8c13b43813d9d5e8e3b712cbe28c91d640ec4c812cedb3a411c06e5bce8de1420f3b4d989f479fd9d3a06c25ae7b7304dca0d5c1d42f01e95047b0921d6e1b3ed75930a817f67b3c7d0ec68191c210523a2474f"], 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x2004810) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x84, r6, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffc}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x50) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() tkill(r7, 0xb) socket$kcm(0x2, 0x3, 0x84) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) ptrace$pokeuser(0x6, r7, 0xfffffffffffffff8, 0x0) read$char_usb(r8, &(0x7f0000000080)=""/63, 0x3f) 0s ago: executing program 7 (id=5745): syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000800)=""/196, 0x26, 0xc4, 0x1, 0x0, 0x0, @void, @value}, 0x20) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e050d3e20"], 0x8) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.0.3686'. [ 2302.401753][T22359] ISOFS: Unable to identify CD-ROM format. [ 2303.493279][T22371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3690'. [ 2311.786533][ T29] audit: type=1400 audit(2000001650.312:753): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=22409 comm="syz.0.3700" daddr=fc02::1 [ 2314.089612][T22429] dummy0: entered promiscuous mode [ 2314.095957][T22429] macsec1: entered allmulticast mode [ 2314.101645][T22429] dummy0: entered allmulticast mode [ 2315.062676][T22430] tipc: Enabled bearer , priority 10 [ 2315.075981][T22430] tipc: Enabled bearer , priority 0 [ 2315.352980][T22436] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 2316.277455][T22444] ALSA: seq fatal error: cannot create timer (-19) [ 2324.400883][T22479] SET target dimension over the limit! [ 2326.214346][T22485] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3713'. [ 2327.980232][T22501] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3719'. [ 2328.634587][T22505] fuse: Bad value for 'fd' [ 2330.189258][ T29] audit: type=1400 audit(2000001668.562:754): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=22513 comm="syz.6.3724" daddr=::ffff:172.20.20.187 [ 2330.951566][T22529] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3725'. [ 2330.973089][T22521] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3725'. [ 2331.056680][T22527] netlink: 'syz.6.3727': attribute type 1 has an invalid length. [ 2333.197785][ T29] audit: type=1800 audit(2000001671.712:755): pid=22540 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3728" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 2335.338189][T22559] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 2335.338189][T22559] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ׈¡E)Ð8+€î¶á÷' [ 2337.655195][T16469] Bluetooth: hci2: command 0x0405 tx timeout [ 2337.981185][T22572] macsec1: entered allmulticast mode [ 2339.866283][T22580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3740'. [ 2339.877962][T22598] Bluetooth: hci2: command 0x0405 tx timeout [ 2341.076721][T16469] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2342.000580][T22617] netlink: 'syz.1.3741': attribute type 1 has an invalid length. [ 2343.305159][T22623] PKCS7: Unknown OID: [5] (bad) [ 2343.310115][T22623] PKCS7: Only support pkcs7_signedData type [ 2343.317648][T22623] netlink: 'syz.3.3746': attribute type 1 has an invalid length. [ 2343.728061][T20281] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 2344.177985][T20281] usb 8-1: Using ep0 maxpacket: 16 [ 2344.192459][T20281] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2344.208734][T20281] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2344.224370][T20281] usb 8-1: Product: syz [ 2344.231009][T20281] usb 8-1: Manufacturer: syz [ 2344.236098][T20281] usb 8-1: SerialNumber: syz [ 2344.291214][T20281] usb 8-1: config 0 descriptor?? [ 2344.387889][T22650] netlink: 'syz.3.3751': attribute type 1 has an invalid length. [ 2344.656211][T19570] usb 8-1: USB disconnect, device number 22 [ 2345.079782][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.246713][T22471] udevd[22471]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2347.246036][T22669] vimc link validate: Scaler:src:16x16 (0x33424752, 8, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2347.529274][T22671] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3756'. [ 2347.712597][T22672] netlink: 'syz.7.3754': attribute type 10 has an invalid length. [ 2348.609130][T22675] dummy0: entered promiscuous mode [ 2348.614542][T22675] macsec0: entered allmulticast mode [ 2348.620072][T22675] dummy0: entered allmulticast mode [ 2348.871649][T22673] ISOFS: Unable to identify CD-ROM format. [ 2348.990068][T22675] dummy0: left allmulticast mode [ 2348.995272][T22675] dummy0: left promiscuous mode [ 2350.733794][T22685] trusted_key: encrypted_key: insufficient parameters specified [ 2352.841529][T16469] Bluetooth: hci2: command 0x0405 tx timeout [ 2356.908328][ T29] audit: type=1400 audit(2000001695.362:756): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=22702 comm="syz.1.3766" daddr=::ffff:172.20.20.42 dest=20004 [ 2357.827566][T22731] ISOFS: Unable to identify CD-ROM format. [ 2358.006111][T20281] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 2358.381638][T22736] netlink: 'syz.3.3774': attribute type 11 has an invalid length. [ 2359.279924][T20281] usb 7-1: config 255 has an invalid interface number: 242 but max is 0 [ 2359.298059][T20281] usb 7-1: config 255 has no interface number 0 [ 2359.447887][T20281] usb 7-1: config 255 interface 242 altsetting 6 endpoint 0x5 has invalid maxpacket 1023, setting to 8 [ 2359.470168][T20281] usb 7-1: config 255 interface 242 has no altsetting 0 [ 2359.708352][T20281] usb 7-1: string descriptor 0 read error: -22 [ 2359.714619][T20281] usb 7-1: New USB device found, idVendor=8569, idProduct=ee9d, bcdDevice=7f.9f [ 2359.743916][T20281] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2360.502541][T20281] usb 7-1: can't set config #255, error -71 [ 2360.540864][T20281] usb 7-1: USB disconnect, device number 27 [ 2360.554442][T22749] netlink: 'syz.3.3778': attribute type 10 has an invalid length. [ 2363.118632][T22769] sp0: Synchronizing with TNC [ 2363.207335][T22769] random: crng reseeded on system resumption [ 2363.355631][T22756] syz.7.3782: attempt to access beyond end of device [ 2363.355631][T22756] nbd7: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 2364.309171][T22756] XFS (nbd7): SB validate failed with error -5. [ 2365.908182][T20281] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 2366.888158][ T5867] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 2367.075628][T20281] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2367.281230][T20281] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2367.292952][T20281] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2367.305770][T20281] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2367.325590][T20281] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2367.842376][T20281] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2367.850965][T20281] usb 7-1: Product: syz [ 2367.857533][T20281] usb 7-1: Manufacturer: syz [ 2368.407978][ T5867] usb 8-1: device descriptor read/64, error -71 [ 2368.436778][T20281] usb 7-1: can't set config #1, error -71 [ 2368.562677][T20281] usb 7-1: USB disconnect, device number 28 [ 2368.938563][T22833] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3800'. [ 2369.802685][T22835] netlink: 'syz.6.3801': attribute type 10 has an invalid length. [ 2371.572484][T22876] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3815'. [ 2372.280832][T22877] netlink: 'syz.7.3816': attribute type 10 has an invalid length. [ 2373.561627][T22896] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3826'. [ 2373.634079][T22900] QAT: Device 16 not found [ 2374.019206][T22911] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3830'. [ 2374.507931][ T29] audit: type=1800 audit(2000001713.032:757): pid=22913 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3832" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 2374.956177][T22902] netlink: 'syz.7.3829': attribute type 1 has an invalid length. [ 2374.964992][T22902] netlink: 'syz.7.3829': attribute type 2 has an invalid length. [ 2376.044845][T22933] netlink: 'syz.0.3834': attribute type 10 has an invalid length. [ 2376.614727][T22941] netlink: 'syz.6.3836': attribute type 10 has an invalid length. [ 2376.632971][T22941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3836'. [ 2376.868856][T22943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3836'. [ 2377.160286][T22953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3843'. [ 2377.626885][ T29] audit: type=1800 audit(2000001716.152:758): pid=22961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3844" name="SYSV00000000" dev="tmpfs" ino=10 res=0 errno=0 [ 2380.532354][T22985] netlink: 'syz.7.3850': attribute type 10 has an invalid length. [ 2380.946670][T22998] PKCS7: Unknown OID: [5] (bad) [ 2380.951757][T22998] PKCS7: Only support pkcs7_signedData type [ 2380.960322][T22998] netlink: 'syz.6.3859': attribute type 1 has an invalid length. [ 2383.181918][T23015] netlink: 'syz.3.3862': attribute type 10 has an invalid length. [ 2383.986712][ T29] audit: type=1400 audit(2000001722.502:759): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=22994 comm="syz.7.3858" daddr=::ffff:172.20.20.187 [ 2384.060767][T23022] cgroup: Name too long [ 2384.222163][T23024] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3867'. [ 2384.289996][T23024] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 2384.371795][T23028] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 2385.058907][T23031] sp0: Synchronizing with TNC [ 2385.164579][T23031] random: crng reseeded on system resumption [ 2385.287345][T23035] PKCS7: Unknown OID: [5] (bad) [ 2385.292855][T23035] PKCS7: Only support pkcs7_signedData type [ 2385.300514][T23035] netlink: 'syz.3.3871': attribute type 1 has an invalid length. [ 2385.383135][T23036] netlink: 'syz.1.3869': attribute type 10 has an invalid length. [ 2385.445031][T23036] syz_tun: entered promiscuous mode [ 2385.534665][T23036] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2385.967777][ T5867] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 2386.723768][ T5867] usb 7-1: Using ep0 maxpacket: 16 [ 2386.757450][ T5867] usb 7-1: config 8 has an invalid interface number: 206 but max is 0 [ 2386.773375][ T5867] usb 7-1: config 8 has no interface number 0 [ 2386.780150][ T5867] usb 7-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 2386.792429][ T5867] usb 7-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 2386.805807][ T5867] usb 7-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2386.820517][ T5867] usb 7-1: config 8 interface 206 has no altsetting 0 [ 2386.830067][ T5867] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 2386.854414][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2386.874218][ T5867] usb 7-1: Product: syz [ 2386.885862][ T5867] usb 7-1: Manufacturer: syz [ 2386.894813][ T5867] usb 7-1: SerialNumber: syz [ 2386.908070][T20281] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 2387.068127][T20281] usb 8-1: Using ep0 maxpacket: 8 [ 2387.078283][T20281] usb 8-1: config 254 has an invalid interface number: 167 but max is 0 [ 2387.087681][T20281] usb 8-1: config 254 has no interface number 0 [ 2387.096014][T23066] netlink: 'syz.3.3882': attribute type 10 has an invalid length. [ 2387.109366][T20281] usb 8-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 2387.167853][T20281] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2387.175961][T20281] usb 8-1: Product: syz [ 2387.212382][T20281] usb 8-1: Manufacturer: syz [ 2387.217089][T20281] usb 8-1: SerialNumber: syz [ 2387.229903][T23070] netlink: 'syz.3.3883': attribute type 30 has an invalid length. [ 2387.254326][ T29] audit: type=1800 audit(2000001725.782:760): pid=23068 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.3881" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2387.305980][ T5867] garmin_gps 7-1:8.206: Garmin GPS usb/tty converter detected [ 2387.318835][ T5867] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 2387.329835][ T5867] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 2387.368520][ T5867] usb 7-1: USB disconnect, device number 29 [ 2387.400832][ T5867] garmin_gps 7-1:8.206: device disconnected [ 2387.465081][T23075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3885'. [ 2387.734165][T20281] mxuport 8-1:254.167: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 2387.763117][T20281] mxuport 8-1:254.167: probe with driver mxuport failed with error -5 [ 2387.808740][T20281] usb 8-1: USB disconnect, device number 25 [ 2388.778439][T23082] netlink: 'syz.3.3888': attribute type 10 has an invalid length. [ 2389.109735][T23098] netlink: 6128 bytes leftover after parsing attributes in process `syz.0.3894'. [ 2389.178079][T23101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2391.398945][T20281] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 2391.634882][T20281] usb 8-1: Using ep0 maxpacket: 16 [ 2391.653987][T20281] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2391.672852][T20281] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2391.690690][T20281] usb 8-1: Product: syz [ 2391.700229][T20281] usb 8-1: Manufacturer: syz [ 2391.712341][T20281] usb 8-1: SerialNumber: syz [ 2391.731677][T20281] usb 8-1: config 0 descriptor?? [ 2391.906613][T23149] netlink: 'syz.0.3913': attribute type 1 has an invalid length. [ 2392.090173][ T5867] usb 8-1: USB disconnect, device number 26 [ 2393.698219][T23191] Illegal XDP return value 4294967274 on prog (id 1016) dev N/A, expect packet loss! [ 2393.734210][T23195] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2393.748112][T23195] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 2393.764940][T23195] overlayfs: missing 'lowerdir' [ 2395.229814][ T29] audit: type=1400 audit(2000001733.752:761): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=23219 comm="syz.0.3943" daddr=::ac14:140c [ 2397.815370][T23269] netlink: 'syz.7.3961': attribute type 8 has an invalid length. [ 2397.893483][ T29] audit: type=1400 audit(2000001736.412:762): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=23272 comm="syz.6.3963" daddr=::700:0:0:0:1 dest=20001 [ 2398.087778][ T29] audit: type=1400 audit(2000001736.612:763): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=23280 comm="syz.6.3968" daddr=::ffff:0.0.0.0 [ 2398.119015][ T29] audit: type=1400 audit(2000001736.612:764): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=23280 comm="syz.6.3968" daddr=::ffff:0.0.0.0 dest=10 [ 2398.463854][ T29] audit: type=1400 audit(2000001736.992:765): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=23295 comm="syz.6.3976" dest=20002 [ 2398.688890][T13297] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 2398.860276][T13297] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2398.878781][T13297] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2398.898967][T13297] usb 8-1: config 0 descriptor?? [ 2398.905875][T13297] cp210x 8-1:0.0: cp210x converter detected [ 2398.929609][T23324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3986'. [ 2398.945190][T23324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3986'. [ 2399.199614][T13297] usb 8-1: cp210x converter now attached to ttyUSB0 [ 2399.318376][T20281] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 2399.605722][T13297] usb 8-1: USB disconnect, device number 27 [ 2399.616742][T20281] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2399.673055][T20281] usb 7-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 2399.686119][T13297] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2399.702578][T20281] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2399.714433][T13297] cp210x 8-1:0.0: device disconnected [ 2399.742611][T20281] usb 7-1: config 0 descriptor?? [ 2399.823351][T23338] netlink: 'syz.3.3991': attribute type 10 has an invalid length. [ 2400.177913][ T29] audit: type=1400 audit(2000001738.682:766): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=23343 comm="syz.0.3994" dest=20001 [ 2400.303065][T23346] netlink: 'syz.3.3992': attribute type 10 has an invalid length. [ 2401.108012][T20281] kye 0003:0458:5017.