last executing test programs: 49m48.572030577s ago: executing program 32 (id=86): syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @ipv4, @local, {[@routing={0x29}]}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) 49m48.444989975s ago: executing program 33 (id=85): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 47m14.666801067s ago: executing program 34 (id=418): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setresuid(0xee00, 0xee00, 0xee01) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x4, 0x0, @tick, {}, {0x0, 0x4}, @control={0xdb, 0x6, 0xfffffffe}}], 0x1c) ioctl$SG_GET_PACK_ID(r4, 0x227c, 0x0) 45m5.54081128s ago: executing program 35 (id=683): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000"], 0x50) syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', &(0x7f0000000300), 0x1000800, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000002090102000000000000000005000005240002001400"], 0x38}, 0x1, 0x0, 0x0, 0x8890}, 0x20000810) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) 42m12.826865007s ago: executing program 36 (id=1115): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x725e65a6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f0000000000), 0x0, 0x0, 0x0) 40m32.895729014s ago: executing program 37 (id=1391): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32, @ANYBLOB="0400460005003400dc000000080026006c09"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r1) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r3, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_dev$dri(0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r5, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 35m22.892288826s ago: executing program 38 (id=2356): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000640)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0) 34m4.260569085s ago: executing program 39 (id=2555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r7) ioctl$SG_IO(r1, 0x2285, 0x0) r8 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r8, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r8, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0xffffffff]}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) ioctl$SG_GET_NUM_WAITING(r8, 0x227d, &(0x7f0000000080)) 33m27.494728041s ago: executing program 40 (id=2636): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x400202) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x6, 0x0, 0x7, 0x3, 0x0, 0x0, 0x300}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x34, 0x11, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x0, 0x10}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x34}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000880)=0x5, 0x4) bind$can_raw(r4, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000140)={0x1d, r5}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r1, 0x1ff) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) read$FUSE(r6, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000500)="ab", 0x34000, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 32m7.22681852s ago: executing program 41 (id=2796): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) prlimit64(r0, 0xb, 0x0, &(0x7f00000001c0)) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) 29m41.469400252s ago: executing program 42 (id=3066): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@bridge_getvlan={0x18, 0x72, 0x333}, 0x18}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write(0x1, &(0x7f00000000c0), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x8810) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast1, 0x9}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 27m15.150214908s ago: executing program 43 (id=3347): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r3, 0x5452, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) unshare(0x62040200) 24m38.50847242s ago: executing program 2 (id=3615): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff, 0x1}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0, r5}) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) memfd_create(&(0x7f0000000100)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0', 0x6) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) 24m36.685610323s ago: executing program 2 (id=3619): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x5}, 0x8) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknod$loop(0x0, 0x2000, 0x1) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) 24m34.042777552s ago: executing program 2 (id=3624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x75, 0x5e, 0x75, 0x40, 0x9022, 0xd484, 0xcd35, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x25, 0x7f, 0x36}}]}}]}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) statx(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup.cpu/cgroup.procs\x00', 0x4000, 0x7ff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) 24m27.583846743s ago: executing program 2 (id=3630): socket$qrtr(0x2a, 0x2, 0x0) gettid() r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getflags(r1, 0xb) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3f56000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={[{@nfs_export_on}]}) rmdir(0x0) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) read$FUSE(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x1c, "cafe24279c3636a0ad968f7fbb13ad8f893175989b4d1d42a22185d2"}, &(0x7f0000000040)=0x24) 24m25.744243625s ago: executing program 2 (id=3632): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000004000000060000000800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) 24m24.531598144s ago: executing program 2 (id=3633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0x6}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x16, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0xfff3}, {}, {0xc}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x4}}]}}]}, 0x38}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40050) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x1c8}, 0x1, 0x0, 0x0, 0x1}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) timer_create(0x7, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 24m18.884218583s ago: executing program 44 (id=3622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x8, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r2, 0x1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) fcntl$getownex(r1, 0x10, &(0x7f0000002500)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x1) io_setup(0x8, &(0x7f0000000080)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 24m7.481493005s ago: executing program 45 (id=3633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0x6}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x16, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0xfff3}, {}, {0xc}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x4}}]}}]}, 0x38}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40050) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x1c8}, 0x1, 0x0, 0x0, 0x1}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) timer_create(0x7, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 21m39.196665028s ago: executing program 6 (id=3910): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs289vFFUcAPDvzLZF+dWK+ANErRJj44+WFlQOXjSaeMBoogc81m0hhIUaWhMhRNAYvJgYEj0bjyb+Bd68GPVk4lXvhoQoF8BTzczOwO6yWyhsdyv7+SQD7+287XvfffNm3szbDWBgjWf/JBGbI+KPiBitZ5sLjNf/u3LpdPXqpdPVJJaX3/k7yctdvnS6WhYt37epyEykEelnSVFJs8WTp47O1mrzJ4r81NKxD6YWT556/six2cPzh+ePz+zfv2/v9EsvzrzQlTizuC7v/Hhh14433jv/ZvXg+fd/+T5r7+Zif2Mc3TKeBf7Pcq5131PdrqzPtjSkk6E+NoRVqURE1l3D+fgfjUpc77zReP3TvjYOWFPZtWlDx72Vq8vAXSyJfrcA6I/ySp/d/5Zbr+Ye68HFV+o3QFncV4qtvmco0qLMcMv9bTeNR8TBs/9+k22xRs8hAAAafVH9+kA8127+l8aDDeW2FmsoYxFxX0Rsi4j7I2J7RDwQkZd9KCIeXmX9rUtDN85/0gu3FdgtyuZ/LxdrW83zv3L2F2OVIrclj384OXSkNr+n+EwmYnhDlp9eoY4fX/v9y077Gud/2ZbVX84Fi3ZcGGp5QDc3uzSbT0q74OInETuH2sWfXFsJSCJiR0TsXN2f3lomjjzz3a5OhW4e/wq6sM60/G3E0/X+Pxst8ZeSldcnp+6J2vyeqfKouNGvv517u1P9dxR/F2T9v7H5+G8tMpY0rtcurr6Oc39+3vGe5naP/5Hk3fx8NFK89tHs0tKJ6YiR5ECeb3p95vp7y3xZPot/Ynf78b+teE8W/yMRkR3Ej0bEYxHxeNH2JyLiyYjYvUL8P7/aed966P+5tue/a8d/S/+vPlE5+tMPneq/tf7fl6cmilfy899N3GoD7+SzAwAAgP+LNP8OfJJOXkun6eRk/Tv822NjWltYXHr20MKHx+fq35Ufi+G0fNI12vA8dDo5W/zFen6meFZc7t9bPDf+qnJvnp+sLtTm+hw7DLpNHcZ/5q9Kv1sHrLl262gzI31oCNBzreM/bc6eeauXjQF6yu+1YXDdZPynvWoH0Huu/zC42o3/My15awFwd3L9h8Fl/MPgMv5hcBn/MJDu5Hf9EoOciHRdNENijRL9PjMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x38BAAD//xSZ71c=") r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) mlock2(&(0x7f0000003000/0xb000)=nil, 0xb000, 0x1) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x60d, &(0x7f0000002240)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="922f51c2652f6ebeb647ba19a7f202a8e9581eee20d85e47931757ced8046519", 0x20}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc050) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat$loop(r2, &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="40000000020681080000000000000000000000400501010006000000050005000200000005000400c24eec544f94488b0c686173683a69702c6d61726b00000000"], 0x40}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x100) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 21m37.679280921s ago: executing program 6 (id=3916): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) prlimit64(r1, 0xb, 0x0, &(0x7f00000001c0)) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'team_slave_1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) listen(r8, 0x0) 21m30.923223943s ago: executing program 6 (id=3929): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000003c0)="96a67b36bd06304a08a67f14f6c3881ca6167592ce060670a396f8ab05ace2caca", 0x21}], 0x1}}, {{&(0x7f0000000400)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000440)="a48f91fe1946332d078824a70c90206142fc", 0x12}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="94c879f8663450577cd65afbf60b703d07268dff4d44acabad8916184a6b21fbe35a44c052d5dcf7e768c42223950a437a8aee7e835a6fb10c99b01c22b8c78d82eeddb3dc9609b1acba920743467cfc71", 0x51}], 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="780000000000000000000000070000008307d5ac1414aa018616000000030004099301020008d407267ccacd0202070651f3f7db441c5e63ac1414aa00000007fffffffffffffffb7f000001fffffe00018913877f000001ac1414aaac141421ac1414bb0094040100830e32b3e7e59b2fe606430c911d0020000000000000000000000007000000880ecfe7be530976e8bc03d96aa200001100000000000000000000000100000062000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="00000000ac1414aa000000001400001c0caeb00000000000010000000400000000000000140000000000000000000000100000000000001400000000000000000000000200000002000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="e0000001ac1414aa00000000"], 0x138}}, {{&(0x7f0000000a80)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000ac0)="ffd5bc53d8abbb19b2e88d57e4ac4eec42bce6e07651ceda1b275ce53e8b64cb8b07d2cd90a2c5c90ed31c665a41dda73ddf729a4fe6571ab8d74fd0eb4edc5e22d76f70df7a60224fbadd10e0b9f95692870f7f601f1d95885ab219bc078ac55166f17bbdba915a5acdef2dddb31bf523da77b5bcbb94b2c2681586fb1d247c6c1c979dd31cf811a4cd9f7edaae6c2c58d6fd369409845a3d1270b15b1e287f8314353ddf318cb5c4d3385ccc45accb0800b9b92095203ca66c178ed160de6af1df5eadc2753e5702263c9ed4f185d14b704962cb5d09686c89bbd9268dd1", 0xdf}, {&(0x7f0000000bc0)="bfae57a6713736f322db02674cd9822973f4f54b43e465357c83936e79828f0db8714652f21e7cbb7ccb5c7e146ef94609ea5b61d062264209ee99e1c9c3ec92d637743fcbc7405077b36114e55fc296770fd5b72fc4175280c714e457f6f2a8016d7eaa2b186c8eb447b75313ff82b8e2b2eb6a68dea6a92a8e1d796a15784b4f9c014ffdd0721f6463c67799920998e3eeed555d4723488aff6a03c23a94c53f1da6c69a2c6ebde78f532dcd8ac32426a13018", 0xb4}, {&(0x7f0000000c80)="3f2239bb8cdb34300759d13eba854f2729b9100a06e51d94868983ed91a73507b8cb13beb6f3ab49326012377a1fd9e5647e4ddf9be3cf34638fd76c2da3b33006e415d62584fc7cf49b006018e0f0fcf0875dad12231ae374429f0f4f9ee4cf714df8c305e8f4abb5dc5ada917a29eaa8410da08c7faa7b2831eece9ac4c1053a0e8541453a184863e831bce81c596b245798f739412508c16f8a9350a41a8c6d2a47", 0xa3}, {&(0x7f0000000f00)="17fc8f078d955ca22b30461c2432c2e320e577820ebf2ab768fb2546a4ca273213d53f0bba5ea6841bc734000f3b6b65acd15f2bc5eed02a18f7ce05a2ef2a432599db657390b21f6c1b40aee54148abff1a06608f04fee15304be8ed2de2f8cf0613395061b903bcaa1804f03f2b4e36dbc3f87baf15b500ea9da42761795cc37848602473e7eec0102f6e6a8c6d9ac1785c0e71dcdcc2ce141fbea796a031850eccc0063f3653f4780cf85bec34252dcd37a2b300ae5731e026ca2e37bd692a62e18b221d19b0563b808cd1a3d70d1f1f4656efdf0facd21960236126e7f", 0xdf}, {&(0x7f0000001000)="dad5f3630df2c7e742d9e277c617868992c6b48ec55089e227fd7e26c9af99d9c86fc7300488db0dae482cae906361406f83fdd9d8400760acc9b093ac45732d9ee8c960b148332377f1a322df962b59de29661c2f09aa5ed0229af0052e523fa897a004b9976b686f8266b6d48a05bb11eb3a2ac07736be9b07c2c9983e9da81c73de3a2f174de1b905", 0x8a}, {&(0x7f00000010c0)="2e0ea944e58170846fe174cc0f6c7c5cca5cb90bdc8909ef2bc22e0d3e08eeb127d5cf6774ef9d9cc60f498df650ac891440ddc5dd8ee468f89b9f288a3da6388edb75126d317b6f4ce286a309414b9e7782e42c4c69eb90349a47bc7dade961f4262cb89c9fb378d00d1b831b8bd1311b1a235577a6770fd3b385144f16ae514f2ad419b1422107c122cecb57af08fbc3937b249326cc6fb64d7a6a85ab9049e3920e1c687f17cfe9584c5ba60c3197840f171dca5d8e54022bb0a2ba6a3c1356c09b5f8cb76425724e6e31fd32e85df7df8f4210e54f398875ceb6681ad3312b3714ae332af1a8d323d893b6c5f096eb86", 0xf2}], 0x6, &(0x7f00000011c0)=[@ip_retopts={{0x60, 0x0, 0x7, {[@end, @generic={0x7, 0xe, "b824152b2a3308f197127328"}, @rr={0x7, 0x2b, 0x20, [@rand_addr=0x64010102, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x76, [@broadcast, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1d}]}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@cipso={0x86, 0x45, 0x2, [{0x2, 0x12, "04012ce2647d49a1da0b724572a4f115"}, {0x1, 0xf, "3bf6d57da5a8614e42f2538a1a"}, {0x7, 0xe, "9d0b408db8ba1c4d018222ef"}, {0x2, 0xd, "32a2601975e47c02887874"}, {0x6, 0x3, '-'}]}, @timestamp_prespec={0x44, 0x14, 0x9d, 0x3, 0x9, [{@broadcast}, {@remote, 0xb0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0xe8}}, {{&(0x7f0000001300)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001340)="2e7984e1d221bf655554f82cf617c17959d8d54c54478c53e6ca20e6c2fef48be45024bb8964cb80af04845ee2771b1b72329ffe073810cc50063548445285d483f19f709213996602bc3692d39d6f06c419f4c77c58ba3cd0d6f5314bbb1b8e11a412", 0x63}, {&(0x7f00000013c0)="73205b9c41d234f48c890d3298aebb72422358c08ac53e9ef5f02df0fdcdebb39221466a8c68e0211e9d77e4afc361fa51d86b79bd2666b89a56ae6a3f913e38ad35f2a8a2174e6407f814f444d4e5fc94d5b96addbcc35a0f3f2e3fdbd574", 0x5f}, {&(0x7f0000001440)="6276491ccb4760f1b1ec2a4d257ba54616981daccdec2c92ca2b0ffbad7cfc627a395e59fa4db474f78679ba25e7f61d6fbd935ea5057c", 0x37}, {&(0x7f0000001a40)="ed3cd52278c5d8c716da2168038e3218d1d03c792ef1fcda630f4ac07450cd5b0385ee0fb2c9663d8bbb454fb559b0569f92ed8697b4dda6e413a1f25d6b54fba76db47053e4fe7b3e49f7777d767d5715780348d88afdee43ca55721d07d4b0c171", 0x62}], 