last executing test programs: 14m13.839342514s ago: executing program 3 (id=469): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='mm_collapse_huge_page_isolate\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}, 0x1}}, 0x10, 0x0, 0x8fff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280)=0x38, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) getrandom(&(0x7f0000000640)=""/23, 0x17, 0x1) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x109000) sendmsg$tipc(r1, &(0x7f0000000740)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x3}}, 0x10, &(0x7f0000000680)=[{&(0x7f00000003c0)="10348a6be5596c7388c38165665bebf90ec927b713841ca459539a3e55d41eac8d62aa18df54712a413ac33aa7b61644ee825f98e1db95da058ce9417ab35ad9e69096fdbefd4c0d50ea8e850420ddeeaf2dffa29bd02890d541a73f9138e8da8ba3f972abe6a00ce0e6f1b50b42e9b271ea73f4b7fd2d317fc9e5a5a86b8657515edcd4e0ac313f1feda21f7ecfc7894cbc3b7058e902c5829e44e1467c13800ce64ff7ea9970728a45f2de60b29510f17e82f4425163473861e284bb0b0f10617ce153cce399900f435617e40f0d468a45", 0xd2}, {&(0x7f0000000340)="aeb64b88483dbef5de35359a7c08b8243cbc857bf25c60fd89f2147bb66c5b630cf74e24e067270de52c7126526785fa65", 0x31}, {&(0x7f00000012c0)="d9f397a72cf6fc29d7595acd8a29926f2c4f1df54e64a42803b93eab081f3136d8f8c8584f7bc6c3da45d1b610bf0aa7bc8bb7bfe90ade5f4b22470d275b4ff8da835f544ece74b020cf9329d4e962adf466ce448d0bc8a5a0c234775c53a68500013a1ec5cf6164aec171ae4bae7fadafd7a760fbd237eb3cb37911a45252cadc482b292e876066546ae14e2d32ddd15d0d1b9f95b0fc0951d34696da95143cd1f2bb608a375a25dd008a851098c9ab2ffd475cb0c7697cb02e8d42bfa0530bff5227ef4afa7c67e7662f20a63a49af1ffd791405ca332427abc8331a16b7158cea91a79ef47a343c93aa9179dd503620341a9ef010748705988e887e0a4d4571c0f0fc3291c824b84e5680175cc4e75b89b9c3e3009ec40d62e833afff7a9dc20143c79bf14f086b4527993a5b7a79e8ddbd29fdf1e5470d947c810e3753ad97b499d55db6b61b2922c3cfdf758413eced49bb2d20dfa83a8cb4ec964872262e5acd2a30861a91cd57d6b89400acfa1f3f560e3c715dc30fc6a1c52076f0ba71ea7f5d7740c1b94ad59554a67e57deb41dc3de84086ef0fc5128df9b3b82c860e2123b7c83602a09f36e17be6a6b55e41184f44864c2fd1f4fab70251c79b09de5088946623954efa4e58b6ff0201df1a5fb9275a14cdb43bb46db51e65936523e7b48dc8e17f05f9803b136df9856596e300eba1f016083337e4302eb689528fe94cc330102f20afadbe0ebc542af28f57cfb0b42f244060c1a391aa76b083e736ec8d1298ae3db369397e9fa87c3db81f621fdd08ccc11246a6456bfd66dd648da461b126c9bb369f789785c5b3314bfc17e02cedd0983ae1c295622a15d06849475b12949b70295593f1529b79e754b501c8fd4af1d4b0b03ded8c53685f3e798a68a02353809e17db1852a1dad4528a96868569f0ddb91e3bcb0f5773261137211adf8b88ec0907bfdc8fee9772f2e279f46442800ed3e6bca6a65ef6c561e2f49c3aac970bf90fef71fa5ca29884445045c7d4e760869b689ddc1bbfc651cce291ad508a045240a740e2fb7b7446dde11f9d89869c3a62edd474a1c6a4815cebb451545de610db98edccc9697926f5b45949d7db220983d9b803fd142014fe5c6f588aad9ab352dc07364578a05b7877393054db28ea36aadada11013ad6c2894167704c960bcb6e341a6f5f7a1f0e7ca578f99723442f17693c6a2ccf404bbf410caf39557da2f34851a0afde6c048787550ee5719ebc8093e90c77aa0b913eb0edfdd1a6272a43d3a533f1f62b01196976f4a42cd86628ce8d9d7b561dffd061e1f71c92f9f61c2323409641fabce9f328ca1f31b747d11453a2417d1fd59572660d6f558c3f7ffcb17600facad2d6cbb216ed93761561e6d0f5f3b1307a1bd441d37984b9dbe5c0835a06f1a28fb533188c605f26d04a5b091f7179956a85b945902a25d32bded48b2a0007bcd0a171f0713642d0c7edfab567c337c9bf9a2a8cef26d570623ad8ca15cc2e7fce15a684163ed95f1117ea7cd9ba9c981006301abf5ad4a9155a08c46f76a82de7ae3b417d788fdde00b8cfa93b1df536bd1bcc5982a36d0f22dd3cd676cac27000c737020ff9a171134adcf1234871548819a10034ca8eac82b204c553a2fb96db10bb9babee3fcdd6fafd11c015673cf72ca8040bfdabc510dbe9430cec74235effd5fb28f5784bc8b7e5d4910fe8b42080c97c43a48974b3933bfcd99a632119e82cd57d21005ba2cfc5029c53f74453b76ff05a77bab512dc488bbca563bd6f0a13e42a13292e5a6e527f6802838c3aa84ce91786956d6bcca499082746c1f6ee9fbd59f0e0c9fd2852381ff71fab16cec1e977d2f52c039d84757f0477c2a0551ff644fad60d90016f479dc1deb625fc3070e2a8129f651fae5e84df16a792f93c9a15b953796f9ceba9b040805099c0f8f9f63896b66ddc846541ce8d507b52b9490ca23babaaa31c0d18771aa737f550e1dcba2fce3287ae337c2800f8c81c1eefb2c36df85a305414d9010e242bf187c0640babf5b018a1f20861054f074fbc42773f3f9c3ba4a28b1001f030186ecac9907fcfa87f4ed1f0d278cf312c96d0b7d45c8f527df22402767953770d27c80af0e094a599dc230421ff0408dbeb27b93227fe1d41fbb520401e8461c48e2985ae5ab28af18ca25be388ad512c6d35eddd32fb127fb007c8b0da249f191c4e76b3b1b3d7c8c940b347cba44c17d2ef2fc2af334c4a70ade4b1930b197fe473578f8f98946a98370fb7b8eada095684f675d416164515b0a6751e36be0227523f3c72ec1166b74f8ba92b0d8a68b8c70b5e2445149618330199bd6a87f22420abb764a95f58364479d0ff74fc029f37b3ce71ab404dd95549dc45aa005ccac8149dfd55c399e7764c7e5bdf8907df095f4861eaabad7fc2dd10fd97c36ad3a83ee5e44e627a787a1856d372f0f74f70d9c332f0e3f35b3ff53843cd584ace9605816309110581b777a472102e87c8c373f92fad6ba096ede319893cfb3584ef32b7deec0ef92a3fc20db441e3619a89517a26a57b42d761346bcc3cced2f5ea799267a7afa6baade06214fb3d8846f1cc97b40d55a78ecbdd063f10f80487c249a77d64462993fb698915517b2492c89e6ab9bef203bd18a0123a45258355409c7d0b4281e3e9afb8cdbcdf2cada2e5ac2f1d3bea3ab9ef6f82c9d624582aa23fde545048b11b8eb20511800add121b64a58e713a61c77ee23bafb699f832101a5ce1111160fb37d929f3ed3df99964ddcef076c4608490278dffac784900d9ff98de18578832e504ab9e4e1315231db5e12190f90596869290707aa9e647314d93f200236ba18ebb1d393c957569be49c8ef5c634259969179b3963b200e88277fa4245e834188f6451fd8434af1c66671f67b27b29cb64fc3fde45a512b641ad04acf25ca14c733ad3bfd6964a3adbed621b925a1cabd245ab68b08655050e2ac2b59a632ca93ecdc0a48ebe42b41f570a59aa541deb33c880e7715094d1777f81d44b07fa519fb28c08c7192b8431ecf781ec132eab15f92f15bf948fb18985ee3f404b37a6c373b2715eef6475964ef12a19ab95eff4046112bffee5069aaf43e22dcd299d7359b2589bff07d2886ee73f7572711a2adf85fb2f0644cd8a14fbb02dc7baf1039529b891531110c3823ddf3ae70bb337fc11525413835cfd4198b80e8304a105692046c7d491efb00bf3f334efcc0eb6b01c839985f3d7e5b461db2f54ab8a615ec583d9e1b2a6ed189694fd2dd461f99f4dce24317f32fac4bc058f5a02cb40c2335eedca9c205274dc12dc280090900767a944837fba82f21df33bea7594261966ae513d128c449115996fa3d20adac7518067d6fd35df8d35db393d080a1c0f1caf1d8b0939e929d9e998688e0da84c8658e5f677c32d5857627c47ce0cb14748e2fe43f3ac7b04d6b399c927e5773764b201a76b99101e15358ca2db4c88955978c4f91b7efd463b3302599eb39e96fe04b0d153119a69231f5da40d6ca6f69d78c5f924af808be8ba53c966b1f930229bfe13fd351eb8c7326a5caff6e399142200253539975638bc5e2afae2d4b06489e64af593957e1d151944a3499155fee053331c41a4d4cbce1127adbdf331499d1879ef52906afa2c1d705c34aca3742f0f76735a911cddbb95e8c26bf457c9edfd523db0f991a4ee498640fc52639b21009b2f644711e7e4375183deabb152da506215a5044ed36b71a3cc517f3cc4e5c516e363acfef4f84662f86d064bed624430414ae6fdc6dc3639a4f1387c0c6cef302153b08f63e9bc98e390425cb00979534901c74dca7126b66266b337ebe370545b7ae02a67cf99aa8e1f15197ccad969ca92ee8f1a763afcbb2e761a9fc51ddc6594fe91eb0f227c5f2365d60c5d1d45babe357ebb38f58b702a25aba1818b629993840fd2e0edf04c93fb44abc410e53bdfe8eb38567977b86e3c87090088ee1d8e028cbd92878a5ece2917411de6a7f0a6669084e995dc28a1432cf9dae0298aa2d4de3a351319238430ce05d84282d360ac29c4ec4e9a89c7d5249e91b28f31edbcfd84e9ce058507bc7ef734b704631518a8ed1738d2dbf52d71453cbc1308f2bd9ae3d0995615b5f0bcfaf9173449ee2868f48442593e493f49aadb2cd050a3bfc300a2f446da3508902540e06efab445de729fd4222d19b9b90b01369bef9d92ecd73a14f8c14d3e14c843ba7d8a3b0825f5a10c91b4aa1e21b89a55d293b3bcc868a2eeb8fa637afc6385bb95af82ed56046756f089107abeb90a9110f235c30c2244f22d70f7619a5db338e6fbb9a1a9356f83b93cd52954cd60bd3c643916241e3ab0183b57053a8bb9d1dc0fb7e7259c0b4694f6f5b4c69007171b4781224f4ae8b2fc9e11d175c8f7fedd6ea95bac10a481b310071d44e0060d87cc7ab6d4e61307398d6e7839ae84dca822d76bda029e2e615f265dbb5f4a67d34607e9d4770e4ee690df36770e5da69b65996db7b6f150e59ab25974dc0a7f8a8edb0af6249a6d14b52290f927982d6a815a3554a15a2935433ca893c125ec0fc331c63db2a9f16800c8cb1c836b635c30e3dc765858ddd15a3079f2fa8d5aadd1373a0d2e4c03f50ecae60b83fcdaa71d8ab18394aeec83ba32ef875952c5dce95002514fb0f04a90cb7d2ab8325dea12c9738d7d590b5484343f4d8dce078461ebd41968df0a11c841eea61f96da87cf52b830aa49377b36a171a4ffa99637610e49d234be87a5c85ccbc113bd5cc1d97cffed8840742326b3cd8307445a8860f2a93e8cfe94ce470b5bc908f0fb4957b555ff3b5f9acfa7b9e5813a2762fa262554196c9a188d3f784d9ec945f26889aca87ece0cea6797d40c2041fe87314e4a77a7ecca1a7479cb806f4d2e9d42fb3b04cfd26334f6ec8a473f8ada276f584e57ba4e7f6fbe3d0fab9fd8882a5f24dbeab344fb8cdd5d3e3a00493f7e6c5efe8eb056e1aef3874aed74ec11b1a48bf9a03e816095324e3e0490d6a0cd2b4add4dc22698f5b6b8b2d304d849b1b0912f3e84f123e31d544a84783beede3d77b5b65ab78241dca1b248f781383b91cf7a11d9ba6570cebbe673974075696e4b8c2b20e3890231eeb1add52aab3f35ba5e544e398bbf00b6330b84cbb4ce5f079c8922327a6de52a885e2b46303b5632129beeae10a7d19370501939c62d6f727de96439eb77c616acf4614b0c0372a21d4ae024b32f1f72e43eeda5d06139e9abfbf357710978896959d51830cbf5daa9f6884c6e7d2a8b870060754aa669bda20feae2e9acb25564b3f5b467824a36c4185a586ce0bee48abb0ada305b70670eb051b193d21dbc93a5486defdae405bca645b1a7c739b5e0bfc97f5b9c408f96efd4c8ee855a64ef372c39041b5e857031ef1c5fde48e35156943ab45974e2576ce12ee28bf3e61f5717d3af3b0f21542c0ea39563ac0d2bb54374ebe61cd909773025ce6a7f8991f1f7841b1c86f8fd0fcfdfc00cbc64ce38f737e0881895bcbf940f39c64fdc236dc3c729aed1187b29f67b3ddef21959d5dbf95dc4ad42162c04bdb822602372267fb0045dfcb23abe83bd6166be778841f40ae1337470fbef7faeac58e76c4eb5529b02a23ab6e9997443cba4303c56fc612972c93ce873d88376d13cc435e75019617093fe1f13a13b4a7db9547c4ae5fe2d2751b86f8add84f470fa102732298450dc98d52d0f7d7e6eac0b69f1b8b3f736f511193e7d54931fcc2c310536400ce81", 0x1000}, {&(0x7f00000004c0)="b8456c247fde561d4bc2eb206506363aced3a705e7c1e1b589ef12f2c65037e40dd1aa1ecbbcfe922102f9057521b99fda01472e04298eaf6fa90a155369072067937f8a0baf0a8ad8e32c8a85146675436bf3658d586c57f47d30140e9a11947d431b0c7f2472a8a60aba9a295672696dec5e188cd0a7", 0x77}, {&(0x7f0000000540)="1671434ef942753ffd66a2e76de56970966f519729978dd6b921cbfa34560156d7c9f4a2", 0x24}, {&(0x7f0000000580)="54a190b5dbd1f2a77d381176951a9d7300bcbfeb1b0cec88a72429154c90b5f745276942ea2d034860089ef9", 0x2c}, {&(0x7f00000005c0)="c0887db26b243d00170bc30fa30aa03c5ba6b024813806cf4661fdf64b20672812902d4ff781494d35b9ddc3802eaebc32505a1019cf6b7c815a6c5578e766c398b7f39bbe4b04ac698b1e329889a9a27c54782ed3f2af2a60399db5f77d56a7d012edc45ced97", 0x67}, {&(0x7f0000000640)}], 0x8, &(0x7f0000000700)="62146a3e5c61ab78c4ecbb6c41ffcf1871008f65df0e736156597d4aa6bccb3bfdbe78", 0x23, 0x8000}, 0x3) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f00000000c0)={0x1, 0x0, 0x6, 0xdf195a8ba956fa66, 0xf}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWSETELEM={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) ioctl$int_in(r3, 0x5421, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000002c0)={0x0, 0x1}) 14m12.779984976s ago: executing program 3 (id=473): r0 = timerfd_create(0x0, 0x0) io_setup(0xd4b, &(0x7f0000000080)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20580, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x1, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r7, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) sendmsg$kcm(r6, &(0x7f0000002b00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="e3df449b7df7e013ffe0600d748a78864a240d1859f23dd030a2f10e8c36df865cabf74d195b97a39df3b53ea594301f478582bf9b", 0x35}, {&(0x7f00000005c0)="001f6d1e2349c8", 0x7}], 0x2}, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0x3) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe1100090500000000000000070593"], 0x0) 14m8.390976979s ago: executing program 3 (id=478): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000640)={0x4, 0x3, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x9aa4eb910d4c35c8, 0x5ef, '\x00', @ptr=0xc}}) getpid() 14m8.123706976s ago: executing program 3 (id=480): write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0xa0002) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000500)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='1', 0x1) r7 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f00000003c0)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, 0x0, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000040)=r10, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r12, &(0x7f0000000380)={0x11, 0x4, r13, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x1f, &(0x7f0000000180)={@local, @link_local, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, '(', "1d04b6", 0x805, "4989f3c5872319f626"}}}}}, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x0, {0x0, 0x156, 0x0, {0x10000000, 0x0, 0x2, 0x5, 0x0, 0xfffffffffffffff7, 0x200, 0x2, 0x5, 0x4000, 0x0, r3, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0xfd, 0x6}, {0x3, 0x1}], r3}, 0x18, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="9f86000000000000000000000000000076e5d59c93893c2dc0d0cb142f8ebf6500000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r14}, 0x4) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) 14m7.312266889s ago: executing program 3 (id=481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$dri(&(0x7f0000000400), 0x1023, 0x100) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r2, 0x0, 0x0, 0x2, 0x5, 0x200, {0x2, 0x7f, 0x180, 0x10, 0xfdfc, 0x2025, 0x8001, 0xffff, 0x3, 0x3, 0xfffd, 0x9, 0x4, 0x1, "12d56163d7287bd287881d942450c7153243937ca9a58f1c02000000476b1500"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x52, 0x109, 0x0, 0x25dfdbfb, {0x1c}, [@typed={0x8, 0x4c, 0x0, 0x0, @ipv4=@local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) ioctl$UFFDIO_REGISTER(r4, 0x40305839, &(0x7f00000001c0)={{&(0x7f0000add000/0x3000)=nil, 0x3000}, 0x2}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x1, 0x0, 0x0, 0xffffffffffffff34) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x19, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080004}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r7, r7, 0x0) quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000702, r7, &(0x7f00000002c0)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 14m5.394452934s ago: executing program 3 (id=487): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_TMR_SOURCE(r3, 0xc0045406) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}}], 0x1, 0x8001) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0x6}]}, @ptr, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x4a, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) pipe2(&(0x7f0000000040), 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000380)=0xc) prlimit64(r12, 0x1, &(0x7f00000002c0)={0x4, 0x83}, &(0x7f0000000480)) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x18c80, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@access_uid={'access', 0x3d, r13}}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x18c80, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@access_uid={'access', 0x3d, r13}}]}}) r14 = syz_io_uring_setup(0x4111, &(0x7f0000000180)={0x0, 0xf1a, 0x400, 0x0, 0x26e, 0x0, r9}, &(0x7f0000000200), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r14, 0x6, &(0x7f0000000340)={0x9, 0x0, &(0x7f0000000300)=[r8, r2, r10, r1, r11, r9, 0xffffffffffffffff, r1, r8]}, 0x9) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r14, 0x6, &(0x7f0000000340)={0x9, 0x0, &(0x7f0000000300)=[r8, r2, r10, r1, r11, r9, 0xffffffffffffffff, r1, r8]}, 0x9) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x101c008, 0x0) (async) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x101c008, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x482321cb74c946b6, 0x0) 13m57.977772049s ago: executing program 4 (id=513): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7, 0x0], &(0x7f0000000240)=[0x2, 0x4], 0x0, 0x2}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r0, 0x1080000000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) (async) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000574000/0x1000)=nil, 0x1000}}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 13m57.87633533s ago: executing program 4 (id=514): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x3cc244a9652ff475) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x2, &(0x7f00000003c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) listen(0xffffffffffffffff, 0x0) unshare(0x400) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/vmcoreinfo', 0x200000, 0xdf687b1fdc0c3f17) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r4}, 0x18) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r5 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r5, &(0x7f0000000200)=ANY=[], 0x10002) 13m56.352046628s ago: executing program 4 (id=518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r4 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYRESHEX=r3], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, 0x0, &(0x7f0000000340)) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$kcm(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x44b, 0x70bd2c, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x5002, 0x9020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x44}}, 0x0) 13m55.195213613s ago: executing program 4 (id=520): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) fsopen(&(0x7f0000000040)='gfs2meta\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040), 0x0) epoll_create(0x207ffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="2c000000000000000000000000e5ffff9400000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x22042, 0x10f) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0xbfd1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 13m51.781736245s ago: executing program 4 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_procfs(0x0, 0x0) lseek(r3, 0xfffffffe, 0x3) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x80002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r11 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsmount(r11, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 13m50.174598167s ago: executing program 32 (id=487): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_TMR_SOURCE(r3, 0xc0045406) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}}], 0x1, 0x8001) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0x6}]}, @ptr, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x4a, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) pipe2(&(0x7f0000000040), 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000380)=0xc) prlimit64(r12, 0x1, &(0x7f00000002c0)={0x4, 0x83}, &(0x7f0000000480)) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x18c80, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@access_uid={'access', 0x3d, r13}}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x18c80, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@access_uid={'access', 0x3d, r13}}]}}) r14 = syz_io_uring_setup(0x4111, &(0x7f0000000180)={0x0, 0xf1a, 0x400, 0x0, 0x26e, 0x0, r9}, &(0x7f0000000200), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r14, 0x6, &(0x7f0000000340)={0x9, 0x0, &(0x7f0000000300)=[r8, r2, r10, r1, r11, r9, 0xffffffffffffffff, r1, r8]}, 0x9) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r14, 0x6, &(0x7f0000000340)={0x9, 0x0, &(0x7f0000000300)=[r8, r2, r10, r1, r11, r9, 0xffffffffffffffff, r1, r8]}, 0x9) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x101c008, 0x0) (async) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x101c008, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x482321cb74c946b6, 0x0) 13m36.752385174s ago: executing program 33 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_procfs(0x0, 0x0) lseek(r3, 0xfffffffe, 0x3) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x80002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r11 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsmount(r11, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 8m32.598726523s ago: executing program 5 (id=1294): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) 8m28.693288591s ago: executing program 5 (id=1302): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1a5000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x441, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000500)={0x0, 0x500, r9, r10, 0x3, 0x5, 0x4, 0x5, {0x2, 0x5, 0x5, 0xa, 0xa, 0x9, 0x2, 0x5, 0xb, 0xd25, 0x9, 0x60b, 0x2, 0x10001, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44080) 8m26.631578086s ago: executing program 5 (id=1307): vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10005) 8m25.152137902s ago: executing program 5 (id=1310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000400)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x2, 0x0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000, 0x2}) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x6a1c2, 0xc4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = mq_open(&(0x7f0000000080)='!selx\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x12, &(0x7f0000000300)={0x0, 0x1, 0xb, 0x1}) syz_init_net_socket$x25(0x9, 0x5, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x82}, {0x3, 0x0, 0x2}], 0x2, 0x0, 0x0, 0x1) pipe(&(0x7f0000000200)) write(r1, &(0x7f0000000440)="24485adc00a7cb7ee6c13b96d591f2e0ddd3a617187f619003468327f0a97458058cc9978508d51f7b6efc92b6051a101b0bfe620916161e939dc5ac0b14f568e03c1b3c798148cb28b482ae1de686bb66f65fb471dc3ebfd17ba690ee8e9b22047eec28c82f08f94bc38ca9378249bc201a178167bc7eebc9191154cf56cbe8e701e15f37eca6a342a0ed0ca919c6", 0x8f) r2 = syz_io_uring_setup(0x112, &(0x7f00000005c0)={0x0, 0x0, 0x400}, &(0x7f0000000580)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 8m24.113360044s ago: executing program 5 (id=1314): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @loopback, r2}, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8000000, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) connect$bt_rfcomm(r8, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, 0x1, 0x2, 0xf07, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"a2e3ad9bed0d52f91b5a090987f70e06d038e7ff7fc6e5539b5b43078b089b3b33376d090890e0878f0e1ac6e7049b3371959b719a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x3b3cc1e9e7df1ab7}}, 0x9b) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000a03000000000000000000000204000000000000000000000b020000000000000061"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 8m21.898477939s ago: executing program 5 (id=1323): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$dri(&(0x7f0000000400), 0x1023, 0x100) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r3, r4, 0x0, 0x2, 0x5, 0x200, {0x2, 0x7f, 0x180, 0x10, 0xfdfc, 0x2025, 0x8001, 0xffff, 0x3, 0x3, 0xfffd, 0x9, 0x4, 0x1, "12d56163d7287bd287881d942450c7153243937ca9a58f1c02000000476b1500"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x52, 0x109, 0x0, 0x25dfdbfb, {0x1c}, [@typed={0x8, 0x4c, 0x0, 0x0, @ipv4=@local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) ioctl$UFFDIO_REGISTER(r6, 0x40305839, &(0x7f00000001c0)={{&(0x7f0000add000/0x3000)=nil, 0x3000}, 