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 2401.148957][T20281] kye 0003:0458:5017.0004: hidraw0: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.6-1/input0 [ 2401.180082][T20281] kye 0003:0458:5017.0004: tablet-enabling feature report not found [ 2401.237963][T20281] kye 0003:0458:5017.0004: tablet enabling failed [ 2401.268852][T20281] usb 7-1: USB disconnect, device number 30 [ 2401.403180][ T29] audit: type=1400 audit(2000001739.922:767): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=23356 comm="syz.7.3999" daddr=::ffff:127.0.0.1 [ 2401.562895][T23368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4004'. [ 2401.598550][T23368] xfrm1: entered promiscuous mode [ 2401.603644][T23368] xfrm1: entered allmulticast mode [ 2401.638303][T23367] netlink: 'syz.3.4002': attribute type 10 has an invalid length. [ 2401.846654][T20281] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 2402.011151][T20281] usb 8-1: Using ep0 maxpacket: 32 [ 2402.022571][T20281] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 2402.031512][T20281] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2402.041862][T20281] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2402.051372][T20281] usb 8-1: config 1 has no interface number 0 [ 2402.058267][T20281] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2402.069816][T20281] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2402.083963][T20281] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2402.093445][T20281] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2402.106342][T20281] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 2402.118776][ T5867] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 2402.278013][ T5867] usb 7-1: Using ep0 maxpacket: 32 [ 2402.285543][ T5867] usb 7-1: config 0 has an invalid interface number: 191 but max is 0 [ 2402.293963][ T5867] usb 7-1: config 0 has no interface number 0 [ 2402.302491][ T5867] usb 7-1: New USB device found, idVendor=04fc, idProduct=0204, bcdDevice=67.67 [ 2402.311980][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.320382][ T5867] usb 7-1: Product: syz [ 2402.323921][T20281] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 2402.324546][ T5867] usb 7-1: Manufacturer: syz [ 2402.324563][ T5867] usb 7-1: SerialNumber: syz [ 2402.364003][ T5867] usb 7-1: config 0 descriptor?? [ 2402.373497][ T5867] spcp8x5 7-1:0.191: SPCP8x5 converter detected [ 2402.387590][ T5867] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 2402.614119][T20281] usb 7-1: USB disconnect, device number 31 [ 2402.639454][T20281] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 2402.666782][T20281] spcp8x5 7-1:0.191: device disconnected [ 2402.732213][T13297] usb 8-1: USB disconnect, device number 28 [ 2402.757913][T13297] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 2403.018656][T23402] netlink: 'syz.1.4017': attribute type 10 has an invalid length. [ 2404.314781][T23431] netlink: 'syz.3.4030': attribute type 10 has an invalid length. [ 2404.438535][T13297] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 2404.607928][T13297] usb 7-1: Using ep0 maxpacket: 16 [ 2404.633255][T13297] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 2404.655512][T13297] usb 7-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 2404.680451][T13297] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2405.397822][T13297] usb 7-1: config 0 descriptor?? [ 2405.863733][T23468] netlink: 'syz.7.4042': attribute type 10 has an invalid length. [ 2405.885539][T13297] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28BD:0909.0005/input/input25 [ 2405.975362][T13297] uclogic 0003:28BD:0909.0005: input,hidraw0: USB HID v0.03 Mouse [HID 28bd:0909] on usb-dummy_hcd.6-1/input0 [ 2406.081218][ T5867] usb 7-1: USB disconnect, device number 32 [ 2406.520568][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.738050][T13297] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 2406.787059][ T29] audit: type=1400 audit(2000001745.312:768): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=23489 comm="syz.6.4055" daddr=::ffff:172.20.20.32 dest=20003 [ 2406.817560][T23492] netlink: 'syz.3.4056': attribute type 10 has an invalid length. [ 2406.909665][T13297] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2406.926822][T13297] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2406.936508][T13297] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2406.975159][T13297] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2406.988189][T13297] usb 8-1: Product: syz [ 2406.992411][T13297] usb 8-1: Manufacturer: syz [ 2407.010767][T13297] usb 8-1: SerialNumber: syz [ 2407.023737][T13297] usb 8-1: config 0 descriptor?? [ 2407.040076][T13297] usb 8-1: selecting invalid altsetting 0 [ 2407.245984][T13297] usb 8-1: USB disconnect, device number 29 [ 2407.408960][T23508] /dev/nullb0: Can't lookup blockdev [ 2407.660581][ T29] audit: type=1800 audit(2000001746.022:769): pid=23510 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.4063" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 2408.732088][T22308] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 2409.073109][T22308] usb 7-1: Using ep0 maxpacket: 16 [ 2409.177622][T22308] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2409.187958][T22308] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2409.200663][T22308] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 2409.210108][T22308] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2409.218498][T22308] usb 7-1: SerialNumber: syz [ 2409.261104][T22308] usb 7-1: 0:2 : does not exist [ 2409.334747][T23527] netlink: 'syz.7.4068': attribute type 10 has an invalid length. [ 2409.467365][T22308] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2409.496063][T22308] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2409.518023][T22308] usb 7-1: USB disconnect, device number 33 [ 2410.312316][ T29] audit: type=1800 audit(2000001748.792:770): pid=23545 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.4075" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 2411.168066][ T5867] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 2411.353091][ T5867] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2411.362633][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2411.371033][ T5867] usb 7-1: Product: syz [ 2411.375267][ T5867] usb 7-1: Manufacturer: syz [ 2411.379991][ T5867] usb 7-1: SerialNumber: syz [ 2411.385967][ T5867] usb 7-1: config 0 descriptor?? [ 2413.098732][ T29] audit: type=1800 audit(2000001751.562:771): pid=23584 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.4092" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 2413.459108][T13299] usb 7-1: USB disconnect, device number 34 [ 2414.227764][ T29] audit: type=1800 audit(2000001752.692:772): pid=23593 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.4107" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 2416.457899][T13299] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 2416.636668][T13299] usb 7-1: config 0 has an invalid interface number: 33 but max is 0 [ 2416.646353][T13299] usb 7-1: config 0 has no interface number 0 [ 2416.655543][T13299] usb 7-1: New USB device found, idVendor=24cf, idProduct=59e4, bcdDevice= 9.43 [ 2416.673023][T13299] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2416.695599][T13299] usb 7-1: config 0 descriptor?? [ 2416.709783][T13299] usb-storage 7-1:0.33: USB Mass Storage device detected [ 2416.718280][T20281] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 2416.882588][T20281] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2416.903963][T20281] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2416.924737][T20281] usb 8-1: Product: syz [ 2416.932941][T20281] usb 8-1: Manufacturer: syz [ 2416.937662][T20281] usb 8-1: SerialNumber: syz [ 2416.950599][T20281] usb 8-1: config 0 descriptor?? [ 2417.003835][T13299] usb 7-1: USB disconnect, device number 35 [ 2417.281619][ T29] audit: type=1800 audit(2000001755.762:773): pid=23630 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.4110" name="SYSV00000000" dev="tmpfs" ino=11 res=0 errno=0 [ 2418.561472][T23635] netlink: 'syz.0.4112': attribute type 1 has an invalid length. [ 2418.597812][T23635] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4112'. [ 2418.632283][T23635] netlink: 'syz.0.4112': attribute type 1 has an invalid length. [ 2419.123618][T23635] netlink: 'syz.0.4112': attribute type 2 has an invalid length. [ 2419.281920][T20281] usb 8-1: USB disconnect, device number 30 [ 2419.578405][T23648] random: crng reseeded on system resumption [ 2420.280712][T23645] netlink: 'syz.0.4116': attribute type 10 has an invalid length. [ 2420.688892][ T29] audit: type=1800 audit(2000001758.452:774): pid=23655 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.4119" name="SYSV00000000" dev="tmpfs" ino=12 res=0 errno=0 [ 2420.692460][T23645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4116'. [ 2420.777888][T23645] bridge_slave_1: left allmulticast mode [ 2420.783634][T23645] bridge_slave_1: left promiscuous mode [ 2420.789542][T23645] bridge0: port 2(bridge_slave_1) entered disabled state [ 2420.941373][T23657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4116'. [ 2421.329550][T23645] bridge_slave_0: left allmulticast mode [ 2421.335247][T23645] bridge_slave_0: left promiscuous mode [ 2421.340952][T23645] bridge0: port 1(bridge_slave_0) entered disabled state [ 2421.442590][T23645] bridge0 (unregistering): left allmulticast mode [ 2423.210559][T23692] netlink: 'syz.1.4130': attribute type 10 has an invalid length. [ 2423.224862][T22308] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 2423.400057][T22308] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 2423.438400][T22308] usb 7-1: config 0 has no interface number 0 [ 2423.470490][T22308] usb 7-1: config 0 interface 29 has no altsetting 0 [ 2423.525707][T22308] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 2423.574685][T22308] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2423.616234][T22308] usb 7-1: Product: syz [ 2423.653160][T22308] usb 7-1: Manufacturer: syz [ 2423.677796][T22308] usb 7-1: SerialNumber: syz [ 2423.699998][T22308] usb 7-1: config 0 descriptor?? [ 2423.973340][T22308] peak_usb 7-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 2424.182735][T22308] peak_usb 7-1:0.29 can0: sending command failure: -22 [ 2424.196376][T22308] peak_usb 7-1:0.29 can0: sending command failure: -22 [ 2424.215202][T22308] peak_usb 7-1:0.29 can0: sending command failure: -22 [ 2424.288766][T22308] peak_usb 7-1:0.29: probe with driver peak_usb failed with error -22 [ 2424.402354][T22308] usb 7-1: USB disconnect, device number 36 [ 2424.531364][T23750] netlink: 'syz.7.4154': attribute type 10 has an invalid length. [ 2424.898298][T23754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4157'. [ 2424.913082][T23754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4157'. [ 2425.353691][T23773] PKCS7: Unknown OID: [5] (bad) [ 2425.358933][T23773] PKCS7: Only support pkcs7_signedData type [ 2425.573800][T22308] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 2425.581854][T23773] netlink: 'syz.6.4164': attribute type 1 has an invalid length. [ 2425.737770][T22308] usb 8-1: Using ep0 maxpacket: 32 [ 2425.749102][T22308] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2425.758861][T22308] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2425.777979][T22308] usb 8-1: config 0 descriptor?? [ 2425.794229][T22308] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2426.411347][T20281] usb 8-1: USB disconnect, device number 31 [ 2427.003487][T23792] bridge0: entered promiscuous mode [ 2427.018734][T23792] bridge0: entered allmulticast mode [ 2428.232476][T23833] netlink: 'syz.3.4189': attribute type 29 has an invalid length. [ 2428.537950][T19570] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 2428.697844][T19570] usb 7-1: Using ep0 maxpacket: 8 [ 2428.704645][T19570] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2428.715598][T19570] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2428.727511][T19570] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2428.736445][T22308] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 2428.744783][T19570] usb 7-1: Product: syz [ 2428.749314][T19570] usb 7-1: Manufacturer: syz [ 2428.754285][T19570] usb 7-1: SerialNumber: syz [ 2428.901723][T22308] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2428.909023][ T29] audit: type=1400 audit(2000001767.442:775): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=23842 comm="syz.3.4193" daddr=::ffff:224.0.0.2 [ 2428.928388][T22308] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2428.938826][T22308] usb 8-1: config 0 descriptor?? [ 2428.971386][T19570] usb 7-1: palm_os_3_probe - error -71 getting connection information [ 2428.990144][T19570] visor 7-1:1.0: probe with driver visor failed with error -71 [ 2429.006681][T19570] usb 7-1: USB disconnect, device number 37 [ 2429.367073][T22308] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 2429.374045][T22308] [drm] Initialized udl on minor 2 [ 2429.567517][T22308] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2429.589097][T22308] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 2429.601349][T19570] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2429.614591][T22308] usb 8-1: USB disconnect, device number 32 [ 2429.622834][T19570] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 2431.714134][T23887] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0 [ 2431.717206][T23882] IPVS: stopping backup sync thread 23887 ... [ 2432.867306][T23909] PKCS7: Unknown OID: [5] (bad) [ 2432.872384][T23909] PKCS7: Only support pkcs7_signedData type [ 2432.888459][T23908] netlink: 'syz.3.4218': attribute type 1 has an invalid length. [ 2433.497971][T13297] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 2433.579938][ T29] audit: type=1800 audit(2000001772.092:776): pid=23934 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.4226" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 2433.697222][T13297] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2433.936403][T13297] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2434.203205][T13297] usb 8-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00 [ 2434.212743][T13297] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2434.224517][T13297] usb 8-1: config 0 descriptor?? [ 2434.487927][T20281] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 2434.652488][T13297] hid-generic 0003:0EEF:C002.0006: unbalanced delimiter at end of report description [ 2434.668272][T20281] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2434.697159][T20281] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2434.706381][T13297] hid-generic 0003:0EEF:C002.0006: probe with driver hid-generic failed with error -22 [ 2434.723584][T20281] usb 7-1: Product: syz [ 2434.731517][T20281] usb 7-1: Manufacturer: syz [ 2434.736155][T20281] usb 7-1: SerialNumber: syz [ 2434.757866][T20281] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2435.409550][T23944] PKCS7: Unknown OID: [5] (bad) [ 2435.414485][T23944] PKCS7: Only support pkcs7_signedData type [ 2435.422704][T23944] netlink: 'syz.3.4232': attribute type 1 has an invalid length. [ 2435.492096][T22308] usb 8-1: USB disconnect, device number 33 [ 2435.598221][T13297] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2436.309777][T22308] usb 7-1: USB disconnect, device number 38 [ 2436.795310][T23980] ?: renamed from vlan0 (while UP) [ 2437.428088][T13297] usb 7-1: Service connection timeout for: 257 [ 2437.434315][T13297] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2437.447216][T13297] ath9k_htc: Failed to initialize the device [ 2437.523583][T22308] usb 7-1: ath9k_htc: USB layer deinitialized [ 2437.676104][ T29] audit: type=1400 audit(2000001776.202:777): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=23989 comm="syz.6.4251" [ 2440.212704][T24041] sctp: [Deprecated]: syz.6.4269 (pid 24041) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2440.212704][T24041] Use struct sctp_sack_info instead [ 2441.059957][T13293] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 2441.137238][T24052] random: crng reseeded on system resumption [ 2441.219510][T13293] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2441.239449][T13293] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2441.260452][T13293] usb 8-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 2441.269649][T13293] usb 8-1: New USB device strings: Mfr=0, Product=23, SerialNumber=0 [ 2441.287878][T13293] usb 8-1: Product: syz [ 2441.293528][T13293] usb 8-1: config 0 descriptor?? [ 2441.727623][T13293] wacom 0003:056A:0090.0007: ignoring exceeding usage max [ 2441.745594][T13293] wacom 0003:056A:0090.0007: hidraw0: USB HID v40.