0x4}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001540)="0a5c76ee2480a9b686c6132fe17860a08e873338b47ead69ae2497be1b06625c46aa0f694f2435138e009be1c4521d2c3e9dbc25c15b80c6ffbcd332e930f4a80564bb9a281b6a6798bf39a21b681b98b12167edc9af4ee3a7aa8c", 0x5b}, {&(0x7f00000017c0)="628a6084a218", 0x6}], 0x2, &(0x7f0000001840)=[@ip_retopts={{0xb8, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x2c, 0xb4, 0x1, 0x3, [{@multicast1, 0x5}, {@broadcast, 0xfffffff8}, {@loopback, 0x5}, {@local, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0xf2, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0xd0, 0x3, 0x1, [{@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@private=0xa010102, 0x8001}, {@local, 0x80000000}, {@remote, 0x8}]}, @noop, @timestamp_addr={0x44, 0x34, 0x81, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfb0}, {@private=0xa010102, 0x7f}, {@private=0xa010100, 0x7}, {@remote, 0x2639}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}]}, @noop]}}}], 0xb8}}], 0x5, 0x0) 21m30.652043464s ago: executing program 6 (id=3930): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x400202) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x6, 0x0, 0x7, 0x3, 0x0, 0x0, 0x300}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x34, 0x11, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x0, 0x10}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x34}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(0xffffffffffffffff, 0x1ff) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') socket$pppl2tp(0x18, 0x1, 0x1) read$FUSE(r4, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f0000000500)="ab", 0x34000, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 21m29.51281896s ago: executing program 6 (id=3932): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x400000001300, 0x400000001330], 0x0, 0x0, 0x0}, 0x78) 21m29.125452379s ago: executing program 6 (id=3935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='io_uring_complete\x00', r2}, 0x18) r3 = syz_io_uring_setup(0xfce, &(0x7f00000003c0)={0x0, 0x3, 0x1, 0x0, 0x220}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0xce3, 0xfffffffe, 0x0, 0x0, 0x0) 21m13.255049869s ago: executing program 46 (id=3935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='io_uring_complete\x00', r2}, 0x18) r3 = syz_io_uring_setup(0xfce, &(0x7f00000003c0)={0x0, 0x3, 0x1, 0x0, 0x220}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0xce3, 0xfffffffe, 0x0, 0x0, 0x0) 18m35.410865159s ago: executing program 4 (id=4383): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001a0000000c000180080001"], 0x20}}, 0x0) 18m34.822465651s ago: executing program 4 (id=4389): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r3}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000001340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r7, 0x301, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 18m33.082319694s ago: executing program 4 (id=4394): mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 18m30.167870444s ago: executing program 4 (id=4400): ioperm(0x0, 0x9, 0x5) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a14"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) rt_sigprocmask(0x1, &(0x7f0000000080)={[0xa10]}, &(0x7f0000000100), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x800}, [@alu={0x7, 0x1, 0x5, 0x5, 0x7, 0x2, 0x10}, @ldst={0x0, 0x2, 0x2, 0x2, 0x5, 0xc, 0xffffffffffffffff}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r3, 0x29, 0x40, 0xf9, 0x80000000, 0x28, @private1, @empty, 0x1, 0x7, 0x1, 0x3ff}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}) getdents(r5, 0x0, 0x0) 18m29.43503129s ago: executing program 4 (id=4404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000"], 0x118}}, 0x0) 18m28.360459551s ago: executing program 4 (id=4408): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 18m13.268141851s ago: executing program 47 (id=4408): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 12m13.207267731s ago: executing program 9 (id=5515): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) 12m11.153650784s ago: executing program 9 (id=5519): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="070000000000021004000000ff00000000", @ANYRES32=r0, @ANYBLOB="c400"/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x2) 12m9.896380874s ago: executing program 9 (id=5523): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r4, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 12m8.143635975s ago: executing program 9 (id=5526): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x37) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "6455d828effa4c0c3424baf0d6794fd0781b48181698edab65235ff0507da48343d4974364d8864ce4ae8becb5ef51be56009bd6fba560dab0d939e30ff97a32d76f421e"}, 0x4f) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000280)="ca1c808bb35bdabb49f35c09d456591f0c15a08769bcd5107053eafff74feb44c4ad246ec71f85250ac10e50c1", 0x2d) write$UHID_INPUT(r0, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 12m6.051680602s ago: executing program 9 (id=5529): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r1}, 0xc) 12m4.549874242s ago: executing program 9 (id=5533): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 11m48.719622242s ago: executing program 48 (id=5533): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1m37.359918081s ago: executing program 1 (id=6936): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) lstat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) 1m24.598648836s ago: executing program 1 (id=6964): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) 1m23.078967213s ago: executing program 1 (id=6968): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 1m22.900800958s ago: executing program 0 (id=6969): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001bc0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) 1m20.889027489s ago: executing program 1 (id=6973): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@redirect_dir_on}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, r5, 0x1, '\x00', 0x0, r5, 0x1, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) statx(r5, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') stat(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1m20.794126493s ago: executing program 0 (id=6975): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x9c, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f00000003c0)=0x7, 0x4) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r7 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071123b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(r1, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x90000, 0xc0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0xfffffe00, 0x0, 0x0, 0x0, 0x1000}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "f0245a", 0x10, 0x21, 0xff, @loopback, @private1, {[], {{0x4e22, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, "78adca", 0x13, "4da081"}}}}}}}, 0x0) 1m18.511940048s ago: executing program 0 (id=6978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x3, &(0x7f0000000280)=0xffff8000, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r4 = accept(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="ea51f85478d37f47a1f5094f3ef618efb3f82752fc9f53352be16cf84ff70a866c73a3d56ec99a5103a63633178a12c1eed776a80a3f63d845d9dbb658485541b72575ca22108d4da26a350c6576cc953a19f791ff2d3f7a525622328466e46616e985f5aac357302c2e77eb782ca73262041a89c0", 0x75}], 0x1}}], 0x1, 0x0) 1m16.907013554s ago: executing program 0 (id=6982): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x2, 0x0, @private2}, 0x1c) sendto$inet6(r2, &(0x7f0000000300)='H', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x1c27, 0x10100, 0x0, 0x3a6, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x2000, 0x84) ioctl$EXT4_IOC_GETFSUUID(r7, 0x8008662c, &(0x7f0000000000)) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000040)={r9, 0x9}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e21, 0x860f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}, &(0x7f0000000080)=0x84) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) r10 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @c}, 0x29, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0xc0506617, &(0x7f00000000c0)={@id={0x2, 0x0, @a}, 0x0, r10}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0xee, @string={0xee, 0x3, "fa629df8bb61da2f0007c0c796f0c7f20a3c32d5879bb0dcb10e972cf4be955c47676016e17f8bb7bd1f8a0280f286f22986484bb561007678ba2b8cada86ebbdffff244177c4994618bbd64dc0f92408260d66c72dd8f45c5f2fec495800a41236d19983082068a4a2f42742d44d6db0128e70bdc9292a564670f43d7fbc82ce72d91c9fbcbbbc1f2456daa2df29c26a96bb348988a187c0f1b83a608bb778e8d6d83a5c13b90aea82d4b7c03a6f192d3b7f0e111a15c5025dce271ad2d112aa01e8f3494619a1124e04e063657e1b4fad6deafc37fde4707ffc9acab0b581ce65059822b62c1b88e7afc3b"}}}, &(0x7f0000000980)={0x44, &(0x7f00000007c0)={0x20, 0xe, 0xfc, "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"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x7}, 0x0, &(0x7f00000006c0)={0x20, 0x82, 0x2, '9D'}, &(0x7f0000000700)=ANY=[@ANYBLOB="207890b525f7d21416"], &(0x7f0000000900)={0x20, 0x84, 0x3, "2aae80"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "1680d2"}}) r11 = msgget$private(0x0, 0x100) msgsnd(r11, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0xfd1, 0x0) msgctl$IPC_SET(r11, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10001, 0x4e, 0xffffffffffffffca, 0x8, 0x8580, 0x3, 0x0, 0xffffffffffffffff}) 1m16.048426058s ago: executing program 1 (id=6985): socket$packet(0x11, 0x2, 0x300) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioperm(0x81, 0x278, 0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000580)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}}, 0x30) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) 1m11.95239404s ago: executing program 1 (id=6993): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x11, 0xa, 0x300) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0x6, 0x9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, 0x0, 0x0, 0xffffbffffffffffb, 0x403}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, 0x0, 0x0, 0x2, 0x6dd}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) gettid() connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000400)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) 1m11.921855364s ago: executing program 0 (id=6994): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x48, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xffff6b4d}, {0x6, 0x11, 0xd}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x40004) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="0dda34f6974c7e59c7d0871388093a76ca2dfa03009ffadfa4bfb48c76fb296526ae98655ee4c429d1f245af4d9bcc0b787eb0619e69", 0x36}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_to_batadv\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0xfffffff8, 0x2, 0x20080000, 0x80000000, 0xe3a, 0x800, 0x3, 0x7, 0x0, 0x4, 0x10001, 0x3414, 0x8, 0x6, 0xdc8, 0x5a, 0x6, 0x7, 0x5, 0xfffffffd, 0x0, 0x0, 0xeac, 0x76, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x8, 0x401, 0x5, 0x14000000, 0x401, 0x94da, 0x2, 0xaf1b, 0x46, 0x2, 0x9, 0x7ff, 0x0, 0x3, 0x0, 0x3, 0x7, 0xb, 0x1000, 0x5, 0x9, 0x9, 0x8001, 0xd4, 0xce, 0x4, 0x2de, 0x4, 0x6, 0x3, 0x5, 0x8, 0x101, 0x6, 0x401, 0x9, 0x1, 0x40, 0x7, 0x5, 0x6, 0x1, 0x6, 0x4, 0x80000000, 0x5, 0x6, 0x43, 0x9, 0x7, 0xd97b, 0x4, 0x3, 0x5, 0x7, 0x7fff, 0xffffffff, 0xffff, 0x10001, 0xaf61, 0x1, 0x6, 0x4, 0x7f, 0x4, 0x5, 0x3, 0x1, 0x2, 0x8, 0x80000001, 0x8, 0x5, 0x4, 0x0, 0x0, 0x7, 0xfffffffa, 0x10, 0x9, 0x0, 0x0, 0xf, 0x5bc, 0x5, 0x7f, 0x4, 0x8, 0x2, 0x10, 0x4d9, 0x2, 0x80000001, 0xffff, 0xff, 0x8, 0x2, 0x100], "0513bc4ec87af4e854037364aa568bf18aee0b4a43f5f5ffa583f12644c60125a23506b8829396b2e2b3ab"}}) 1m10.014660803s ago: executing program 0 (id=6996): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x11, 0xa, 0x300) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r4, 0x0, 0x6, 0x9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, r4, 0x0, 0xffffbffffffffffb, 0x403}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r4, 0x0, 0x2, 0x6dd}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000900)={0x48, 0x1, r4, 0x0, 0x5, 0x7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) gettid() connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) 54.569849142s ago: executing program 49 (id=6993): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x11, 0xa, 0x300) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0x6, 0x9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, 0x0, 0x0, 0xffffbffffffffffb, 0x403}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, 0x0, 0x0, 0x2, 0x6dd}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) gettid() connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000400)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) 54.503082629s ago: executing program 50 (id=6996): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x11, 0xa, 0x300) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r4, 0x0, 0x6, 0x9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, r4, 0x0, 0xffffbffffffffffb, 0x403}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r4, 0x0, 0x2, 0x6dd}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000900)={0x48, 0x1, r4, 0x0, 0x5, 0x7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) gettid() connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) 14.768839202s ago: executing program 5 (id=7111): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x6c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x79}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000054) 12.184238878s ago: executing program 5 (id=7115): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x24}}, 0x4040080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0xc9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0x0, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x22}, @empty, 0xffffff00, 0xffffff00, 'veth0_to_hsr\x00', 'batadv0\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x41}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c499, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg$inet(r3, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba6e0d60508dbbb", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000500)="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") openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 12.129541584s ago: executing program 7 (id=7117): socket$packet(0x11, 0x2, 0x300) socket(0x11, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) sendmsg$xdp(r1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioperm(0x81, 0x278, 0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000580)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}}, 0x30) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) 12.041848457s ago: executing program 