0x2}) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x1, 0x0, 0x0, 0xffffffffffffff34) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x19, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080004}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r8, r8, 0x0) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000702, r8, &(0x7f0000000480)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 8m6.609537738s ago: executing program 34 (id=1323): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$dri(&(0x7f0000000400), 0x1023, 0x100) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r3, r4, 0x0, 0x2, 0x5, 0x200, {0x2, 0x7f, 0x180, 0x10, 0xfdfc, 0x2025, 0x8001, 0xffff, 0x3, 0x3, 0xfffd, 0x9, 0x4, 0x1, "12d56163d7287bd287881d942450c7153243937ca9a58f1c02000000476b1500"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x52, 0x109, 0x0, 0x25dfdbfb, {0x1c}, [@typed={0x8, 0x4c, 0x0, 0x0, @ipv4=@local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) ioctl$UFFDIO_REGISTER(r6, 0x40305839, &(0x7f00000001c0)={{&(0x7f0000add000/0x3000)=nil, 0x3000}, 0x2}) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x1, 0x0, 0x0, 0xffffffffffffff34) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x19, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080004}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r8, r8, 0x0) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000702, r8, &(0x7f0000000480)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 3m19.121566065s ago: executing program 0 (id=2378): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3m17.59885928s ago: executing program 0 (id=2380): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="500100001000130426bd7000000000000000000000000000000000000000000120010000000000000000000000002000000000004e2400100000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffff000000000000000032000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000cc000000000000000000000000000000000000000000000000000000000000000000000002000401000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0) 3m17.399863853s ago: executing program 0 (id=2381): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) fsopen(&(0x7f0000000040)='gfs2meta\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040), 0x0) epoll_create(0x207ffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="2c000000000000000000000000e5ffff9400000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='mmap_lock_acquire_returned\x00', r4, 0x0, 0x1000000000000009}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[], 0xc8}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x4010, r5, 0x0) syz_io_uring_setup(0x24fd, &(0x7f0000000080)={0x0, 0x4053, 0x1, 0x0, 0x0, 0x0, r5}, &(0x7f0000000440), &(0x7f0000000140)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x20000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r6, &(0x7f00000000c0)='./file0/file0\x00', 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001100)=ANY=[@ANYBLOB="4c00000010003904fcffffff0000000000000000", @ANYRESOCT=r1, @ANYBLOB="00000000422200042c00128008000100677265002000028008000500bb7e00000800040006"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x844) socket$inet_smc(0x2b, 0x1, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x8100, &(0x7f00000010c0)={0x2, 0x70, 0xb0000}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x80000004}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f00000001c0), &(0x7f0000000280)}, 0x20) 3m14.742586161s ago: executing program 0 (id=2389): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) shutdown(r1, 0x1) shutdown(r1, 0x1) r6 = io_uring_setup(0x7bd7, &(0x7f0000000080)={0x0, 0x6ce3, 0x800, 0x0, 0x10b}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000f4ffffffd0d066f48f2e97090b0000000c000000040000000100bf705ad3da77d03dc859791481000000000b0d0000000000005f0032317292"], 0x0, 0x28, 0x0, 0x1, 0xfffffff8, 0x0, @void, @value}, 0x28) socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x19, 0x2000000, 0x0) r8 = fsopen(&(0x7f0000000040)='bfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xfffe, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, r9}}, 0x30) 3m14.351981493s ago: executing program 0 (id=2392): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x2, 0xa, 0x0, 0xf58063731bad89e2, 0x2, 0x0, 0x70bd26, 0x25dfdbff}, 0x10}}, 0x40000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) chdir(&(0x7f00000003c0)='./bus\x00') socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r6 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000280)=@md5={0x1, "bf5110b0dbe094319d585e800e0e621c"}, 0x11, 0x0) dup3(r6, r5, 0x0) (async) dup3(r6, r5, 0x0) finit_module(r6, 0x0, 0x0) (async) finit_module(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000037f9b40c1e954251030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4080000}, 0x80) socket$inet6_udplite(0xa, 0x2, 0x88) 3m13.937810877s ago: executing program 35 (id=2392): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x2, 0xa, 0x0, 0xf58063731bad89e2, 0x2, 0x0, 0x70bd26, 0x25dfdbff}, 0x10}}, 0x40000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) chdir(&(0x7f00000003c0)='./bus\x00') socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r6 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000280)=@md5={0x1, "bf5110b0dbe094319d585e800e0e621c"}, 0x11, 0x0) dup3(r6, r5, 0x0) (async) dup3(r6, r5, 0x0) finit_module(r6, 0x0, 0x0) (async) finit_module(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000037f9b40c1e954251030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4080000}, 0x80) socket$inet6_udplite(0xa, 0x2, 0x88) 6.972212642s ago: executing program 7 (id=3091): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x11, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1, 0x4}, 0x38) 6.917833263s ago: executing program 7 (id=3092): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffcef) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x3, 0x261, 0xba0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = io_uring_setup(0x1fa, &(0x7f0000002400)={0x0, 0x1e19, 0x0, 0x1, 0x219}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r8 = dup3(r7, r3, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f00000001c0)="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", 0x118) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r9, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x18) write$binfmt_aout(r9, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000000), 0x0}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x400082, 0x0) 6.555978849s ago: executing program 7 (id=3094): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fstat(r0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x0, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x4, 0x3, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x8, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x0, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x20000005, 0x8004, 0x8, 0xffffffff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x8da, 0x5, 0x2f, 0xf, 0x312, 0x78, 0xea4, 0x0, 0x3, 0x5, 0x8000, 0x9, 0x400, 0x80000000, 0x6, 0x1, 0xff, 0x5, 0x3, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x400009, 0x80004, 0x9, 0x2, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x80002, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x5, 0x9, 0x5, 0x7bff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x6, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800004, 0x200, 0x80, 0x3, 0x4, 0x2950bfb0, 0x1000, 0x9, 0x7, 0x53cf697b, 0x5, 0xa312, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x1396], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xcd1, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x3, 0x100, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x7fffffff, 0x5, 0x8, 0xc8, 0x40, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x587c, 0x7, 0x2, 0x4, 0x6, 0xfffffffe, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x197e24b7, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xffc]}, 0x45c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x1, 0x1, 0x80000003) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(r1, 0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000140)=0x8) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) ioprio_set$pid(0x1, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) read$char_usb(r4, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r7, &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) mq_open(&(0x7f0000000080)='\'\x00', 0x1, 0x42, &(0x7f0000000100)={0xa9ac, 0x8, 0x8, 0x2}) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 5.221657915s ago: executing program 1 (id=3101): syz_emit_ethernet(0xe5, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv4={0x800, @dccp={{0x21, 0x4, 0x1, 0x5, 0xd7, 0x66, 0x0, 0xff, 0x21, 0x0, @multicast2, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x88, 0x3, 0xb, [{@multicast1}, {@empty, 0x2}, {@local, 0x1}, {@empty, 0x5}]}, @timestamp_prespec={0x44, 0x1c, 0x42, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x19}}, {@empty, 0xffffffaa}, {@private=0xa010100, 0x400000}]}, @ssrr={0x89, 0x13, 0x6a, [@multicast1, @broadcast, @private=0xa010101, @multicast1]}, @generic={0x44, 0xa, "a49e5358c8308958"}, @generic={0x7, 0xc, "35597d4f04f1974ea4c8"}]}}, {{0x4e22, 0x4e24, 0x4, 0x1, 0x9, 0x0, 0x0, 0x0, 0x6, "25efa4", 0x7, "cad7d6"}, "372f1573cc0a8653235c11e84664f76402427a65a0280ae97e9841910db0034c523c5c26563da8a694371bdce2de1e2f51cb1816e8986a3fe219cf7448901c25135a5e"}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000ff00000000000a20000000000a01010000000000000000010000000900010073797a300000000034000000090a010200000000000000020100000008000a40008000000900020073797a320000000009000100737973"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000c0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000455200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 5.214613676s ago: executing program 6 (id=3102): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x11, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1, 0x4}, 0x38) 4.855901975s ago: executing program 6 (id=3103): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="950000000000000018400000fcffffff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000183b000001000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703ffffffffffffff7f00000c000000b70000000000000018490000feffffff0000000000000000852000000200000018650000100000000000000001040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) clock_gettime(0x5, &(0x7f00000002c0)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0xa4, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x501040) write$sndseq(r2, &(0x7f0000000040)=[{0x41, 0x0, 0x0, 0x4, @tick=0x1, {0x1}, {0xf}, @queue={0xf, {0x5, 0xffff2a30}}}], 0x1c) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020}, 0x2020) r3 = socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=0x1, 0x4) connect$can_bcm(r3, &(0x7f0000000080), 0x10) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x13, 0x2000ac0a, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)=@ethernet={0x6, @multicast}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000440)="12e8e9b980e801baad564f168bec2c352713fb1c839a5c1796701c8c2eb986820b7a2ce3f4fde11fe4521e49cb03f629b9c1362ef02d1040ccd94922959e717c15e8336e72a9f520c2975b64", 0x4c}, {&(0x7f0000000040)="4f3c56678c0188d6e6e83d4c6b47e549333a84035164e13dbf68335d8d5e988f6bde00fca2c62230e18e552c94b19dfa3701b23dd4f4ba", 0x37}, {&(0x7f00000000c0)}, {&(0x7f0000000300)="5409f9ef4197ad4703ab581f233138e98f18f1f7d734d306583da165fd5e352805e9f22a10064bb667c174c0b6007f71a9e912796ad02ee49c8761", 0x3b}, {0x0}], 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x3e0}, 0x8840) add_key(0x0, 0x0, &(0x7f0000000080)="dfd9", 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 4.592222748s ago: executing program 1 (id=3106): socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300209c0600088011000001080211000000ffffffffffff"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x24008080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setresgid(0xee00, 0xee01, 0x0) 4.578627582s ago: executing program 7 (id=3107): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xcc, 0x3, 0x3}, &(0x7f0000000040)=0x10) (rerun: 64) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r1, 0x1}, 0x8) (async) sendmmsg$inet_sctp(r0, &(0x7f0000000680)=[{&(0x7f00000000c0)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="586c0b4177eb8804e327e6c78b1f0462ac3d2b8c5c20a530f18c66a62a447ee73b2c1c751b23b70b3d76142e3125216148dd59c337c6b664355c37656cc08329a582ad43a888647c9213e2fb146beb495681177a49f0cb6692e51928978b27f051876741f7d0d4e6a0c8c262fcf2b54c91bfef560a75b8f81443de551a1333f093f1e10e3d9a", 0x86}, {&(0x7f00000001c0)="3d8ee9bb07bbedcd6d72ec1c2e66b7a9bf1cf5c8c5b393283c3cd2c9758a9bf54a16fa71620f60b602f2b98cf30c8bf2d7d782127a2d66ec37d06512920d8701bbf31516016ddfc4", 0x48}, {&(0x7f0000000240)="c68d8fddc124e38c753ce1a1961eb1eb7c5f781a5967c69a4de103d8a01725d529ec5ae4802d0efe0acf718c3988645bba1d6bc5e47e9b05b101a5c63730dae4f010c40c885837637915b7ed7ec61f49f6076d1142d8a4f8595e5e6f1f6b23052677feab0b3d7a1b98175f2ce997eba52893a223932ac8bc218fecd95d29cae0ae270aee3bbb0be5fc32961a43a57ab6c58d0ae502712f7be758820347db1a8b9328a0468fb8cbc8ff65f2", 0xab}, {&(0x7f0000000300)="5ad41a8aa05f06edaa9c1ad7fe5c28d3732ebc75767539396202e312989c72bd62cd083880e16dd8de192cbf676d46505d32f999de87dac604342b54b327250d0ea256d6e1d4ed3385b6b3e2a4d8937dd8c4abeb507a49e3f8ba3e2f2fd2928620756cf7688261a2e40291d51fba377c960a9445a06fb5", 0x77}, {&(0x7f0000000380)="9c252f6ddb4abae9da221d26246f5238b48da49bae45bee4784ca6814f9764d1c65c8b78c887ebd56bae5a539bc6e64ea3faa472b5556850e9f55c581bee88b7eb9883b5ce4b9bf5f82be08b2f59723e15a3945f916ff2c88e070ff8e311753d189e154545696b41cb372bed1521829704009443576f32d6d76bbdfc72691759c06540bd2f635135af4b34ddbda4e6fced21c63b68a73b919bd1eed6bb3d52175c9d00a4dfd6161bb721", 0xaa}, {&(0x7f0000000440)="1b34766ece5bef1d8937abbdd39f12c7870175a553afb9f5ae915503cd807e4f9d290126e0a045e6156319180fcef518cb88a0c9e7d238c9748b165ed01b99b8d8cdb3c1f91cfd4004733ca4d3af12417e98acc7456848f7744e5f801fe196bacc37c90dac85e670ce0446dde7ae0ffdfcf264b3e1f490d37eaad17685d4a73c42ad7bd2343c4fd824", 0x89}], 0x6, &(0x7f0000000580)=[@sndrcv={0x30, 0x84, 0x1, {0x75e2, 0x9e, 0x6, 0x3, 0x40, 0xff, 0x7, 0x8001}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @init={0x18, 0x84, 0x0, {0xfff, 0x0, 0x2, 0x81}}, @init={0x18, 0x84, 0x0, {0x3, 0xa, 0x1, 0xfff}}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @init={0x18, 0x84, 0x0, {0x6, 0x3, 0x7, 0xda2}}, @authinfo={0x18, 0x84, 0x6, {0x8000}}, @init={0x18, 0x84, 0x0, {0x3, 0x285b, 0x9, 0x5}}], 0xf0, 0x4040054}], 0x1, 0x80) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async, rerun: 64) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 64) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000700)) (async, rerun: 64) r3 = syz_open_dev$rtc(&(0x7f0000000740), 0x6, 0x200) (rerun: 64) ioctl$RTC_PIE_OFF(r3, 0x7006) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f00000007c0)=0x4) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000800)={r1, @in6={{0xa, 0x4e22, 0x9, @mcast1, 0x3ff}}}, &(0x7f00000008c0)=0x84) (rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r4) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xfb047228e76b0dcf}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r6, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x34}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040010}, 0x10) ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f0000000a40)={0x3, [0x69, 0xfff, 0x7]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000a80)={r1, @in6={{0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, [0x7, 0xffff, 0x4, 0x0, 0x1ff, 0x5, 0xcc2, 0x9, 0x3, 0x1, 0x2, 0x90b, 0xa, 0x2]}, &(0x7f0000000b80)=0x100) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x8001) (async, rerun: 64) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) (async, rerun: 64) ioctl$SNDCTL_FM_4OP_ENABLE(r4, 0x4004510f, &(0x7f0000000d80)=0x8682) (async) r8 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) read$smackfs_ptrace(r8, &(0x7f0000000e00), 0x14) (async) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000e40)={0x81, 0x4}) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000e80)={r5, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000f40)=0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000f80)={r9, 0x61c, 0x4b, "918dfe5ba62ba14c8bcdea7a9d3151f9e46ab681a68651a2a1143518c8ebbfec5a2601241990f007eba6bc25318586b8ddb2b9d2ec6444e47b7f82c8d5f3e474089e2e3097c8cf2676c771"}, 0x53) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001180)={&(0x7f0000001080)={0xd4, r6, 0x600, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x88, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8cc}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6d5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1dbcf070}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) recvfrom$inet6(r2, &(0x7f0000001200)=""/202, 0xca, 0x1, &(0x7f0000001300)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) (async, rerun: 64) ioctl$SNDCTL_SEQ_RESETSAMPLES(r4, 0x40045109, &(0x7f0000001340)=0x81) 4.273284761s ago: executing program 8 (id=3108): r0 = socket$inet6(0xa, 0x3, 0xff) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0x8) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7fffffff) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008000) (async) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) syz_usb_connect(0x0, 0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000092e59e208c106901b9750102030109022200010000b6000904db00010dfa000309058000000000fc000705db224370bf"], 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) rt_sigaction(0x39, 0x0, 0x0, 0x8, &(0x7f0000000200)) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd=r4, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) io_uring_enter(r5, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000003f0000000c009900000000000000000044005e80080005000000000008000300000000000825dd00000000001000010000000000000000000000000008000700000000000800010000000000080007"], 0x64}}, 0x0) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYRES32=r4], 0x114}], 0x1}, 0x4c0d4) bind$inet6(r0, &(0x7f0000000880)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) 4.20011977s ago: executing program 7 (id=3109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6208}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xc4, 0x153400}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x4008014) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="74020000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78430800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542fc010880c801008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c9f010980ac"], 0x274}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 4.069218731s ago: executing program 6 (id=3110): open(0x0, 0x2a4c0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) mkdir(0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x80) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 4.030611875s ago: executing program 8 (id=3111): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000002000000000000000604000000002e"], &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1, 0x0, 0x0, @void, @value}, 0x20) sched_setscheduler(0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 3.968114828s ago: executing program 7 (id=3112): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r3, &(0x7f00000093c0)={0x2020}, 0x2020) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) 3.967208301s ago: executing program 2 (id=3113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x11, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1, 0x4}, 0x38) 2.45344926s ago: executing program 8 (id=3114): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)='n', 0x1}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0xcc}}, 0x44000) 2.386819334s ago: executing program 6 (id=3115): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000200000000004000"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008002800e7090000"], 0x28}}, 0x0) 2.316220203s ago: executing program 2 (id=3116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000f5ffffff0000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 2.221542284s ago: executing program 6 (id=3117): ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000180)={{0x4, @name="61cecce33bc77d5c046ec4447f4a6cfa2ed236f9285e4bd88a2d20c1de8ba318"}, "7b38321e0f31b8f80469565f54d269a4dd267c658861d7fdc56700", 0x1}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x63}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xa}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r2}]}, 0x70}, 0x1, 0x0, 0x0, 0x24004001}, 0x4000005) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) listen(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto(r5, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x44004) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r7 = socket(0x200000000000011, 0x2, 0xfffffffc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000071000100000000010000000007000000", @ANYRES32=r8, @ANYBLOB="0c00018008000100000001"], 0x24}}, 0x0) 1.897312952s ago: executing program 2 (id=3118): syz_emit_ethernet(0xe4, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv4={0x800, @dccp={{0x21, 0x4, 0x1, 0x5, 0xd6, 0x66, 0x0, 0xff, 0x21, 0x0, @multicast2, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x88, 0x3, 0xb, [{@multicast1}, {@empty, 0x2}, {@local, 0x1}, {@empty, 0x5}]}, @timestamp_prespec={0x44, 0x1c, 0x42, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x19}}, {@empty, 0xffffffaa}, {@private=0xa010100, 0x400000}]}, @ssrr={0x89, 0x13, 0x6a, [@multicast1, @broadcast, @private=0xa010101, @multicast1]}, @generic={0x44, 0xa, "a49e5358c8308958"}, @generic={0x7, 0xc, "35597d4f04f1974ea4c8"}]}}, {{0x4e22, 0x4e24, 0x4, 0x1, 0x9, 0x0, 0x0, 0x0, 0x6, "25efa4", 0x7, "cad7d6"}, "372f1573cc0a8653235c11e84664f76402427a65a0280ae97e9841910db0034c523c5c26563da8a694371bdce2de1e2f51cb1816e8986a3fe219cf7448901c25135a"}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000ff00000000000a20000000000a01010000000000000000010000000900010073797a300000000034000000090a010200000000000000020100000008000a40008000000900020073797a320000000009000100737973"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000c0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000dabe00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.563127868s ago: executing program 1 (id=3119): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04090307c8003b9315f99c8149c1327af2465af1f3eece5fbc4228f3f58d6c4d3d4b547e740d963467ee964646f9ecb3fc9fbd4ed6c0ceb9c694b1fddf331d870752c0160b091111ce6aa94b7f9c3f5948e85bc4b332a43fc5c604bbccbe5b9c996c24b04f46a9e3bcff53dcb777f131f5a3b0359fb751fbdd5e1d3b4679f51db5dd80707e519de98788b18aa67729d438ed0ebd6718b41353ccb9dca276020c0055c9"], 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpeername$unix(r0, &(0x7f0000000240), &(0x7f0000000180)=0x6e) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRES64=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0xffffff01, 0x0, 0x0, 0x4}}, 0x50) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x204400, 0x0) syz_fuse_handle_req(r4, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, {0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004680)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x2, 0x16, 0x0, 0x1, 0x4, {0x6, 0x80, 0x8, 0x6, 0x0, 0x8, 0x8, 0x800, 0x6, 0xa000, 0x7fffffff, r6, r7, 0x40000000, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$pid(0x1, r8, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 1.561460172s ago: executing program 6 (id=3120): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004894}, 0x20000000) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0022f3346b404e1997a2070000847026f8fe0b883f700c5d9521df82e98b69712b072a9e1244"], 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x1fa7}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x360, 0x2c, 0xd27, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x334, 0x2, [@TCA_BPF_ACT={0x318, 0x1, [@m_skbmod={0xb4, 0x1d, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x100, 0x6, 0x6, 0x400002d6, 0xffff5e6b}, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0xffffffffffffffff, 0xca22, 0x1e0000}, 0xb}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xe72}]}, {0x2b, 0x6, "4efa38af05842285f9ee42116dade8dc043e96f51d97cf4da4713edf038075dd7f49ec4b75c576"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x9c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x6f, 0x6, "8fab16155d2b77e9dd509fb44a72bafa5472c6345be4821094737a5a8ff3a0951ceaae02529939185687df31989da373840f1708bd5bfb12a1fbc23b3be209f3509a36e2a2556c7aad617f7a02014134b8fbc1f4eed00838b1e7c0849493df508ebff3f05905e8b6b232fc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xa8, 0x16, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xc, 0x3, 0x8000, 0xa9e}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}]}, {0x43, 0x6, "3d3664503187067a56366fa9ea62f37f7313a47cc8eeb4096e057461d5d5e09f096f047e327200d9eafcb7ad6edde3f38eba8f8f4099dfea3881c7a1f809df"}, {0xc, 0x7, {0xa641c834fa05107, 0x1}}, {0xc}}}, @m_skbedit={0x7c, 0x10, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xe}}]}, {0x40, 0x6, "a27706bfe1452b06ce2fdb5b9bbfd980eba4b8fcd5de6257a3c9c3603070df5c25efc1f76732b882c2154605eb02dfad88376b5b22e9faa56cc81078"}, {0xffffffffffffffd8, 0x7, {0x1}}, {0xc}}}, @m_skbmod={0xa0, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x72, 0x6, "fa4b0f7e99df1aa5b9d8f679a3a89b9ff32f84d2ba180dccbf26d6b1bfe858159bce712ccc4f1fef3daf411e0bf9835acecee21bddb2660e763e6fdf194f7dbc8254316ebd0f051d1928d784f68d18a720099e12ee1ba04e1728be0be9a839741b5863a17ecaf49e09153bab2fbc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffe0, 0x8}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x7, 0xfff1}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x240008c0}, 0x4000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000080)=@secondary) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000080)=@secondary) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) (async) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) keyctl$get_persistent(0x16, 0x0, r2) keyctl$set_timeout(0xf, r2, 0x7) 1.416134302s ago: executing program 2 (id=3121): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x7f, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e3406070000005c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}, {0xffffffff, 0x9}, {0x0, 0x0, 0xfffffffe}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, 0x0, 0x6, 0xffff, 0x0, 0x0, 0x4, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.278276922s ago: executing program 2 (id=3122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="28000e0080000000ffffffffffff080211000000080211000000000000000000000000006400010008000c006400000e8000"/60], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100030004"], 0x408100) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x880) syz_open_dev$loop(&(0x7f0000000080), 0x8b9, 0x80981) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45}}, 0x50) syz_fuse_handle_req(r9, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) close(r9) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = socket$netlink(0x10, 0x3, 0x4) writev(r12, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 1.195196459s ago: executing program 1 (id=3123): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x10d000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_ACT={0x4}]}}]}, 0x38}}, 0x20040044) close(r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r6, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0xcb16d9b66fa338d4) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r7, 0xc0345641, &(0x7f0000000b40)={0x1, "cd67564b4e656215393fa945578f6d6683a5070ff2c9181ff365a9075be9218d", 0x1, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010003000000fedbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="471a330050000100ffffffffffff08021100000050505050505047000600000000000000090000800006020202020202010006020a00720603030303030371070001010102004900080057005e050000"], 0x6c}}, 0x0) socket$inet6(0xa, 0x800, 0xd0) 1.056102017s ago: executing program 8 (id=3124): open(0x0, 0x2a4c0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) mkdir(0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x80) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 855.122363ms ago: executing program 2 (id=3125): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x907, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)=0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x110, 0xffffffffffffffff, 0x2d144000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x8094) recvmmsg(r3, &(0x7f0000002040)=[{{&(0x7f0000000300)=@phonet, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000002200)=""/245, 0xf5}, {&(0x7f0000000580)=""/232, 0xe8}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000680)=""/43, 0x2b}], 0x5, &(0x7f0000000740)}, 0x9}, {{&(0x7f0000000780)=@nl=@proc, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000840)=""/86, 0x56}, 0x533}, {{&(0x7f00000008c0)=@nfc, 0x80, &(0x7f0000000800)}, 0x4}, {{&(0x7f0000001980)=@caif, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001a00)=""/193, 0xc1}, {&(0x7f0000001b00)=""/38, 0x26}, {&(0x7f0000001b40)=""/248, 0xf8}, {&(0x7f0000001c40)=""/127, 0x7f}, {&(0x7f0000002140)=""/129, 0x81}, {&(0x7f0000001d40)=""/250, 0xfa}, {&(0x7f0000001e40)=""/37, 0x25}, {&(0x7f0000001e80)=""/14, 0xe}], 0x8, &(0x7f0000001f40)=""/245, 0xf5}, 0x1}], 0x4, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r11 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000404f045db60000174294e0e343ad64edbb000000010902240001000000000904000001030001000921010100012205"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) 372.424408ms ago: executing program 1 (id=3126): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x101) syz_io_uring_setup(0x237, &(0x7f0000000140)={0x0, 0x49db, 0x10100, 0xfffffffd, 0x0, 0x0, r0}, &(0x7f0000000000), &(0x7f00000001c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x21, 0x0, 0x10) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x4}, 0x38) 168.64421ms ago: executing program 1 (id=3127): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000000d060101000000000000000000000000050001000700420e39aaeba900000e0003006269746d61703a6970000000"], 0x2c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019640)=""/102400, 0x19000) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r8, 0x2, 0x0) getdents(r8, 0x0, 0x22) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) 166.259797ms ago: executing program 8 (id=3128): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffcef) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000180)={0xff, 0x17, 0x0, 0x6, 0x5, "6d1b1d17f698bd22"}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2001) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r3}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, &(0x7f0000000000), 0x0}, 0x20) 0s ago: executing program 8 (id=3129): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000bf33b4dffe000000000000010069"], 0x48}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e12", 0x28}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa66027c00000400000014000180066ea6d07128"], 0x2c}}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r2, 0x0, 0x800000000000000}, 0x18) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x1, 0x2}, 0x10) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x2, @raw_data="c489e5b9a6760f8e44fe039b3ab37e1201185026220a24ee69b5459a53d9a0d86b5ff5e461280ae0bd43c3bc0aae28f55cab5e705bba5f8b820cc38192f08bc434cdcde631a6c7a690643be7975ad2a88848dee55fb737af7fe23be4c242706a1758fd5ca3a2f06518d1b394abfdf49d40de0e8a87433e1217686cb889694fa4302587cefad9d27d6edf8830242bdfc9d6af23b6e36dfe4e09d50f19c15fd90d2765e0371acf946d6ef351841392beecb4b6473226397e097bda5c4c840a14dc1f17e50adb510c6d"}) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f00000000c0)=0x81) kernel console output (not intermixed with test programs): executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f79b85d29 code=0x7ffc0000 [ 879.863299][ T29] audit: type=1326 audit(1737238742.963:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15595 comm="syz.1.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f79b85d29 code=0x7ffc0000 [ 879.905513][ T29] audit: type=1326 audit(1737238742.963:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15595 comm="syz.1.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f79b85d29 code=0x7ffc0000 [ 880.508272][T15615] loop2: detected capacity change from 0 to 7 [ 880.547698][T15615] Dev loop2: unable to read RDB block 7 [ 880.566301][T15615] loop2: AHDI p2 p3 [ 880.581047][T15615] loop2: partition table partially beyond EOD, truncated [ 880.600329][T15615] loop2: p2 size 150995200 extends beyond EOD, truncated [ 880.642474][T15623] sp0: Synchronizing with TNC [ 880.650479][T10408] udevd[10408]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 880.970856][T15632] macsec1: entered allmulticast mode [ 881.039472][ T9] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 881.564247][ T9] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 881.594352][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.653942][ T9] usb 7-1: config 0 descriptor?? [ 882.020201][ T5873] IPVS: starting estimator thread 0... [ 882.340167][T15651] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 882.947964][T15649] IPVS: using max 38 ests per chain, 91200 per kthread [ 883.749913][ T9] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 883.771190][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 883.820367][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 883.865430][ T9] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 883.872162][ T9] [drm] Initialized udl on minor 2 [ 883.926226][ T9] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 883.996412][T15658] binder: 15657:15658 ioctl 54a3 0 returned -22 [ 884.063554][T13135] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 884.072510][ T9] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 884.298826][ T9] usb 7-1: USB disconnect, device number 41 [ 884.315941][T13135] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 884.360851][T13135] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 885.831174][T15694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2537'. [ 885.877250][T15694] binder: 15693:15694 ioctl 400454d1 20000000 returned -22 [ 886.278321][T15710] 9pnet: Unknown protocol version 9p20\++} [ 886.292519][ T9] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 886.461360][ T9] usb 7-1: too many configurations: 121, using maximum allowed: 8 [ 886.683012][ T9] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 886.691259][ T9] usb 7-1: can't read configurations, error -22 [ 887.212890][ T9] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 887.375704][ T9] usb 7-1: too many configurations: 121, using maximum allowed: 8 [ 887.411290][ T9] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 887.430991][ T9] usb 7-1: can't read configurations, error -22 [ 887.488490][ T9] usb usb7-port1: attempt power cycle [ 888.023016][ T9] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 888.182690][ T5870] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 888.237218][ T9] usb 7-1: too many configurations: 121, using maximum allowed: 8 [ 888.482451][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 888.496129][ T9] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 888.517665][ T5870] usb 3-1: config 0 has an invalid interface number: 5 but max is 0 [ 888.546397][ T9] usb 7-1: can't read configurations, error -22 [ 888.556737][ T5870] usb 3-1: config 0 has no interface number 0 [ 888.587211][ T5870] usb 3-1: config 0 interface 5 altsetting 6 endpoint 0x8C has invalid maxpacket 1024, setting to 64 [ 888.659005][ T5870] usb 3-1: config 0 interface 5 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 888.688804][ T5870] usb 3-1: config 0 interface 5 has no altsetting 0 [ 888.710654][ T5870] usb 3-1: New USB device found, idVendor=16d8, idProduct=7006, bcdDevice=3e.60 [ 888.733450][ T9] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 888.751386][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.759806][ T5870] usb 3-1: Product: syz [ 888.773034][ T9] usb 7-1: too many configurations: 121, using maximum allowed: 8 [ 888.790216][ T5870] usb 3-1: Manufacturer: syz [ 888.795496][ T5870] usb 3-1: SerialNumber: syz [ 888.803181][ T9] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 888.821382][ T9] usb 7-1: can't read configurations, error -22 [ 888.832143][ T5870] usb 3-1: config 0 descriptor?? [ 888.847476][ T9] usb usb7-port1: unable to enumerate USB device [ 889.122557][ T9] kernel read not supported for file /newroot/147 (pid: 9 comm: kworker/0:1) [ 890.219284][T15775] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 891.120189][ T9] usb 3-1: USB disconnect, device number 63 [ 891.729929][T15786] FAULT_INJECTION: forcing a failure. [ 891.729929][T15786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.898421][T15786] CPU: 0 UID: 0 PID: 15786 Comm: syz.1.2559 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 891.909243][T15786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 891.919317][T15786] Call Trace: [ 891.922614][T15786] [ 891.925579][T15786] dump_stack_lvl+0x241/0x360 [ 891.930290][T15786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 891.935512][T15786] ? __pfx__printk+0x10/0x10 [ 891.940140][T15786] ? snprintf+0xda/0x120 [ 891.944410][T15786] should_fail_ex+0x3b0/0x4e0 [ 891.949117][T15786] _copy_to_user+0x31/0xb0 [ 891.953572][T15786] simple_read_from_buffer+0xca/0x150 [ 891.958980][T15786] proc_fail_nth_read+0x1e9/0x250 [ 891.964038][T15786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 891.969617][T15786] ? rw_verify_area+0x55e/0x6f0 [ 891.974493][T15786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 891.980068][T15786] vfs_read+0x1fc/0xb70 [ 891.984257][T15786] ? __pfx___mutex_lock+0x10/0x10 [ 891.989309][T15786] ? __pfx_vfs_read+0x10/0x10 [ 891.994012][T15786] ? __fget_files+0x2a/0x410 [ 891.998623][T15786] ? __fget_files+0x395/0x410 [ 892.003315][T15786] ? __fget_files+0x2a/0x410 [ 892.007938][T15786] ksys_read+0x18f/0x2b0 [ 892.012209][T15786] ? __pfx_ksys_read+0x10/0x10 [ 892.016998][T15786] ? do_syscall_64+0x100/0x230 [ 892.021786][T15786] ? do_syscall_64+0xb6/0x230 [ 892.026485][T15786] do_syscall_64+0xf3/0x230 [ 892.031011][T15786] ? clear_bhb_loop+0x35/0x90 [ 892.035713][T15786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.041628][T15786] RIP: 0033:0x7f0f79b8473c [ 892.046050][T15786] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 892.065655][T15786] RSP: 002b:00007f0f7aa30030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 892.074067][T15786] RAX: ffffffffffffffda RBX: 00007f0f79d75fa0 RCX: 00007f0f79b8473c [ 892.082035][T15786] RDX: 000000000000000f RSI: 00007f0f7aa300a0 RDI: 0000000000000005 [ 892.090000][T15786] RBP: 00007f0f7aa30090 R08: 0000000000000000 R09: 0000000000000000 [ 892.097968][T15786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.105938][T15786] R13: 0000000000000000 R14: 00007f0f79d75fa0 R15: 00007fffb180b488 [ 892.113921][T15786] [ 893.592405][T15414] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 893.763740][T15414] usb 3-1: Using ep0 maxpacket: 16 [ 893.818229][T15414] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 893.935459][T15414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.221427][T15414] usb 3-1: Product: syz [ 894.276208][T15414] usb 3-1: Manufacturer: syz [ 894.283243][T15414] usb 3-1: SerialNumber: syz [ 894.381030][T15809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 894.386884][T15414] usb 3-1: config 0 descriptor?? [ 894.651995][T15414] usb 3-1: selecting invalid altsetting 1 [ 894.750040][T15414] technisat-usb2: could not set alternate setting to 0 [ 894.782744][T15414] technisat-usb2: firmware version: 227.26 [ 894.800675][T15414] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 895.701187][T15414] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 895.721697][T15414] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 895.807947][T15414] usb 3-1: media controller created [ 895.875252][T15414] technisat-usb2: i2c-error: out failed 53 = -22 [ 895.882740][T15414] dvb-usb: MAC address reading failed. [ 896.242521][T15414] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 896.735357][T15414] DVB: Unable to find symbol stv090x_attach() [ 896.750119][T15414] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 897.844325][T15414] rc_core: IR keymap rc-technisat-usb2 not found [ 897.851123][T15414] Registered IR keymap rc-empty [ 897.856943][T15414] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 897.869372][T15414] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input27 [ 898.024430][T15414] dvb-usb: schedule remote query interval to 100 msecs. [ 898.632539][T15414] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 898.649843][T14757] dvb-usb: error -32 while querying for an remote control event. [ 898.789625][T14757] dvb-usb: error -32 while querying for an remote control event. [ 898.863999][ T9] usb 3-1: USB disconnect, device number 64 [ 899.005335][ T9] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 899.019144][T15858] input: syz0 as /devices/virtual/input/input28 [ 899.166960][T15867] tipc: Enabling of bearer rejected, failed to enable media [ 899.372657][ T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 899.442498][T15877] xt_CT: You must specify a L4 protocol and not use inversions on it [ 899.639319][T15879] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2582'. [ 899.660448][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 899.667584][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.683082][ T9] usb 3-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 899.692146][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.823885][ T9] usb 3-1: config 0 descriptor?? [ 900.973306][ T5870] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 901.079713][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 901.140697][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 901.151955][ T5870] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 901.170388][T15894] Bluetooth: MGMT ver 1.23 [ 901.182662][ T9] usb 3-1: USB disconnect, device number 65 [ 901.189790][ T5870] usb 2-1: config 0 has no interface number 0 [ 901.202402][ T5870] usb 2-1: config 0 interface 229 altsetting 0 endpoint 0x85 has invalid maxpacket 1023, setting to 64 [ 901.224091][ T5870] usb 2-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 901.237151][ T5870] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 901.252553][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.265598][ T5870] usb 2-1: Product: syz [ 901.269791][ T5870] usb 2-1: Manufacturer: syz [ 901.286919][ T5870] usb 2-1: SerialNumber: syz [ 901.306084][ T5870] usb 2-1: config 0 descriptor?? [ 901.311714][T15884] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 901.313153][T15414] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 901.534118][ T5870] usb 2-1: USB disconnect, device number 54 [ 901.664710][T15414] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.400432][T15414] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 902.910402][T15414] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 902.919880][T15414] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.932659][T15414] usb 7-1: Product: syz [ 902.945697][T15414] usb 7-1: Manufacturer: syz [ 902.969423][T15414] usb 7-1: SerialNumber: syz [ 903.049277][T15923] IPVS: persistence engine module ip_vs_pe_ not found [ 903.250295][T15928] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 903.276570][T15928] CIFS mount error: No usable UNC path provided in device string! [ 903.276570][T15928] [ 903.287005][T15928] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 903.312875][T15926] delete_channel: no stack [ 903.362332][ T5870] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 903.492333][ T5870] usb 9-1: device descriptor read/64, error -71 [ 904.260921][T15414] usb 7-1: 0:2 : does not exist [ 904.272402][ T5870] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 904.394949][T15414] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 904.449735][T15414] usb 7-1: USB disconnect, device number 46 [ 904.462692][ T5870] usb 9-1: device descriptor read/64, error -71 [ 904.641083][ T5870] usb usb9-port1: attempt power cycle [ 905.183581][ T5870] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 905.184666][T10408] udevd[10408]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 905.493854][ T5870] usb 9-1: device descriptor read/8, error -71 [ 906.308584][ T5870] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 906.434813][ T5870] usb 9-1: device descriptor read/8, error -71 [ 906.556545][ T5870] usb usb9-port1: unable to enumerate USB device [ 906.590893][T15969] loop2: detected capacity change from 0 to 7 [ 906.621825][T15969] Dev loop2: unable to read RDB block 7 [ 906.853122][T15969] loop2: AHDI p2 p3 [ 906.857762][T15969] loop2: partition table partially beyond EOD, truncated [ 906.867259][T15969] loop2: p2 size 150995200 