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 2441.975594][T22308] usb 8-1: USB disconnect, device number 34 [ 2442.115584][T24063] netlink: 'syz.3.4276': attribute type 10 has an invalid length. [ 2442.124165][T24063] bond0: left promiscuous mode [ 2442.135356][T24063] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 2442.142815][T24063] batadv0: left promiscuous mode [ 2442.157489][T24063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2442.167644][T24063] team0: Port device bond0 added [ 2442.335935][ T29] audit: type=1400 audit(2000001780.862:778): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=24068 comm="syz.6.4279" daddr=fc01:: [ 2443.208402][T24095] PKCS7: Unknown OID: [5] (bad) [ 2443.213462][T24095] PKCS7: Only support pkcs7_signedData type [ 2443.267274][T24095] netlink: 'syz.6.4288': attribute type 1 has an invalid length. [ 2443.370250][ T29] audit: type=1400 audit(2000001781.902:779): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=24098 comm="syz.1.4292" dest=20000 [ 2443.864375][ T29] audit: type=1800 audit(2000001782.302:780): pid=24107 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.4294" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 2444.607954][T22308] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 2444.769323][T22308] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2444.809650][T22308] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2444.853343][T22308] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2444.895786][T22308] usb 8-1: config 0 descriptor?? [ 2445.033465][T22308] pwc: Askey VC010 type 2 USB webcam detected. [ 2445.667930][T22308] pwc: recv_control_msg error -71 req 02 val 2700 [ 2445.686088][T22308] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2445.708593][T22308] pwc: recv_control_msg error -71 req 04 val 1000 [ 2445.718163][T22308] pwc: recv_control_msg error -71 req 04 val 1300 [ 2445.731361][T22308] pwc: recv_control_msg error -71 req 04 val 1400 [ 2445.746574][T22308] pwc: recv_control_msg error -71 req 02 val 2000 [ 2445.758367][T22308] pwc: recv_control_msg error -71 req 02 val 2100 [ 2445.774780][T22308] pwc: recv_control_msg error -71 req 04 val 1500 [ 2445.784309][T22308] pwc: recv_control_msg error -71 req 02 val 2500 [ 2445.804012][T22308] pwc: recv_control_msg error -71 req 02 val 2400 [ 2445.813157][T22308] pwc: recv_control_msg error -71 req 02 val 2600 [ 2445.823209][T22308] pwc: recv_control_msg error -71 req 02 val 2900 [ 2445.833552][T22308] pwc: recv_control_msg error -71 req 02 val 2800 [ 2445.844551][T22308] pwc: recv_control_msg error -71 req 04 val 1100 [ 2445.926508][T22308] pwc: recv_control_msg error -71 req 04 val 1200 [ 2445.942321][T22308] pwc: Registered as video103. [ 2445.955546][T22308] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input30 [ 2445.990142][T22308] usb 8-1: USB disconnect, device number 35 [ 2446.793604][T24173] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 2446.804971][T24174] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 1 [ 2446.806026][T24175] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 2 [ 2446.834708][T24176] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 3 [ 2447.235849][T24191] netlink: 'syz.7.4329': attribute type 1 has an invalid length. [ 2449.482193][ T29] audit: type=1800 audit(2000001787.922:781): pid=24241 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.4342" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 2449.997982][T20281] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 2450.160550][T20281] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 2450.191427][T20281] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2450.238621][T20281] usb 8-1: config 0 has no interface number 0 [ 2450.297872][T20281] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2450.319547][T20281] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2450.337503][T20281] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2450.347396][T20281] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2450.378190][T20281] usb 8-1: Product: syz [ 2450.383210][T20281] usb 8-1: Manufacturer: syz [ 2450.392074][T20281] usb 8-1: SerialNumber: syz [ 2450.409714][T20281] usb 8-1: config 0 descriptor?? [ 2450.481348][T24269] »»»»»» speed is unknown, defaulting to 1000 [ 2450.489286][T24269] »»»»»» speed is unknown, defaulting to 1000 [ 2450.867889][T13293] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 2451.017854][T13293] usb 7-1: Using ep0 maxpacket: 16 [ 2451.024805][T13293] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2451.045520][T22308] usb 8-1: USB disconnect, device number 36 [ 2451.045560][T13293] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2451.070314][T13293] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2451.083003][T13293] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2451.088495][T24281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4365'. [ 2451.094937][T13293] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2451.125228][T13293] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2451.136631][T13293] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2451.154462][T13293] usb 7-1: Manufacturer: syz [ 2451.163660][T13293] usb 7-1: config 0 descriptor?? [ 2452.297825][T13293] rc_core: IR keymap rc-hauppauge not found [ 2452.303789][T13293] Registered IR keymap rc-empty [ 2452.317940][T13293] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2452.338057][T13293] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2452.359110][T13293] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 2452.381358][T13293] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input32 [ 2452.415702][T13293] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2452.448027][T13293] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2452.467889][T13293] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2452.488177][T13293] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2452.508444][T13293] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2452.549810][T13293] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2452.568278][T13293] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2452.607939][T13293] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2452.656197][T13293] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2452.697920][T13293] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2452.718943][T13293] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 2452.743758][T13293] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2452.793933][T13293] usb 7-1: USB disconnect, device number 39 [ 2452.954670][ T29] audit: type=1800 audit(2000001791.462:782): pid=24309 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.4372" name="SYSV00000000" dev="tmpfs" ino=13 res=0 errno=0 [ 2453.686532][T24311] C: renamed from team_slave_0 [ 2453.697502][T24311] netlink: 'syz.3.4377': attribute type 1 has an invalid length. [ 2453.719645][T24311] netlink: 'syz.3.4377': attribute type 2 has an invalid length. [ 2453.749830][T24311] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4377'. [ 2453.765679][T24311] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2454.082441][T24325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4384'. [ 2454.175537][T24331] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4386'. [ 2454.239648][T22308] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 2454.407938][T22308] usb 7-1: Using ep0 maxpacket: 16 [ 2454.419938][T22308] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2454.430281][T22308] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2454.443092][T22308] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2454.452668][T22308] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2454.460876][T22308] usb 7-1: Product: syz [ 2454.465165][T22308] usb 7-1: Manufacturer: syz [ 2454.470024][T22308] usb 7-1: SerialNumber: syz [ 2454.891005][T22308] usb 7-1: cannot find UAC_HEADER [ 2454.917151][T22308] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2455.102114][T13293] usb 7-1: USB disconnect, device number 40 [ 2455.982062][T24368] netlink: 'syz.7.4402': attribute type 1 has an invalid length. [ 2458.260946][T20281] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 2458.853003][T20281] usb 7-1: Using ep0 maxpacket: 16 [ 2458.860634][T20281] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2458.874187][T20281] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2458.885911][T20281] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2458.898449][T20281] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2458.926665][T20281] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 2458.938072][T20281] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2458.958647][T20281] usb 7-1: config 0 descriptor?? [ 2458.964308][T24391] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2458.981079][T20281] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input33 [ 2459.143186][T24412] PKCS7: Unknown OID: [5] (bad) [ 2459.149370][T24412] PKCS7: Only support pkcs7_signedData type [ 2459.176650][T24412] netlink: 'syz.1.4423': attribute type 1 has an invalid length. [ 2459.219265][T20281] usb 7-1: USB disconnect, device number 41 [ 2460.965325][T24433] tipc: Enabling of bearer rejected, failed to enable media [ 2461.858312][T24460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4441'. [ 2463.579777][T24493] PKCS7: Unknown OID: [5] (bad) [ 2463.584713][T24493] PKCS7: Only support pkcs7_signedData type [ 2463.595129][T24493] netlink: 'syz.3.4453': attribute type 1 has an invalid length. [ 2465.925135][T24536] netlink: 'syz.0.4471': attribute type 10 has an invalid length. [ 2465.943108][T24536] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.4471'. [ 2466.227244][T24548] use of bytesused == 0 is deprecated and will be removed in the future, [ 2466.268714][T24548] use the actual size instead. [ 2467.687822][T20281] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 2467.857808][T20281] usb 8-1: Using ep0 maxpacket: 16 [ 2467.865982][T20281] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2467.904776][T20281] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2467.914099][T20281] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2467.925422][T20281] usb 8-1: Product: syz [ 2467.931947][T20281] usb 8-1: Manufacturer: syz [ 2467.936578][T20281] usb 8-1: SerialNumber: syz [ 2467.954842][T20281] usb 8-1: config 0 descriptor?? [ 2467.963019][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2468.037169][T24583] PKCS7: Unknown OID: [5] (bad) [ 2468.042268][T24583] PKCS7: Only support pkcs7_signedData type [ 2468.090094][T24583] netlink: 'syz.6.4489': attribute type 1 has an invalid length. [ 2468.178724][ T5867] usb 8-1: USB disconnect, device number 37 [ 2468.586871][T24599] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2468.826663][ T29] audit: type=1400 audit(2000001807.352:783): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=24603 comm="syz.7.4500" [ 2468.936391][T24608] netlink: 'syz.1.4501': attribute type 9 has an invalid length. [ 2470.342326][T24650] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4521'. [ 2470.491808][T24655] PKCS7: Unknown OID: [5] (bad) [ 2470.497093][T24655] PKCS7: Only support pkcs7_signedData type [ 2470.541215][T24655] netlink: 'syz.0.4522': attribute type 1 has an invalid length. [ 2471.212955][T24676] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4533'. [ 2472.840653][T24724] PKCS7: Unknown OID: [5] (bad) [ 2472.847783][T24724] PKCS7: Only support pkcs7_signedData type [ 2472.857357][T24724] netlink: 'syz.0.4554': attribute type 1 has an invalid length. [ 2472.922665][T24726] netlink: 'syz.6.4556': attribute type 1 has an invalid length. [ 2472.931056][T24726] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4556'. [ 2474.411013][T24745] ISOFS: Unable to identify CD-ROM format. [ 2475.417851][ T29] audit: type=1400 audit(2000001813.942:784): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=24761 comm="syz.1.4572" daddr=::ffff:172.20.20.0 [ 2475.561817][ T29] audit: type=1400 audit(2000001814.082:785): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=24763 comm="syz.1.4573" dest=2 [ 2475.725518][T24770] netlink: 'syz.7.4574': attribute type 1 has an invalid length. [ 2476.425454][ T29] audit: type=1326 audit(2000001814.952:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24782 comm="syz.7.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dc38d169 code=0x7ffc0000 [ 2476.467987][ T29] audit: type=1326 audit(2000001814.982:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24782 comm="syz.7.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa4dc329359 code=0x7ffc0000 [ 2476.491462][ T29] audit: type=1326 audit(2000001814.982:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24782 comm="syz.7.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dc38d169 code=0x7ffc0000 [ 2476.563812][ T29] audit: type=1326 audit(2000001814.982:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24782 comm="syz.7.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa4dc329359 code=0x7ffc0000 [ 2476.586014][ T29] audit: type=1326 audit(2000001814.982:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24782 comm="syz.7.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dc38d169 code=0x7ffc0000 [ 2476.648553][ T29] audit: type=1326 audit(2000001814.982:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24782 comm="syz.7.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa4dc329359 code=0x7ffc0000 [ 2476.670614][ T29] audit: type=1326 audit(2000001814.982:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24782 comm="syz.7.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dc38d169 code=0x7ffc0000 [ 2476.731696][ T29] audit: type=1326 audit(2000001814.982:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24782 comm="syz.7.