3 (id=7118): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000440)={0x0, 0xfffffffd, 0x800, 0x0, 0x9e}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47f9, 0x0, 0x2, 0x0, 0x0) 10.711000228s ago: executing program 3 (id=7119): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4000) sendmsg$NFT_BATCH(r2, 0x0, 0x48080) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3d, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x8, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x17, 0x0, 0x0, @str='\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x7ff}) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 10.662278812s ago: executing program 7 (id=7120): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x6, {0x6, 0x1, "00f40000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x6a, 0x4, 0x20000002, 0x4) syz_open_dev$vbi(0x0, 0x1, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0x1000, "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"}, &(0x7f0000000100)=0x1008) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000000500050002000000050004000000000014000780080008400000106d080006400000000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001340)={r7, @in6={{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7ff}}, 0x4000005, 0x0, 0x6, 0x7, 0x1a, 0xfffff800, 0x8}, 0x9c) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffa0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000012c0)={0x14, &(0x7f0000000180)={0x40, 0x2, 0x25, {0x25, 0x6, "e738b976eb1d09e71a4261c71b70d741c2dddd2113d5ac620b0ad8e0b00425ae179b0a"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, 0x0, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x41}, &(0x7f0000001440)={0x0, 0x8, 0x1, 0x6}}) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) 10.631228243s ago: executing program 5 (id=7121): r0 = socket(0x2, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0xa040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={0xffffffffffffffff, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000340)=[{0x9, 0x1, 0x7, 0x81}]}) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b48009009078001c4e0300050a00000000000000000008d58838068b910000"], 0x4e) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) unshare(0x24040000) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x4}, &(0x7f0000001200)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x23, 0x6000, @fd_index=0x6, 0x75a5, 0x0, 0x0, 0xa, 0x1}) r5 = eventfd(0x3) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001240)=r5, 0x1) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) 9.51118343s ago: executing program 3 (id=7123): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x1890a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) getpid() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) 8.331261034s ago: executing program 8 (id=7124): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x0, 0x0, 0x8000000000000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001]}) 8.157662628s ago: executing program 5 (id=7125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x6c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x79}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000054) 8.089706396s ago: executing program 8 (id=7126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(0xffffffffffffffff, 0x6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffdef}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404404c}, 0x40) 7.515637111s ago: executing program 7 (id=7127): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000000)=@filename='./bus\x00', 0x0, 0x0, 0x400080, 0x0) mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x5, 0x5, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f0000000780)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x4000000) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000900), 0x3}, 0x17ba}], 0x1e, 0x2000, 0x0) 7.039113477s ago: executing program 5 (id=7128): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r3, 0x0, 0x6, 0x9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r3, 0x0, 0x2, 0x6dd}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000900)={0x48, 0x1, r3, 0x0, 0x5, 0x7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) gettid() r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000400)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) 6.503223872s ago: executing program 8 (id=7129): syz_usb_connect$cdc_ecm(0x2, 0x56, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 5.12224443s ago: executing program 7 (id=7130): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000380)={0x1, 0x0, 0x5, 0x9, 0x3ff, 0x400, 0x4, 0x6, 0xfffffffe}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e20, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, @in6={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00', 0xbcacbe}], 0x48) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000fee000/0x12000)=nil, 0x12000}, 0x2}) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') ioprio_set$pid(0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) 4.253979727s ago: executing program 3 (id=7131): socket$packet(0x11, 0x2, 0x300) socket(0x11, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) sendmsg$xdp(r1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioperm(0x81, 0x278, 0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000580)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}}, 0x30) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) 4.243368038s ago: executing program 7 (id=7132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000280)=0xffff8000, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="ea51f85478d37f47a1f5094f3ef618efb3f82752fc9f53352be16cf84ff70a866c73a3d56ec99a5103a63633178a12c1eed776a80a3f63d845d9dbb658485541b72575ca22108d4da26a350c6576cc953a19f791ff2d3f7a525622328466e46616e985f5aac357302c2e77eb782ca73262041a89c0", 0x75}], 0x1}}], 0x1, 0x0) 3.613177463s ago: executing program 3 (id=7133): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4000) sendmsg$NFT_BATCH(r2, 0x0, 0x48080) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3d, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x8, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x17, 0x0, 0x0, @str='\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x7ff}) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 3.445631902s ago: executing program 7 (id=7134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) socket$inet6(0xa, 0x2, 0x3a) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r2, 0x4bfb, &(0x7f0000000440)=""/252) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 3.257016245s ago: executing program 8 (id=7135): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x6, &(0x7f0000000140)={0xfe, "ff7f000000000000a4024afcf76574009178f41acc7495a41e00002fe344ca00"}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}]}, 0x24}, 0x1, 0x0, 0x0, 0xc001}, 0x80) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 2.020417999s ago: executing program 8 (id=7136): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x4000000) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000900), 0x3}, 0x17ba}], 0x1e, 0x2000, 0x0) 1.109670307s ago: executing program 8 (id=7137): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x6, {0x6, 0x1, "00f40000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x6a, 0x4, 0x20000002, 0x4) syz_open_dev$vbi(0x0, 0x1, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0x1000, "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"}, &(0x7f0000000100)=0x1008) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000000500050002000000050004000000000014000780080008400000106d080006400000000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001340)={r7, @in6={{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7ff}}, 0x4000005, 0x0, 0x6, 0x7, 0x1a, 0xfffff800, 0x8}, 0x9c) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffa0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000012c0)={0x14, &(0x7f0000000180)={0x40, 0x2, 0x25, {0x25, 0x6, "e738b976eb1d09e71a4261c71b70d741c2dddd2113d5ac620b0ad8e0b00425ae179b0a"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, 0x0, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x41}, &(0x7f0000001440)={0x0, 0x8, 0x1, 0x6}}) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) 101.072212ms ago: executing program 3 (id=7138): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r5, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x6c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x79}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000054) 0s ago: executing program 5 (id=7139): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffdef}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404404c}, 0x40) kernel console output (not intermixed with test programs): s (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2582.360792][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2582.452364][T26582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2582.504833][T26582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2582.557143][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2582.815725][T26582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2582.856520][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2582.900242][T26582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2583.034811][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2583.097534][T26582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2583.167139][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2583.422423][T26582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2583.726323][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2583.749641][T26582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2583.902162][T26582] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2583.940481][T26582] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2584.000782][T26582] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2584.009575][T26582] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2586.028078][ T7014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2586.073784][ T7014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2586.618070][T17115] libceph: connect (1)[c::]:6789 error -101 [ 2587.240672][T26976] ceph: No mds server is up or the cluster is laggy [ 2587.273033][T17115] libceph: mon0 (1)[c::]:6789 connect error [ 2587.279085][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2587.320747][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2588.535049][T26989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2589.599241][T26993] netlink: 165 bytes leftover after parsing attributes in process `syz.0.5914'. [ 2590.029185][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.036972][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.196639][T26996] ceph: No mds server is up or the cluster is laggy [ 2594.602526][T27044] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5930'. [ 2594.724562][T27047] overlayfs: failed to resolve './file0': -2 [ 2594.804515][T24197] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2594.855032][T24197] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2594.869394][T24197] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2594.896890][T24197] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2594.907119][T24197] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2594.919552][T24197] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2595.218036][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 2595.230838][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 2595.258164][T27053] netlink: 165 bytes leftover after parsing attributes in process `syz.7.5933'. [ 2595.271463][T27055] netlink: 'syz.5.5934': attribute type 9 has an invalid length. [ 2595.279222][T27055] netlink: 244 bytes leftover after parsing attributes in process `syz.5.5934'. [ 2595.428197][T27063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5935'. [ 2595.514112][T15101] bridge0: port 1(syz_tun) entered disabled state [ 2595.587980][T16474] libceph: connect (1)[c::]:6789 error -101 [ 2596.065825][T27052] ceph: No mds server is up or the cluster is laggy [ 2596.084248][T16474] libceph: mon0 (1)[c::]:6789 connect error [ 2596.883568][T15101] syz_tun (unregistering): left allmulticast mode [ 2596.890228][T15101] syz_tun (unregistering): left promiscuous mode [ 2596.924097][T15101] bridge0: port 1(syz_tun) entered disabled state [ 2596.984819][T24197] Bluetooth: hci5: command tx timeout [ 2597.482265][T27081] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2597.494918][T27081] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2597.757188][T21145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2598.386480][T21145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2598.468136][T27089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5941'. [ 2598.722802][T21145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2599.070716][T24197] Bluetooth: hci5: command tx timeout [ 2599.529085][T21145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2600.298618][T27117] netlink: 'syz.1.5947': attribute type 10 has an invalid length. [ 2601.310729][T24197] Bluetooth: hci5: command tx timeout [ 2601.628758][T27048] chnl_net:caif_netlink_parms(): no params data found [ 2603.064989][T27048] bridge0: port 1(bridge_slave_0) entered blocking state [ 2603.099333][T27048] bridge0: port 1(bridge_slave_0) entered disabled state [ 2603.108410][T27048] bridge_slave_0: entered allmulticast mode [ 2603.146239][T27048] bridge_slave_0: entered promiscuous mode [ 2603.420136][T24197] Bluetooth: hci5: command tx timeout [ 2603.980663][T21145] bridge_slave_1: left allmulticast mode [ 2603.996589][T21145] bridge_slave_1: left promiscuous mode [ 2604.011608][T21145] bridge0: port 2(bridge_slave_1) entered disabled state [ 2610.157967][T21145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2610.168578][T21145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2610.209151][T21145] bond0 (unregistering): (slave team0): Releasing backup interface [ 2610.240115][T21145] bond0 (unregistering): Released all slaves [ 2610.390042][T27048] bridge0: port 2(bridge_slave_1) entered blocking state [ 2610.453802][T27048] bridge0: port 2(bridge_slave_1) entered disabled state [ 2610.502235][T27048] bridge_slave_1: entered allmulticast mode [ 2610.558143][T27048] bridge_slave_1: entered promiscuous mode [ 2610.831946][T27137] bpq0: entered allmulticast mode [ 2610.914054][T21145] tipc: Left network mode [ 2611.200757][ T8] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 2612.505405][ T8] usb 6-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 2612.523139][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2612.546386][T27048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2612.565142][ T8] usb 6-1: config 0 descriptor?? [ 2612.583863][ T8] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 2612.592168][ T8] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2612.608798][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 2612.639274][ T8] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2612.723718][ T8] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 2612.824045][T27048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2612.841971][ T8] usb 6-1: USB disconnect, device number 23 [ 2612.865565][T27198] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5969'. [ 2612.877596][T27206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5970'. [ 2613.241376][T27048] team0: Port device team_slave_0 added [ 2613.261869][T27048] team0: Port device team_slave_1 added [ 2613.362925][T27210] netlink: 'syz.3.5972': attribute type 10 has an invalid length. [ 2614.521585][T27215] netlink: 'syz.1.5973': attribute type 10 has an invalid length. [ 2615.788701][T27210] 8021q: adding VLAN 0 to HW filter on device team0 [ 2616.972636][T27210] bond0: (slave team0): Enslaving as an active interface with an up link [ 2617.092492][T27048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2617.249958][T27048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2617.905490][T27048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2618.210909][T27048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2618.229908][T27048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2618.262839][T27048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2618.418707][T21145] hsr_slave_0: left promiscuous mode [ 2618.489687][T21145] hsr_slave_1: left promiscuous mode [ 2619.013339][T21145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2619.108032][T21145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2619.232554][T21145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2619.240275][T21145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2619.633932][T21145] veth1_macvtap: left promiscuous mode [ 2619.639535][T21145] veth0_macvtap: left promiscuous mode [ 2621.461204][T27243] autofs: Bad value for 'fd' [ 2623.193112][T27259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2624.314964][T21145] team0 (unregistering): Port device team_slave_1 removed [ 2624.317540][T27265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5988'. [ 2624.371987][T21145] team0 (unregistering): Port device team_slave_0 removed [ 2625.089130][T27238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5979'. [ 2625.114939][T27048] hsr_slave_0: entered promiscuous mode [ 2625.126047][T27048] hsr_slave_1: entered promiscuous mode [ 2625.136497][T27048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2625.149809][T27048] Cannot create hsr debugfs directory [ 2625.518192][T27265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5988'. [ 2625.619486][T27269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5989'. [ 2629.015173][T27295] netlink: 165 bytes leftover after parsing attributes in process `syz.8.5996'. [ 2630.521255][T27307] netlink: 'syz.3.5999': attribute type 10 has an invalid length. [ 2631.283855][T27308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2631.568210][T27309] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6000'. [ 2631.683668][T27309] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6000'. [ 2633.227633][T27048] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2633.302333][T27048] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2633.383659][T27048] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2633.439352][T27048] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2633.501570][ T8] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2633.730835][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 2633.743873][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2633.782123][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2633.818985][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2633.847112][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2633.895258][ T8] usb 4-1: Product: syz [ 2633.899343][T27048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2633.899576][ T8] usb 4-1: Manufacturer: syz [ 2634.468011][T27048] 8021q: adding VLAN 0 to HW filter on device team0 [ 2634.487683][T14893] bridge0: port 1(bridge_slave_0) entered blocking state [ 2634.494898][T14893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2634.520722][ T8] usb 4-1: SerialNumber: syz [ 2634.582597][T14893] bridge0: port 2(bridge_slave_1) entered blocking state [ 2634.589786][T14893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2634.778289][ T8] usb 4-1: 0:2 : does not exist [ 2634.787691][ T8] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2634.929533][T27337] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6008'. [ 2634.973496][ T8] usb 4-1: USB disconnect, device number 36 [ 2636.291859][T27350] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 2636.298442][T27350] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2636.346607][T27350] vhci_hcd vhci_hcd.0: Device attached [ 2636.418239][T27048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2636.555207][ T5846] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2636.600748][ T25] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 2636.686969][T27048] veth0_vlan: entered promiscuous mode [ 2636.761733][ T5846] usb 6-1: Using ep0 maxpacket: 16 [ 2636.821058][T27364] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6016'. [ 2637.498662][T27366] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6015'. [ 2638.102895][ T5846] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2638.114442][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2638.124118][ T5846] usb 6-1: Product: syz [ 2638.128295][ T5846] usb 6-1: Manufacturer: syz [ 2638.133442][ T5846] usb 6-1: SerialNumber: syz [ 2638.174582][ T5846] usb 6-1: config 0 descriptor?? [ 2638.181472][T27048] veth1_vlan: entered promiscuous mode [ 2638.233231][ T5846] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 2638.291474][ T5846] usb 6-1: Detected FT232H [ 2638.349527][T27048] veth0_macvtap: entered promiscuous mode [ 2638.589204][T27048] veth1_macvtap: entered promiscuous mode [ 2638.608677][T27048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2638.620407][T27048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.632320][T27048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2639.532165][T27048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2639.570878][T27048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2639.598836][T27048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2639.761724][T27372] netlink: 'syz.3.6018': attribute type 1 has an invalid length. [ 2639.769606][T27048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2639.796121][T27048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2640.041099][T27048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2640.057223][T27048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2640.072615][T27048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2641.096020][ T5846] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2641.096948][T27048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2641.132376][T27354] vhci_hcd: connection reset by peer [ 2641.138246][ T5846] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2641.138377][ T7031] vhci_hcd: stop threads [ 2641.182306][ T5846] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 2641.199100][ T5846] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2641.211232][ T7031] vhci_hcd: release socket [ 2641.215859][T27048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2641.249478][ T7031] vhci_hcd: disconnect device [ 2641.265829][T27048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2641.302854][T27048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2641.346127][T27048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2641.901435][T27048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2641.928050][ T5846] usb 6-1: USB disconnect, device number 24 [ 2641.942292][T27048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2641.972036][ T5846] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2641.981451][T27048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2642.003066][ T25] vhci_hcd: vhci_device speed not set [ 2642.027028][ T5846] ftdi_sio 6-1:0.0: device disconnected [ 2642.040659][T27048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2642.130858][T27048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2642.172118][T27048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2642.227506][T27048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2642.244220][T27392] netlink: 'syz.5.6022': attribute type 1 has an invalid length. [ 2642.310698][T25457] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2642.327473][T27048] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2642.367970][T27048] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2642.385367][T27048] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2642.471026][T25457] usb 4-1: Using ep0 maxpacket: 16 [ 2642.490011][T25457] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2642.640820][T25457] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2642.674390][T25457] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2642.700779][T25457] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2642.718498][T25457] usb 4-1: Product: syz [ 2642.734510][T25457] usb 4-1: Manufacturer: syz [ 2642.739135][T25457] usb 4-1: SerialNumber: syz [ 2642.990482][T25457] usb 4-1: 0:2 : does not exist [ 2643.026344][T25457] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2643.052206][ T7031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2643.085469][T25457] usb 4-1: USB disconnect, device number 37 [ 2643.105504][ T7031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2643.198110][T21145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2643.430724][T21145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2645.191957][T27416] 9pnet_fd: Insufficient options for proto=fd [ 2650.662243][T27399] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2650.869000][T27399] usb 6-1: Using ep0 maxpacket: 16 [ 2650.869561][T27468] 9pnet_fd: Insufficient options for proto=fd [ 2650.919987][T27399] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2651.384460][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.391528][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.510942][T27399] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2652.350889][T27399] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2652.372259][T27470] netlink: 'syz.7.6045': attribute type 10 has an invalid length. [ 2652.388606][T27399] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2652.402367][T27399] usb 6-1: Product: syz [ 2652.406624][T27399] usb 6-1: Manufacturer: syz [ 2652.420899][T27399] usb 6-1: SerialNumber: syz [ 2654.611371][T27399] usb 6-1: 0:2 : does not exist [ 2654.634810][T27399] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2654.736498][T27399] usb 6-1: USB disconnect, device number 25 [ 2656.451114][T27485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2660.446393][T27516] 9pnet_fd: Insufficient options for proto=fd [ 2663.440891][ T25] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2663.465634][T27535] netlink: 'syz.5.6067': attribute type 10 has an invalid length. [ 2663.640648][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 2663.653603][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2664.139686][T24197] Bluetooth: hci4: command 0x0405 tx timeout [ 2664.147278][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2664.193315][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2664.250676][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2664.369252][ T25] usb 4-1: Product: syz [ 2664.418802][ T25] usb 4-1: Manufacturer: syz [ 2664.479986][ T25] usb 4-1: SerialNumber: syz [ 2664.565299][ T25] usb 4-1: can't set config #1, error -71 [ 2664.598073][ T25] usb 4-1: USB disconnect, device number 38 [ 2668.044993][T27564] 9pnet_fd: Insufficient options for proto=fd [ 2672.572375][T27588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6083'. [ 2675.093039][T27613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6090'. [ 2675.191144][T27613] bridge0: port 2(bridge_slave_1) entered disabled state [ 2675.202937][T27613] bridge0: port 1(bridge_slave_0) entered disabled state [ 2675.351683][T27617] 9pnet_fd: Insufficient options for proto=fd [ 2676.710724][T27622] netlink: 'syz.1.6092': attribute type 10 has an invalid length. [ 2677.426362][T27626] netlink: 165 bytes leftover after parsing attributes in process `syz.5.6094'. [ 2679.457878][T27650] netlink: 'syz.5.6100': attribute type 10 has an invalid length. [ 2682.484690][T27669] 9pnet_fd: Insufficient options for proto=fd [ 2684.876618][T27688] netlink: 'syz.1.6111': attribute type 10 has an invalid length. [ 2686.345236][T27695] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 2686.351811][T27695] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2686.473786][T27695] vhci_hcd vhci_hcd.0: Device attached [ 2687.470704][ T5929] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 2687.700742][T16474] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2688.960647][T16474] usb 2-1: Using ep0 maxpacket: 16 [ 2689.099563][T16474] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2689.169466][T16474] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2689.221259][T16474] usb 2-1: Product: syz [ 2689.225492][T16474] usb 2-1: Manufacturer: syz [ 2689.230107][T16474] usb 2-1: SerialNumber: syz [ 2689.291674][T16474] usb 2-1: config 0 descriptor?? [ 2689.377630][T16474] usb 2-1: can't set config #0, error -71 [ 2689.940814][T27697] vhci_hcd: connection reset by peer [ 2689.952692][T16474] usb 2-1: USB disconnect, device number 43 [ 2689.962708][T15610] vhci_hcd: stop threads [ 2689.966994][T15610] vhci_hcd: release socket [ 2689.976350][T27719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6122'. [ 2690.040800][T15610] vhci_hcd: disconnect device [ 2690.086379][T27719] bridge0: port 2(bridge_slave_1) entered disabled state [ 2690.094260][T27719] bridge0: port 1(bridge_slave_0) entered disabled state [ 2690.903041][T27727] 9pnet_fd: Insufficient options for proto=fd [ 2691.081230][T27399] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2691.572125][T27399] usb 6-1: Using ep0 maxpacket: 16 [ 2691.655967][T27736] netlink: 'syz.8.6125': attribute type 10 has an invalid length. [ 2691.768693][T27399] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2692.174480][T27399] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2692.242820][T27399] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2692.272773][T27399] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2692.308035][T27399] usb 