extends beyond EOD, truncated [ 907.029989][T11789] udevd[11789]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 907.702639][ T5870] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 908.592308][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 908.836837][ T5919] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 908.845966][T15981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2610'. [ 909.222559][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 909.487289][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.801594][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.834762][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 909.858206][ T5870] usb 3-1: unable to get BOS descriptor or descriptor too short [ 909.873237][ T5870] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 909.888402][ T5870] usb 3-1: can't read configurations, error -71 [ 909.913982][ T5919] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 909.934984][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.970255][ T5919] usb 2-1: config 0 descriptor?? [ 910.709551][ T5919] microsoft 0003:045E:07DA.001A: item 0 0 0 9 parsing failed [ 910.739832][ T5919] microsoft 0003:045E:07DA.001A: parse failed [ 910.763786][ T5919] microsoft 0003:045E:07DA.001A: probe with driver microsoft failed with error -22 [ 910.966982][T15999] tmpfs: Bad value for 'mpol' [ 910.980771][ T962] usb 2-1: USB disconnect, device number 55 [ 911.756391][T16029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2621'. [ 911.816372][T16029] netlink: 'syz.1.2621': attribute type 1 has an invalid length. [ 914.974457][T16058] netlink: 428 bytes leftover after parsing attributes in process `syz.6.2628'. [ 914.987527][T16058] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2628'. [ 915.555060][T16069] loop2: detected capacity change from 0 to 7 [ 915.579141][T16069] Dev loop2: unable to read RDB block 7 [ 915.595810][T16069] loop2: AHDI p2 p3 [ 915.600390][T16069] loop2: partition table partially beyond EOD, truncated [ 915.845389][T16069] loop2: p2 size 150995200 extends beyond EOD, truncated [ 917.748287][T16086] No source specified [ 917.758867][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 917.758885][ T29] audit: type=1326 audit(1737238781.953:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16080 comm="syz.1.2638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f79b85d29 code=0x0 [ 917.786331][ C1] vkms_vblank_simulate: vblank timer overrun [ 917.818309][T16088] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2639'. [ 919.028279][ T5870] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 919.233181][T16098] xt_CT: You must specify a L4 protocol and not use inversions on it [ 919.342336][ T5870] usb 9-1: Using ep0 maxpacket: 8 [ 919.353923][ T5870] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 919.390895][ T5870] usb 9-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 919.421741][ T5870] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.466618][ T5870] usb 9-1: config 0 descriptor?? [ 919.890355][ T5870] glorious 0003:258A:0033.001B: unknown main item tag 0x0 [ 919.930909][ T5870] glorious 0003:258A:0033.001B: unknown main item tag 0x0 [ 919.938275][ T5870] glorious 0003:258A:0033.001B: unknown main item tag 0x0 [ 919.945669][ T5870] glorious 0003:258A:0033.001B: unknown main item tag 0x0 [ 919.952931][ T5870] glorious 0003:258A:0033.001B: unknown main item tag 0x0 [ 919.960086][ T5870] glorious 0003:258A:0033.001B: unknown main item tag 0x0 [ 919.967628][ T5870] glorious 0003:258A:0033.001B: unknown main item tag 0x0 [ 920.084387][T16122] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 920.785102][ T5870] glorious 0003:258A:0033.001B: unknown main item tag 0x0 [ 920.932014][ T5870] glorious 0003:258A:0033.001B: unknown main item tag 0x0 [ 920.939361][ T5870] glorious 0003:258A:0033.001B: unknown main item tag 0x0 [ 920.946541][ T5870] glorious 0003:258A:0033.001B: unknown main item tag 0x0 [ 920.958012][ T5870] glorious 0003:258A:0033.001B: hidraw0: USB HID v0.0b Device [Glorious Model D] on usb-dummy_hcd.8-1/input0 [ 920.977002][ T5870] usb 9-1: USB disconnect, device number 10 [ 921.666446][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2650'. [ 921.712468][ T29] audit: type=1326 audit(1737238785.883:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16124 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f79b85d29 code=0x7ffc0000 [ 921.763585][T16131] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 921.770145][T16131] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 921.777273][ T29] audit: type=1326 audit(1737238785.883:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16124 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f0f79b85d29 code=0x7ffc0000 [ 921.822277][ T29] audit: type=1326 audit(1737238785.883:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16124 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f79b85d29 code=0x7ffc0000 [ 921.833245][T16131] vhci_hcd vhci_hcd.0: Device attached [ 921.874310][ T29] audit: type=1326 audit(1737238785.883:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16124 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0f79b85d29 code=0x7ffc0000 [ 921.919538][ T29] audit: type=1326 audit(1737238785.883:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16124 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f79b85d29 code=0x7ffc0000 [ 921.941961][ T29] audit: type=1326 audit(1737238785.883:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16124 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0f79b85d29 code=0x7ffc0000 [ 921.964547][ T29] audit: type=1326 audit(1737238785.883:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16124 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f79b85d29 code=0x7ffc0000 [ 921.986907][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.993758][ T29] audit: type=1326 audit(1737238785.883:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16124 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f0f79b85d29 code=0x7ffc0000 [ 922.015809][ T29] audit: type=1326 audit(1737238785.883:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16124 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f79b85d29 code=0x7ffc0000 [ 922.023612][ T5870] vhci_hcd: vhci_device speed not set [ 922.037382][ C1] vkms_vblank_simulate: vblank timer overrun [ 922.158410][T16148] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2654'. [ 922.553048][T16133] vhci_hcd: connection closed [ 922.553444][ T6021] vhci_hcd: stop threads [ 922.567465][ T6021] vhci_hcd: release socket [ 922.572683][ T5870] usb 45-1: new full-speed USB device number 3 using vhci_hcd [ 922.614289][ T6021] vhci_hcd: disconnect device [ 925.972616][T16177] syz.2.2663[16177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 925.972720][T16177] syz.2.2663[16177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 925.996559][T16177] syz.2.2663[16177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 926.208064][T16189] netlink: 'syz.7.2665': attribute type 76 has an invalid length. [ 927.822332][ T5870] vhci_hcd: vhci_device speed not set [ 928.448732][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2672'. [ 928.995962][ T962] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 929.192567][ T5870] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 929.470685][ T962] usb 3-1: Using ep0 maxpacket: 16 [ 929.478035][ T962] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 929.498102][ T962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 929.520443][ T962] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 929.550180][ T962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.558270][ T5870] usb 9-1: Invalid ep0 maxpacket: 16 [ 929.579060][ T962] usb 3-1: Product: syz [ 929.602676][ T962] usb 3-1: Manufacturer: syz [ 929.610582][ T962] usb 3-1: SerialNumber: syz [ 929.618299][ T962] usb 3-1: config 0 descriptor?? [ 929.628250][ T962] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 929.638674][ T962] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 929.704956][ T5870] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 929.796191][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 929.796209][ T29] audit: type=1326 audit(1737238793.993:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16234 comm="syz.6.2681" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f68985d29 code=0x0 [ 929.882417][ T5870] usb 9-1: Invalid ep0 maxpacket: 16 [ 929.888666][ T5870] usb usb9-port1: attempt power cycle [ 929.896812][T16231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.911247][T16231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.972414][ T5919] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 930.104673][ T962] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 930.111835][ T962] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 930.134776][ T962] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 930.143309][ T962] em28xx 3-1:0.0: No AC97 audio processor [ 930.152068][ T962] usb 3-1: USB disconnect, device number 68 [ 930.173060][ T962] em28xx 3-1:0.0: Disconnecting em28xx [ 930.187363][ T962] em28xx 3-1:0.0: Freeing device [ 930.778037][T16248] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 930.870816][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2687'. [ 930.904539][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2687'. [ 931.676544][T16260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2689'. [ 931.690314][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.956932][T16272] netlink: 'syz.1.2690': attribute type 9 has an invalid length. [ 932.033001][ T962] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 932.252344][ T962] usb 3-1: Using ep0 maxpacket: 16 [ 932.311404][ T962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 932.342693][ T962] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 932.371278][ T962] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 932.396146][ T962] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 932.405745][ T962] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 932.414703][ T962] usb 3-1: Product: syz [ 932.419069][ T962] usb 3-1: Manufacturer: syz [ 932.423891][ T962] usb 3-1: SerialNumber: syz [ 932.444392][ T962] usb 3-1: config 0 descriptor?? [ 932.459816][T16283] netlink: 'syz.1.2695': attribute type 24 has an invalid length. [ 932.473523][ T962] usb 3-1: NFC: intf ffff888012b54000 id ffffffff8f2fa740 [ 932.824514][ T962] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 933.123886][ T962] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 933.152359][ T962] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 933.174758][ T962] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 933.193024][ T962] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.211327][ T962] usb 9-1: Product: syz [ 933.221384][ T962] usb 9-1: Manufacturer: syz [ 933.231050][ T962] usb 9-1: SerialNumber: syz [ 933.241158][ T962] usb 9-1: config 0 descriptor?? [ 933.246958][T16292] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 933.254736][T16292] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 933.289866][T16304] kvm: emulating exchange as write [ 933.302667][ T5870] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 933.468826][T16292] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 933.478411][ T5870] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 933.488080][T16292] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 933.495614][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.516303][ T5870] usb 7-1: config 0 descriptor?? [ 933.527562][ T5870] cp210x 7-1:0.0: cp210x converter detected [ 933.708808][T16292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.738736][ T5870] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 933.748305][ T5870] cp210x 7-1:0.0: querying part number failed [ 933.762449][T16292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.763972][ T5870] usb 7-1: cp210x converter now attached to ttyUSB0 [ 933.879731][T16322] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 933.879731][T16322] The task syz.7.2706 (16322) triggered the difference, watch for misbehavior. [ 933.911043][T16322] netlink: 'syz.7.2706': attribute type 9 has an invalid length. [ 934.185894][T16292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.197168][T16292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.627706][ T5943] usb 3-1: USB disconnect, device number 69 [ 934.888325][T16332] netlink: 428 bytes leftover after parsing attributes in process `syz.7.2709'. [ 934.898796][T16332] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2709'. [ 935.156058][ T962] dm9601 9-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 935.173794][ T962] dm9601 9-1:0.0 eth9: register 'dm9601' at usb-dummy_hcd.8-1, Davicom DM96xx USB 10/100 Ethernet, 8e:75:bc:b6:ad:45 [ 935.196802][ T962] usb 9-1: USB disconnect, device number 14 [ 935.229359][ T962] dm9601 9-1:0.0 eth9: unregister 'dm9601' usb-dummy_hcd.8-1, Davicom DM96xx USB 10/100 Ethernet [ 936.101171][T14757] usb 7-1: USB disconnect, device number 47 [ 936.136103][T14757] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 936.161547][T14757] cp210x 7-1:0.0: device disconnected [ 936.260368][T16352] loop2: detected capacity change from 0 to 7 [ 936.288668][T16352] Dev loop2: unable to read RDB block 7 [ 936.320642][T16352] loop2: AHDI p2 p3 [ 936.516507][T16352] loop2: partition table partially beyond EOD, truncated [ 936.611543][T16352] loop2: p2 size 150995200 extends beyond EOD, truncated [ 937.604434][T16367] netlink: 428 bytes leftover after parsing attributes in process `syz.1.2721'. [ 937.614028][T16367] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2721'. [ 939.321418][T16394] loop2: detected capacity change from 0 to 7 [ 939.337035][T16394] Dev loop2: unable to read RDB block 7 [ 939.347523][T16394] loop2: AHDI p2 p3 [ 939.372743][T16394] loop2: partition table partially beyond EOD, truncated [ 939.382257][T16394] loop2: p2 size 150995200 extends beyond EOD, truncated [ 940.446453][T16422] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2738'. [ 941.312552][T14757] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 941.967680][T14757] usb 7-1: config 0 has an invalid interface number: 242 but max is 0 [ 941.976230][T14757] usb 7-1: config 0 has no interface number 0 [ 942.022495][T14757] usb 7-1: config 0 interface 242 has no altsetting 0 [ 942.085338][T16450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 942.118075][T14757] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=51.ba [ 942.137470][T14757] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.195191][T14757] usb 7-1: Product: syz [ 942.199464][T14757] usb 7-1: Manufacturer: syz [ 942.227288][T14757] usb 7-1: SerialNumber: syz [ 942.257450][T14757] usb 7-1: config 0 descriptor?? [ 943.160043][T16432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.171649][T16432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.400787][T14757] qmi_wwan 7-1:0.242: bogus CDC Union: master=0, slave=1 [ 943.452157][T14757] qmi_wwan 7-1:0.242: probe with driver qmi_wwan failed with error -22 [ 943.670473][T14757] usb 7-1: USB disconnect, device number 48 [ 943.839746][ T29] audit: type=1326 audit(1737238808.033:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.8.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb1585d29 code=0x7ffc0000 [ 943.895442][ T29] audit: type=1326 audit(1737238808.033:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.8.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb1585d29 code=0x7ffc0000 [ 943.952652][ T29] audit: type=1326 audit(1737238808.063:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.8.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0eb1585d29 code=0x7ffc0000 [ 943.992540][ T29] audit: type=1326 audit(1737238808.063:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.8.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb1585d29 code=0x7ffc0000 [ 944.037809][ T29] audit: type=1326 audit(1737238808.063:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.8.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb1585d29 code=0x7ffc0000 [ 944.159189][ T29] audit: type=1326 audit(1737238808.083:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.8.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0eb1585d29 code=0x7ffc0000 [ 944.215526][ T29] audit: type=1326 audit(1737238808.083:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.8.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb1585d29 code=0x7ffc0000 [ 944.257842][ T29] audit: type=1326 audit(1737238808.083:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.8.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0eb157cce7 code=0x7ffc0000 [ 944.338477][ T29] audit: type=1326 audit(1737238808.083:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.8.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0eb1521f29 code=0x7ffc0000 [ 944.355461][T16491] loop2: detected capacity change from 0 to 7 [ 944.393538][ T29] audit: type=1326 audit(1737238808.083:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.8.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0eb157cce7 code=0x7ffc0000 [ 944.399239][T16491] Dev loop2: unable to read RDB block 7 [ 944.447732][T16491] loop2: AHDI p2 p3 [ 944.466100][T16491] loop2: partition table partially beyond EOD, truncated [ 944.502893][T16491] loop2: p2 size 150995200 extends beyond EOD, truncated [ 944.762513][T16497] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 945.142611][T16244] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 945.342361][T16244] usb 7-1: Using ep0 maxpacket: 32 [ 945.352827][T16244] usb 7-1: config 0 has an invalid interface number: 219 but max is 0 [ 945.381330][T16244] usb 7-1: config 0 has no interface number 0 [ 945.405365][T16244] usb 7-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 945.482359][T16244] usb 7-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 945.514581][T16244] usb 7-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 945.527044][T16244] usb 7-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 945.537454][T16244] usb 7-1: config 0 interface 219 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 945.592596][T16244] usb 7-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 945.603080][T16244] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.607541][T16508] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.611072][T16244] usb 7-1: Product: syz [ 945.611093][T16244] usb 7-1: Manufacturer: syz [ 945.611110][T16244] usb 7-1: SerialNumber: syz [ 945.634734][T16508] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.644059][T16508] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.653225][T16508] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.662032][T16244] usb 7-1: config 0 descriptor?? [ 945.675515][T16496] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 949.247461][T16541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2771'. [ 949.382696][T16547] fuse: Unknown parameter 'rootmodu' [ 949.691173][ T5870] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 949.700531][T16244] etas_es58x 7-1:0.219: Starting syz syz (Serial Number syz) [ 949.719983][T16244] usb 7-1: USB disconnect, device number 49 [ 949.784847][T16560] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2776'. [ 949.869777][T16561] netlink: 'syz.6.2776': attribute type 4 has an invalid length. [ 949.878122][T16561] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2776'. [ 949.910356][ T5870] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.200101][T16563] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2776'. [ 950.312328][ T5870] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 950.321421][ T5870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.331019][ T5870] usb 9-1: Product: syz [ 950.335378][ T5870] usb 9-1: Manufacturer: syz [ 950.339998][ T5870] usb 9-1: SerialNumber: syz [ 950.699696][T16572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 950.908898][T16572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.289416][T16550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.305701][T16550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.325158][ T5870] cdc_ncm 9-1:1.0: SET_CRC_MODE failed [ 951.350348][ T5870] cdc_ncm 9-1:1.0: bind() failure [ 951.382888][T16587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 951.403301][ T5870] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 951.410124][ T5870] cdc_ncm 9-1:1.1: bind() failure [ 951.542614][ T5870] usb 9-1: USB disconnect, device number 15 [ 951.682438][T15062] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 951.811155][T16594] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 951.880398][T15062] usb 2-1: New USB device found, idVendor=19d2, idProduct=7858, bcdDevice=8d.d2 [ 951.918210][T15062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.101245][T15062] usb 2-1: Product: syz [ 952.467853][T15062] usb 2-1: Manufacturer: syz [ 952.542893][T15062] usb 2-1: SerialNumber: syz [ 952.583497][T15062] usb 2-1: config 0 descriptor?? [ 952.625060][T15062] usb 2-1: bad CDC descriptors [ 952.752584][T16603] program syz.8.2790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 952.764061][T16602] FAULT_INJECTION: forcing a failure. [ 952.764061][T16602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.812832][T16603] netlink: 'syz.8.2790': attribute type 6 has an invalid length. [ 952.825176][T16589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.842425][T16602] CPU: 1 UID: 0 PID: 16602 Comm: syz.7.2791 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 952.853232][T16602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 952.863308][T16602] Call Trace: [ 952.866599][T16602] [ 952.869546][T16602] dump_stack_lvl+0x241/0x360 [ 952.874252][T16602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 952.879470][T16602] ? __pfx__printk+0x10/0x10 [ 952.884080][T16602] ? __pfx_lock_release+0x10/0x10 [ 952.889134][T16602] should_fail_ex+0x3b0/0x4e0 [ 952.893832][T16602] _copy_from_user+0x2f/0xc0 [ 952.898447][T16602] __sys_bpf+0x1a4/0x810 [ 952.902705][T16602] ? __pfx___sys_bpf+0x10/0x10 [ 952.907492][T16602] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 952.913500][T16602] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 952.919851][T16602] ? do_syscall_64+0x100/0x230 [ 952.924639][T16602] __x64_sys_bpf+0x7c/0x90 [ 952.929081][T16602] do_syscall_64+0xf3/0x230 [ 952.933601][T16602] ? clear_bhb_loop+0x35/0x90 [ 952.938344][T16602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.944259][T16602] RIP: 0033:0x7f4458b85d29 [ 