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dc38d169 code=0x7ffc0000 [ 2476.731900][T24790] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 2477.371055][T24804] »»»»»» speed is unknown, defaulting to 1000 [ 2477.441937][T24804] »»»»»» speed is unknown, defaulting to 1000 [ 2477.797906][ T5823] Bluetooth: hci2: ISO packet too small [ 2477.927774][ T5867] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 2478.097835][ T5867] usb 7-1: Using ep0 maxpacket: 8 [ 2478.122525][ T5867] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2478.156347][ T5867] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2478.489125][ T5867] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2478.837643][ T5867] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2478.927857][ T5867] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2478.936945][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2479.219464][ T5867] usb 7-1: GET_CAPABILITIES returned 0 [ 2479.237423][ T5867] usbtmc 7-1:16.0: can't read capabilities [ 2479.513911][ T5867] usb 7-1: USB disconnect, device number 42 [ 2480.231666][T24845] block nbd0: NBD_DISCONNECT [ 2480.242431][T24845] block nbd0: Send disconnect failed -107 [ 2480.359118][T24850] netlink: 'syz.3.4604': attribute type 29 has an invalid length. [ 2480.391717][T24850] netlink: 'syz.3.4604': attribute type 29 has an invalid length. [ 2480.409762][T24850] netlink: 604 bytes leftover after parsing attributes in process `syz.3.4604'. [ 2480.450866][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 2480.450891][ T29] audit: type=1326 audit(2000001818.982:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24851 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abd58d169 code=0x7ffc0000 [ 2480.530837][ T29] audit: type=1326 audit(2000001819.022:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24851 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9abd529359 code=0x7ffc0000 [ 2480.594775][ T29] audit: type=1326 audit(2000001819.022:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24851 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abd58d169 code=0x7ffc0000 [ 2480.687976][ T29] audit: type=1326 audit(2000001819.022:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24851 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9abd529359 code=0x7ffc0000 [ 2480.793993][ T29] audit: type=1326 audit(2000001819.022:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24851 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abd58d169 code=0x7ffc0000 [ 2480.848003][T24857] macvlan0: entered promiscuous mode [ 2480.853353][T24857] bridge0: entered promiscuous mode [ 2480.871991][T24857] bridge0: port 1(macvlan0) entered blocking state [ 2480.889254][ T29] audit: type=1326 audit(2000001819.022:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24851 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9abd529359 code=0x7ffc0000 [ 2480.918213][T24857] bridge0: port 1(macvlan0) entered disabled state [ 2480.936361][T24857] macvlan0: entered allmulticast mode [ 2480.952328][T24857] bridge0: entered allmulticast mode [ 2480.964227][ T29] audit: type=1326 audit(2000001819.022:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24851 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abd58d169 code=0x7ffc0000 [ 2481.070052][ T29] audit: type=1326 audit(2000001819.022:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24851 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abd58d169 code=0x7ffc0000 [ 2481.118270][T24857] macvlan0: left allmulticast mode [ 2481.158409][ T29] audit: type=1326 audit(2000001819.022:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24851 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9abd529359 code=0x7ffc0000 [ 2481.169012][T24857] bridge0: left allmulticast mode [ 2481.237792][ T29] audit: type=1326 audit(2000001819.022:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24851 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abd58d169 code=0x7ffc0000 [ 2481.303832][T24857] bridge0: left promiscuous mode [ 2481.328483][T24868] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4612'. [ 2485.916945][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 2485.916962][ T29] audit: type=1400 audit(2000001824.442:939): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=24970 comm="syz.3.4652" daddr=fc02:: dest=20003 [ 2488.178212][ T5867] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 2488.342715][ T5867] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2488.385315][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2488.417996][ T5867] usb 7-1: Product: syz [ 2488.423469][ T5867] usb 7-1: Manufacturer: syz [ 2488.428819][ T5867] usb 7-1: SerialNumber: syz [ 2488.444402][ T5867] usb 7-1: config 0 descriptor?? [ 2489.762871][T20281] usb 7-1: USB disconnect, device number 43 [ 2491.380904][T25055] netlink: 'syz.1.4683': attribute type 1 has an invalid length. [ 2495.438277][T25097] tap0: tun_chr_ioctl cmd 1074025675 [ 2495.451992][T25097] tap0: persist enabled [ 2495.466492][T25097] tap0: tun_chr_ioctl cmd 1074025675 [ 2495.476442][T25097] tap0: persist disabled [ 2495.741803][ T29] audit: type=1400 audit(2000001834.272:940): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=25111 comm="syz.0.4702" daddr=fc02:: dest=20003 [ 2495.987902][ T5867] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 2496.176657][ T5867] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2496.189546][ T5867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2496.276583][ T5867] usb 8-1: config 0 descriptor?? [ 2496.299629][ T5867] cp210x 8-1:0.0: cp210x converter detected [ 2496.748142][ T5867] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2496.995332][ T5867] usb 8-1: cp210x converter now attached to ttyUSB0 [ 2497.317921][ T29] audit: type=1800 audit(2000001835.802:941): pid=25134 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.4706" name="SYSV00000000" dev="tmpfs" ino=14 res=0 errno=0 [ 2497.883540][T20281] usb 8-1: USB disconnect, device number 38 [ 2497.962490][T20281] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2498.035208][T25139] netlink: 'syz.3.4708': attribute type 1 has an invalid length. [ 2498.142897][T20281] cp210x 8-1:0.0: device disconnected [ 2498.176542][T25141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2498.548598][T20281] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 2498.702810][T20281] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2498.718324][T20281] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2498.743218][T20281] usb 7-1: Product: syz [ 2498.747429][T20281] usb 7-1: Manufacturer: syz [ 2498.752753][T20281] usb 7-1: SerialNumber: syz [ 2498.759475][T20281] usb 7-1: config 0 descriptor?? [ 2498.847758][ T5913] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 2499.969901][ T29] audit: type=1800 audit(2000001838.472:942): pid=25163 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.4718" name="SYSV00000000" dev="tmpfs" ino=7 res=0 errno=0 [ 2500.899428][T20281] usb 7-1: USB disconnect, device number 44 [ 2500.920705][ T5913] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2500.956261][T25166] netlink: 'syz.3.4720': attribute type 1 has an invalid length. [ 2500.968493][ T5913] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2500.991396][ T5913] usb 8-1: Product: syz [ 2501.037291][ T5913] usb 8-1: Manufacturer: syz [ 2501.042211][ T5913] usb 8-1: SerialNumber: syz [ 2501.068164][ T5913] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2501.086596][T22308] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2501.190992][T25172] netlink: 'syz.3.4722': attribute type 1 has an invalid length. [ 2501.720435][T13299] usb 8-1: USB disconnect, device number 39 [ 2502.293330][T22308] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 2502.331564][T22308] ath9k_htc: Failed to initialize the device [ 2502.472693][T13299] usb 8-1: ath9k_htc: USB layer deinitialized [ 2502.552606][T25184] netlink: 'syz.3.4726': attribute type 1 has an invalid length. [ 2502.747158][T25187] mkiss: ax0: crc mode is auto. [ 2503.117178][T25206] netlink: 'syz.3.4733': attribute type 1 has an invalid length. [ 2505.601605][T13299] kernel write not supported for file /sg0 (pid: 13299 comm: kworker/0:15) [ 2505.778080][ T29] audit: type=1400 audit(2000001844.302:943): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=25254 comm="syz.1.4749" daddr=::ffff:172.20.20.0 dest=20003 [ 2508.011744][T25298] netlink: 'syz.7.4766': attribute type 12 has an invalid length. [ 2508.026086][T25298] netlink: 'syz.7.4766': attribute type 29 has an invalid length. [ 2508.037852][T25298] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4766'. [ 2508.064145][T25298] netlink: 'syz.7.4766': attribute type 1 has an invalid length. [ 2508.102076][T25298] netlink: 47 bytes leftover after parsing attributes in process `syz.7.4766'. [ 2509.367412][T25321] netlink: 'syz.7.4772': attribute type 10 has an invalid length. [ 2509.395883][T25321] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4772'. [ 2509.438058][T25321] dummy0: entered promiscuous mode [ 2509.443783][T25321] bridge0: port 2(dummy0) entered blocking state [ 2509.479242][T25321] bridge0: port 2(dummy0) entered disabled state [ 2509.485815][T25321] dummy0: entered allmulticast mode [ 2509.495634][T25321] bridge0: port 2(dummy0) entered blocking state [ 2509.502130][T25321] bridge0: port 2(dummy0) entered forwarding state [ 2509.670276][ T29] audit: type=1400 audit(2000001848.192:944): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=25325 comm="syz.7.4774" daddr=::ffff:0.0.0.0 dest=20129 [ 2509.802246][T25329] input: syz0 as /devices/virtual/input/input34 [ 2509.922756][T25337] »»»»»» speed is unknown, defaulting to 1000 [ 2509.945697][T25337] »»»»»» speed is unknown, defaulting to 1000 [ 2511.377299][T25337] IPVS: You probably need to specify IP address on multicast interface. [ 2511.386840][T25337] IPVS: Error connecting to the multicast addr [ 2511.701840][T25370] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2511.865460][T25375] overlayfs: failed to clone lowerpath [ 2512.398072][T25384] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2512.835260][ T29] audit: type=1400 audit(2000001851.362:945): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=25394 comm="syz.3.4799" dest=2 [ 2514.276051][T25439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2515.193111][ T5867] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2515.230534][ T5867] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2515.667817][T20281] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 2515.829870][T20281] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2515.851459][T20281] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2515.878173][T20281] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2515.895620][T20281] usb 8-1: config 0 descriptor?? [ 2516.017483][T25483] netlink: 'syz.6.4832': attribute type 29 has an invalid length. [ 2516.083245][T25483] netlink: 'syz.6.4832': attribute type 29 has an invalid length. [ 2516.094289][T25487] netlink: 596 bytes leftover after parsing attributes in process `syz.6.4832'. [ 2516.555973][T25495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2517.079221][T20281] usbhid 8-1:0.0: can't add hid device: -71 [ 2517.085271][T20281] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2517.103183][T20281] usb 8-1: USB disconnect, device number 40 [ 2517.398393][T20281] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 2517.578087][T20281] usb 8-1: Using ep0 maxpacket: 16 [ 2517.609545][T20281] usb 8-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2518.578568][T20281] usb 8-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2518.642716][T20281] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2518.687818][T20281] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2518.777814][T20281] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2518.808588][T20281] usb 8-1: config 0 descriptor?? [ 2518.864902][T20281] usb 8-1: can't set config #0, error -71 [ 2518.931145][T20281] usb 8-1: USB disconnect, device number 41 [ 2519.486956][T25534] syzkaller1: entered promiscuous mode [ 2519.515615][T25534] syzkaller1: entered allmulticast mode [ 2519.631325][T25526] Set syz1 is full, maxelem 65536 reached [ 2519.897996][T25538] netlink: 1280 bytes leftover after parsing attributes in process `syz.7.4855'. [ 2520.572230][ T29] audit: type=1400 audit(2000001859.092:946): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=25552 comm="syz.7.4862" saddr=63.255.255.255 src=17475 daddr=172.20.20.170 dest=16961 [ 2520.727904][T13299] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 2520.881316][T13299] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2520.900563][T13299] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2520.916436][T13299] usb 7-1: Product: syz [ 2520.934326][T13299] usb 7-1: Manufacturer: syz [ 2520.939487][T13299] usb 7-1: SerialNumber: syz [ 2520.946031][T13299] usb 7-1: config 0 descriptor?? [ 2521.033321][T25567] netlink: 'syz.3.4867': attribute type 39 has an invalid length. [ 2521.876928][T25572] netlink: 'syz.3.4868': attribute type 39 has an invalid length. [ 2522.440719][T25578] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2522.477059][T13299] usb 7-1: USB disconnect, device number 45 [ 2522.523506][T25578] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2523.716542][ T29] audit: type=1400 audit(2000001862.242:947): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=25614 comm="syz.7.4886" dest=2 [ 2524.260991][T13299] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 2524.427885][T13299] usb 8-1: Using ep0 maxpacket: 32 [ 2524.444076][T13299] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2524.467985][T13299] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2524.492363][T13299] usb 8-1: Product: syz [ 2524.507175][T13299] usb 8-1: Manufacturer: syz [ 2524.517341][T13299] usb 8-1: SerialNumber: syz [ 2524.574240][T13299] usb 8-1: config 0 descriptor?? [ 2524.600859][T13299] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2525.150644][T25675] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 2525.279010][T25682] gretap0: entered promiscuous mode [ 2525.290114][T25682] gretap0: left promiscuous mode [ 2525.424674][T25690] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4918'. [ 2525.581981][T25695] macvlan3: entered promiscuous mode [ 2525.587497][T25695] macvlan3: entered allmulticast mode [ 2525.604766][T25695] bond_slave_0: entered promiscuous mode [ 2525.611102][T25695] bond_slave_1: entered promiscuous mode [ 2525.616876][T25695] batadv0: entered promiscuous mode [ 2525.629598][T25695] bond0: entered allmulticast mode [ 2525.635717][T25695] bond_slave_0: entered allmulticast mode [ 2525.645542][T25695] bond_slave_1: entered allmulticast mode [ 2525.654339][T25695] batadv0: entered allmulticast mode [ 2525.662924][T25695] bond0: entered promiscuous mode [ 2525.682844][T25695] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 2525.695861][T25695] team0: Port device macvlan3 added [ 2525.829652][T13299] gspca_ov534_9: reg_w failed -71 [ 2525.837907][T22308] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 2526.020618][T22308] usb 7-1: Using ep0 maxpacket: 8 [ 2526.029776][T22308] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2526.040182][T22308] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2526.048545][T22308] usb 7-1: Product: syz [ 2526.052769][T22308] usb 7-1: Manufacturer: syz [ 2526.057389][T22308] usb 7-1: SerialNumber: syz [ 2526.086037][T22308] usb 7-1: config 0 descriptor?? [ 2526.127931][T13299] gspca_ov534_9: Unknown sensor 0000 [ 2526.128005][T13299] ov534_9 8-1:0.0: probe with driver ov534_9 failed with error -22 [ 2526.149585][T13299] usb 8-1: USB disconnect, device number 42 [ 2526.306950][T22308] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2526.687932][T13293] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 2527.341660][T13293] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2527.356493][T13293] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2527.369439][T13293] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2527.380931][T13293] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2527.395750][T13293] usb 8-1: Product: syz [ 2527.401561][T13293] usb 8-1: Manufacturer: syz [ 2527.406183][T13293] usb 8-1: SerialNumber: syz [ 2527.629107][T25734] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2528.079070][T22308] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2528.491608][T22308] usb 7-1: USB disconnect, device number 46 [ 2528.635530][T25759] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4941'. [ 2528.654205][T25759] unsupported nlmsg_type 40 [ 2528.711067][T25734] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2528.932814][T13293] cdc_mbim 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2528.948986][T13293] cdc_mbim 8-1:1.0: setting rx_max = 16384 [ 