6-1: Product: syz [ 2692.318816][T27399] usb 6-1: Manufacturer: syz [ 2692.373090][T27399] usb 6-1: SerialNumber: syz [ 2692.523321][T27741] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6128'. [ 2692.725315][ T5929] vhci_hcd: vhci_device speed not set [ 2692.774490][T27399] usb 6-1: 0:2 : does not exist [ 2692.798992][T27399] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2693.767697][T27399] usb 6-1: USB disconnect, device number 26 [ 2694.326550][T27747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6131'. [ 2696.731720][T27772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6139'. [ 2696.801972][T27772] bridge0: port 2(bridge_slave_1) entered disabled state [ 2696.811648][T27772] bridge0: port 1(bridge_slave_0) entered disabled state [ 2697.410796][T27780] 9pnet_fd: Insufficient options for proto=fd [ 2697.620785][T25785] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2697.763495][T27793] overlayfs: missing 'lowerdir' [ 2698.201914][T25785] usb 4-1: Using ep0 maxpacket: 16 [ 2698.238112][T25785] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2698.248466][T25785] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2698.283330][T25785] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2698.405168][T27798] netlink: 'syz.0.6144': attribute type 10 has an invalid length. [ 2698.462787][T27798] 8021q: adding VLAN 0 to HW filter on device team0 [ 2698.501616][T27798] bond0: (slave team0): Enslaving as an active interface with an up link [ 2698.860785][T25785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2698.909727][T25785] usb 4-1: Product: syz [ 2698.919867][T25785] usb 4-1: Manufacturer: syz [ 2699.018236][T25785] usb 4-1: SerialNumber: syz [ 2699.469312][T25785] usb 4-1: 0:2 : does not exist [ 2699.854383][T25785] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2699.899419][T27806] netlink: zone id is out of range [ 2699.905299][T27806] netlink: zone id is out of range [ 2699.938570][T27806] netlink: set zone limit has 8 unknown bytes [ 2699.955172][T25785] usb 4-1: USB disconnect, device number 39 [ 2699.963245][T27809] netlink: zone id is out of range [ 2699.985635][T27809] netlink: zone id is out of range [ 2699.992487][T27809] netlink: zone id is out of range [ 2700.581967][T27809] netlink: del zone limit has 4 unknown bytes [ 2701.370978][T27817] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6150'. [ 2704.789707][T27839] loop7: detected capacity change from 0 to 512 [ 2705.932308][T27839] EXT4-fs: Ignoring removed oldalloc option [ 2706.576040][T27839] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 2706.640925][T27839] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.6156: Parent and EA inode have the same ino 15 [ 2706.769812][T27852] overlayfs: missing 'lowerdir' [ 2707.060061][T27839] EXT4-fs (loop7): 1 orphan inode deleted [ 2707.222367][T27839] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2708.351467][T27860] EXT4-fs error (device loop7): ext4_lookup:1817: inode #2: comm syz.7.6156: deleted inode referenced: 15 [ 2708.611257][T27860] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6156'. [ 2708.745315][T20500] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2709.168722][T27875] netlink: 43 bytes leftover after parsing attributes in process `syz.5.6164'. [ 2709.179797][T27875] tipc: Enabling of bearer rejected, failed to enable media [ 2710.036574][ T29] audit: type=1326 audit(1740917989.508:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27881 comm="syz.7.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2710.670801][ T29] audit: type=1326 audit(1740917989.528:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27881 comm="syz.7.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2710.709496][ T29] audit: type=1326 audit(1740917989.528:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27881 comm="syz.7.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2710.845020][ T29] audit: type=1326 audit(1740917989.528:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27881 comm="syz.7.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2710.911585][ T29] audit: type=1326 audit(1740917989.528:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27881 comm="syz.7.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2711.038481][ T29] audit: type=1326 audit(1740917989.558:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27881 comm="syz.7.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2711.150902][ T8] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 2711.181592][ T29] audit: type=1326 audit(1740917989.558:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27881 comm="syz.7.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2711.432272][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2711.758358][ T8] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2711.772311][ T29] audit: type=1326 audit(1740917989.558:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27881 comm="syz.7.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2711.811806][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2712.341273][ T29] audit: type=1326 audit(1740917989.558:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27881 comm="syz.7.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2712.380415][ T8] usb 4-1: config 0 descriptor?? [ 2712.408444][T27894] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2712.439973][ T29] audit: type=1326 audit(1740917989.558:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27881 comm="syz.7.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2712.824004][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2712.830402][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2712.903590][ T8] elan 0003:04F3:0755.0037: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 2713.007531][T27918] netlink: zone id is out of range [ 2713.015569][T27918] netlink: zone id is out of range [ 2713.022412][T27918] netlink: set zone limit has 8 unknown bytes [ 2713.033756][T27918] netlink: zone id is out of range [ 2713.039183][T27918] netlink: zone id is out of range [ 2713.046255][T27918] netlink: zone id is out of range [ 2713.053537][T27918] netlink: del zone limit has 4 unknown bytes [ 2713.102737][T27894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2713.119202][T27894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2714.131473][ T8] usb 4-1: reset full-speed USB device number 40 using dummy_hcd [ 2715.611973][T27935] netlink: 43 bytes leftover after parsing attributes in process `syz.8.6182'. [ 2715.622810][T27935] tipc: Enabling of bearer rejected, failed to enable media [ 2716.452555][T27936] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6180'. [ 2716.648866][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 2716.648894][ T29] audit: type=1326 audit(1740917996.108:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27940 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2717.355245][ T29] audit: type=1326 audit(1740917996.138:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27940 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2717.421229][ T29] audit: type=1326 audit(1740917996.138:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27940 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2717.454119][ T29] audit: type=1326 audit(1740917996.138:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27940 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2717.487345][ T29] audit: type=1326 audit(1740917996.138:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27940 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2717.571846][ T29] audit: type=1326 audit(1740917996.138:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27940 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2717.599606][ T29] audit: type=1326 audit(1740917996.138:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27940 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2717.599897][ T5929] usb 4-1: USB disconnect, device number 40 [ 2717.622222][ C0] vkms_vblank_simulate: vblank timer overrun [ 2717.713646][ T29] audit: type=1326 audit(1740917996.158:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27940 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2718.157986][ T29] audit: type=1326 audit(1740917996.158:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27940 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2718.390106][ T29] audit: type=1326 audit(1740917996.158:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27940 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2720.101067][T14835] Bluetooth: hci5: command 0x0406 tx timeout [ 2720.282391][T27973] serio: Serial port ptm0 [ 2721.532371][T27984] loop8: detected capacity change from 0 to 512 [ 2721.578829][T27984] EXT4-fs: Ignoring removed oldalloc option [ 2722.272680][T27984] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 2722.300814][T27984] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.6199: Parent and EA inode have the same ino 15 [ 2722.322609][T27984] EXT4-fs (loop8): 1 orphan inode deleted [ 2722.329422][T27984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2722.417485][T27984] EXT4-fs error (device loop8): ext4_lookup:1817: inode #2: comm syz.8.6199: deleted inode referenced: 15 [ 2722.430427][T27993] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 2722.436968][T27993] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2722.544220][T27993] vhci_hcd vhci_hcd.0: Device attached [ 2722.650860][T28000] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6199'. [ 2722.791848][T25785] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2722.931189][ T5929] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 2723.151424][T20016] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2723.261940][T25785] usb 4-1: Using ep0 maxpacket: 16 [ 2723.324147][T28003] netlink: 'syz.7.6205': attribute type 1 has an invalid length. [ 2723.332558][T28003] netlink: 134744 bytes leftover after parsing attributes in process `syz.7.6205'. [ 2723.810759][T25785] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2723.850830][T25785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2723.894778][T25785] usb 4-1: Product: syz [ 2723.899034][T25785] usb 4-1: Manufacturer: syz [ 2723.941771][T25785] usb 4-1: SerialNumber: syz [ 2723.964982][T25785] usb 4-1: config 0 descriptor?? [ 2723.989461][T25785] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2725.105853][T28011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2725.190092][T25785] usb 4-1: Detected FT232H [ 2725.191497][T27994] vhci_hcd: connection reset by peer [ 2725.197130][T25785] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2725.216980][T25785] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2725.538020][T21145] vhci_hcd: stop threads [ 2725.558756][T21145] vhci_hcd: release socket [ 2725.576195][T25785] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 2725.579994][T21145] vhci_hcd: disconnect device [ 2725.715380][T25785] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2725.760287][T25785] usb 4-1: USB disconnect, device number 41 [ 2725.834950][T25785] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2725.952430][T28019] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2726.011011][T25785] ftdi_sio 4-1:0.0: device disconnected [ 2727.756511][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 2727.756535][ T29] audit: type=1326 audit(1740918007.228:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28038 comm="syz.0.6215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40ab8d169 code=0x7ffc0000 [ 2727.910294][ T29] audit: type=1326 audit(1740918007.228:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28038 comm="syz.0.6215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40ab8d169 code=0x7ffc0000 [ 2728.034350][T28043] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 2728.040948][T28043] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2728.153377][ T29] audit: type=1326 audit(1740918007.268:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28038 comm="syz.0.6215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc40ab8d169 code=0x7ffc0000 [ 2728.175299][T28048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6216'. [ 2728.232825][ T29] audit: type=1326 audit(1740918007.268:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28038 comm="syz.0.6215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40ab8d169 code=0x7ffc0000 [ 2728.260935][T28043] vhci_hcd vhci_hcd.0: Device attached [ 2728.267931][ T29] audit: type=1326 audit(1740918007.268:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28038 comm="syz.0.6215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40ab8d169 code=0x7ffc0000 [ 2728.292526][T25785] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2728.699631][ T29] audit: type=1326 audit(1740918007.298:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28038 comm="syz.0.6215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc40ab8d169 code=0x7ffc0000 [ 2729.310735][T25785] usb 4-1: Using ep0 maxpacket: 16 [ 2729.373261][ T29] audit: type=1326 audit(1740918007.298:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28038 comm="syz.0.6215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40ab8d169 code=0x7ffc0000 [ 2729.562102][T28057] netlink: 348 bytes leftover after parsing attributes in process `syz.5.6219'. [ 2729.939145][T25785] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2729.977915][T25785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2729.998848][ T29] audit: type=1326 audit(1740918007.298:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28038 comm="syz.0.6215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fc40ab8d169 code=0x7ffc0000 [ 2730.030727][T25785] usb 4-1: Product: syz [ 2730.533841][T25785] usb 4-1: Manufacturer: syz [ 2730.538506][T25785] usb 4-1: SerialNumber: syz [ 2730.611665][T25785] usb 4-1: config 0 descriptor?? [ 2730.621455][T25785] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2730.629656][T25785] usb 4-1: Detected FT232H [ 2730.652257][ T29] audit: type=1326 audit(1740918007.298:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28038 comm="syz.0.6215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40ab8d169 code=0x7ffc0000 [ 2730.826440][T28044] vhci_hcd: connection reset by peer [ 2730.831896][T25785] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2730.860671][T25785] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2730.860858][ T7016] vhci_hcd: stop threads [ 2730.880763][T25785] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 2730.960200][ T7016] vhci_hcd: release socket [ 2730.977800][T25785] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2730.989472][T25785] usb 4-1: USB disconnect, device number 42 [ 