952.948690][T16602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 952.968600][T16602] RSP: 002b:00007f4459946038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 952.977032][T16602] RAX: ffffffffffffffda RBX: 00007f4458d75fa0 RCX: 00007f4458b85d29 [ 952.982364][T16603] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.2790'. [ 952.984987][T16602] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000004 [ 952.996240][T16589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.002198][T16602] RBP: 00007f4459946090 R08: 0000000000000000 R09: 0000000000000000 [ 953.017908][T16602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.025887][T16602] R13: 0000000000000000 R14: 00007f4458d75fa0 R15: 00007ffd9ae73dc8 [ 953.033418][ T5870] usb 2-1: USB disconnect, device number 57 [ 953.033868][T16602] [ 953.042978][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.211850][T16610] tmpfs: Unknown parameter 'usrquota`' [ 954.202234][T16632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2800'. [ 954.338859][T16638] netlink: 16 bytes leftover after parsing attributes in process `X'. [ 955.082519][T16645] netlink: 'syz.1.2803': attribute type 21 has an invalid length. [ 955.094317][T16645] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2803'. [ 955.730146][T16663] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 956.497589][T16671] dvmrp1: entered allmulticast mode [ 956.817586][ T962] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 956.853410][ T5919] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 957.162672][ T962] usb 2-1: Using ep0 maxpacket: 16 [ 957.168398][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 957.348310][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 957.360213][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 957.417582][ T962] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 957.432497][ T962] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 957.444370][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 957.555114][ T962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 957.575816][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 957.654844][ T962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 957.676425][ T5919] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 957.702561][ T962] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 957.715673][ T5919] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 957.723862][ T5919] usb 3-1: Manufacturer: syz [ 957.733740][ T962] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 957.743226][ T962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.757910][ T962] usb 2-1: Product: syz [ 957.770835][ T5919] usb 3-1: config 0 descriptor?? [ 957.801829][ T962] usb 2-1: Manufacturer: syz [ 957.822067][ T962] usb 2-1: SerialNumber: syz [ 957.831314][ T5919] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 957.840843][ T962] usb 2-1: config 0 descriptor?? [ 958.045510][ T5919] usb 3-1: USB disconnect, device number 70 [ 958.059916][ T962] appledisplay 2-1:0.0: Error while getting initial brightness: -71 [ 958.083423][ T962] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71 [ 958.121241][ T962] usb 2-1: USB disconnect, device number 58 [ 958.182129][T16694] FAULT_INJECTION: forcing a failure. [ 958.182129][T16694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.212783][T16694] CPU: 1 UID: 0 PID: 16694 Comm: syz.6.2819 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 958.223582][T16694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 958.233632][T16694] Call Trace: [ 958.236907][T16694] [ 958.239836][T16694] dump_stack_lvl+0x241/0x360 [ 958.244520][T16694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 958.249714][T16694] ? __pfx__printk+0x10/0x10 [ 958.254305][T16694] ? __pfx_lock_release+0x10/0x10 [ 958.259326][T16694] should_fail_ex+0x3b0/0x4e0 [ 958.264006][T16694] _copy_from_user+0x2f/0xc0 [ 958.268602][T16694] vmemdup_user+0x149/0x1c0 [ 958.273104][T16694] map_get_next_key+0x1c4/0x5e0 [ 958.277954][T16694] __sys_bpf+0x72e/0x810 [ 958.282190][T16694] ? __pfx___sys_bpf+0x10/0x10 [ 958.286959][T16694] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 958.292940][T16694] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 958.299269][T16694] ? do_syscall_64+0x100/0x230 [ 958.304035][T16694] __x64_sys_bpf+0x7c/0x90 [ 958.308455][T16694] do_syscall_64+0xf3/0x230 [ 958.312956][T16694] ? clear_bhb_loop+0x35/0x90 [ 958.317630][T16694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.323524][T16694] RIP: 0033:0x7f8f68985d29 [ 958.327936][T16694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.347533][T16694] RSP: 002b:00007f8f69845038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 958.355942][T16694] RAX: ffffffffffffffda RBX: 00007f8f68b75fa0 RCX: 00007f8f68985d29 [ 958.363912][T16694] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000004 [ 958.371875][T16694] RBP: 00007f8f69845090 R08: 0000000000000000 R09: 0000000000000000 [ 958.379841][T16694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.387814][T16694] R13: 0000000000000000 R14: 00007f8f68b75fa0 R15: 00007ffe00933998 [ 958.395821][T16694] [ 958.398962][ C1] vkms_vblank_simulate: vblank timer overrun [ 958.553545][T16697] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2820'. [ 958.571441][T16697] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2820'. [ 960.729026][T16725] input: syz0 as /devices/virtual/input/input30 [ 960.780842][T16728] program syz.2.2827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 961.031950][T16738] FAULT_INJECTION: forcing a failure. [ 961.031950][T16738] name failslab, interval 1, probability 0, space 0, times 0 [ 961.097871][T16738] CPU: 0 UID: 0 PID: 16738 Comm: syz.2.2830 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 961.108691][T16738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 961.118769][T16738] Call Trace: [ 961.122060][T16738] [ 961.125000][T16738] dump_stack_lvl+0x241/0x360 [ 961.129701][T16738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 961.134916][T16738] ? __pfx__printk+0x10/0x10 [ 961.139524][T16738] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 961.144911][T16738] ? __pfx___might_resched+0x10/0x10 [ 961.150219][T16738] should_fail_ex+0x3b0/0x4e0 [ 961.154922][T16738] should_failslab+0xac/0x100 [ 961.159623][T16738] __kmalloc_node_noprof+0xe1/0x4d0 [ 961.164839][T16738] ? __might_fault+0xc6/0x120 [ 961.169544][T16738] ? __kvmalloc_node_noprof+0x72/0x190 [ 961.175032][T16738] __kvmalloc_node_noprof+0x72/0x190 [ 961.180341][T16738] map_get_next_key+0x230/0x5e0 [ 961.185221][T16738] __sys_bpf+0x72e/0x810 [ 961.189483][T16738] ? __pfx___sys_bpf+0x10/0x10 [ 961.194277][T16738] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 961.200281][T16738] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 961.206631][T16738] ? do_syscall_64+0x100/0x230 [ 961.211422][T16738] __x64_sys_bpf+0x7c/0x90 [ 961.215866][T16738] do_syscall_64+0xf3/0x230 [ 961.220390][T16738] ? clear_bhb_loop+0x35/0x90 [ 961.225093][T16738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.231012][T16738] RIP: 0033:0x7f38fc985d29 [ 961.235442][T16738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.255324][T16738] RSP: 002b:00007f38fd861038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 961.263771][T16738] RAX: ffffffffffffffda RBX: 00007f38fcb75fa0 RCX: 00007f38fc985d29 [ 961.271763][T16738] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000004 [ 961.279750][T16738] RBP: 00007f38fd861090 R08: 0000000000000000 R09: 0000000000000000 [ 961.287742][T16738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.295733][T16738] R13: 0000000000000000 R14: 00007f38fcb75fa0 R15: 00007ffeb7bb76a8 [ 961.303736][T16738] [ 961.462619][ T5919] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 961.593256][ T5919] usb 9-1: device descriptor read/64, error -71 [ 961.700055][T16750] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2833'. [ 961.730354][T16750] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2833'. [ 961.832457][ T5919] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 961.962471][ T5919] usb 9-1: device descriptor read/64, error -71 [ 962.135028][ T5919] usb usb9-port1: attempt power cycle [ 962.362353][T16770] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2836'. [ 963.064094][T16765] ieee802154 phy1 wpan1: encryption failed: -22 [ 963.361225][ T5919] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 963.383067][ T5919] usb 9-1: device descriptor read/8, error -71 [ 963.622924][ T5919] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 963.644511][T16790] FAULT_INJECTION: forcing a failure. [ 963.644511][T16790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 963.668906][T16790] CPU: 1 UID: 0 PID: 16790 Comm: syz.6.2842 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 963.669710][ T5919] usb 9-1: device descriptor read/8, error -71 [ 963.679678][T16790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 963.679706][T16790] Call Trace: [ 963.679715][T16790] [ 963.679724][T16790] dump_stack_lvl+0x241/0x360 [ 963.679756][T16790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 963.712019][T16790] ? __pfx__printk+0x10/0x10 [ 963.716641][T16790] ? __up_read+0x2c2/0x6b0 [ 963.721097][T16790] should_fail_ex+0x3b0/0x4e0 [ 963.725788][T16790] _copy_to_user+0x31/0xb0 [ 963.730215][T16790] map_get_next_key+0x4a5/0x5e0 [ 963.735081][T16790] __sys_bpf+0x72e/0x810 [ 963.739328][T16790] ? __pfx___sys_bpf+0x10/0x10 [ 963.744103][T16790] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 963.750088][T16790] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 963.756410][T16790] ? do_syscall_64+0x100/0x230 [ 963.761172][T16790] __x64_sys_bpf+0x7c/0x90 [ 963.765588][T16790] do_syscall_64+0xf3/0x230 [ 963.770091][T16790] ? clear_bhb_loop+0x35/0x90 [ 963.774767][T16790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.780662][T16790] RIP: 0033:0x7f8f68985d29 [ 963.785077][T16790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 963.804677][T16790] RSP: 002b:00007f8f69845038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 963.813092][T16790] RAX: ffffffffffffffda RBX: 00007f8f68b75fa0 RCX: 00007f8f68985d29 [ 963.821058][T16790] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000004 [ 963.829033][T16790] RBP: 00007f8f69845090 R08: 0000000000000000 R09: 0000000000000000 [ 963.837005][T16790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.844974][T16790] R13: 0000000000000000 R14: 00007f8f68b75fa0 R15: 00007ffe00933998 [ 963.852952][T16790] [ 963.856189][ C1] vkms_vblank_simulate: vblank timer overrun [ 963.857610][ T5919] usb usb9-port1: unable to enumerate USB device [ 965.971870][T16822] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2852'. [ 966.158480][T16822] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2852'. [ 966.444220][T16833] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2853'. [ 967.848624][T16857] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 967.858538][T16857] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 968.008573][T16860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.032478][T16860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.032626][ T5919] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 968.048009][ T5870] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 968.232868][ T5919] usb 9-1: Using ep0 maxpacket: 32 [ 968.240424][ T5870] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 968.249273][ T5919] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 968.262414][ T5870] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 968.272799][ T5919] usb 9-1: config 0 has no interface number 0 [ 968.282798][ T5870] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 968.294074][ T5870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 968.306343][ T5919] usb 9-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 968.316886][ T5870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.329036][ T5919] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.337968][ T5919] usb 9-1: Product: syz [ 968.344313][ T5919] usb 9-1: Manufacturer: syz [ 968.349718][ T5919] usb 9-1: SerialNumber: syz [ 968.355396][ T5870] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 968.364565][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 968.374705][ T5919] usb 9-1: config 0 descriptor?? [ 968.379809][ T5870] usb 3-1: Product: syz [ 968.386950][ T5870] usb 3-1: Manufacturer: syz [ 968.392936][ T5919] hub 9-1:0.89: bad descriptor, ignoring hub [ 968.400019][ T5919] hub 9-1:0.89: probe with driver hub failed with error -5 [ 968.410793][ T5870] cdc_wdm 3-1:1.0: skipping garbage [ 968.415956][T16869] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2866'. [ 968.417030][ T5919] option 9-1:0.89: GSM modem (1-port) converter detected [ 968.432051][ T5870] cdc_wdm 3-1:1.0: skipping garbage [ 968.439780][T16869] netlink: 'syz.7.2866': attribute type 2 has an invalid length. [ 968.451633][T16869] netlink: 212912 bytes leftover after parsing attributes in process `syz.7.2866'. [ 968.451638][ T5919] usb 9-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 968.452614][ T5870] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 968.477757][ T5870] cdc_wdm 3-1:1.0: Unknown control protocol [ 968.525963][T16872] fuse: Unknown parameter '000000000000000000060x0000000000000009' [ 968.612989][ T5870] usb 3-1: USB disconnect, device number 71 [ 968.824535][ T5871] usb 9-1: USB disconnect, device number 20 [ 968.836330][ T5871] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 968.846622][ T5871] option 9-1:0.89: device disconnected [ 970.650002][T16900] overlayfs: missing 'workdir' [ 972.355764][T16910] xt_TCPMSS: Only works on TCP SYN packets [ 972.523087][T16909] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2878'. [ 973.403884][T16925] xt_CT: You must specify a L4 protocol and not use inversions on it [ 974.092717][ T5871] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 974.283444][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 974.298280][ T5871] usb 2-1: config 0 interface 0 has no altsetting 0 [ 974.370355][ T5871] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 974.551649][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.656691][ T5871] usb 2-1: config 0 descriptor?? [ 974.687067][ T5871] usb 2-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 974.833857][ T5871] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 975.029552][ T5871] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 975.076369][ T5871] usb 2-1: media controller created [ 975.205116][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 975.337569][T16961] netlink: 'syz.2.2891': attribute type 32 has an invalid length. [ 975.464577][T16244] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 975.570668][ T5871] set interface failed [ 975.571331][ T5871] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 975.596151][ T5871] error writing reg: 0xff, val: 0x00 [ 975.881121][ T5871] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 975.925764][ T5871] usb 2-1: USB disconnect, device number 59 [ 975.963689][T16244] usb 9-1: config 0 has an invalid interface number: 11 but max is 0 [ 975.971807][T16244] usb 9-1: config 0 has no interface number 0 [ 976.026224][T16244] usb 9-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=16.5f [ 976.050005][T16244] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.072359][T16244] usb 9-1: Product: syz [ 976.078595][T16244] usb 9-1: Manufacturer: syz [ 976.097361][T16244] usb 9-1: SerialNumber: syz [ 976.131651][T16244] usb 9-1: config 0 descriptor?? [ 976.857871][T16244] usb 9-1: USB disconnect, device number 21 [ 976.884668][T16982] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2899'. [ 977.047221][T16984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 977.347650][T16987] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 977.357655][T16987] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 977.367145][T16987] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 977.378298][T16987] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 977.391993][T16987] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 977.399556][T16987] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 978.066016][T16997] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2904'. [ 979.458427][T16987] Bluetooth: hci5: command tx timeout [ 979.718841][T17018] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 979.990754][T16244] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 980.254264][T16986] chnl_net:caif_netlink_parms(): no params data found [ 980.263576][T16244] usb 9-1: not running at top speed; connect to a high speed hub [ 980.271560][T16244] usb 9-1: no configurations [ 980.276531][T16244] usb 9-1: can't read configurations, error -22 [ 980.414089][T16244] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 980.453833][T16986] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.460953][T16986] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.485146][T16986] bridge_slave_0: entered allmulticast mode [ 980.492300][T16986] bridge_slave_0: entered promiscuous mode [ 980.500862][T16986] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.522076][T17043] 9pnet_fd: Insufficient options for proto=fd [ 980.535310][T16986] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.550837][T16986] bridge_slave_1: entered allmulticast mode [ 980.559323][T16986] bridge_slave_1: entered promiscuous mode [ 980.581439][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 980.581454][ T29] audit: type=1326 audit(1737238844.773:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17040 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4458b85d29 code=0x7ffc0000 [ 980.583670][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2915'. [ 980.587864][ T29] audit: type=1326 audit(1737238844.773:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17040 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4458b85d29 code=0x7ffc0000 [ 980.649472][ T5919] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 980.663726][T16244] usb 9-1: not running at top speed; connect to a high speed hub [ 980.670249][ T29] audit: type=1326 audit(1737238844.773:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17040 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4458b85d29 code=0x7ffc0000 [ 980.671480][T16244] usb 9-1: no configurations [ 980.671498][T16244] usb 9-1: can't read configurations, error -22 [ 980.702692][ T29] audit: type=1326 audit(1737238844.773:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17040 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4458b85d29 code=0x7ffc0000 [ 980.738131][ T29] audit: type=1326 audit(1737238844.773:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17040 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4458b85d29 code=0x7ffc0000 [ 980.752916][T16244] usb usb9-port1: attempt power cycle [ 980.767970][ T29] audit: type=1326 audit(1737238844.773:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17040 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f4458b85d29 code=0x7ffc0000 [ 980.790196][ T29] audit: type=1326 audit(1737238844.783:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17040 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4458b85d29 code=0x7ffc0000 [ 980.804899][T16986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.814139][ T29] audit: type=1326 audit(1737238844.783:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17040 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f4458b85d29 code=0x7ffc0000 [ 980.836345][T16986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.860218][ T29] audit: type=1326 audit(1737238844.783:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17040 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4458b85d29 code=0x7ffc0000 [ 980.885394][ T29] audit: type=1326 audit(1737238844.783:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17040 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4458b85d29 code=0x7ffc0000 [ 980.885503][ T5919] usb 7-1: Using ep0 maxpacket: 8 [ 980.915647][ T5919] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 980.924814][ T5919] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 980.940060][ T5919] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 980.957622][ T5919] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 980.980840][T16986] team0: Port device team_slave_0 added [ 980.992256][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.000274][ T5919] usb 7-1: Product: ᐄ [ 981.004507][T16986] team0: Port device team_slave_1 added [ 981.029033][ T5919] usb 7-1: Manufacturer: 聲讛솠햕읲숣黆쎥旗釲䚔좷㶝ꦶ씞岧솉ꈾ풍⤙嵧錈ᬳࢥ [ 981.062497][ T5919] usb 7-1: SerialNumber: П [ 981.092649][T16986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 981.111490][T16986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.144931][T16244] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 981.256427][T16986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.363673][T16244] usb 9-1: not running at top speed; connect to a high speed hub [ 981.376424][ T5919] usb 7-1: 0:2 : does not exist [ 981.381568][T16244] usb 9-1: no configurations [ 981.418725][T16244] usb 9-1: can't read configurations, error -22 [ 981.498490][ T5919] usb 7-1: USB disconnect, device number 50 [ 981.518065][T16986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.529441][T16987] Bluetooth: hci5: command tx timeout [ 981.592076][T16986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.655563][T16244] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 981.729396][T16986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 981.745616][T16244] usb 9-1: not running at top speed; connect to a high speed hub [ 981.760320][T16244] usb 9-1: no configurations [ 981.784935][T16244] usb 9-1: can't read configurations, error -22 [ 981.811207][T16244] usb usb9-port1: unable to enumerate USB device [ 981.887557][T17054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2918'. [ 981.908125][T16986] hsr_slave_0: entered promiscuous mode [ 981.952145][T16986] hsr_slave_1: entered promiscuous mode [ 982.017971][T16986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 982.071724][T16986] Cannot create hsr debugfs directory [ 982.682962][T17066] loop2: detected capacity change from 0 to 7 [ 982.694958][T17066] Dev loop2: unable to read RDB block 7 [ 982.700829][T17066] loop2: AHDI p2 p3 [ 982.705152][T17066] loop2: partition table partially beyond EOD, truncated [ 982.712644][T17066] loop2: p2 size 150995200 extends beyond EOD, truncated [ 982.892550][T14757] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 