2529.092586][T25776] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2529.102695][T25776] overlayfs: failed to set xattr on upper [ 2529.108777][T25776] overlayfs: ...falling back to redirect_dir=nofollow. [ 2529.116128][T25776] overlayfs: ...falling back to index=off. [ 2529.140007][T13293] cdc_mbim 8-1:1.0: setting tx_max = 16384 [ 2529.154698][T13293] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 2529.202459][T13293] wwan wwan0: port wwan0mbim0 attached [ 2529.230567][T13293] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, 42:42:42:42:42:42 [ 2529.982533][T13293] usb 8-1: USB disconnect, device number 43 [ 2529.993488][T13293] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 2530.081329][T13293] wwan wwan0: port wwan0mbim0 disconnected [ 2530.334685][T25798] »»»»»» speed is unknown, defaulting to 1000 [ 2530.370569][T25798] »»»»»» speed is unknown, defaulting to 1000 [ 2530.774384][T25805] kvm: emulating exchange as write [ 2531.278468][T25817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4960'. [ 2532.409255][T13299] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 2532.426998][T13299] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 2532.487412][T13299] hid-generic 0000:0003:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2532.669443][T25844] ISOFS: Unable to identify CD-ROM format. [ 2533.275285][ T29] audit: type=1800 audit(2000001871.802:948): pid=25864 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.4969" name="SYSV00000000" dev="tmpfs" ino=7 res=0 errno=0 [ 2535.148861][T25890] syz_tun: entered allmulticast mode [ 2535.156173][T25890] syz_tun: left allmulticast mode [ 2535.744817][T25907] netlink: 'syz.1.4989': attribute type 1 has an invalid length. [ 2536.364489][T25915] gtp0: entered promiscuous mode [ 2537.613099][ T29] audit: type=1800 audit(2000001876.142:949): pid=25931 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.4998" name="SYSV00000000" dev="tmpfs" ino=8 res=0 errno=0 [ 2537.665796][T25943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5002'. [ 2537.865753][T25949] netlink: 'syz.6.5003': attribute type 1 has an invalid length. [ 2538.501868][T25956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2539.384298][T25982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5021'. [ 2539.566178][T16469] Bluetooth: hci4: sending frame failed (-49) [ 2539.578034][ T5823] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 2539.675704][T25992] bond0: (slave syz_tun): Releasing backup interface [ 2539.690784][T25992] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2539.773314][T25992] team0: Port device bond0 removed [ 2539.805251][T25992] bond0: (slave batadv0): Releasing backup interface [ 2539.856307][T25992] bond0: (slave wlan1): Releasing backup interface [ 2540.527183][T26019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5035'. [ 2540.698787][T26023] ipvlan2: entered promiscuous mode [ 2540.894902][ T29] audit: type=1400 audit(2000001879.412:950): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=26028 comm="syz.1.5039" daddr=::ffff:172.20.20.187 [ 2541.763915][T26049] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 2541.778895][T26049] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2541.815416][T26056] overlayfs: failed to clone upperpath [ 2542.317974][T13293] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 2542.470203][T13293] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2542.566256][T13293] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2542.576813][T13293] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2542.595741][T13293] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2542.606991][T13293] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2542.647916][T13293] usb 8-1: config 0 descriptor?? [ 2543.089396][T13293] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 2543.159484][T13293] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2543.310538][T26100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5068'. [ 2543.344179][ T29] audit: type=1400 audit(2000001881.872:951): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=26099 comm="syz.1.5068" saddr=63.255.255.255 src=17475 daddr=172.20.20.170 dest=16961 netif=bpq0 [ 2543.413363][ T29] audit: type=1400 audit(2000001881.942:952): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=26103 comm="syz.3.5070" [ 2543.747847][T13299] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 2543.906232][T13299] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2543.936204][T13299] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2543.945010][T13293] usb 8-1: USB disconnect, device number 44 [ 2543.978194][T13299] usb 7-1: Product: syz [ 2543.992656][T13299] usb 7-1: Manufacturer: syz [ 2543.997305][T13299] usb 7-1: SerialNumber: syz [ 2544.025472][T13299] usb 7-1: config 0 descriptor?? [ 2545.637219][T13293] usb 7-1: USB disconnect, device number 47 [ 2546.697981][T26172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5096'. [ 2546.868070][T26181] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5097'. [ 2547.587992][T26198] policy can only be matched on NF_INET_PRE_ROUTING [ 2547.588021][T26198] unable to load match [ 2548.065159][T26212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5109'. [ 2548.525619][T26220] KVM: debugfs: duplicate directory 26220-4 [ 2548.544056][ T29] audit: type=1400 audit(2000001887.072:953): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=26221 comm="syz.1.5112" dest=2 [ 2549.198470][ T29] audit: type=1800 audit(2000001887.622:954): pid=26233 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.5115" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 2551.463687][ T29] audit: type=1800 audit(2000001889.942:955): pid=26265 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5116" name="SYSV00000000" dev="tmpfs" ino=15 res=0 errno=0 [ 2552.253296][T26272] MTD: Couldn't look up '/dev/nullb0': -15 [ 2552.548251][T26285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5132'. [ 2553.022556][T26290] ISOFS: Unable to identify CD-ROM format. [ 2553.725405][ T5867] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 2554.345602][ T29] audit: type=1800 audit(2000001892.192:956): pid=26300 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.5136" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 2554.517835][ T5867] usb 8-1: Using ep0 maxpacket: 32 [ 2554.525219][ T5867] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2554.533852][T26303] »»»»»» speed is unknown, defaulting to 1000 [ 2554.575855][ T5867] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 2554.596452][ T5867] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2554.605325][ T5867] usb 8-1: Product: syz [ 2554.609940][ T5867] usb 8-1: Manufacturer: syz [ 2554.614572][ T5867] usb 8-1: SerialNumber: syz [ 2554.628507][ T5867] usb 8-1: config 0 descriptor?? [ 2554.632709][T26303] »»»»»» speed is unknown, defaulting to 1000 [ 2554.637549][ T5867] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2554.687952][ T5867] pvrusb2: ********** [ 2554.697526][ T5867] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2554.712406][ T5867] pvrusb2: Important functionality might not be entirely working. [ 2554.726410][ T5867] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2554.751664][ T5867] pvrusb2: ********** [ 2554.850237][ T2341] pvrusb2: Invalid write control endpoint [ 2554.962412][ T2341] pvrusb2: Invalid write control endpoint [ 2554.970745][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2554.988863][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2555.003399][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2555.019996][ T2341] pvrusb2: Device being rendered inoperable [ 2555.062349][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2555.082305][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2555.091242][T26292] overlayfs: missing 'workdir' [ 2555.111083][ T5913] usb 8-1: USB disconnect, device number 45 [ 2555.128702][ T2341] pvrusb2: Attached sub-driver cx25840 [ 2555.138867][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2555.157868][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2555.237805][ T5867] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 2555.403430][ T5867] usb 7-1: Using ep0 maxpacket: 8 [ 2555.433327][ T5867] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2555.487849][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2555.495901][ T5867] usb 7-1: Product: syz [ 2555.521345][ T5867] usb 7-1: Manufacturer: syz [ 2555.526091][ T5867] usb 7-1: SerialNumber: syz [ 2555.548263][ T5867] usb 7-1: config 0 descriptor?? [ 2555.942472][ T5867] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2556.007452][T26336] netlink: 188 bytes leftover after parsing attributes in process `syz.7.5152'. [ 2556.017556][T26336] netlink: 'syz.7.5152': attribute type 1 has an invalid length. [ 2556.238698][ T29] audit: type=1800 audit(2000001894.622:957): pid=26338 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5150" name="SYSV00000000" dev="tmpfs" ino=16 res=0 errno=0 [ 2557.027759][ T29] audit: type=1400 audit(2000001895.552:958): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=26355 comm="syz.3.5157" daddr=::ffff:172.20.20.187 [ 2557.099505][ T5867] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2557.119781][ T5867] usb 7-1: USB disconnect, device number 48 [ 2559.149510][T26388] /dev/nullb0: Can't lookup blockdev [ 2563.238754][T26423] overlayfs: failed to clone upperpath [ 2563.822448][T26432] ISOFS: Unable to identify CD-ROM format. [ 2564.678031][T26445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5182'. [ 2565.387936][T13293] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 2565.547821][T13293] usb 7-1: Using ep0 maxpacket: 16 [ 2565.563832][T13293] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2565.584093][T13293] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2565.602727][T13293] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2565.612733][T13293] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2565.621486][T13293] usb 7-1: Product: syz [ 2565.626155][T13293] usb 7-1: Manufacturer: syz [ 2565.631353][T13293] usb 7-1: SerialNumber: syz [ 2565.863037][T13293] usb 7-1: 0:2 : does not exist [ 2565.873118][T13293] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2565.912541][T13293] usb 7-1: USB disconnect, device number 49 [ 2566.946851][ T29] audit: type=1400 audit(2000001905.472:959): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=26487 comm="syz.0.5194" dest=20002 [ 2567.867417][T26501] netlink: 'syz.1.5198': attribute type 1 has an invalid length. [ 2568.332566][T26503] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5200'. [ 2568.744798][T26526] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5206'. [ 2568.769932][T26525] ref_ctr increment failed for inode: 0x592 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888030cc09c0 [ 2568.783619][ T29] audit: type=1804 audit(2000001907.292:960): pid=26525 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.5207" name="/newroot/273/file0" dev="tmpfs" ino=1426 res=1 errno=0 [ 2568.805015][T26524] uprobe: syz.1.5207:26524 failed to unregister, leaking uprobe [ 2569.006843][ T29] audit: type=1800 audit(2000001907.532:961): pid=26529 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.5208" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 2569.695580][T26549] overlayfs: failed to clone upperpath [ 2570.213767][T26562] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5221'. [ 2570.618482][T26570] : entered promiscuous mode [ 2571.134267][ T29] audit: type=1400 audit(2000001909.662:962): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=26578 comm="syz.6.5228" daddr=::ffff:0.0.0.0 [ 2571.419041][T26589] overlayfs: failed to clone upperpath [ 2571.687795][T13299] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 2571.870807][T13299] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2571.902707][T13299] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2571.963579][T13299] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2571.980654][T13299] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2571.991397][T13299] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2572.028489][T13299] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2572.051318][T13299] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2572.052265][T26597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2572.066173][T13299] usb 7-1: Product: syz [ 2572.075467][T13299] usb 7-1: Manufacturer: syz [ 2572.085451][T13299] usb 7-1: SerialNumber: syz [ 2572.093920][T13299] usb 7-1: config 0 descriptor?? [ 2572.358643][T13299] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2572.462586][T13299] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2572.658164][T13299] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 2572.715810][T13299] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2572.861623][T13299] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2572.997147][T13299] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 2573.217084][T26623] netlink: 'syz.1.5242': attribute type 1 has an invalid length. [ 2573.745077][T26626] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5243'. [ 2573.910218][T13299] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 2573.927976][T13299] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22 [ 2573.998415][T13299] usb 7-1: USB disconnect, device number 50 [ 2575.663379][ T29] audit: type=1326 audit(2000001914.192:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26655 comm="syz.0.5254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9abd58d169 code=0x0 [ 2576.407186][T26667] pim6reg1: entered promiscuous mode [ 2576.412984][T26667] pim6reg1: entered allmulticast mode [ 2576.770053][T26671] ISOFS: Unable to identify CD-ROM format. [ 2577.037032][T26679] netlink: 'syz.1.5261': attribute type 1 has an invalid length. [ 2577.788516][T26691] overlayfs: failed to clone upperpath [ 2579.187284][T26726] overlayfs: failed to clone upperpath [ 2580.042252][T26742] netlink: 29 bytes leftover after parsing attributes in process `syz.7.5286'. [ 2580.067108][T26744] sctp: [Deprecated]: syz.3.5287 (pid 26744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2580.067108][T26744] Use struct sctp_sack_info instead [ 2581.061390][T26756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5292'. [ 2581.077076][T26756] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5292'. [ 2581.111546][T26756] erspan0: entered promiscuous mode [ 2581.145683][T26756] macvlan0: entered promiscuous mode [ 2581.181966][T26756] macvlan0: entered allmulticast mode [ 2581.389171][T26756] erspan0: entered allmulticast mode [ 2581.389382][T13299] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 2581.937956][T13299] usb 8-1: Using ep0 maxpacket: 32 [ 2581.944903][T13299] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 2581.966996][T13299] usb 8-1: config 0 has no interface number 0 [ 2581.990866][T13299] usb 8-1: config 0 interface 12 has no altsetting 0 [ 2582.015426][T13299] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2582.025328][T13299] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2582.033736][T13299] usb 8-1: Product: syz [ 2582.039501][T13299] usb 8-1: Manufacturer: syz [ 2582.043185][T26772] block nbd0: Device being setup by another task [ 2582.044113][T13299] usb 8-1: SerialNumber: syz [ 2582.045957][T13299] usb 8-1: config 0 descriptor?? [ 2582.107806][T26772] block nbd0: Device being setup by another task [ 2582.842085][T26778] block nbd0: Disconnected due to user request. [ 2582.873894][T26778] block nbd0: shutting down sockets [ 2583.100669][T26795] netlink: 'syz.1.5303': attribute type 1 has an invalid length. [ 2583.415749][T26797] Malformed UNC in devname [ 2583.415749][T26797] [ 2583.422913][T26797] CIFS: VFS: Malformed UNC in devname [ 2584.803642][T26810] sctp: [Deprecated]: syz.6.5308 (pid 26810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2584.803642][T26810] Use