2731.005934][ T7016] vhci_hcd: disconnect device [ 2731.596324][T25785] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2731.811663][T28064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2732.350895][T25785] ftdi_sio 4-1:0.0: device disconnected [ 2732.494573][T28069] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 2732.501152][T28069] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2732.561740][T28069] vhci_hcd vhci_hcd.0: Device attached [ 2732.741076][ T5898] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2732.930867][ T5959] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 2732.940778][ T5898] usb 6-1: Using ep0 maxpacket: 16 [ 2733.917239][T25457] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 2733.928133][ T5898] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2733.939799][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2733.950353][ T5898] usb 6-1: Product: syz [ 2733.968806][ T5898] usb 6-1: Manufacturer: syz [ 2734.254065][T25457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2734.307045][ T5898] usb 6-1: SerialNumber: syz [ 2734.357150][T25457] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2734.406223][T25457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2734.422413][T28070] vhci_hcd: connection reset by peer [ 2734.422823][ T5898] usb 6-1: config 0 descriptor?? [ 2734.442494][T26379] vhci_hcd: stop threads [ 2734.446993][T26379] vhci_hcd: release socket [ 2734.467701][T26379] vhci_hcd: disconnect device [ 2734.621044][T25457] usb 2-1: config 0 descriptor?? [ 2734.629705][T28080] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2734.644020][ T5898] usb 6-1: can't set config #0, error -71 [ 2734.691431][ T5898] usb 6-1: USB disconnect, device number 27 [ 2735.892194][T28099] Cannot find del_set index 0 as target [ 2736.321198][T28101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2736.341975][T25457] elan 0003:04F3:0755.0038: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 2736.379491][T28101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2737.037271][T25457] usb 2-1: USB disconnect, device number 44 [ 2738.310923][ T5959] vhci_hcd: vhci_device speed not set [ 2738.382708][T28106] netlink: 348 bytes leftover after parsing attributes in process `syz.8.6236'. [ 2738.507397][T28113] netlink: 'syz.3.6238': attribute type 9 has an invalid length. [ 2738.548899][T28113] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6238'. [ 2742.257104][T28149] geneve0: entered allmulticast mode [ 2742.321010][ T5898] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2742.652584][ T5898] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2742.676274][ T5898] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 2742.689524][ T5898] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2742.705349][ T5898] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2742.940423][ T5898] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2743.312950][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2743.350893][ T5898] usb 4-1: Product: syz [ 2743.368635][ T5898] usb 4-1: Manufacturer: syz [ 2743.419722][T28162] input: syz1 as /devices/virtual/input/input40 [ 2743.466130][ T5898] cdc_wdm 4-1:1.0: skipping garbage [ 2743.477609][ T5898] cdc_wdm 4-1:1.0: skipping garbage [ 2743.501084][ T5898] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2743.777878][ T29] audit: type=1326 audit(1740918023.248:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28144 comm="syz.3.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348a98d169 code=0x7ffc0000 [ 2743.825479][T28170] netlink: 34 bytes leftover after parsing attributes in process `syz.7.6254'. [ 2743.849359][ T29] audit: type=1326 audit(1740918023.248:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28144 comm="syz.3.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f348a98d169 code=0x7ffc0000 [ 2743.890429][T28170] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6254'. [ 2743.903754][T17115] usb 4-1: USB disconnect, device number 43 [ 2743.931050][ T29] audit: type=1326 audit(1740918023.248:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28144 comm="syz.3.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348a98d169 code=0x7ffc0000 [ 2744.036852][ T29] audit: type=1326 audit(1740918023.248:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28144 comm="syz.3.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f348a98d169 code=0x7ffc0000 [ 2744.820336][ T5959] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 2744.980737][T14835] Bluetooth: hci5: command 0x0406 tx timeout [ 2745.196384][ T29] audit: type=1326 audit(1740918023.378:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28144 comm="syz.3.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348a98d169 code=0x7ffc0000 [ 2745.227242][T28168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2745.293298][ T5959] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2745.330773][ T29] audit: type=1326 audit(1740918023.378:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28144 comm="syz.3.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348a98d169 code=0x7ffc0000 [ 2745.354819][ T5959] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2745.377645][ T5959] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2745.431603][ T5959] usb 9-1: config 0 descriptor?? [ 2745.505846][T28184] netlink: 'syz.5.6258': attribute type 10 has an invalid length. [ 2745.608379][T28172] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2746.636336][ T5959] elan 0003:04F3:0755.0039: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 2746.716108][T28192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2747.081881][T28172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2747.258797][T28172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2748.180956][T25457] usb 9-1: reset full-speed USB device number 47 using dummy_hcd [ 2750.919098][ T25] usb 9-1: USB disconnect, device number 47 [ 2751.630878][T28229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2751.770180][T28230] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6272'. [ 2752.221662][T28237] serio: Serial port ptm0 [ 2753.481802][T28248] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2758.978598][T28293] loop7: detected capacity change from 0 to 512 [ 2758.996820][T28293] EXT4-fs: Ignoring removed oldalloc option [ 2759.051576][T28293] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 2759.088052][T28293] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.6291: Parent and EA inode have the same ino 15 [ 2759.152847][T28293] EXT4-fs (loop7): 1 orphan inode deleted [ 2759.160332][T28293] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2759.253409][T28299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2759.490354][T28293] EXT4-fs error (device loop7): ext4_lookup:1817: inode #2: comm syz.7.6291: deleted inode referenced: 15 [ 2759.667306][T28304] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6291'. [ 2759.874060][ T5898] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2760.760917][ T5898] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2760.780636][ T5898] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2760.818429][T20500] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2760.830770][ T5898] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2760.861044][ T5898] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2760.972564][ T5898] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2761.018729][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2761.050708][ T5898] usb 4-1: Product: syz [ 2761.054948][ T5898] usb 4-1: Manufacturer: syz [ 2761.146322][ T5898] cdc_wdm 4-1:1.0: skipping garbage [ 2761.167727][ T5898] cdc_wdm 4-1:1.0: skipping garbage [ 2761.192318][ T5898] cdc_wdm 4-1:1.0: skipping garbage [ 2761.234455][ T5898] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2761.674873][ T29] audit: type=1326 audit(1740918041.148:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28303 comm="syz.3.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348a98d169 code=0x7ffc0000 [ 2762.301084][ T29] audit: type=1326 audit(1740918041.148:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28303 comm="syz.3.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348a98d169 code=0x7ffc0000 [ 2762.569924][ T29] audit: type=1326 audit(1740918041.148:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28303 comm="syz.3.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f348a98d169 code=0x7ffc0000 [ 2762.589453][ T5898] usb 4-1: USB disconnect, device number 44 [ 2762.689160][T28337] netlink: 'syz.8.6305': attribute type 10 has an invalid length. [ 2762.844523][ T29] audit: type=1326 audit(1740918041.148:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28303 comm="syz.3.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348a98d169 code=0x7ffc0000 [ 2763.232906][ T29] audit: type=1326 audit(1740918041.148:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28303 comm="syz.3.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f348a98d169 code=0x7ffc0000 [ 2766.921983][T28363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2768.646709][T28371] geneve0: entered allmulticast mode [ 2769.487776][T28386] netlink: 'syz.8.6322': attribute type 10 has an invalid length. [ 2769.504513][ T8] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2770.451998][ T8] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2770.616996][ T8] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2770.632876][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2770.656594][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2770.750915][ T8] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2770.760926][ T8] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2770.770343][ T8] usb 6-1: Product: syz [ 2770.775247][ T8] usb 6-1: Manufacturer: syz [ 2771.076989][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 2771.092827][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 2771.132597][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 2771.168332][ T8] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2771.421031][ T29] audit: type=1326 audit(1740918050.898:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28379 comm="syz.5.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d818d169 code=0x7ffc0000 [ 2771.572812][ T25] usb 6-1: USB disconnect, device number 28 [ 2771.890835][ T29] audit: type=1326 audit(1740918050.948:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28379 comm="syz.5.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f81d818d169 code=0x7ffc0000 [ 2771.913368][ C0] vkms_vblank_simulate: vblank timer overrun [ 2772.481722][ T29] audit: type=1326 audit(1740918050.948:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28379 comm="syz.5.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d818d169 code=0x7ffc0000 [ 2773.162535][ T29] audit: type=1326 audit(1740918050.948:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28379 comm="syz.5.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d818d169 code=0x7ffc0000 [ 2773.185327][ C0] vkms_vblank_simulate: vblank timer overrun [ 2773.294499][ T29] audit: type=1326 audit(1740918050.958:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28379 comm="syz.5.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f81d818d169 code=0x7ffc0000 [ 2773.316910][ C0] vkms_vblank_simulate: vblank timer overrun [ 2773.667163][T28414] Cannot find del_set index 0 as target [ 2774.263292][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.269694][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.356255][ T29] audit: type=1326 audit(1740918051.048:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28379 comm="syz.5.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d818d169 code=0x7ffc0000 [ 2775.490207][ T29] audit: type=1326 audit(1740918051.048:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28379 comm="syz.5.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d818d169 code=0x7ffc0000 [ 2776.914005][T28433] Cannot find del_set index 0 as target [ 2778.390777][T28441] netlink: 'syz.5.6339': attribute type 10 has an invalid length. [ 2779.702195][T28444] input: syz1 as /devices/virtual/input/input41 [ 2780.311930][T25457] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2780.820664][T25457] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2780.829322][T25457] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2781.312250][T25457] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2781.337827][T25457] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 2781.373260][T25457] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 2781.452540][T25457] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2781.478222][T25457] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2781.563410][T25457] usb 6-1: Product: syz [ 2781.583922][T25457] usb 6-1: Manufacturer: syz [ 2782.110254][T25457] cdc_wdm 6-1:1.0: skipping garbage [ 2782.131305][T25457] cdc_wdm 6-1:1.0: skipping garbage [ 2782.180087][T25457] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2782.770428][ T29] audit: type=1326 audit(1740918062.238:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28450 comm="syz.5.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d818d169 code=0x7ffc0000 [ 2783.067486][ T29] audit: type=1326 audit(1740918062.238:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28450 comm="syz.5.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f81d818d169 code=0x7ffc0000 [ 2783.090166][ T29] audit: type=1326 audit(1740918062.238:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28450 comm="syz.5.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d818d169 code=0x7ffc0000 [ 2783.255887][ T8] usb 6-1: USB disconnect, device number 29 [ 2783.285100][ T29] audit: type=1326 audit(1740918062.298:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28450 comm="syz.5.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f81d818d169 code=0x7ffc0000 [ 2783.968635][ T29] audit: type=1326 audit(1740918062.728:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28450 comm="syz.5.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d818d169 code=0x7ffc0000 [ 2784.069730][ T29] audit: type=1326 audit(1740918062.728:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28450 comm="syz.5.