982.922005][T16986] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.933085][T16986] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.039785][T16986] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.051704][T16986] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.062656][T14757] usb 9-1: Using ep0 maxpacket: 16 [ 983.074879][T14757] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 983.087498][T14757] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 983.100617][T14757] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 983.120591][T14757] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.128978][T14757] usb 9-1: Product: syz [ 983.134498][T14757] usb 9-1: Manufacturer: syz [ 983.140354][T14757] usb 9-1: SerialNumber: syz [ 983.151047][T14757] usb 9-1: config 0 descriptor?? [ 983.159339][T14757] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 983.168938][T14757] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 983.215000][T16986] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.236728][T16986] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.329859][T16986] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.341688][T16986] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.516526][ T5871] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 983.617942][T16986] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 983.633175][T16987] Bluetooth: hci5: command tx timeout [ 983.649600][T16986] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 983.659620][T16986] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 983.700344][T16986] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 983.821221][T16986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.860363][T16986] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.862607][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 983.878054][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.884516][ T5871] usb 3-1: config 0 has an invalid descriptor of length 175, skipping remainder of the config [ 983.885199][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.904163][ T5919] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 983.912979][ T5871] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 983.935170][ T5871] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 983.952122][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.967772][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.975001][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.983459][ T5871] usb 3-1: Product: syz [ 983.990782][ T5871] usb 3-1: Manufacturer: syz [ 984.007835][ T5871] usb 3-1: SerialNumber: syz [ 984.047483][ T5871] r8152-cfgselector 3-1: Unknown version 0x0000 [ 984.064889][ T5871] r8152-cfgselector 3-1: config 0 descriptor?? [ 984.085614][ T5919] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.098019][ T5919] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 984.125434][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 984.141158][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 984.152851][ T5919] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 984.188148][ T5919] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 984.197957][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 984.217964][ T5919] usb 7-1: Product: syz [ 984.222163][ T5919] usb 7-1: Manufacturer: syz [ 984.231417][ T5919] usb 7-1: SerialNumber: syz [ 984.242743][ T5919] usb 7-1: config 0 descriptor?? [ 984.267944][T17095] loop2: detected capacity change from 0 to 7 [ 984.275883][T17095] Dev loop2: unable to read RDB block 7 [ 984.281609][T17095] loop2: unable to read partition table [ 984.297855][T17095] loop2: partition table beyond EOD, truncated [ 984.304417][T17095] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 984.386131][T16986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 984.486580][ T5919] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 984.525509][ T5919] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 984.734476][ T5919] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 984.786539][T17102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.789640][ T5919] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 984.797760][T16986] veth0_vlan: entered promiscuous mode [ 984.843511][T17102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.852117][T14757] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 984.905442][T14757] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 985.042567][ T5919] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 985.046476][T16986] veth1_vlan: entered promiscuous mode [ 985.067201][ T5919] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 985.114235][T16986] veth0_macvtap: entered promiscuous mode [ 985.126358][T16986] veth1_macvtap: entered promiscuous mode [ 985.160922][T16986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.174910][T16986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.185713][T16986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.196507][T16986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.215051][T16986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.225901][T16986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.236709][T16986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.247388][T16986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.257842][T16986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.268634][T16986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.279192][T16986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.289911][T16986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.301526][T16986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.312926][T16986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.324321][T16986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.344034][T16986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.356474][T16986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.367679][T16986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.378260][T16986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.388841][T16986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.389751][T17062] usb usb1: usbfs: process 17062 (syz.8.2921) did not claim interface 0 before use [ 985.399320][T16986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.399344][T16986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.399360][T16986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.400763][T16986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.470859][T16986] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.480009][T16986] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.491071][T16986] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.500093][T16986] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.609701][ T6020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.617870][ T6020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.655669][ T6020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.664364][ T6020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.683673][T16987] Bluetooth: hci5: command tx timeout [ 985.707767][ T5919] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 985.716591][ T5919] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22 [ 985.729193][ T5919] usb 7-1: USB disconnect, device number 51 [ 986.007766][T14757] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 986.020649][T14757] em28xx 9-1:0.0: No AC97 audio processor [ 986.737961][ T5943] usb 9-1: USB disconnect, device number 26 [ 986.748875][ T5943] em28xx 9-1:0.0: Disconnecting em28xx [ 986.773791][ T5919] r8152-cfgselector 3-1: USB disconnect, device number 72 [ 986.857655][ T5943] em28xx 9-1:0.0: Freeing device [ 986.895570][T17114] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 987.447290][T17128] fuse: Unknown parameter 'grYp_id' [ 987.470677][T17132] loop2: detected capacity change from 0 to 7 [ 987.478535][T17132] Dev loop2: unable to read RDB block 7 [ 987.496517][T17132] loop2: unable to read partition table [ 987.508567][T17132] loop2: partition table beyond EOD, truncated [ 987.515932][T17132] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 987.893061][T17130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 988.372480][ T5919] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 989.168457][T17165] netlink: 428 bytes leftover after parsing attributes in process `syz.7.2946'. [ 989.177774][T17165] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2946'. [ 989.376176][ T5919] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 989.424575][ T5919] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.452637][ T5919] usb 7-1: config 0 has no interface number 0 [ 989.469804][ T5919] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 989.490436][ T5919] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 989.555756][ T5919] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 989.578980][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.602096][ T5919] usb 7-1: Product: syz [ 989.613489][ T5919] usb 7-1: Manufacturer: syz [ 989.631290][ T5919] usb 7-1: SerialNumber: syz [ 989.639978][ T5919] usb 7-1: config 0 descriptor?? [ 989.683182][T16244] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 989.731009][T17181] loop2: detected capacity change from 0 to 7 [ 989.739240][T17181] Dev loop2: unable to read RDB block 7 [ 989.748252][T17181] loop2: unable to read partition table [ 989.755603][T17181] loop2: partition table beyond EOD, truncated [ 989.761983][T17181] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 989.852754][T16244] usb 3-1: Using ep0 maxpacket: 16 [ 989.870851][T16244] usb 3-1: config 7 has an invalid interface number: 152 but max is 0 [ 989.910431][T16244] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 989.931493][T16244] usb 3-1: config 7 has no interface number 0 [ 989.939633][T16244] usb 3-1: config 7 interface 152 altsetting 190 endpoint 0x4 has an invalid bInterval 253, changing to 7 [ 989.951458][T16244] usb 3-1: config 7 interface 152 altsetting 190 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 989.964586][T16244] usb 3-1: config 7 interface 152 altsetting 190 endpoint 0x6 has invalid wMaxPacketSize 0 [ 989.974860][T16244] usb 3-1: config 7 interface 152 altsetting 190 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 989.988871][T16244] usb 3-1: config 7 interface 152 has no altsetting 0 [ 990.222803][ T5919] usbtouchscreen 7-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 990.395073][ T5919] usb 7-1: USB disconnect, device number 52 [ 990.406360][T17154] batadv1: entered allmulticast mode [ 990.426287][T16244] usb 3-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=66.6d [ 990.476955][T16244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.489184][T16244] usb 3-1: Product: syz [ 990.493685][T16244] usb 3-1: Manufacturer: syz [ 990.498443][T16244] usb 3-1: SerialNumber: syz [ 990.743602][T17169] block device autoloading is deprecated and will be removed. [ 990.781312][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2958'. [ 990.862740][T16244] usbtest 3-1:7.152: couldn't get endpoints, -71 [ 990.869155][T16244] usbtest 3-1:7.152: probe with driver usbtest failed with error -71 [ 990.915063][T16244] usb 3-1: USB disconnect, device number 73 [ 991.753278][T17210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.908186][T17210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.178374][T17218] FAULT_INJECTION: forcing a failure. [ 992.178374][T17218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 992.192507][T17218] CPU: 1 UID: 0 PID: 17218 Comm: syz.6.2960 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 992.203298][T17218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 992.213362][T17218] Call Trace: [ 992.216655][T17218] [ 992.219602][T17218] dump_stack_lvl+0x241/0x360 [ 992.224303][T17218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 992.229520][T17218] ? __pfx__printk+0x10/0x10 [ 992.234130][T17218] ? vfs_write+0x730/0xd30 [ 992.238565][T17218] should_fail_ex+0x3b0/0x4e0 [ 992.243257][T17218] _copy_from_user+0x2f/0xc0 [ 992.247865][T17218] move_addr_to_kernel+0x82/0x150 [ 992.252916][T17218] __sys_connect+0xb6/0x2d0 [ 992.257435][T17218] ? __fget_files+0x2a/0x410 [ 992.262040][T17218] ? __pfx___sys_connect+0x10/0x10 [ 992.267264][T17218] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 992.273606][T17218] ? do_syscall_64+0x100/0x230 [ 992.278396][T17218] __x64_sys_connect+0x7a/0x90 [ 992.283177][T17218] do_syscall_64+0xf3/0x230 [ 992.287693][T17218] ? clear_bhb_loop+0x35/0x90 [ 992.292391][T17218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.298308][T17218] RIP: 0033:0x7f8f68985d29 [ 992.302742][T17218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 992.322361][T17218] RSP: 002b:00007f8f69803038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 992.330792][T17218] RAX: ffffffffffffffda RBX: 00007f8f68b76160 RCX: 00007f8f68985d29 [ 992.338773][T17218] RDX: 0000000000000014 RSI: 0000000020000000 RDI: 000000000000000b [ 992.346754][T17218] RBP: 00007f8f69803090 R08: 0000000000000000 R09: 0000000000000000 [ 992.354740][T17218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.362730][T17218] R13: 0000000000000000 R14: 00007f8f68b76160 R15: 00007ffe00933998 [ 992.370733][T17218] [ 992.373852][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.491324][ T5919] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 993.136891][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.165333][T17217] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 993.575988][ T5919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.587037][ T5919] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 993.763257][ T5919] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 993.832655][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 993.869635][ T5919] usb 3-1: SerialNumber: syz [ 993.900651][T17227] loop2: detected capacity change from 0 to 7 [ 993.913414][ T5919] cdc_ether 3-1:1.0: invalid descriptor buffer length [ 993.920213][ T5919] usb 3-1: bad CDC descriptors [ 993.934329][T17227] Dev loop2: unable to read RDB block 7 [ 993.950307][T17227] loop2: unable to read partition table [ 993.961742][T17227] loop2: partition table beyond EOD, truncated [ 993.986352][T17227] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 994.812546][ T5871] usb 3-1: USB disconnect, device number 74 [ 995.046317][T17242] 9pnet_fd: Insufficient options for proto=fd [ 995.121465][T17244] netlink: 'syz.6.2970': attribute type 10 has an invalid length. [ 995.152436][T17244] vlan0: entered allmulticast mode [ 995.170652][T17244] veth0_vlan: entered allmulticast mode [ 996.550976][T17244] team0: Port device vlan0 added [ 996.702348][ T5943] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 996.729639][T17262] set match dimension is over the limit! [ 996.879072][ T5943] usb 7-1: Using ep0 maxpacket: 8 [ 996.903658][ T5943] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.921451][ T5943] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 996.947365][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 996.981966][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 997.035582][ T5919] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 997.187509][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 997.306173][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 997.362540][ T5943] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 997.396043][ T5943] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 997.407888][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.436585][ T5919] usb 2-1: config 0 has an invalid interface number: 130 but max is 0 [ 997.440988][ T5943] usb 7-1: Product: syz [ 997.494995][ T5943] usb 7-1: Manufacturer: syz [ 997.499979][ T5943] usb 7-1: SerialNumber: syz [ 997.575685][ T5919] usb 2-1: config 0 has no interface number 0 [ 997.581836][ T5919] usb 2-1: config 0 interface 130 has no altsetting 0 [ 997.583603][ T5943] usb 7-1: config 0 descriptor?? [ 997.621088][T17245] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 997.638608][ T5919] usb 2-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 0.b8 [ 997.644944][ T5943] ati_remote 7-1:0.0: Initializing ati_remote hardware failed. [ 997.672267][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.680512][ T5943] ati_remote 7-1:0.0: probe with driver ati_remote failed with error -5 [ 997.720734][ T5919] usb 2-1: config 0 descriptor?? [ 997.963991][ T5943] usb 2-1: USB disconnect, device number 60 [ 998.046034][ T25] usb 7-1: USB disconnect, device number 53 [ 998.124381][T17272] FAULT_INJECTION: forcing a failure. [ 998.124381][T17272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.138468][T17272] CPU: 0 UID: 0 PID: 17272 Comm: syz.7.2975 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 998.149251][T17272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 998.159330][T17272] Call Trace: [ 998.162626][T17272] [ 998.165572][T17272] dump_stack_lvl+0x241/0x360 [ 998.170277][T17272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 998.175498][T17272] ? __pfx__printk+0x10/0x10 [ 998.180117][T17272] ? snprintf+0xda/0x120 [ 998.184381][T17272] should_fail_ex+0x3b0/0x4e0 [ 998.189082][T17272] _copy_to_user+0x31/0xb0 [ 998.193521][T17272] simple_read_from_buffer+0xca/0x150 [ 998.198918][T17272] proc_fail_nth_read+0x1e9/0x250 [ 998.203967][T17272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 998.209533][T17272] ? rw_verify_area+0x55e/0x6f0 [ 998.214401][T17272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 998.219966][T17272] vfs_read+0x1fc/0xb70 [ 998.224148][T17272] ? __pfx___mutex_lock+0x10/0x10 [ 998.229190][T17272] ? __pfx_vfs_read+0x10/0x10 [ 998.234069][T17272] ? __fget_files+0x2a/0x410 [ 998.238681][T17272] ? __fget_files+0x395/0x410 [ 998.243376][T17272] ? __fget_files+0x2a/0x410 [ 998.247998][T17272] ksys_read+0x18f/0x2b0 [ 998.252264][T17272] ? __pfx_ksys_read+0x10/0x10 [ 998.257046][T17272] ? do_syscall_64+0x100/0x230 [ 998.261853][T17272] ? do_syscall_64+0xb6/0x230 [ 998.266547][T17272] do_syscall_64+0xf3/0x230 [ 998.271069][T17272] ? clear_bhb_loop+0x35/0x90 [ 998.275781][T17272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.281696][T17272] RIP: 0033:0x7f4458b8473c [ 998.286124][T17272] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 998.305748][T17272] RSP: 002b:00007f4459925030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 998.314189][T17272] RAX: ffffffffffffffda RBX: 00007f4458d76080 RCX: 00007f4458b8473c [ 998.322171][T17272] RDX: 000000000000000f RSI: 00007f44599250a0 RDI: 000000000000000c [ 998.330154][T17272] RBP: 00007f4459925090 R08: 0000000000000000 R09: 0000000000000000 [ 998.338140][T17272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.346126][T17272] R13: 0000000000000000 R14: 00007f4458d76080 R15: 00007ffd9ae73dc8 [ 998.354130][T17272] [ 998.449933][T17277] netlink: 428 bytes leftover after parsing attributes in process `syz.8.2976'. [ 998.459124][T17277] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2976'. [ 999.090646][T17283] loop2: detected capacity change from 0 to 7 [ 999.121210][T17283] Dev loop2: unable to read RDB block 7 [ 999.147145][T17283] loop2: unable to read partition table [ 999.206025][T17283] loop2: partition table beyond EOD, truncated [ 999.308194][T17285] xt_policy: neither incoming nor outgoing policy selected [ 999.932751][T17283] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1000.482318][ T25] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1000.693805][ T25] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1000.715648][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.781204][ T25] usb 2-1: config 0 descriptor?? [ 1000.789991][ T25] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1000.997626][ T5943] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1001.010402][ T25] gp8psk: usb in 128 operation failed. [ 1001.036613][ T25] gp8psk: usb in 137 operation failed. [ 1001.068094][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1001.117333][ T25] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1001.138872][ T25] usb 2-1: media controller created [ 1001.190536][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1001.223025][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1001.252655][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.288420][ T25] gp8psk_fe: Frontend attached [ 1001.298278][ T5943] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1001.338186][ T25] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1001.363504][ T25] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1001.386034][ T5943] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1001.418624][T17302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.436506][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.448676][T17302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.722913][T13135] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 1001.959849][T13135] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1002.112328][T13135] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.206981][T13135] usb 7-1: config 0 descriptor?? [ 1002.245903][T13135] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1002.253132][ T5943] usb 3-1: config 0 descriptor?? [ 1002.472703][T13135] gp8psk: usb in 128 operation failed. [ 1002.546948][ T25] gp8psk: usb in 137 operation failed. [ 1002.553077][ T25] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1002.571813][ T25] gp8psk: found Genpix USB device pID = 203 (hex) [ 1002.581848][ T25] usb 2-1: USB disconnect, device number 61 [ 1003.156782][ T25] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1003.338393][T13135] gp8psk: usb in 137 operation failed. [ 1003.345358][T13135] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1003.382473][T13135] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1003.802539][T13135] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1003.964439][T13135] usb 9-1: config 130 has too many interfaces: 55, using maximum allowed: 32 [ 1003.984819][T13135] usb 9-1: config 130 has an invalid descriptor of length 58, skipping remainder of the config [ 1004.005790][T13135] usb 9-1: config 130 has 0 interfaces, different from the descriptor's value: 55 [ 1004.027023][T13135] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1004.036373][T13135] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.435722][T16244] usb 3-1: USB disconnect, device number 75 [ 1004.458260][T17331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.470371][ T25] usb 7-1: USB disconnect, device number 54 [ 1004.498439][T17331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.596085][T17342] netlink: 