struct sctp_sack_info instead [ 2585.276197][T13299] f81534 8-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 2586.238013][T13299] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 2586.291316][T13299] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2587.293995][T13299] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 2587.369629][T13299] usb 8-1: USB disconnect, device number 46 [ 2588.275879][T26832] overlayfs: failed to clone upperpath [ 2588.490142][T26835] netlink: 'syz.7.5316': attribute type 1 has an invalid length. [ 2588.712325][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803fa68800: rx timeout, send abort [ 2588.724730][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803fa68c00: rx timeout, send abort [ 2589.063428][T26841] overlayfs: failed to clone upperpath [ 2589.238337][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803fa68800: abort rx timeout. Force session deactivation [ 2589.251298][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803fa68c00: abort rx timeout. Force session deactivation [ 2591.538661][T26839] Set syz1 is full, maxelem 65536 reached [ 2592.076770][T26861] input: syz0 as /devices/virtual/input/input35 [ 2592.438196][T26864] netlink: 'syz.7.5325': attribute type 1 has an invalid length. [ 2594.607065][T26875] netlink: 'syz.6.5329': attribute type 1 has an invalid length. [ 2594.763206][T26878] syzkaller0: Caught tx_queue_len zero misconfig [ 2594.848494][ T29] audit: type=1800 audit(2000001933.362:964): pid=26880 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.5331" name="nullb0" dev="tmpfs" ino=3322 res=0 errno=0 [ 2595.914722][ T29] audit: type=1326 audit(2000001934.442:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26888 comm="syz.6.5335" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbeed18d169 code=0x0 [ 2600.214158][T26921] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2600.294548][T22598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2600.353080][T22598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2600.363391][T22598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2600.438276][T22598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2600.449962][T22598] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2600.463196][T22598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2600.535908][T26927] »»»»»» speed is unknown, defaulting to 1000 [ 2600.594982][T16469] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 2600.605744][T16469] CPU: 1 UID: 0 PID: 16469 Comm: kworker/u9:0 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 2600.605769][T16469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2600.605782][T16469] Workqueue: hci2 hci_rx_work [ 2600.605808][T16469] Call Trace: [ 2600.605815][T16469] [ 2600.605823][T16469] dump_stack_lvl+0x241/0x360 [ 2600.605848][T16469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2600.605866][T16469] ? __pfx__printk+0x10/0x10 [ 2600.605896][T16469] ? __kmalloc_cache_noprof+0x243/0x390 [ 2600.605913][T16469] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 2600.605942][T16469] sysfs_create_dir_ns+0x2ce/0x3a0 [ 2600.605968][T16469] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2600.606002][T16469] kobject_add_internal+0x435/0x8d0 [ 2600.606035][T16469] kobject_add+0x152/0x220 [ 2600.606058][T16469] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2600.606078][T16469] ? device_add+0x3e7/0xbf0 [ 2600.606103][T16469] ? __pfx_kobject_add+0x10/0x10 [ 2600.606126][T16469] ? _raw_spin_unlock+0x28/0x50 [ 2600.606149][T16469] ? get_device_parent+0x165/0x410 [ 2600.606176][T16469] device_add+0x4e5/0xbf0 [ 2600.606206][T16469] hci_conn_add_sysfs+0xe8/0x200 [ 2600.606235][T16469] le_conn_complete_evt+0xd1a/0x1360 [ 2600.606270][T16469] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2600.606289][T16469] ? __mutex_unlock_slowpath+0x227/0x800 [ 2600.606325][T16469] ? __skb_clone+0x5c/0x6c0 [ 2600.606345][T16469] ? skb_pull_data+0x112/0x230 [ 2600.606370][T16469] hci_le_conn_complete_evt+0x18c/0x420 [ 2600.606399][T16469] hci_event_packet+0xa54/0x1540 [ 2600.606421][T16469] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2600.606448][T16469] ? __pfx_hci_event_packet+0x10/0x10 [ 2600.606464][T16469] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2600.606487][T16469] ? kcov_remote_start+0x410/0x7d0 [ 2600.606508][T16469] ? __get_immv32+0x50/0x350 [ 2600.606533][T16469] ? hci_send_to_monitor+0xdc/0x530 [ 2600.606556][T16469] hci_rx_work+0x3f3/0xdb0 [ 2600.606584][T16469] ? process_scheduled_works+0x9c6/0x18e0 [ 2600.606603][T16469] process_scheduled_works+0xabe/0x18e0 [ 2600.606652][T16469] ? __pfx_process_scheduled_works+0x10/0x10 [ 2600.606682][T16469] ? assign_work+0x364/0x3d0 [ 2600.606708][T16469] worker_thread+0x870/0xd30 [ 2600.606736][T16469] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2600.606760][T16469] ? __kthread_parkme+0x169/0x1d0 [ 2600.606785][T16469] ? __pfx_worker_thread+0x10/0x10 [ 2600.606805][T16469] kthread+0x7a9/0x920 [ 2600.606825][T16469] ? __pfx_kthread+0x10/0x10 [ 2600.606848][T16469] ? __pfx_worker_thread+0x10/0x10 [ 2600.606869][T16469] ? __pfx_kthread+0x10/0x10 [ 2600.606889][T16469] ? __pfx_kthread+0x10/0x10 [ 2600.606915][T16469] ? __pfx_kthread+0x10/0x10 [ 2600.606935][T16469] ? _raw_spin_unlock_irq+0x23/0x50 [ 2600.606953][T16469] ? lockdep_hardirqs_on+0x99/0x150 [ 2600.606972][T16469] ? __pfx_kthread+0x10/0x10 [ 2600.606995][T16469] ret_from_fork+0x4b/0x80 [ 2600.607014][T16469] ? __pfx_kthread+0x10/0x10 [ 2600.607037][T16469] ret_from_fork_asm+0x1a/0x30 [ 2600.607072][T16469] [ 2600.607097][T16469] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2600.913234][T16469] Bluetooth: hci2: failed to register connection device [ 2600.940723][T26927] »»»»»» speed is unknown, defaulting to 1000 [ 2602.213563][T26927] chnl_net:caif_netlink_parms(): no params data found [ 2602.570414][T16469] Bluetooth: hci1: command tx timeout [ 2603.503826][T26978] netlink: 'syz.3.5359': attribute type 7 has an invalid length. [ 2603.521950][T26978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5359'. [ 2603.584733][T26980] bridge3: port 1(macvlan0) entered blocking state [ 2603.591614][T26980] bridge3: port 1(macvlan0) entered disabled state [ 2603.598746][T26980] macvlan0: entered allmulticast mode [ 2603.838683][T26927] bridge0: port 1(bridge_slave_0) entered blocking state [ 2603.944615][T26927] bridge0: port 1(bridge_slave_0) entered disabled state [ 2604.082629][T26927] bridge_slave_0: entered allmulticast mode [ 2604.256523][T26927] bridge_slave_0: entered promiscuous mode [ 2604.298489][T26927] bridge0: port 2(bridge_slave_1) entered blocking state [ 2604.313725][T26927] bridge0: port 2(bridge_slave_1) entered disabled state [ 2604.324908][T26927] bridge_slave_1: entered allmulticast mode [ 2604.339855][T26927] bridge_slave_1: entered promiscuous mode [ 2604.389558][T26927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2604.402882][T26927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2604.451230][T26927] team0: Port device team_slave_0 added [ 2604.464002][T26927] team0: Port device team_slave_1 added [ 2604.499611][T26927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2604.506700][T26927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2604.538388][T26927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2604.552028][T26927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2604.563715][T26927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2604.595010][T26927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2604.607132][T16469] Bluetooth: hci1: command tx timeout [ 2604.657966][T26927] hsr_slave_0: entered promiscuous mode [ 2604.664506][T26927] hsr_slave_1: entered promiscuous mode [ 2604.671926][T26927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2604.679948][T26927] Cannot create hsr debugfs directory [ 2604.696524][T26992] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5363'. [ 2605.746955][ T29] audit: type=1800 audit(2000001944.282:966): pid=27002 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.5366" name="/" dev="9p" ino=2 res=0 errno=0 [ 2606.020028][T26927] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2606.071614][T26927] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2606.677837][T22598] Bluetooth: hci1: command tx timeout [ 2606.797309][T26927] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2606.831529][T26927] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2607.472766][T26927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2607.523463][T26927] 8021q: adding VLAN 0 to HW filter on device team0 [ 2607.553294][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 2607.560500][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2607.580205][T26859] bridge0: port 2(bridge_slave_1) entered blocking state [ 2607.587336][T26859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2608.282464][T16469] Bluetooth: hci2: command 0x0405 tx timeout [ 2608.519432][ T5867] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 2608.698319][ T5867] usb 7-1: Using ep0 maxpacket: 16 [ 2608.746621][ T5867] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2608.767795][T16469] Bluetooth: hci1: command tx timeout [ 2608.779155][ T5867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2608.793999][ T5867] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2608.803679][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2608.814976][T26927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2608.822465][ T5867] usb 7-1: Product: syz [ 2608.826657][ T5867] usb 7-1: Manufacturer: syz [ 2608.831948][ T5867] usb 7-1: SerialNumber: syz [ 2608.838659][ T5867] usb 7-1: config 0 descriptor?? [ 2608.846629][ T5867] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2608.860465][ T5867] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 2609.564753][T27052] /dev/nullb0: Can't lookup blockdev [ 2610.158570][ T5867] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 2610.168822][ T5867] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 2610.189110][T27054] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2611.778499][T26927] veth0_vlan: entered promiscuous mode [ 2611.794518][T26927] veth1_vlan: entered promiscuous mode [ 2611.836109][T26927] veth0_macvtap: entered promiscuous mode [ 2611.851554][T26927] veth1_macvtap: entered promiscuous mode [ 2611.876773][T26927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2611.894950][T26927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.925944][ T5867] em28xx 7-1:0.0: AC97 vendor ID = 0x00fc00fe [ 2611.928927][T26927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2611.995556][T26927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.012473][T26927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2612.044757][T26927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2612.055624][T26927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.067940][T26927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2612.078814][T26927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.089179][T26927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2612.099894][T26927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.110994][T26927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2612.122531][T26927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.136224][T26927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2612.148148][T26927] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2612.157135][ T5867] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 2612.165050][T26927] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2612.174321][ T5867] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 2612.180943][T26927] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2612.190316][T26927] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2612.190463][ T5867] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 2612.217117][ T5867] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 2612.229732][ T5867] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 2612.247968][ T5867] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 2612.270992][ T5867] usb 7-1: USB disconnect, device number 51 [ 2612.343110][T12077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2612.354150][T12077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2612.384072][T12077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2612.392848][T12077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2612.495855][T27083] kvm: pic: non byte read [ 2612.502505][T27083] kvm: pic: level sensitive irq not supported [ 2612.502599][T27083] kvm: pic: non byte read [ 2612.567853][T13299] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 2612.720015][T13299] usb 8-1: config 0 has no interfaces? [ 2612.725762][T13299] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 2612.735692][T13299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2612.754457][T13299] usb 8-1: config 0 descriptor?? [ 2613.524412][T27102] batadv_slave_1: entered promiscuous mode [ 2613.804087][T13286] usb 8-1: USB disconnect, device number 47 [ 2613.951655][T27101] batadv_slave_1: left promiscuous mode [ 2615.058488][ T5867] Process accounting resumed [ 2617.205434][T27153] netlink: 'syz.1.5409': attribute type 1 has an invalid length. [ 2617.300719][T27156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5410'. [ 2617.471051][T27156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5410'. [ 2617.744007][ T29] audit: type=1800 audit(2000001956.272:967): pid=27163 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.5413" name="/" dev="9p" ino=2 res=0 errno=0 [ 2618.109164][T27177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5418'. [ 2618.129454][T27177] tipc: Cannot configure node identity twice [ 2618.288111][ T5913] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2618.438203][ T5913] usb 6-1: Using ep0 maxpacket: 32 [ 2618.460302][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2618.493001][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2618.517793][ T5913] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2618.534715][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2618.537795][T20281] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 2618.545356][ T5913] usb 6-1: config 0 descriptor?? [ 2618.569953][ T5913] hub 6-1:0.0: USB hub found [ 2618.930362][T20281] usb 7-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 2619.175374][T20281] usb 7-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 2619.372599][T20281] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2619.399544][ T5913] hub 6-1:0.0: 1 port detected [ 2619.417913][T20281] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 2619.477910][T20281] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2619.505151][T20281] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2619.758941][T20281] ath6kl: Failed to submit usb control message: -71 [ 2619.765660][T20281] ath6kl: unable to send the bmi data to the device: -71 [ 2619.798456][T20281] ath6kl: Unable to send get target info: -71 [ 2619.811611][T20281] ath6kl: Failed to init ath6kl core: -71 [ 2619.829760][T20281] ath6kl_usb 7-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 2619.901173][T20281] usb 7-1: USB disconnect, device number 52 [ 2620.019016][T26819] usb 6-1: USB disconnect, device number 8 [ 2620.025748][ T5913] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 2621.551075][T27225] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 2621.554837][T27218] Process accounting resumed [ 2621.557622][T27225] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2621.610119][T27225] vhci_hcd vhci_hcd.0: Device attached [ 2621.631262][T27228] vhci_hcd: connection closed [ 2621.631513][ T6104] vhci_hcd: stop threads [ 2621.655192][ T6104] vhci_hcd: release socket [ 2621.678033][ T6104] vhci_hcd: disconnect device [ 2622.570069][ T29] audit: type=1400 