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d818d169 code=0x7ffc0000 [ 2785.404152][T28490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6356'. [ 2785.479163][T28491] netlink: 'syz.7.6358': attribute type 39 has an invalid length. [ 2788.098254][T28526] ISOFS: Unable to identify CD-ROM format. [ 2788.262039][ T5959] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 2789.065722][T28534] bpq0: left allmulticast mode [ 2789.066734][ T5959] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2789.421471][ T5959] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2789.472211][ T5959] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2789.486393][T28536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6371'. [ 2789.510648][ T5959] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 2789.578075][ T5959] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 2789.625649][ T5959] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2789.692189][ T5959] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2789.700225][ T5959] usb 9-1: Product: syz [ 2790.236134][ T5959] usb 9-1: Manufacturer: syz [ 2790.299805][ T5959] cdc_wdm 9-1:1.0: skipping garbage [ 2790.381931][T28547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6374'. [ 2790.783559][ T5959] cdc_wdm 9-1:1.0: skipping garbage [ 2790.827748][ T5959] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2790.869171][ T29] audit: type=1326 audit(1740918070.318:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28523 comm="syz.8.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b7d8d169 code=0x7ffc0000 [ 2791.342955][ T29] audit: type=1326 audit(1740918070.318:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28523 comm="syz.8.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fd1b7d8d169 code=0x7ffc0000 [ 2791.640779][ T29] audit: type=1326 audit(1740918070.318:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28523 comm="syz.8.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b7d8d169 code=0x7ffc0000 [ 2791.665210][ T29] audit: type=1326 audit(1740918070.318:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28523 comm="syz.8.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd1b7d8d169 code=0x7ffc0000 [ 2792.138233][ T8] usb 9-1: USB disconnect, device number 48 [ 2793.902108][T28569] serio: Serial port ptm0 [ 2796.781838][T28589] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6385'. [ 2800.684228][T28630] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 2800.690799][T28630] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2800.746641][T28630] vhci_hcd vhci_hcd.0: Device attached [ 2800.763529][T28638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2800.940784][T25785] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2800.980670][ T5898] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 2801.016013][ T25] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 2801.110735][T25785] usb 4-1: Using ep0 maxpacket: 16 [ 2801.128794][T25785] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2801.147874][T25785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2801.156761][T25785] usb 4-1: Product: syz [ 2801.169581][T25785] usb 4-1: Manufacturer: syz [ 2801.182981][T25785] usb 4-1: SerialNumber: syz [ 2801.201228][T25785] usb 4-1: config 0 descriptor?? [ 2801.221522][ T25] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2801.222578][T25785] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2801.239400][ T25] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2801.243556][ T25] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2801.258077][T25785] usb 4-1: Detected FT232H [ 2801.288982][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2801.325916][ T25] usb 9-1: SerialNumber: syz [ 2801.761080][T25785] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2801.767203][ T25] usb 9-1: 0:2 : does not exist [ 2801.770457][T28631] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 2801.776916][ T25] usb 9-1: unit 255 not found! [ 2801.801410][T25785] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2801.904591][ T35] vhci_hcd: stop threads [ 2801.915664][ T35] vhci_hcd: release socket [ 2801.934498][ T25] usb 9-1: USB disconnect, device number 49 [ 2801.963301][ T35] vhci_hcd: disconnect device [ 2802.053166][T25785] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 2802.110448][T25785] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2802.120551][ T29] audit: type=1326 audit(1740918081.578:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28603 comm="syz.7.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2802.177145][T25785] usb 4-1: USB disconnect, device number 45 [ 2802.196908][ T29] audit: type=1326 audit(1740918081.598:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28603 comm="syz.7.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2802.219925][T25785] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2802.236031][T25785] ftdi_sio 4-1:0.0: device disconnected [ 2804.069662][T28655] geneve0: left allmulticast mode [ 2804.161247][T28662] geneve0: entered allmulticast mode [ 2806.241044][ T5898] vhci_hcd: vhci_device speed not set [ 2808.489965][T28690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2809.822953][T28708] netlink: 'syz.7.6423': attribute type 9 has an invalid length. [ 2809.897345][T28708] netlink: 244 bytes leftover after parsing attributes in process `syz.7.6423'. [ 2810.200457][ T5959] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2810.507206][T28714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2810.805590][ T5959] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2810.840844][ T5959] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2810.880637][ T5959] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2810.933180][ T5959] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2811.169475][ T5959] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2811.223486][ T5959] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2811.490409][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2811.871500][ T5959] usb 2-1: Product: syz [ 2811.876602][ T5959] usb 2-1: Manufacturer: syz [ 2812.269227][ T5959] cdc_wdm 2-1:1.0: skipping garbage [ 2812.299476][ T5959] cdc_wdm 2-1:1.0: skipping garbage [ 2812.320899][ T5959] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2812.326977][ T5959] cdc_wdm 2-1:1.0: Unknown control protocol [ 2812.571196][T28741] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6432'. [ 2813.098982][ T29] audit: type=1326 audit(1740918092.558:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28712 comm="syz.1.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2813.177566][ T29] audit: type=1326 audit(1740918092.558:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28712 comm="syz.1.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2813.201780][ T29] audit: type=1326 audit(1740918092.558:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28712 comm="syz.1.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2813.784366][ T29] audit: type=1326 audit(1740918092.568:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28712 comm="syz.1.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2813.807568][ T29] audit: type=1326 audit(1740918092.568:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28712 comm="syz.1.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2813.844664][T28075] usb 2-1: USB disconnect, device number 45 [ 2813.863439][ T29] audit: type=1326 audit(1740918093.328:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28712 comm="syz.1.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2813.979500][ T29] audit: type=1326 audit(1740918093.328:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28712 comm="syz.1.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2814.411081][T28759] Cannot find del_set index 0 as target [ 2815.399585][T28761] overlayfs: overlapping lowerdir path [ 2818.160968][T14835] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2818.994847][T28792] ISOFS: Unable to identify CD-ROM format. [ 2822.490702][ T5898] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2823.955215][ T5898] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2823.980628][ T5898] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2824.040671][ T5898] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2824.150800][ T5898] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2824.163666][ T5898] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2824.190867][ T5898] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2824.200304][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2824.209680][ T5898] usb 2-1: Product: syz [ 2824.214187][ T5898] usb 2-1: Manufacturer: syz [ 2824.228089][ T5898] cdc_wdm 2-1:1.0: skipping garbage [ 2824.445200][ T29] audit: type=1326 audit(1740918103.918:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28808 comm="syz.1.6452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2824.467545][ C0] vkms_vblank_simulate: vblank timer overrun [ 2824.543761][ T29] audit: type=1326 audit(1740918103.918:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28808 comm="syz.1.6452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2824.569964][ T5898] cdc_wdm 2-1:1.0: skipping garbage [ 2824.754481][ T29] audit: type=1326 audit(1740918103.918:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28808 comm="syz.1.6452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2824.801509][ T5898] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2824.819989][ T29] audit: type=1326 audit(1740918103.918:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28808 comm="syz.1.6452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2824.859730][ T5898] cdc_wdm 2-1:1.0: Unknown control protocol [ 2824.876146][ T5898] usb 2-1: USB disconnect, device number 46 [ 2824.954929][ T29] audit: type=1326 audit(1740918103.918:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28808 comm="syz.1.6452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2825.104660][ T29] audit: type=1326 audit(1740918104.258:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28808 comm="syz.1.6452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2825.650700][ T29] audit: type=1326 audit(1740918104.258:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28808 comm="syz.1.6452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2825.692964][T28839] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6459'. [ 2826.189851][T28839] bond_slave_0: entered promiscuous mode [ 2826.195986][T28839] bond_slave_1: entered promiscuous mode [ 2826.392692][T28839] macvtap1: entered promiscuous mode [ 2826.436668][T28839] bond0: entered promiscuous mode [ 2826.550888][T28839] mac80211_hwsim hwsim61 wlan1: entered promiscuous mode [ 2826.683577][T28839] team0: entered promiscuous mode [ 2826.688721][T28839] team_slave_0: entered promiscuous mode [ 2826.800061][T28839] team_slave_1: entered promiscuous mode [ 2826.819366][T28839] macvtap1: entered allmulticast mode [ 2826.857514][T28853] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6463'. [ 2826.866965][T28839] bond0: entered allmulticast mode [ 2826.888096][T28839] bond_slave_0: entered allmulticast mode [ 2827.031746][T28859] netlink: 'syz.7.6465': attribute type 10 has an invalid length. [ 2827.506873][T28839] bond_slave_1: entered allmulticast mode [ 2827.513079][T28839] mac80211_hwsim hwsim61 wlan1: entered allmulticast mode [ 2827.523103][T28839] team0: entered allmulticast mode [ 2827.528451][T28839] team_slave_0: entered allmulticast mode [ 2827.539136][T28839] team_slave_1: entered allmulticast mode [ 2827.572571][T28839] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 2827.727916][T28841] bpq0: entered allmulticast mode [ 2828.220866][T28864] Cannot find del_set index 0 as target [ 2828.822463][T28867] serio: Serial port ptm0 [ 2831.520685][T27399] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2831.913575][T27399] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2832.022000][T27399] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2832.056582][T27399] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2832.101988][T27399] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2832.401577][T27399] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2832.470501][T27399] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2832.479713][T27399] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2832.544814][T27399] usb 2-1: Product: syz [ 2832.552021][T27399] usb 2-1: Manufacturer: syz [ 2832.563782][T27399] cdc_wdm 2-1:1.0: skipping garbage [ 2832.570331][T27399] cdc_wdm 2-1:1.0: skipping garbage [ 2832.581809][T27399] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2832.587902][T27399] cdc_wdm 2-1:1.0: Unknown control protocol [ 2832.804471][ T29] audit: type=1326 audit(1740918112.278:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28882 comm="syz.1.6475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2833.032297][ T29] audit: type=1326 audit(1740918112.278:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28882 comm="syz.1.6475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2833.056350][ T29] audit: type=1326 audit(1740918112.278:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28882 comm="syz.1.6475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2833.352945][ T5959] usb 2-1: USB disconnect, device number 47 [ 2833.459728][ T29] audit: type=1326 audit(1740918112.278:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28882 comm="syz.1.6475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2833.482217][ C0] vkms_vblank_simulate: vblank timer overrun [ 2834.553626][ T29] audit: type=1326 audit(1740918112.828:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28882 comm="syz.1.6475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2834.717221][T28907] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6480'. [ 2835.091126][T28917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6483'. [ 2835.202634][T28921] netlink: 'syz.5.6482': attribute type 10 has an invalid length. [ 2835.215646][ T29] audit: type=1326 audit(1740918112.828:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28882 comm="syz.1.6475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf58d169 code=0x7ffc0000 [ 2835.720942][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2835.727331][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2835.845159][T28924] netlink: 'syz.7.6484': attribute type 1 has an invalid length. [ 2836.226689][T28930] netlink: 'syz.5.6487': attribute type 10 has an invalid length. [ 2837.320982][T28944] netlink: 34 bytes leftover after parsing attributes in process `syz.8.6491'. [ 2837.351108][T28944] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6491'. [ 2838.263229][T28954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2839.651135][T28970] loop8: detected capacity change from 0 to 512 [ 2840.010253][T28970] EXT4-fs: Ignoring removed oldalloc option [ 2840.032941][T28970] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 2840.105663][T28970] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.6497: Parent and EA inode have the same ino 15 [ 2840.230078][T28970] EXT4-fs (loop8): 1 orphan inode deleted [ 2840.331736][T28970] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2840.365792][T28977] netlink: 'syz.5.6499': attribute type 10 has an invalid length. [ 2840.546873][T28970] EXT4-fs error (device loop8): ext4_lookup:1817: inode #2: comm syz.8.6497: deleted inode referenced: 15 [ 2841.170384][T28981] netlink: 'syz.0.6500': attribute type 1 has an invalid length. [ 2841.206206][T28970] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6497'. [ 2841.503657][T20016] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2841.708630][T28990] serio: Serial port ptm0 [ 2843.321668][T29000] ISOFS: Unable to identify CD-ROM format. [ 2843.697917][ T29] audit: type=1800 audit(1740918123.148:1010): pid=29002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6507" name="bus" dev="overlay" ino=413 res=0 errno=0 [ 2844.380990][T29007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2844.418450][ T29] audit: type=1326 audit(1740918123.888:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29008 comm="syz.7.