'syz.6.2993': attribute type 10 has an invalid length. [ 1004.610697][T17342] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1004.793737][ T5919] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1004.849711][T17346] netlink: 428 bytes leftover after parsing attributes in process `syz.6.2994'. [ 1004.886650][T17346] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2994'. [ 1005.016887][ T5919] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1005.058563][ T5919] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1005.072019][ T5919] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1005.083530][ T5919] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1005.109219][ T5919] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1005.109471][T17348] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2995'. [ 1005.129100][ T5919] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1005.166167][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1005.209280][ T5919] usb 2-1: Product: syz [ 1005.223706][ T5919] usb 2-1: Manufacturer: syz [ 1005.267095][ T5919] cdc_wdm 2-1:1.0: skipping garbage [ 1005.277579][ T5919] cdc_wdm 2-1:1.0: skipping garbage [ 1005.420244][ T5919] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1005.426355][ T5919] cdc_wdm 2-1:1.0: Unknown control protocol [ 1005.444786][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 1005.779277][T17357] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1005.873574][T17356] netlink: 428 bytes leftover after parsing attributes in process `syz.6.2998'. [ 1005.883575][T17356] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2998'. [ 1006.584133][T17369] FAULT_INJECTION: forcing a failure. [ 1006.584133][T17369] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.607840][T17369] CPU: 1 UID: 0 PID: 17369 Comm: syz.6.3001 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 1006.618644][T17369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1006.628717][T17369] Call Trace: [ 1006.632005][T17369] [ 1006.634950][T17369] dump_stack_lvl+0x241/0x360 [ 1006.639648][T17369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1006.644862][T17369] ? __pfx__printk+0x10/0x10 [ 1006.649455][T17369] ? kmem_cache_alloc_noprof+0x48/0x380 [ 1006.655017][T17369] ? __pfx___might_resched+0x10/0x10 [ 1006.660310][T17369] should_fail_ex+0x3b0/0x4e0 [ 1006.664987][T17369] should_failslab+0xac/0x100 [ 1006.669668][T17369] ? getname_kernel+0x59/0x2f0 [ 1006.674426][T17369] kmem_cache_alloc_noprof+0x70/0x380 [ 1006.679805][T17369] getname_kernel+0x59/0x2f0 [ 1006.684392][T17369] kern_path+0x1d/0x50 [ 1006.688456][T17369] bpf_uprobe_multi_link_attach+0x353/0xdd0 [ 1006.694364][T17369] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 1006.700782][T17369] ? __fget_files+0x395/0x410 [ 1006.705459][T17369] ? bpf_prog_attach_check_attach_type+0x42c/0x4f0 [ 1006.711962][T17369] link_create+0x6d7/0x870 [ 1006.716379][T17369] __sys_bpf+0x4bc/0x810 [ 1006.720621][T17369] ? __pfx___sys_bpf+0x10/0x10 [ 1006.725386][T17369] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1006.731369][T17369] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1006.737699][T17369] ? do_syscall_64+0x100/0x230 [ 1006.742462][T17369] __x64_sys_bpf+0x7c/0x90 [ 1006.746880][T17369] do_syscall_64+0xf3/0x230 [ 1006.751383][T17369] ? clear_bhb_loop+0x35/0x90 [ 1006.756059][T17369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.761953][T17369] RIP: 0033:0x7f8f68985d29 [ 1006.766364][T17369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.785964][T17369] RSP: 002b:00007f8f69845038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1006.794374][T17369] RAX: ffffffffffffffda RBX: 00007f8f68b75fa0 RCX: 00007f8f68985d29 [ 1006.802345][T17369] RDX: 000000000000003c RSI: 00000000200012c0 RDI: 000000000000001c [ 1006.810309][T17369] RBP: 00007f8f69845090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.818276][T17369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.826240][T17369] R13: 0000000000000000 R14: 00007f8f68b75fa0 R15: 00007ffe00933998 [ 1006.834220][T17369] [ 1006.837431][ C1] vkms_vblank_simulate: vblank timer overrun [ 1006.842527][T13135] usb 9-1: string descriptor 0 read error: -71 [ 1006.862962][T13135] usb 9-1: USB disconnect, device number 27 [ 1007.071380][T17378] nbd: must specify a size in bytes for the device [ 1007.091624][T17376] 9pnet_fd: Insufficient options for proto=fd [ 1007.182099][T17376] kvm: pic: non byte write [ 1007.312369][ T25] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1007.482526][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 1007.507992][ T25] usb 7-1: config 13 has an invalid interface number: 240 but max is 1 [ 1007.528147][ T25] usb 7-1: config 13 contains an unexpected descriptor of type 0x1, skipping [ 1007.576524][ T25] usb 7-1: config 13 has an invalid interface number: 4 but max is 1 [ 1007.604159][T13135] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1007.622829][ T25] usb 7-1: config 13 has no interface number 0 [ 1007.647192][ T25] usb 7-1: config 13 has no interface number 1 [ 1007.661693][T14757] usb 2-1: USB disconnect, device number 62 [ 1007.821818][T13135] usb 3-1: Using ep0 maxpacket: 16 [ 1007.841558][T13135] usb 3-1: config 0 has an invalid interface number: 196 but max is 1 [ 1008.046094][T13135] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.306583][T13135] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1008.339306][ T25] usb 7-1: config 13 interface 240 altsetting 11 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1008.353001][ T25] usb 7-1: config 13 interface 240 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 1008.364245][ T25] usb 7-1: config 13 interface 240 altsetting 11 endpoint 0xF has invalid maxpacket 536, setting to 64 [ 1008.387366][ T25] usb 7-1: config 13 interface 240 altsetting 11 bulk endpoint 0x1 has invalid maxpacket 16 [ 1008.396840][T13135] usb 3-1: config 0 has no interface number 0 [ 1008.412897][ T25] usb 7-1: config 13 interface 240 altsetting 11 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1008.430133][T13135] usb 3-1: config 0 interface 196 altsetting 119 endpoint 0xB has an invalid bInterval 248, changing to 11 [ 1008.454625][ T25] usb 7-1: config 13 interface 240 altsetting 11 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1008.477167][T13135] usb 3-1: config 0 interface 196 altsetting 119 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1008.508042][T13135] usb 3-1: config 0 interface 196 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1008.512940][ T25] usb 7-1: config 13 interface 240 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 1008.540897][T13135] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1008.558457][T13135] usb 3-1: New USB device found, idVendor=0a46, idProduct=1269, bcdDevice=1a.0a [ 1008.584944][ T25] usb 7-1: config 13 interface 240 altsetting 11 has a duplicate endpoint with address 0x6, skipping [ 1008.587918][T13135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.612373][ T25] usb 7-1: config 13 interface 240 altsetting 11 has a duplicate endpoint with address 0x1, skipping [ 1008.641066][T13135] usb 3-1: Product: syz [ 1008.643949][ T25] usb 7-1: config 13 interface 4 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1008.657086][T13135] usb 3-1: Manufacturer: syz [ 1008.671199][ T25] usb 7-1: config 13 interface 4 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1008.675589][T13135] usb 3-1: SerialNumber: syz [ 1008.694554][ T25] usb 7-1: config 13 interface 4 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 1008.710751][ T25] usb 7-1: config 13 interface 4 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1008.724827][ T25] usb 7-1: config 13 interface 4 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1008.725242][T13135] usb 3-1: config 0 descriptor?? [ 1008.736195][ T25] usb 7-1: config 13 interface 4 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1008.842495][T17404] loop7: detected capacity change from 0 to 16384 [ 1008.891136][T17405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3009'. [ 1008.922602][T17404] loop7: detected capacity change from 16384 to 16383 [ 1009.059909][ T25] usb 7-1: config 13 interface 4 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1009.075527][T17404] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1009.085174][T17404] Buffer I/O error on dev loop7, logical block 3, async page read [ 1009.097093][T17404] loop7: unable to read partition table [ 1009.101011][T13135] dm9601 3-1:0.196: probe with driver dm9601 failed with error -22 [ 1009.105656][T17404] loop_reread_partitions: partition scan of loop7 (R%0T$7)]W?18;9C?-z׌ 97d) failed (rc=-5) [ 1009.214520][ T25] usb 7-1: config 13 interface 4 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1009.337729][ T25] usb 7-1: config 13 interface 4 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 1009.374047][ T25] usb 7-1: config 13 interface 4 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1009.419854][T13135] usb 3-1: USB disconnect, device number 76 [ 1009.794982][ T25] usb 7-1: config 13 interface 4 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1009.806590][ T25] usb 7-1: config 13 interface 4 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 1009.817420][ T25] usb 7-1: config 13 interface 240 has no altsetting 0 [ 1009.824430][ T25] usb 7-1: config 13 interface 4 has no altsetting 0 [ 1009.834223][ T25] usb 7-1: New USB device found, idVendor=1b3d, idProduct=0184, bcdDevice=17.2c [ 1010.073231][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.102308][ T25] usb 7-1: Product: 㺲䡦딴㭟㿇㹓뜁彯㳋ꈃ菕䵌्ᴦꬍ臤솒彊㱒㧝䍬悉┃뤝眙손촶⸈ᔔᦔ馕肆ᬏ귥੟ᔖ俹ꌟ晛ʎힻ笴纬菔嬲誃ꍊᶇ᥯菙确剻熑თ覻鷍贑浐 [ 1011.058067][ T25] usb 7-1: SerialNumber: 뢛 [ 1011.103510][ T25] usb 7-1: can't set config #13, error -71 [ 1011.120116][ T25] usb 7-1: USB disconnect, device number 55 [ 1011.343068][T17415] FAULT_INJECTION: forcing a failure. [ 1011.343068][T17415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1011.393169][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3013'. [ 1011.402911][T17415] CPU: 0 UID: 0 PID: 17415 Comm: syz.8.3012 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 1011.413704][T17415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1011.423775][T17415] Call Trace: [ 1011.427070][T17415] [ 1011.430026][T17415] dump_stack_lvl+0x241/0x360 [ 1011.434738][T17415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1011.439964][T17415] ? __pfx__printk+0x10/0x10 [ 1011.444588][T17415] ? snprintf+0xda/0x120 [ 1011.448860][T17415] should_fail_ex+0x3b0/0x4e0 [ 1011.453562][T17415] _copy_to_user+0x31/0xb0 [ 1011.458011][T17415] simple_read_from_buffer+0xca/0x150 [ 1011.463415][T17415] proc_fail_nth_read+0x1e9/0x250 [ 1011.468483][T17415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1011.474051][T17415] ? rw_verify_area+0x55e/0x6f0 [ 1011.478913][T17415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1011.484463][T17415] vfs_read+0x1fc/0xb70 [ 1011.488628][T17415] ? __pfx___mutex_lock+0x10/0x10 [ 1011.493658][T17415] ? __pfx_vfs_read+0x10/0x10 [ 1011.498337][T17415] ? __fget_files+0x2a/0x410 [ 1011.502924][T17415] ? __fget_files+0x395/0x410 [ 1011.507596][T17415] ? __fget_files+0x2a/0x410 [ 1011.512190][T17415] ksys_read+0x18f/0x2b0 [ 1011.516440][T17415] ? __pfx_ksys_read+0x10/0x10 [ 1011.521207][T17415] ? do_syscall_64+0x100/0x230 [ 1011.525970][T17415] ? do_syscall_64+0xb6/0x230 [ 1011.530648][T17415] do_syscall_64+0xf3/0x230 [ 1011.535152][T17415] ? clear_bhb_loop+0x35/0x90 [ 1011.539829][T17415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.545732][T17415] RIP: 0033:0x7f0eb158473c [ 1011.550150][T17415] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1011.569757][T17415] RSP: 002b:00007f0eb244d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1011.578170][T17415] RAX: ffffffffffffffda RBX: 00007f0eb1775fa0 RCX: 00007f0eb158473c [ 1011.586141][T17415] RDX: 000000000000000f RSI: 00007f0eb244d0a0 RDI: 0000000000000005 [ 1011.594123][T17415] RBP: 00007f0eb244d090 R08: 0000000000000000 R09: 0000000000000000 [ 1011.602090][T17415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1011.610056][T17415] R13: 0000000000000000 R14: 00007f0eb1775fa0 R15: 00007ffddf92dae8 [ 1011.618038][T17415] [ 1011.799834][T17427] sp0: Synchronizing with TNC [ 1011.824995][T17428] sp0: Found TNC [ 1012.226393][T17432] pimreg: entered allmulticast mode [ 1012.492348][T13135] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1012.549926][T17441] netlink: 'syz.8.3021': attribute type 12 has an invalid length. [ 1012.571947][T17441] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3021'. [ 1012.591810][T17441] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3021'. [ 1012.631926][T17442] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3016'. [ 1012.664194][T13135] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1012.684791][T13135] usb 2-1: config 0 has no interface number 0 [ 1012.700959][T13135] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1012.710534][T13135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.726730][T13135] usb 2-1: Product: syz [ 1012.736819][T13135] usb 2-1: Manufacturer: syz [ 1012.747914][T13135] usb 2-1: SerialNumber: syz [ 1012.775347][T13135] usb 2-1: config 0 descriptor?? [ 1014.254909][T17454] loop7: detected capacity change from 0 to 16384 [ 1014.322668][T17454] loop7: detected capacity change from 16384 to 16383 [ 1015.580960][T17468] nbd: must specify at least one socket [ 1016.550368][T13135] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1016.564057][T17432] pimreg: left allmulticast mode [ 1016.586241][T13135] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1016.622288][T13135] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1016.630100][T13135] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1016.651044][T13135] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1016.666591][T13135] usb 2-1: USB disconnect, device number 63 [ 1016.674394][T17473] trusted_key: encrypted_key: key trusted:syz not found [ 1016.681003][T17473] ieee802154 phy1 wpan1: encryption failed: -22 [ 1016.694949][T13135] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1016.705867][T13135] keyspan 2-1:0.133: device disconnected [ 1017.561657][T17492] program syz.1.3035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1017.597510][T17496] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1018.254170][T17506] usb usb9: usbfs: process 17506 (syz.6.3036) did not claim interface 0 before use [ 1018.368437][T17508] tipc: Started in network mode [ 1018.377944][T17508] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 1018.400012][T17508] tipc: Enabled bearer , priority 10 [ 1018.740560][T17510] netlink: 'syz.7.3038': attribute type 11 has an invalid length. [ 1018.992104][T17527] loop2: detected capacity change from 0 to 7 [ 1019.045181][T17527] Dev loop2: unable to read RDB block 7 [ 1019.072692][T17527] loop2: unable to read partition table [ 1019.091002][T17527] loop2: partition table beyond EOD, truncated [ 1019.112323][T17527] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1019.420576][T13135] tipc: Node number set to 10398378 [ 1019.958946][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1019.958964][ T29] audit: type=1326 audit(1737238884.153:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17538 comm="syz.7.3047" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4458b85d29 code=0x0 [ 1020.512388][T17554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.534642][T17554] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1020.967944][T17567] loop7: detected capacity change from 0 to 16384 [ 1020.979842][T17567] FAULT_INJECTION: forcing a failure. [ 1020.979842][T17567] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.992638][T17567] CPU: 1 UID: 0 PID: 17567 Comm: syz.1.3057 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 1021.003404][T17567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1021.013450][T17567] Call Trace: [ 1021.016720][T17567] [ 1021.019637][T17567] dump_stack_lvl+0x241/0x360 [ 1021.024314][T17567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1021.029508][T17567] ? __pfx__printk+0x10/0x10 [ 1021.034098][T17567] ? fs_reclaim_acquire+0x93/0x130 [ 1021.039206][T17567] ? __pfx___might_resched+0x10/0x10 [ 1021.044491][T17567] should_fail_ex+0x3b0/0x4e0 [ 1021.049164][T17567] should_failslab+0xac/0x100 [ 1021.053850][T17567] __kmalloc_noprof+0xdd/0x4c0 [ 1021.058609][T17567] ? __schedule+0x1803/0x4be0 [ 1021.063283][T17567] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1021.069008][T17567] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1021.074564][T17567] tomoyo_path_number_perm+0x236/0x860 [ 1021.080056][T17567] ? __pfx___schedule+0x10/0x10 [ 1021.084901][T17567] ? tomoyo_path_number_perm+0x206/0x860 [ 1021.090528][T17567] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1021.096500][T17567] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1021.102496][T17567] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1021.108497][T17567] ? security_file_ioctl+0x18/0x2a0 [ 1021.113707][T17567] security_file_ioctl+0xc6/0x2a0 [ 1021.118725][T17567] __se_sys_ioctl+0x46/0x170 [ 1021.123309][T17567] do_syscall_64+0xf3/0x230 [ 1021.127831][T17567] ? clear_bhb_loop+0x35/0x90 [ 1021.132500][T17567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.138389][T17567] RIP: 0033:0x7f0cabb85d29 [ 1021.142796][T17567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1021.162394][T17567] RSP: 002b:00007f0caca1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1021.170803][T17567] RAX: ffffffffffffffda RBX: 00007f0cabd76080 RCX: 00007f0cabb85d29 [ 1021.178765][T17567] RDX: 0000000020000300 RSI: 0000000000004c02 RDI: 0000000000000006 [ 1021.186726][T17567] RBP: 00007f0caca1c090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.194711][T17567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1021.202679][T17567] R13: 0000000000000000 R14: 00007f0cabd76080 R15: 00007fffdb6b2ac8 [ 1021.210675][T17567] [ 1021.213743][ C1] vkms_vblank_simulate: vblank timer overrun [ 1021.222733][T17567] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1021.666324][T17572] loop2: detected capacity change from 0 to 7 [ 1021.692711][T17572] Dev loop2: unable to read RDB block 7 [ 1021.708519][T17572] loop2: unable to read partition table [ 1021.731150][T17572] loop2: partition table beyond EOD, truncated [ 1021.744641][T17572] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1024.514523][T17607] netlink: 47 bytes leftover after parsing attributes in process `syz.8.3068'. [ 1025.496123][T17616] loop7: detected capacity change from 0 to 16384 [ 1025.516657][T17616] FAULT_INJECTION: forcing a failure. [ 1025.516657][T17616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1025.530133][T17616] CPU: 1 UID: 0 PID: 17616 Comm: syz.8.3070 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 1025.540921][T17616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1025.550995][T17616] Call Trace: [ 1025.554286][T17616] [ 1025.557215][T17616] dump_stack_lvl+0x241/0x360 [ 1025.561896][T17616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1025.567091][T17616] ? __pfx__printk+0x10/0x10 [ 1025.571687][T17616] ? __pfx_lock_release+0x10/0x10 [ 1025.576717][T17616] should_fail_ex+0x3b0/0x4e0 [ 1025.581397][T17616] _copy_from_user+0x2f/0xc0 [ 1025.585988][T17616] lo_ioctl+0x7b5/0x1f50 [ 1025.590235][T17616] ? __pfx_lo_ioctl+0x10/0x10 [ 1025.594907][T17616] ? llist_add_batch+0x143/0x270 [ 1025.599839][T17616] ? __pfx_llist_add_batch+0x10/0x10 [ 1025.605127][T17616] ? mark_lock+0x9a/0x360 [ 1025.609452][T17616] ? __lock_acquire+0x1397/0x2100 [ 1025.614482][T17616] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1025.620457][T17616] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1025.626784][T17616] ? irqentry_exit+0x63/0x90 [ 1025.631370][T17616] ? lockdep_hardirqs_on+0x99/0x150 [ 1025.636579][T17616] ? finish_task_switch+0x1ea/0x870 [ 1025.641777][T17616] ? finish_task_switch+0x1e5/0x870 [ 1025.646974][T17616] ? __schedule+0x1803/0x4be0 [ 1025.651652][T17616] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1025.657996][T17616] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1025.663987][T17616] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1025.669961][T17616] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1025.676290][T17616] ? irqentry_exit+0x63/0x90 [ 1025.680881][T17616] ? lockdep_hardirqs_on+0x99/0x150 [ 1025.686084][T17616] ? blkdev_common_ioctl+0xd4/0x2460 [ 1025.691369][T17616] ? blkdev_common_ioctl+0x46e/0x2460 [ 1025.696735][T17616] ? blkdev_common_ioctl+0xfb2/0x2460 [ 1025.702100][T17616] ? __lock_acquire+0x1397/0x2100 [ 1025.707120][T17616] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1025.712744][T17616] ? tomoyo_path_number_perm+0x206/0x860 [ 1025.718370][T17616] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1025.724356][T17616] ? __asan_memset+0x23/0x50 [ 1025.728942][T17616] ? smack_file_ioctl+0x29e/0x3a0 [ 1025.733961][T17616] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1025.739326][T17616] ? file_to_blk_mode+0xcc/0x140 [ 1025.744258][T17616] ? __pfx_lo_ioctl+0x10/0x10 [ 1025.748927][T17616] blkdev_ioctl+0x57d/0x6a0 [ 1025.753424][T17616] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1025.758443][T17616] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1025.763464][T17616] __se_sys_ioctl+0xf5/0x170 [ 1025.768051][T17616] do_syscall_64+0xf3/0x230 [ 1025.772551][T17616] ? clear_bhb_loop+0x35/0x90 [ 1025.777233][T17616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.783140][T17616] RIP: 0033:0x7f0eb1585d29 [ 1025.787557][T17616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1025.807157][T17616] RSP: 002b:00007f0eb242c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1025.815567][T17616] RAX: ffffffffffffffda RBX: 00007f0eb1776080 RCX: 00007f0eb1585d29 [ 1025.823533][T17616] RDX: 0000000020000300 RSI: 0000000000004c02 RDI: 0000000000000009 [ 1025.831497][T17616] RBP: 00007f0eb242c090 R08: 0000000000000000 R09: 0000000000000000 [ 1025.839470][T17616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1025.847433][T17616] R13: 0000000000000000 R14: 00007f0eb1776080 R15: 00007ffddf92dae8 [ 1025.855756][T17616] [ 1025.858991][ C1] vkms_vblank_simulate: vblank timer overrun [ 1026.935331][ T29] audit: type=1326 audit(1737238891.123:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17620 comm="syz.7.3072" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4458b85d29 code=0x0 [ 1027.112526][T13135] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1027.171331][T17628] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3075'. [ 1027.823921][T17645] loop2: detected capacity change from 0 to 7 [ 1027.844709][T17645] Dev loop2: unable to read RDB block 7 [ 1027.850402][T17645] loop2: AHDI p2 p3 [ 1027.862339][T17645] loop2: partition table partially beyond EOD, truncated [ 1027.872679][T17645] loop2: p2 size 150995200 extends beyond EOD, truncated [ 1028.095415][T17648] loop7: detected capacity change from 0 to 16384 [ 1028.162924][T17648] loop7: detected capacity change from 16384 to 16383 [ 1028.169987][T17648] FAULT_INJECTION: forcing a failure. [ 1028.169987][T17648] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.183034][T17648] CPU: 1 UID: 0 PID: 17648 Comm: syz.1.3083 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 1028.193822][T17648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1028.203887][T17648] Call Trace: [ 1028.207167][T17648] [ 1028.210096][T17648] dump_stack_lvl+0x241/0x360 [ 1028.214779][T17648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1028.219976][T17648] ? __pfx__printk+0x10/0x10 [ 1028.224566][T17648] ? ___ratelimit+0xc5/0x690 [ 1028.229160][T17648] should_fail_ex+0x3b0/0x4e0 [ 1028.233835][T17648] should_failslab+0xac/0x100 [ 1028.238531][T17648] __kmalloc_cache_noprof+0x70/0x390 [ 1028.243820][T17648] ? kobject_uevent_env+0x28b/0x8e0 [ 1028.249020][T17648] ? __pfx_dev_uevent_name+0x10/0x10 [ 1028.254307][T17648] kobject_uevent_env+0x28b/0x8e0 [ 1028.259327][T17648] ? set_capacity_and_notify+0xe6/0x240 [ 1028.264881][T17648] set_capacity_and_notify+0x206/0x240 [ 1028.270335][T17648] ? __pfx_set_capacity_and_notify+0x10/0x10 [ 1028.276320][T17648] loop_set_status+0x584/0x8f0 [ 1028.281090][T17648] lo_ioctl+0xcbc/0x1f50 [ 1028.285332][T17648] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 1028.291313][T17648] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1028.297643][T17648] ? __pfx_lo_ioctl+0x10/0x10 [ 1028.302315][T17648] ? llist_add_batch+0x143/0x270 [ 1028.307250][T17648] ? __pfx_llist_add_batch+0x10/0x10 [ 1028.312544][T17648] ? mark_lock+0x9a/0x360 [ 1028.316876][T17648] ? __lock_acquire+0x1397/0x2100 [ 1028.321908][T17648] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1028.327884][T17648] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1028.334212][T17648] ? irqentry_exit+0x63/0x90 [ 1028.338805][T17648] ? lockdep_hardirqs_on+0x99/0x150 [ 1028.344021][T17648] ? finish_task_switch+0x1ea/0x870 [ 1028.349221][T17648] ? finish_task_switch+0x1e5/0x870 [ 1028.354421][T17648] ? __schedule+0x1803/0x4be0 [ 1028.359122][T17648] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1028.365124][T17648] ? irqentry_exit+0x63/0x90 [ 1028.369711][T17648] ? lockdep_hardirqs_on+0x99/0x150 [ 1028.374913][T17648] ? blkdev_common_ioctl+0xd4/0x2460 [ 1028.380197][T17648] ? blkdev_common_ioctl+0x46e/0x2460 [ 1028.385564][T17648] ? blkdev_common_ioctl+0xfb2/0x2460 [ 1028.390930][T17648] ? __lock_acquire+0x1397/0x2100 [ 1028.395954][T17648] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1028.401581][T17648] ? tomoyo_path_number_perm+0x206/0x860 [ 1028.407210][T17648] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1028.413198][T17648] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1028.419175][T17648] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1028.425508][T17648] ? irqentry_exit+0x63/0x90 [ 1028.430100][T17648] ? file_to_blk_mode+0xcc/0x140 [ 1028.435034][T17648] ? __pfx_lo_ioctl+0x10/0x10 [ 1028.439715][T17648] blkdev_ioctl+0x57d/0x6a0 [ 1028.444238][T17648] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1028.449263][T17648] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 1028.455328][T17648] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1028.460348][T17648] __se_sys_ioctl+0xf5/0x170 [ 1028.464944][T17648] do_syscall_64+0xf3/0x230 [ 1028.469440][T17648] ? clear_bhb_loop+0x35/0x90 [ 1028.474116][T17648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.480008][T17648] RIP: 0033:0x7f0cabb85d29 [ 1028.484422][T17648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1028.504024][T17648] RSP: 002b:00007f0caca1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1028.512436][T17648] RAX: ffffffffffffffda RBX: 00007f0cabd76080 RCX: 00007f0cabb85d29 [ 1028.520400][T17648] RDX: 0000000020000300 RSI: 0000000000004c02 RDI: 0000000000000009 [ 1028.528364][T17648] RBP: 00007f0caca1c090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.536329][T17648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.544302][T17648] R13: 0000000000000000 R14: 00007f0cabd76080 R15: 00007fffdb6b2ac8 [ 1028.552306][T17648] [ 1028.555545][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.065987][T17662] loop2: detected capacity change from 0 to 7 [ 1029.093084][T17662] Dev loop2: unable to read RDB block 7 [ 1029.115172][T17662] loop2: unable to read partition table [ 1029.246617][T17662] loop2: partition table beyond EOD, truncated [ 1029.281393][T17662] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1029.332885][T13135] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1030.157691][T13135] usb 3-1: Using ep0 maxpacket: 16 [ 1030.176456][T13135] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1030.205540][T13135] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.231694][T13135] usb 3-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1030.268211][T13135] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1030.290710][T13135] usb 3-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1030.300129][T13135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.308402][T13135] usb 3-1: Product: syz [ 1030.312843][T13135] usb 3-1: Manufacturer: syz [ 1030.317618][T13135] usb 3-1: SerialNumber: syz [ 1030.551152][T13135] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input35 [ 1030.610442][ T5178] bcm5974 3-1:1.0: could not read from device [ 1030.652829][ T29] audit: type=1326 audit(1737238894.833:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17691 comm="syz.7.3094" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4458b85d29 code=0x0 [ 1030.675791][ T5178] bcm5974 3-1:1.0: could not read from device [ 1030.714861][T13135] usb 3-1: USB disconnect, device number 77 [ 1030.714987][ T5178] bcm5974 3-1:1.0: could not read from device [ 1032.077406][T17715] loop2: detected capacity change from 0 to 7 [ 1032.170379][T17715] Dev loop2: unable to read RDB block 7 [ 1032.209904][T17715] loop2: unable to read partition table [ 1032.272434][T17715] loop2: partition table beyond EOD, truncated [ 1032.278653][T17715] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1032.702895][T17727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3106'. [ 1032.976008][T17739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1033.372570][T17749] netlink: 47 bytes leftover after parsing attributes in process `syz.6.3110'. [ 1035.141325][T17767] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 1035.476464][T17769] loop2: detected capacity change from 0 to 7 [ 1035.503092][T17769] Dev loop2: unable to read RDB block 7 [ 1035.519879][T17769] loop2: AHDI p2 p3 [ 1035.530026][T17769] loop2: partition table partially beyond EOD, truncated [ 1035.558093][T17769] loop2: p2 size 150995200 extends beyond EOD, truncated [ 1035.769539][T17772] fuse: Bad value for 'fd' [ 1035.902425][ T5919] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1035.918575][T17779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3122'. [ 1036.015486][T17783] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3123'. [ 1036.077017][ T5919] usb 7-1: Using ep0 maxpacket: 16 [ 1036.098924][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.260238][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.369574][T17789] netlink: 47 bytes leftover after parsing attributes in process `syz.8.3124'. [ 1036.408148][ T5919] usb 7-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1036.531507][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.654378][ T5919] usb 7-1: config 0 descriptor?? [ 1037.016592][T17803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3127'. [ 1037.052750][ T25] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1143.482231][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1143.489238][ C0] rcu: 1-...!: (1 GPs behind) idle=5ee4/1/0x4000000000000000 softirq=71583/71584 fqs=4 [ 1143.500848][ C0] rcu: (detected by 0, t=10505 jiffies, g=77453, q=253 ncpus=2) [ 1143.508600][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1143.508636][ C1] NMI backtrace for cpu 1 [ 1143.508650][ C1] CPU: 1 UID: 0 PID: 17803 Comm: syz.1.3127 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 1143.508670][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1143.508681][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x81/0x90 [ 1143.508707][ C1] Code: 8d 42 28 4c 39 c8 77 22 89 f8 89 f6 49 ff c2 4c 89 11 48 c7 44 0a 08 05 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 1143.508722][ C1] RSP: 0018:ffffc90000a18d38 EFLAGS: 00000006 [ 1143.508738][ C1] RAX: 0000000000010000 RBX: 0000000000000001 RCX: ffff888024cf8000 [ 1143.508750][ C1] RDX: ffff888024cf8000 RSI: 0000000000000001 RDI: 0000000000000007 [ 1143.508761][ C1] RBP: ffffc90000a18ea0 R08: ffffffff818cdae6 R09: 1ffffffff2030b4e [ 1143.508773][ C1] R10: dffffc0000000000 R11: fffffbfff2030b4f R12: 1ffff110170e593b [ 1143.508786][ C1] R13: 0000000000000001 R14: ffff888011a74340 R15: ffff888024cf8ac8 [ 1143.508798][ C1] FS: 00007f0caca3d6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1143.508813][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1143.508825][ C1] CR2: 000000002002b000 CR3: 0000000066f42000 CR4: 00000000003526f0 [ 1143.508840][ C1] Call Trace: [ 1143.508847][ C1] [ 1143.508855][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1143.508878][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1143.508896][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1143.508916][ C1] ? nmi_handle+0x2a/0x5a0 [ 1143.508940][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1143.508962][ C1] ? nmi_handle+0x14f/0x5a0 [ 1143.508980][ C1] ? nmi_handle+0x2a/0x5a0 [ 1143.508998][ C1] ? __sanitizer_cov_trace_const_cmp4+0x81/0x90 [ 1143.509015][ C1] ? default_do_nmi+0x63/0x160 [ 1143.509040][ C1] ? exc_nmi+0x123/0x1f0 [ 1143.509058][ C1] ? end_repeat_nmi+0xf/0x53 [ 1143.509076][ C1] ? __hrtimer_run_queues+0x5d6/0xd30 [ 1143.509099][ C1] ? __sanitizer_cov_trace_const_cmp4+0x81/0x90 [ 1143.509116][ C1] ? __sanitizer_cov_trace_const_cmp4+0x81/0x90 [ 1143.509135][ C1] ? __sanitizer_cov_trace_const_cmp4+0x81/0x90 [ 1143.509152][ C1] [ 1143.509158][ C1] [ 1143.509163][ C1] __hrtimer_run_queues+0x5d6/0xd30 [ 1143.509193][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1143.509212][ C1] ? handle_softirqs+0x7e0/0x9b0 [ 1143.509235][ C1] ? rcu_is_watching+0x15/0xb0 [ 1143.509258][ C1] hrtimer_interrupt+0x403/0xa40 [ 1143.509289][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1143.509308][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1143.509330][ C1] [ 1143.509335][ C1] [ 1143.509342][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1143.509359][ C1] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 1143.509379][ C1] Code: c9 50 e8 49 0c 0c 00 48 83 c4 08 4c 89 f7 e8 ed 39 00 00 0f 1f 44 00 00 4c 89 f7 e8 e0 48 55 0a e8 cb 89 38 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 1143.509394][ C1] RSP: 0018:ffffc90005397568 EFLAGS: 00000286 [ 1143.509408][ C1] RAX: 04df413398bbc800 RBX: ffff888024cf8000 RCX: ffffffff9a378903 [ 1143.509421][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: ffffffff8c5edf20 [ 1143.509434][ C1] RBP: ffffc900053975b0 R08: ffffffff90185a77 R09: 1ffffffff2030b4e [ 1143.509447][ C1] R10: dffffc0000000000 R11: fffffbfff2030b4f R12: 1ffff110170e7eac [ 1143.509460][ C1] R13: dffffc0000000000 R14: ffff8880b873e740 R15: ffff8880b873f560 [ 1143.509480][ C1] ? finish_task_switch+0x1e5/0x870 [ 1143.509502][ C1] __schedule+0x1803/0x4be0 [ 1143.509534][ C1] ? __pfx___schedule+0x10/0x10 [ 1143.509556][ C1] ? __pfx_lock_release+0x10/0x10 [ 1143.509579][ C1] ? schedule+0x90/0x320 [ 1143.509598][ C1] schedule+0x14b/0x320 [ 1143.509619][ C1] schedule_timeout+0xb0/0x290 [ 1143.509637][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1143.509655][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1143.509676][ C1] ? wait_for_completion+0x2fe/0x620 [ 1143.509697][ C1] ? wait_for_completion+0x2fe/0x620 [ 1143.509717][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1143.509737][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1143.509758][ C1] ? wait_for_completion+0x2fe/0x620 [ 1143.509780][ C1] wait_for_completion+0x355/0x620 [ 1143.509801][ C1] ? __smp_call_single_queue+0x11a/0x3a0 [ 1143.509827][ C1] ? __pfx_wait_for_completion+0x10/0x10 [ 1143.509852][ C1] ? smp_call_function_single_async+0xb4/0x110 [ 1143.509874][ C1] rdmsr_safe_on_cpu+0x16c/0x310 [ 1143.509898][ C1] ? __pfx_rdmsr_safe_on_cpu+0x10/0x10 [ 1143.509920][ C1] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 1143.509941][ C1] ? __pfx_lock_release+0x10/0x10 [ 1143.509963][ C1] ? __might_fault+0xaa/0x120 [ 1143.509982][ C1] ? __might_fault+0xc6/0x120 [ 1143.510003][ C1] msr_read+0x15d/0x260 [ 1143.510023][ C1] ? __pfx_msr_read+0x10/0x10 [ 1143.510048][ C1] ? rw_verify_area+0x568/0x6f0 [ 1143.510067][ C1] ? __pfx_msr_read+0x10/0x10 [ 1143.510086][ C1] vfs_read+0x1fc/0xb70 [ 1143.510109][ C1] ? __pfx_vfs_read+0x10/0x10 [ 1143.510129][ C1] ? __fget_files+0x2a/0x410 [ 1143.510145][ C1] ? __fget_files+0x395/0x410 [ 1143.510159][ C1] ? __fget_files+0x2a/0x410 [ 1143.510179][ C1] ksys_read+0x18f/0x2b0 [ 1143.510199][ C1] ? __pfx_ksys_read+0x10/0x10 [ 1143.510217][ C1] ? do_syscall_64+0x100/0x230 [ 1143.510233][ C1] ? do_syscall_64+0xb6/0x230 [ 1143.510249][ C1] do_syscall_64+0xf3/0x230 [ 1143.510264][ C1] ? clear_bhb_loop+0x35/0x90 [ 1143.510281][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.510305][ C1] RIP: 0033:0x7f0cabb85d29 [ 1143.510321][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1143.510335][ C1] RSP: 002b:00007f0caca3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1143.510352][ C1] RAX: ffffffffffffffda RBX: 00007f0cabd75fa0 RCX: 00007f0cabb85d29 [ 1143.510363][ C1] RDX: 0000000000019000 RSI: 0000000020019640 RDI: 0000000000000005 [ 1143.510374][ C1] RBP: 00007f0cabc01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1143.510385][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1143.510395][ C1] R13: 0000000000000000 R14: 00007f0cabd75fa0 R15: 00007fffdb6b2ac8 [ 1143.510414][ C1] [ 1143.510630][ C0] rcu: rcu_preempt kthread starved for 10485 jiffies! g77453 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1144.130324][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1144.140299][ C0] rcu: RCU grace-period kthread stack dump: [ 1144.146189][ C0] task:rcu_preempt state:R running task stack:25976 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1144.157961][ C0] Call Trace: [ 1144.161247][ C0] [ 1144.164191][ C0] __schedule+0x17fb/0x4be0 [ 1144.168741][ C0] ? __pfx___schedule+0x10/0x10 [ 1144.173608][ C0] ? __pfx_lock_release+0x10/0x10 [ 1144.178652][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1144.184994][ C0] ? schedule+0x90/0x320 [ 1144.189249][ C0] schedule+0x14b/0x320 [ 1144.193421][ C0] schedule_timeout+0x15a/0x290 [ 1144.198285][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1144.203668][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1144.208982][ C0] ? prepare_to_swait_event+0x330/0x350 [ 1144.214547][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 1144.219408][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1144.224637][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1144.230805][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1144.236103][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1144.242014][ C0] ? finish_swait+0xd4/0x1e0 [ 1144.246615][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 1144.251218][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1144.256428][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1144.262342][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1144.267386][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1144.272595][ C0] kthread+0x2f0/0x390 [ 1144.276677][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1144.281884][ C0] ? __pfx_kthread+0x10/0x10 [ 1144.286486][ C0] ret_from_fork+0x4b/0x80 [ 1144.290910][ C0] ? __pfx_kthread+0x10/0x10 [ 1144.295517][ C0] ret_from_fork_asm+0x1a/0x30 [ 1144.300315][ C0] [ 1144.303343][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1144.309669][ C0] CPU: 0 UID: 0 PID: 17808 Comm: syz.8.3129 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 1144.320432][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1144.330493][ C0] RIP: 0010:smp_call_function_many_cond+0x19f8/0x2c60 [ 1144.337272][ C0] Code: 89 e6 83 e6 01 31 ff e8 c6 e6 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 71 e2 0b 00 eb 38 f3 90 42 0f b6 04 23 <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 55 e2 0b 00 eb e4 44 [ 1144.356888][ C0] RSP: 0018:ffffc90004ecf3e0 EFLAGS: 00000246 [ 1144.362973][ C0] RAX: 0000000000000000 RBX: 1ffff110170e88b9 RCX: 0000000000080000 [ 1144.370956][ C0] RDX: ffffc90010729000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1144.378938][ C0] RBP: ffffc90004ecf5e0 R08: ffffffff81938f9a R09: 1ffffffff284e310 [ 1144.386917][ C0] R10: dffffc0000000000 R11: fffffbfff284e311 R12: dffffc0000000000 [ 1144.394903][ C0] R13: ffff8880b87445c8 R14: ffff8880b863f940 R15: 0000000000000001 [ 1144.402886][ C0] FS: 00007f0eb244d6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1144.411831][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1144.418418][ C0] CR2: 000000110c3b8ecd CR3: 0000000057d7a000 CR4: 00000000003526f0 [ 1144.426400][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1144.434378][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1144.442358][ C0] Call Trace: [ 1144.445643][ C0] [ 1144.448494][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1144.454851][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 1144.460507][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1144.466338][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1144.472596][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 1144.477991][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1144.483645][ C0] ? update_process_times+0x242/0x2f0 [ 1144.489028][ C0] ? tick_nohz_handler+0x37c/0x500 [ 1144.494159][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1144.499636][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 1144.505037][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1144.510771][ C0] ? read_tsc+0x9/0x20 [ 1144.514852][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1144.520937][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 1144.526086][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 1144.532254][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1144.538077][ C0] [ 1144.541012][ C0] [ 1144.543950][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1144.550116][ C0] ? smp_call_function_many_cond+0x19da/0x2c60 [ 1144.556285][ C0] ? smp_call_function_many_cond+0x19f8/0x2c60 [ 1144.562464][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1144.567509][ C0] ? __pfx___text_poke+0x10/0x10 [ 1144.572463][ C0] ? __get_immv32+0x19c/0x350 [ 1144.577160][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1144.583500][ C0] ? __pfx___might_resched+0x10/0x10 [ 1144.588808][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1144.593868][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1144.599016][ C0] text_poke_bp_batch+0x352/0xb30 [ 1144.604062][ C0] ? __mutex_trylock_common+0x183/0x2e0 [ 1144.609629][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1144.615202][ C0] ? rcu_is_watching+0x15/0xb0 [ 1144.619982][ C0] ? __SCT__tp_func_sys_enter+0x8/0x8 [ 1144.625376][ C0] text_poke_bp+0xb0/0x100 [ 1144.629807][ C0] ? __pfx_text_poke_bp+0x10/0x10 [ 1144.634845][ C0] ? arch_static_call_transform+0x37/0x380 [ 1144.640661][ C0] ? __SCT__tp_func_sys_enter+0x8/0x8 [ 1144.646060][ C0] __static_call_transform+0x51a/0x810 [ 1144.651532][ C0] ? __SCT__tp_func_sys_enter+0x8/0x8 [ 1144.656923][ C0] ? __pfx___bpf_trace_sys_exit+0x10/0x10 [ 1144.662658][ C0] ? __pfx___static_call_transform+0x10/0x10 [ 1144.668657][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1144.674574][ C0] ? __pfx___bpf_trace_sys_exit+0x10/0x10 [ 1144.680304][ C0] ? __SCT__tp_func_sys_enter+0x8/0x8 [ 1144.685691][ C0] arch_static_call_transform+0x141/0x380 [ 1144.691425][ C0] ? __pfx___bpf_trace_sys_exit+0x10/0x10 [ 1144.697159][ C0] ? __SCT__tp_func_sys_enter+0x8/0x8 [ 1144.702548][ C0] __static_call_update+0xd8/0x5e0 [ 1144.707672][ C0] ? __pfx___bpf_trace_sys_exit+0x10/0x10 [ 1144.713406][ C0] ? __pfx___static_call_update+0x10/0x10 [ 1144.719141][ C0] ? trace_kmalloc+0x1f/0xd0 [ 1144.723738][ C0] ? __kmalloc_noprof+0x2a5/0x4c0 [ 1144.728770][ C0] ? __pfx___bpf_trace_sys_exit+0x10/0x10 [ 1144.734505][ C0] tracepoint_add_func+0x925/0xaa0 [ 1144.739632][ C0] ? __pfx___bpf_trace_sys_exit+0x10/0x10 [ 1144.745363][ C0] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 1144.752312][ C0] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 1144.759779][ C0] ? __pfx___bpf_trace_sys_exit+0x10/0x10 [ 1144.765509][ C0] ? anon_inode_getfile+0xff/0x180 [ 1144.770636][ C0] ? bpf_probe_register+0x134/0x1f0 [ 1144.775855][ C0] bpf_raw_tp_link_attach+0x4a3/0x700 [ 1144.781243][ C0] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 1144.787161][ C0] ? __fget_files+0x2a/0x410 [ 1144.791763][ C0] ? fput+0x21b/0x290 [ 1144.795755][ C0] bpf_raw_tracepoint_open+0x177/0x1f0 [ 1144.801225][ C0] __sys_bpf+0x3c0/0x810 [ 1144.805479][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 1144.810262][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1144.816255][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1144.822594][ C0] ? do_syscall_64+0x100/0x230 [ 1144.827371][ C0] __x64_sys_bpf+0x7c/0x90 [ 1144.831804][ C0] do_syscall_64+0xf3/0x230 [ 1144.836319][ C0] ? clear_bhb_loop+0x35/0x90 [ 1144.841010][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.846921][ C0] RIP: 0033:0x7f0eb1585d29 [ 1144.851346][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1144.870960][ C0] RSP: 002b:00007f0eb244d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1144.879385][ C0] RAX: ffffffffffffffda RBX: 00007f0eb1775fa0 RCX: 00007f0eb1585d29 [ 1144.887362][ C0] RDX: 0000000000000018 RSI: 00000000200001c0 RDI: 0000000000000011 [ 1144.895354][ C0] RBP: 00007f0eb1601b08 R08: 0000000000000000 R09: 0000000000000000 [ 1144.903340][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1144.911324][ C0] R13: 0000000000000000 R14: 00007f0eb1775fa0 R15: 00007ffddf92dae8 [ 1144.919322][ C0]