audit(2000001961.092:968): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=27248 comm="syz.3.5441" daddr=::ffff:127.0.0.1 [ 2622.609225][ T5867] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 2622.888000][ T5867] usb 7-1: Using ep0 maxpacket: 16 [ 2622.897065][ T5867] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2623.177755][ T5867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2623.274948][ T5867] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2623.279958][T27258] kvm: pic: level sensitive irq not supported [ 2623.287101][T27258] kvm: pic: level sensitive irq not supported [ 2623.287661][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2623.294869][T27258] kvm: pic: level sensitive irq not supported [ 2623.391683][ T5867] usb 7-1: Product: syz [ 2623.434690][ T5867] usb 7-1: Manufacturer: syz [ 2623.572560][ T5867] usb 7-1: SerialNumber: syz [ 2624.373426][ T5867] usb 7-1: config 0 descriptor?? [ 2624.382404][ T5867] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2624.391778][ T5867] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 2625.735182][ T5867] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 2625.757409][ T5867] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 2627.720516][ T5867] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 2627.727482][ T5867] em28xx 7-1:0.0: No AC97 audio processor [ 2627.838312][ T5867] usb 7-1: USB disconnect, device number 53 [ 2627.846257][ T5867] em28xx 7-1:0.0: Disconnecting em28xx [ 2627.933765][ T5867] em28xx 7-1:0.0: Freeing device [ 2628.361176][T27308] netlink: 'syz.5.5456': attribute type 10 has an invalid length. [ 2628.369227][T27308] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5456'. [ 2628.381997][T27308] batman_adv: batadv0: Adding interface: wlan0 [ 2628.388390][T27308] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2628.413849][T27308] batman_adv: batadv0: Interface activated: wlan0 [ 2629.982677][T22598] Bluetooth: hci1: command 0x0405 tx timeout [ 2630.141443][T27318] netlink: 'syz.6.5460': attribute type 1 has an invalid length. [ 2630.802995][T27331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5466'. [ 2633.410518][T13299] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 2633.634806][T13299] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2633.691977][T13299] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2633.727570][T13299] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2633.739180][T13299] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2633.751270][T13299] usb 7-1: SerialNumber: syz [ 2633.967215][T13299] usb 7-1: 0:2 : does not exist [ 2633.990652][T13299] usb 7-1: USB disconnect, device number 54 [ 2634.124987][T27374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5479'. [ 2634.172046][T27374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2634.181959][T27374] batadv_slave_0: entered promiscuous mode [ 2634.847872][ T5867] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2634.902600][T27395] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5486'. [ 2634.914332][T27395] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5486'. [ 2635.033481][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2635.051620][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2635.062017][ T5867] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2635.072558][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2635.087249][ T5867] usb 6-1: config 0 descriptor?? [ 2635.892379][ T5867] usb 6-1: string descriptor 0 read error: -71 [ 2635.907016][ T5867] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #200: -71 [ 2635.926339][ T5867] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71 [ 2635.937660][ T5867] uclogic 0003:256C:006D.000B: failed probing pen v2 parameters: -71 [ 2635.945835][ T5867] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 2635.955988][ T5867] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71 [ 2635.973925][ T5867] usb 6-1: USB disconnect, device number 9 [ 2637.436290][ T29] audit: type=1326 audit(2000001975.882:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27418 comm="syz.6.5494" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbeed18d169 code=0x0 [ 2638.048042][ T5867] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2638.201630][T27439] overlayfs: failed to clone upperpath [ 2638.331260][T20281] Process accounting resumed [ 2638.954816][ T5867] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2638.965605][ T5867] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2638.974811][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2638.984912][ T5867] usb 6-1: config 0 descriptor?? [ 2638.992890][ T5867] pwc: Askey VC010 type 2 USB webcam detected. [ 2639.647851][ T5867] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2639.655598][ T5867] pwc: recv_control_msg error -32 req 02 val 2700 [ 2639.663171][ T5867] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2639.670828][ T5867] pwc: recv_control_msg error -32 req 04 val 1000 [ 2639.678269][ T5867] pwc: recv_control_msg error -32 req 04 val 1300 [ 2639.685890][ T5867] pwc: recv_control_msg error -32 req 04 val 1400 [ 2639.693273][ T5867] pwc: recv_control_msg error -32 req 02 val 2000 [ 2639.700961][ T5867] pwc: recv_control_msg error -32 req 02 val 2100 [ 2639.708409][ T5867] pwc: recv_control_msg error -32 req 04 val 1500 [ 2639.715845][ T5867] pwc: recv_control_msg error -32 req 02 val 2500 [ 2639.925249][ T5867] pwc: recv_control_msg error -71 req 02 val 2600 [ 2639.936351][ T5867] pwc: recv_control_msg error -71 req 02 val 2900 [ 2639.947074][ T5867] pwc: recv_control_msg error -71 req 02 val 2800 [ 2640.038555][ T5867] pwc: recv_control_msg error -71 req 04 val 1100 [ 2640.052057][ T5867] pwc: recv_control_msg error -71 req 04 val 1200 [ 2640.072587][ T5867] pwc: Registered as video103. [ 2640.079521][ T5867] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input36 [ 2640.098926][ T5867] usb 6-1: USB disconnect, device number 10 [ 2640.507836][T27469] sd 0:0:1:0: device reset [ 2642.856601][T27487] ISOFS: Unable to identify CD-ROM format. [ 2643.408276][T27492] program syz.7.5515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2646.209133][T27524] PKCS7: Unknown OID: [5] (bad) [ 2646.216493][T27524] PKCS7: Only support pkcs7_signedData type [ 2646.553579][T27519] »»»»»» speed is unknown, defaulting to 1000 [ 2646.571975][T27519] »»»»»» speed is unknown, defaulting to 1000 [ 2647.865254][T27539] PKCS7: Unknown OID: [5] (bad) [ 2647.870448][T27539] PKCS7: Only support pkcs7_signedData type [ 2653.608135][T27577] PKCS7: Unknown OID: [5] (bad) [ 2653.616353][T27577] PKCS7: Only support pkcs7_signedData type [ 2655.901990][T27585] PKCS7: Unknown OID: [5] (bad) [ 2655.906876][T27585] PKCS7: Only support pkcs7_signedData type [ 2658.294185][T19570] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 2659.261467][T19570] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2659.614372][T19570] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2659.660084][T19570] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2659.709699][T19570] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2659.740858][T27632] PKCS7: Unknown OID: [5] (bad) [ 2659.745991][T27632] PKCS7: Only support pkcs7_signedData type [ 2659.748573][T27618] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2659.775610][T27632] netlink: 'syz.1.5556': attribute type 1 has an invalid length. [ 2659.786124][T27633] PKCS7: Unknown OID: [5] (bad) [ 2659.791160][T27633] PKCS7: Only support pkcs7_signedData type [ 2659.890014][T19570] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2661.250359][ T29] audit: type=1326 audit(2000001999.782:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27645 comm="syz.5.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d858d169 code=0x7fc00000 [ 2661.297726][ T29] audit: type=1326 audit(2000001999.782:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27645 comm="syz.5.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65d858d169 code=0x7fc00000 [ 2661.345088][ T29] audit: type=1326 audit(2000001999.782:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27645 comm="syz.5.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d858d169 code=0x7fc00000 [ 2661.382319][ T29] audit: type=1326 audit(2000001999.782:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27645 comm="syz.5.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d858d169 code=0x7fc00000 [ 2661.419595][ T29] audit: type=1326 audit(2000001999.782:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27645 comm="syz.5.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d858d169 code=0x7fc00000 [ 2661.474063][ T29] audit: type=1326 audit(2000001999.782:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27645 comm="syz.5.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d858d169 code=0x7fc00000 [ 2662.064384][ T29] audit: type=1326 audit(2000001999.782:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27645 comm="syz.5.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65d858d169 code=0x7fc00000 [ 2662.350094][T26819] usb 7-1: USB disconnect, device number 55 [ 2662.385878][ T29] audit: type=1326 audit(2000001999.782:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27645 comm="syz.5.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d858d169 code=0x7fc00000 [ 2662.802501][ T29] audit: type=1326 audit(2000001999.782:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27645 comm="syz.5.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d858d169 code=0x7fc00000 [ 2663.101079][ T29] audit: type=1326 audit(2000001999.782:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27645 comm="syz.5.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d858d169 code=0x7fc00000 [ 2663.225649][T27666] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 2663.577805][T27677] PKCS7: Unknown OID: [5] (bad) [ 2663.582957][T27677] PKCS7: Only support pkcs7_signedData type [ 2663.807301][T27677] netlink: 'syz.7.5569': attribute type 1 has an invalid length. [ 2663.888253][T27680] rdma_op ffff8880754409f0 conn xmit_rdma 0000000000000000 [ 2664.951730][T27684] PKCS7: Unknown OID: [5] (bad) [ 2664.956696][T27684] PKCS7: Only support pkcs7_signedData type [ 2664.980125][T27684] netlink: 'syz.1.5571': attribute type 1 has an invalid length. [ 2665.714874][T27688] IPVS: set_ctl: invalid protocol: 41 172.20.20.28:20001 [ 2667.293267][T27694] overlayfs: failed to clone upperpath [ 2669.403667][T27729] PKCS7: Unknown OID: [5] (bad) [ 2669.408589][T27729] PKCS7: Only support pkcs7_signedData type [ 2669.415991][T27729] netlink: 'syz.3.5585': attribute type 1 has an invalid length. [ 2672.260044][T27759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5594'. [ 2672.810085][T27758] PKCS7: Unknown OID: [5] (bad) [ 2672.814972][T27758] PKCS7: Only support pkcs7_signedData type [ 2672.822299][T27758] netlink: 'syz.3.5596': attribute type 1 has an invalid length. [ 2672.843956][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 2672.843975][ T29] audit: type=1804 audit(2000002011.322:1037): pid=27764 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.5597" name="/newroot/40/bus/file0" dev="overlay" ino=236 res=1 errno=0 [ 2673.295937][T27780] »»»»»» speed is unknown, defaulting to 1000 [ 2673.306581][T27780] »»»»»» speed is unknown, defaulting to 1000 [ 2674.037759][T26819] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2674.059098][T22598] Bluetooth: hci2: unexpected event 0x03 length: 17 > 11 [ 2674.359869][T26819] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2674.384274][T26819] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2674.395494][T26819] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2674.407234][T26819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2675.120022][T27790] xt_SECMARK: invalid mode: 2 [ 2675.384573][T27773] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2675.416247][T26819] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2676.750894][T22598] Bluetooth: hci2: command 0x0405 tx timeout [ 2678.777863][T22598] Bluetooth: hci2: command 0x0405 tx timeout [ 2679.679119][ T5913] usb 6-1: USB disconnect, device number 11 [ 2680.342462][T27816] PKCS7: Unknown OID: [5] (bad) [ 2680.347494][T27816] PKCS7: Only support pkcs7_signedData type [ 2680.415559][T27816] netlink: 'syz.7.5611': attribute type 1 has an invalid length. [ 2682.337791][T26819] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 2682.404571][T27839] Bluetooth: hci4: Frame reassembly failed (-90) [ 2682.417758][T18016] Bluetooth: hci4: Frame reassembly failed (-84) [ 2682.509319][T26819] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2682.519915][T26819] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2682.530225][T26819] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2682.539648][T26819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2682.547869][T26819] usb 7-1: SerialNumber: syz [ 2682.761319][T26819] usb 7-1: 0:2 : does not exist [ 2682.772909][T26819] usb 7-1: USB disconnect, device number 56 [ 2683.136129][T27846] 9pnet_fd: Insufficient options for proto=fd [ 2685.235636][T22598] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2686.173460][T27865] PKCS7: Unknown OID: [5] (bad) [ 2686.178603][T27865] PKCS7: Only support pkcs7_signedData type [ 2686.191104][T27865] netlink: 'syz.7.5627': attribute type 1 has an invalid length. [ 2689.797741][ T29] audit: type=1400 audit(2000002028.282:1038): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=27888 comm="syz.3.5634" daddr=fc01::1 dest=1 [ 2690.355247][T27905] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5640'. [ 2690.372316][T27906] PKCS7: Unknown OID: [5] (bad) [ 2690.377231][T27906] PKCS7: Only support pkcs7_signedData type [ 2690.384598][T27906] netlink: 'syz.3.5641': attribute type 1 has an invalid length. [ 2691.710443][ T29] audit: type=1400 audit(2000002029.502:1039): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=27914 comm="syz.6.5632" dest=20002 [ 2693.946572][T27936] bridge_slave_0: left allmulticast mode [ 2693.953526][T27936] bridge_slave_0: left promiscuous mode [ 2693.962609][T27936] bridge0: port 1(bridge_slave_0) entered disabled state [ 2694.628705][T27936] bridge_slave_1: left allmulticast mode [ 2694.634444][T27936] bridge_slave_1: left promiscuous mode [ 2695.107894][T27936] bridge0: port 2(bridge_slave_1) entered disabled state [ 2695.161938][T27936] bond0: (slave bond_slave_0): Releasing backup interface [ 2695.355514][T27953] PKCS7: Unknown OID: [5] (bad) [ 2695.409244][T27953] PKCS7: Only support pkcs7_signedData type [ 2695.422760][T27936] bond0: (slave bond_slave_1): Releasing backup interface [ 2696.814101][T27961] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5654'. [ 2696.939062][T27961] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5654'. [ 2696.962336][T27936] team0: Port device team_slave_0 removed [ 2696.968369][T27961] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5654'. [ 2696.968429][T27961] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5654'. [ 2697.824136][T27970] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5655'. [ 2697.847311][T27936] team0: Port device team_slave_1 removed [ 2697.989956][T27936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2699.703277][T27936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2699.734454][T27936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2699.764635][T27981] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input37 [ 2699.805015][T27936] batman_adv: batadv0: Interface deactivated: wlan0 [ 2699.839911][T27936] batman_adv: batadv0: Removing interface: wlan0 [ 2699.886050][T27987] input: syz0 as /devices/virtual/input/input38 [ 2700.007487][T27965] batman_adv: batadv0: Adding interface: geneve2 [ 2700.021364][T27965] batman_adv: batadv0: The MTU of interface geneve2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2700.060481][T27965] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 2700.347860][T13286] usb 8-1: new full-speed USB device number 48 using dummy_hcd [ 2700.712023][T13286] usb 8-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 2700.727540][T13286] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2701.126288][T13286] usb 8-1: config 0 descriptor?? [ 2701.580013][T28008] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2702.539239][T28005] PKCS7: Unknown OID: [5] (bad) [ 2702.544162][T28005] PKCS7: Only support pkcs7_signedData type [ 2702.552311][T28005] netlink: 'syz.3.5667': attribute type 1 has an invalid length. [ 2702.695017][T13286] hkems 0003:2006:0118.000C: item fetching failed at offset 1/5 [ 2703.060409][T13286] hkems 0003:2006:0118.000C: parse failed [ 2703.068301][T13286] hkems 0003:2006:0118.000C: probe with driver hkems failed with error -22 [ 2703.449754][T28019] vlan2: entered promiscuous mode [ 2704.058228][T13286] usb 8-1: USB disconnect, device number 48 [ 2704.136518][T28019] bond0: entered promiscuous mode [ 2704.157283][T28019] bond0: left promiscuous mode [ 2708.245408][T28062] PKCS7: Unknown OID: [5] (bad) [ 2708.250675][T28062] PKCS7: Only support pkcs7_signedData type [ 2708.320457][T28062] netlink: 'syz.7.5681': attribute type 1 has an invalid length. [ 2711.056747][T28076] kvm: kvm [28075]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3b3 [ 2711.067467][T28076] kvm: kvm [28075]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3b3 [ 2711.088963][T28076] kvm: kvm [28075]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3b3 [ 2711.107202][T28076] kvm: kvm [28075]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3b3 [ 2711.125065][T28076] kvm: kvm [28075]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3b3 [ 2711.135598][T28076] kvm: kvm [28075]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3b3 [ 2711.269572][T28076] kvm: kvm [28075]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3b3 [ 2711.339633][T28076] kvm: kvm [28075]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3b3 [ 2712.930035][T28092] SET target dimension over the limit! [ 2712.942602][ T29] audit: type=1400 audit(2000002051.452:1040): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=28091 comm="syz.1.5691" [ 2714.239357][T28096] delete_channel: no stack [ 2714.539214][T28110] PKCS7: Unknown OID: [5] (bad) [ 2714.544765][T28110] PKCS7: Only support pkcs7_signedData type [ 2714.594382][T28110] netlink: 'syz.5.5696': attribute type 1 has an invalid length. [ 2721.329182][T28162] PKCS7: Unknown OID: [5] (bad) [ 2721.334224][T28162] PKCS7: Only support pkcs7_signedData type [ 2721.342657][T28162] netlink: 'syz.5.5713': attribute type 1 has an invalid length. [ 2722.080833][T28160] overlayfs: failed to clone lowerpath [ 2724.445657][T22598] Bluetooth: hci1: command 0x0405 tx timeout [ 2728.971905][ T29] audit: type=1400 audit(2000002067.502:1041): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=28208 comm="syz.1.5724" dest=20000 [ 2731.251582][T28223] PKCS7: Unknown OID: [5] (bad) [ 2731.256577][T28223] PKCS7: Only support pkcs7_signedData type [ 2731.267291][T28223] netlink: 'syz.5.5726': attribute type 1 has an invalid length. [ 2736.052592][ T29] audit: type=1400 audit(2000002073.892:1042): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=28253 comm="syz.7.5738" daddr=2001:: [ 2738.767216][T28269] delete_channel: no stack [ 2738.787844][ T30] INFO: task syz.0.5299:26778 blocked for more than 144 seconds. [ 2738.795626][ T30] Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 2738.913467][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2738.969025][T28276] PKCS7: Unknown OID: [5] (bad) [ 2738.974220][T28276] PKCS7: Only support pkcs7_signedData type [ 2739.031625][T28276] netlink: 'syz.1.5744': attribute type 1 has an invalid length. [ 2739.055987][ T30] task:syz.0.5299 state:D stack:27232 pid:26778 tgid:26771 ppid:16467 task_flags:0x400140 flags:0x00004004 [ 2739.263061][ T30] Call Trace: [ 2739.277372][ T30] [ 2739.334286][ T30] __schedule+0x18bc/0x4c40 [ 2739.380849][ T30] ? __pfx___schedule+0x10/0x10 [ 2739.561865][ T30] ? __pfx_lock_release+0x10/0x10 [ 2739.566979][ T30] ? schedule+0x90/0x320 [ 2739.587395][ T30] schedule+0x14b/0x320 [ 2739.596348][ T30] schedule_timeout+0xb0/0x290 [ 2739.603589][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 2740.356314][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2740.364283][ T30] ? wait_for_completion+0x2fe/0x620 [ 2740.370257][ T30] ? wait_for_completion+0x2fe/0x620 [ 2740.375583][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2740.381400][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2740.386757][ T30] ? wait_for_completion+0x2fe/0x620 [ 2740.392664][ T30] wait_for_completion+0x355/0x620 [ 2740.398036][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 2740.403707][ T30] ? flush_workqueue_prep_pwqs+0x4c3/0x530 [ 2740.410023][ T30] ? check_flush_dependency+0x88/0x3c0 [ 2740.415527][ T30] ? __flush_workqueue+0x504/0x1280 [ 2740.420938][ T30] __flush_workqueue+0x575/0x1280 [ 2740.426003][ T30] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 2740.431981][ T30] ? __pfx___flush_workqueue+0x10/0x10 [ 2740.437479][ T30] ? blk_mq_run_hw_queue+0x299/0x500 [ 2740.442892][ T30] ? __pfx_blk_mq_run_hw_queues+0x10/0x10 [ 2740.448873][ T30] ? blk_mq_unquiesce_queue+0xc0/0x120 [ 2740.454375][ T30] nbd_ioctl+0xbd1/0xf40 [ 2740.458888][ T30] ? __pfx_nbd_ioctl+0x10/0x10 [ 2740.463687][ T30] ? __asan_memset+0x23/0x50 [ 2740.468512][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2740.474713][ T30] ? __pfx_smack_file_ioctl+0x10/0x10 [ 2740.480167][ T30] ? file_to_blk_mode+0xcc/0x140 [ 2740.485126][ T30] ? __pfx_nbd_ioctl+0x10/0x10 [ 2740.490167][ T30] blkdev_ioctl+0x5d0/0x6f0 [ 2740.494721][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2740.499834][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2740.504881][ T30] __se_sys_ioctl+0xf5/0x170 [ 2740.509772][ T30] do_syscall_64+0xf3/0x230 [ 2740.514310][ T30] ? clear_bhb_loop+0x35/0x90 [ 2740.519065][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2740.524989][ T30] RIP: 0033:0x7f9abd58d169 [ 2740.529672][ T30] RSP: 002b:00007f9abb3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2740.538419][ T30] RAX: ffffffffffffffda RBX: 00007f9abd7a6080 RCX: 00007f9abd58d169 [ 2740.546417][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 2740.554659][ T30] RBP: 00007f9abd60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 2740.562832][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2740.571226][ T30] R13: 0000000000000001 R14: 00007f9abd7a6080 R15: 00007ffc9c5abea8 [ 2740.579264][ T30] [ 2740.582315][ T30] [ 2740.582315][ T30] Showing all locks held in the system: [ 2740.607727][ T30] 1 lock held by rcu_exp_gp_kthr/19: [ 2740.613073][ T30] 1 lock held by khungtaskd/30: [ 2740.627746][ T30] #0: ffffffff8eb38fa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 2740.647856][ T30] 2 locks held by getty/5582: [ 2740.655004][ T30] #0: ffff888035a790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2740.680197][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 2740.707523][ T30] 2 locks held by kworker/u9:3/5823: [ 2740.713100][ T30] #0: ffff888025f03148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 2740.724576][ T30] #1: ffffc900042cfc60 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 2740.736477][ T30] 1 lock held by syz-executor/10076: [ 2740.742005][ T30] #0: ffffffff8eb3e478 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 2740.753232][ T30] [ 2740.756163][ T30] ============================================= [ 2740.756163][ T30] [ 2740.767252][ T30] NMI backtrace for cpu 0 [ 2740.767267][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 2740.767280][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2740.767286][ T30] Call Trace: [ 2740.767290][ T30] [ 2740.767295][ T30] dump_stack_lvl+0x241/0x360 [ 2740.767312][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2740.767322][ T30] ? __pfx__printk+0x10/0x10 [ 2740.767342][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 2740.767357][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2740.767367][ T30] ? _printk+0xd5/0x120 [ 2740.767379][ T30] ? __pfx__printk+0x10/0x10 [ 2740.767391][ T30] ? __wake_up_klogd+0xcc/0x110 [ 2740.767403][ T30] ? __pfx__printk+0x10/0x10 [ 2740.767416][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 2740.767429][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2740.767441][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2740.767453][ T30] watchdog+0x1058/0x10a0 [ 2740.767467][ T30] ? watchdog+0x1ea/0x10a0 [ 2740.767482][ T30] ? __pfx_watchdog+0x10/0x10 [ 2740.767494][ T30] kthread+0x7a9/0x920 [ 2740.767507][ T30] ? __pfx_kthread+0x10/0x10 [ 2740.767520][ T30] ? __pfx_watchdog+0x10/0x10 [ 2740.767541][ T30] ? __pfx_kthread+0x10/0x10 [ 2740.767559][ T30] ? __pfx_kthread+0x10/0x10 [ 2740.767580][ T30] ? __pfx_kthread+0x10/0x10 [ 2740.767598][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2740.767614][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2740.767633][ T30] ? __pfx_kthread+0x10/0x10 [ 2740.767654][ T30] ret_from_fork+0x4b/0x80 [ 2740.767672][ T30] ? __pfx_kthread+0x10/0x10 [ 2740.767692][ T30] ret_from_fork_asm+0x1a/0x30 [ 2740.767720][ T30] [ 2740.931476][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2740.936726][ C1] NMI backtrace for cpu 1 [ 2740.936740][ C1] CPU: 1 UID: 0 PID: 5807 Comm: syz-executor Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 2740.936759][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2740.936770][ C1] RIP: 0010:tcp_recvmsg_locked+0x30/0x3a80 [ 2740.936799][ C1] Code: 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec e0 03 00 00 4c 89 8c 24 a8 01 00 00 4c 89 84 24 68 01 00 00 89 4c 24 44 <48> 89 94 24 a8 00 00 00 48 89 b4 24 a0 00 00 00 48 89 fb 65 48 8b [ 2740.936813][ C1] RSP: 0018:ffffc9000411f520 EFLAGS: 00000282 [ 2740.936827][ C1] RAX: 4500023686446000 RBX: ffffc9000411f9d0 RCX: 0000000000000040 [ 2740.936839][ C1] RDX: 0000000000000004 RSI: ffffc9000411fbc0 RDI: ffff88807b1b9980 [ 2740.936850][ C1] RBP: ffffc9000411f930 R08: ffffc9000411f9d0 R09: ffffc9000411f9c0 [ 2740.936862][ C1] R10: dffffc0000000000 R11: fffffbfff28a2722 R12: dffffc0000000000 [ 2740.936873][ C1] R13: ffff88807b1b9980 R14: ffffc9000411f9c0 R15: ffffc9000411fbc0 [ 2740.936885][ C1] FS: 0000555576806500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 2740.936899][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2740.936909][ C1] CR2: 00007f65d8778ab8 CR3: 0000000078b6a000 CR4: 00000000003526f0 [ 2740.936923][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2740.936933][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2740.936943][ C1] Call Trace: [ 2740.936949][ C1] [ 2740.936956][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2740.936979][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2740.937003][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2740.937019][ C1] ? nmi_handle+0x2a/0x5a0 [ 2740.937048][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2740.937065][ C1] ? nmi_handle+0x14f/0x5a0 [ 2740.937085][ C1] ? nmi_handle+0x2a/0x5a0 [ 2740.937106][ C1] ? tcp_recvmsg_locked+0x30/0x3a80 [ 2740.937128][ C1] ? default_do_nmi+0x63/0x160 [ 2740.937143][ C1] ? exc_nmi+0x123/0x1f0 [ 2740.937158][ C1] ? end_repeat_nmi+0xf/0x53 [ 2740.937184][ C1] ? tcp_recvmsg_locked+0x30/0x3a80 [ 2740.937206][ C1] ? tcp_recvmsg_locked+0x30/0x3a80 [ 2740.937229][ C1] ? tcp_recvmsg_locked+0x30/0x3a80 [ 2740.937251][ C1] [ 2740.937256][ C1] [ 2740.937262][ C1] ? __pfx_validate_chain+0x10/0x10 [ 2740.937278][ C1] ? validate_chain+0x11e/0x5920 [ 2740.937301][ C1] ? mark_lock+0x9a/0x360 [ 2740.937333][ C1] ? mark_lock+0x9a/0x360 [ 2740.937356][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2740.937378][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2740.937401][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 2740.937416][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 2740.937436][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 2740.937451][ C1] ? tcp_recvmsg+0x23c/0x920 [ 2740.937472][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2740.937493][ C1] tcp_recvmsg+0x25d/0x920 [ 2740.937518][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 2740.937546][ C1] ? sock_rps_record_flow+0x1a/0x400 [ 2740.937564][ C1] ? inet_recvmsg+0xde/0x2d0 [ 2740.937582][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 2740.937603][ C1] inet_recvmsg+0x150/0x2d0 [ 2740.937623][ C1] ? __pfx_inet_recvmsg+0x10/0x10 [ 2740.937644][ C1] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 2740.937663][ C1] sock_recvmsg+0x1ae/0x280 [ 2740.937683][ C1] sock_read_iter+0x2c4/0x3d0 [ 2740.937700][ C1] ? __pfx_sock_read_iter+0x10/0x10 [ 2740.937721][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 2740.937744][ C1] vfs_read+0x975/0xb40 [ 2740.937766][ C1] ? __pfx_vfs_read+0x10/0x10 [ 2740.937785][ C1] ? rcu_is_watching+0x15/0xb0 [ 2740.937807][ C1] ksys_read+0x18f/0x2b0 [ 2740.937826][ C1] ? __pfx_ksys_read+0x10/0x10 [ 2740.937844][ C1] ? do_syscall_64+0x100/0x230 [ 2740.937865][ C1] ? do_syscall_64+0xb6/0x230 [ 2740.937885][ C1] do_syscall_64+0xf3/0x230 [ 2740.937905][ C1] ? clear_bhb_loop+0x35/0x90 [ 2740.937926][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2740.937946][ C1] RIP: 0033:0x7fd4d258bb3d [ 2740.937959][ C1] Code: a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b5 e8 a8 48 00 00 0f 1f 84 00 00 00 00 00 80 3d 01 1a 1f 00 00 74 17 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 5b c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec [ 2740.937979][ C1] RSP: 002b:00007fff0906fee8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2740.937993][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd4d258bb3d [ 2740.938005][ C1] RDX: 0000000000000004 RSI: 00007fff0906fefc RDI: 0000000000000003 [ 2740.938015][ C1] RBP: 0000000000000000 R08: 0000000030fddcc8 R09: 7fffffffffffffff [ 2740.938025][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff09070310 [ 2740.938035][ C1] R13: 0000000000000004 R14: 00007fff0906fefc R15: 00007fff0906ff90 [ 2740.938053][ C1] [ 2740.951050][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2740.951069][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 2740.951090][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2740.951102][ T30] Call Trace: [ 2740.951110][ T30] [ 2740.951118][ T30] dump_stack_lvl+0x241/0x360 [ 2740.951145][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2740.951162][ T30] ? __pfx__printk+0x10/0x10 [ 2740.951183][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2740.951220][ T30] ? vscnprintf+0x5d/0x90 [ 2740.951242][ T30] panic+0x349/0x880 [ 2740.951266][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2740.951285][ T30] ? __pfx_panic+0x10/0x10 [ 2740.951306][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 2740.951325][ T30] ? __irq_work_queue_local+0x137/0x410 [ 2740.951350][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2740.951371][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2740.951388][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2740.951408][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2740.951429][ T30] watchdog+0x1097/0x10a0 [ 2740.951453][ T30] ? watchdog+0x1ea/0x10a0 [ 2740.951478][ T30] ? __pfx_watchdog+0x10/0x10 [ 2740.951499][ T30] kthread+0x7a9/0x920 [ 2740.951520][ T30] ? __pfx_kthread+0x10/0x10 [ 2740.951543][ T30] ? __pfx_watchdog+0x10/0x10 [ 2740.951564][ T30] ? __pfx_kthread+0x10/0x10 [ 2740.951584][ T30] ? __pfx_kthread+0x10/0x10 [ 2740.951609][ T30] ? __pfx_kthread+0x10/0x10 [ 2740.951629][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2740.951647][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2740.951666][ T30] ? __pfx_kthread+0x10/0x10 [ 2740.951689][ T30] ret_from_fork+0x4b/0x80 [ 2740.951708][ T30] ? __pfx_kthread+0x10/0x10 [ 2740.951730][ T30] ret_from_fork_asm+0x1a/0x30 [ 2740.951760][ T30] [ 2741.573685][ T30] Kernel Offset: disabled [ 2741.578019][ T30] Rebooting in 86400 seconds..