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2844.440964][ C0] vkms_vblank_simulate: vblank timer overrun [ 2844.692879][T29013] netlink: 'syz.5.6513': attribute type 10 has an invalid length. [ 2844.721814][ T29] audit: type=1326 audit(1740918123.938:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29008 comm="syz.7.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2844.791950][ T29] audit: type=1326 audit(1740918123.948:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29008 comm="syz.7.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2845.191840][ T29] audit: type=1326 audit(1740918123.958:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29008 comm="syz.7.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2845.214782][ T29] audit: type=1326 audit(1740918123.958:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29008 comm="syz.7.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2846.071644][ T29] audit: type=1326 audit(1740918123.958:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29008 comm="syz.7.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2847.301718][T29026] netlink: 'syz.5.6515': attribute type 10 has an invalid length. [ 2847.821345][ T29] audit: type=1326 audit(1740918123.958:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29008 comm="syz.7.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2847.858876][ T29] audit: type=1326 audit(1740918123.958:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29008 comm="syz.7.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2847.982436][ T29] audit: type=1326 audit(1740918123.958:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29008 comm="syz.7.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f15fa78d169 code=0x7ffc0000 [ 2848.004911][ C0] vkms_vblank_simulate: vblank timer overrun [ 2848.675994][T29039] xt_SECMARK: invalid mode: 2 [ 2850.157109][T27399] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2850.395021][T27399] usb 4-1: Using ep0 maxpacket: 16 [ 2850.409223][T27399] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2850.439942][T27399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2850.505356][T27399] usb 4-1: Product: syz [ 2850.560805][T27399] usb 4-1: Manufacturer: syz [ 2850.595942][T27399] usb 4-1: SerialNumber: syz [ 2850.634474][T27399] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2850.644997][T27399] r8152-cfgselector 4-1: config 0 descriptor?? [ 2851.373756][T29064] overlayfs: overlapping lowerdir path [ 2851.417420][T29066] netlink: 'syz.0.6527': attribute type 10 has an invalid length. [ 2851.518314][T25457] r8152-cfgselector 4-1: USB disconnect, device number 46 [ 2851.618439][T24197] Bluetooth: hci0: sending frame failed (-49) [ 2851.632346][T14835] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 2851.658674][T29069] netlink: 'syz.7.6528': attribute type 9 has an invalid length. [ 2851.666587][T29069] netlink: 244 bytes leftover after parsing attributes in process `syz.7.6528'. [ 2857.551223][T29122] netlink: 348 bytes leftover after parsing attributes in process `syz.5.6543'. [ 2859.661005][T29141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6549'. [ 2861.213808][T29145] netlink: 'syz.7.6553': attribute type 1 has an invalid length. [ 2861.221660][T29145] netlink: 134744 bytes leftover after parsing attributes in process `syz.7.6553'. [ 2861.292896][T29148] netlink: 'syz.7.6554': attribute type 1 has an invalid length. [ 2861.517892][T29152] serio: Serial port ptm0 [ 2861.604935][T29153] netlink: 34 bytes leftover after parsing attributes in process `syz.0.6551'. [ 2861.621584][T29153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6551'. [ 2868.103147][T29201] ISOFS: Unable to identify CD-ROM format. [ 2874.381888][T29247] netlink: 'syz.7.6580': attribute type 9 has an invalid length. [ 2874.422468][T29247] netlink: 244 bytes leftover after parsing attributes in process `syz.7.6580'. [ 2874.474573][T29250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6583'. [ 2878.790993][T29284] serio: Serial port ptm0 [ 2879.256859][T29286] netlink: 'syz.3.6590': attribute type 10 has an invalid length. [ 2880.828079][T29299] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6596'. [ 2883.008699][T29317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2884.259209][T29327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2886.138674][T29339] ISOFS: Unable to identify CD-ROM format. [ 2886.245116][T29338] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2888.212823][T29356] pim6reg1: entered promiscuous mode [ 2888.218140][T29356] pim6reg1: entered allmulticast mode [ 2888.304767][T29358] netlink: 'syz.0.6613': attribute type 9 has an invalid length. [ 2888.364923][T29358] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6613'. [ 2888.995199][T29364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6614'. [ 2889.435945][T29368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2889.778483][T29372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6617'. [ 2890.416838][T29378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6620'. [ 2890.481139][T29378] bond_slave_0: entered promiscuous mode [ 2890.486800][T29378] bond_slave_1: entered promiscuous mode [ 2890.543803][T29378] macvtap1: entered promiscuous mode [ 2890.549475][T29378] bond0: entered promiscuous mode [ 2890.568820][T29381] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6619'. [ 2890.617494][T29378] team0: entered promiscuous mode [ 2890.640872][T29378] team_slave_0: entered promiscuous mode [ 2890.648366][T29378] team_slave_1: entered promiscuous mode [ 2892.290926][T29378] macvtap1: entered allmulticast mode [ 2892.311277][T29378] bond0: entered allmulticast mode [ 2892.324365][T29378] bond_slave_0: entered allmulticast mode [ 2892.330085][T29378] bond_slave_1: entered allmulticast mode [ 2892.342119][T29378] team0: entered allmulticast mode [ 2892.360791][T29378] team_slave_0: entered allmulticast mode [ 2892.367124][T29378] team_slave_1: entered allmulticast mode [ 2892.406754][T29378] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 2892.415595][T29389] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2892.426269][T29389] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2893.722645][T29407] Bluetooth: hci5: command 0x0406 tx timeout [ 2895.166269][T29413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2895.858282][T28779] Bluetooth: hci4: command 0x0405 tx timeout [ 2896.211792][T29424] geneve0: left allmulticast mode [ 2896.249830][T29424] macvtap1: left allmulticast mode [ 2896.255500][T29424] bond0: left allmulticast mode [ 2896.262248][T29424] bond_slave_0: left allmulticast mode [ 2896.268135][T29424] bond_slave_1: left allmulticast mode [ 2896.274080][T29424] team0: left allmulticast mode [ 2896.279290][T29424] team_slave_0: left allmulticast mode [ 2896.285348][T29424] team_slave_1: left allmulticast mode [ 2897.143898][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.150331][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2897.455998][T29429] netlink: 'syz.1.6632': attribute type 10 has an invalid length. [ 2898.892410][T29435] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6635'. [ 2900.471162][T28075] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2900.692122][T28075] usb 4-1: Using ep0 maxpacket: 16 [ 2900.699420][T28075] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2900.717785][T28075] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2900.797861][T28075] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2900.809127][T28075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2900.846291][T28075] usb 4-1: Product: syz [ 2900.850505][T28075] usb 4-1: Manufacturer: syz [ 2900.860749][T28075] usb 4-1: SerialNumber: syz [ 2901.009459][T29452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2901.221689][T28075] usb 4-1: 0:2 : does not exist [ 2901.249659][T28075] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2901.275478][T28075] usb 4-1: USB disconnect, device number 47 [ 2904.180677][T29477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6646'. [ 2904.690734][T29479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6648'. [ 2905.231319][T29482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6650'. [ 2905.272341][T29485] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6649'. [ 2908.848678][T29500] ip6gre1: left allmulticast mode [ 2910.059206][T29508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2910.411738][T29514] netlink: 'syz.0.6660': attribute type 10 has an invalid length. [ 2911.034738][T15602] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 2911.282048][T15602] usb 9-1: Using ep0 maxpacket: 16 [ 2911.328493][T15602] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2911.360833][T15602] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2911.571442][T15602] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2911.617658][T15602] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2911.647998][T15602] usb 9-1: Product: syz [ 2911.668274][T15602] usb 9-1: Manufacturer: syz [ 2911.698629][T15602] usb 9-1: SerialNumber: syz [ 2911.972381][T15602] usb 9-1: 0:2 : does not exist [ 2912.367628][T15602] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 2912.686339][T29528] ISOFS: Unable to identify CD-ROM format. [ 2913.032146][T15602] usb 9-1: USB disconnect, device number 50 [ 2913.850254][T29534] loop8: detected capacity change from 0 to 512 [ 2913.869640][T29534] EXT4-fs: Ignoring removed oldalloc option [ 2913.950029][T29534] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 2914.093673][T29534] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.6668: Parent and EA inode have the same ino 15 [ 2914.693410][T29534] EXT4-fs (loop8): 1 orphan inode deleted [ 2914.791320][T29534] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2916.198657][T29555] EXT4-fs error (device loop8): ext4_lookup:1817: inode #2: comm syz.8.6668: deleted inode referenced: 15 [ 2916.425168][T29556] netlink: 'syz.5.6673': attribute type 10 has an invalid length. [ 2916.873407][T29562] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6676'. [ 2918.086283][T20016] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2918.137613][T29568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6677'. [ 2918.225695][T29568] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6677'. [ 2918.248653][T29568] vlan0: entered allmulticast mode [ 2919.095763][ T5898] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2920.000640][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 2920.028700][ T5898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2920.039025][ T5898] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2920.061186][ T5898] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2920.070262][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2920.438229][ T5898] usb 2-1: Product: syz [ 2920.833902][ T5898] usb 2-1: Manufacturer: syz [ 2920.849047][ T5898] usb 2-1: SerialNumber: syz [ 2921.581179][ T5898] usb 2-1: 0:2 : does not exist [ 2921.609096][ T5898] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2921.751533][T29604] netlink: 'syz.0.6689': attribute type 10 has an invalid length. [ 2922.150336][ T5898] usb 2-1: USB disconnect, device number 48 [ 2922.517315][T29612] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6691'. [ 2924.341141][T24197] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2924.341730][T28779] Bluetooth: hci0: command 0x1003 tx timeout [ 2925.289972][T29634] netlink: 'syz.0.6699': attribute type 9 has an invalid length. [ 2925.302217][T29634] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6699'. [ 2925.482167][T29641] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6701'. [ 2925.499111][T29641] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6701'. [ 2925.528546][T29643] netlink: 'syz.3.6702': attribute type 9 has an invalid length. [ 2925.536577][T29643] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6702'. [ 2927.192556][T29655] netlink: 'syz.5.6706': attribute type 10 has an invalid length. [ 2927.593580][T29656] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6705'. [ 2927.644929][T29641] vlan0: entered allmulticast mode [ 2927.650058][T29641] bridge_slave_0: entered allmulticast mode [ 2929.960807][T15602] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 2931.374736][T29675] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6711'. [ 2931.533703][T15602] usb 4-1: device descriptor read/all, error -71 [ 2931.799621][T29683] netlink: 'syz.3.6717': attribute type 9 has an invalid length. [ 2931.842209][T29683] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6717'. [ 2934.271409][T29703] netlink: 'syz.5.6723': attribute type 10 has an invalid length. [ 2934.963942][T29706] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6724'. [ 2934.974198][T29706] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6724'. [ 2940.039324][T29746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2940.282240][ T5898] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2940.935513][ T5898] usb 6-1: Using ep0 maxpacket: 16 [ 2940.973113][ T5898] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2940.985673][ T5898] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2941.072526][ T5898] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2941.171264][T29752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2941.619106][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2941.662624][ T5898] usb 6-1: Product: syz [ 2941.690654][ T5898] usb 6-1: Manufacturer: syz [ 2942.212669][ T5898] usb 6-1: SerialNumber: syz [ 2942.321700][T29759] netlink: 'syz.1.6739': attribute type 10 has an invalid length. [ 2942.903129][ T5898] usb 6-1: can't set config #1, error -71 [ 2942.919045][ T5898] usb 6-1: USB disconnect, device number 30 [ 2944.128430][T29780] fuse: Bad value for 'user_id' [ 2944.140767][T29780] fuse: Bad value for 'user_id' [ 2945.447050][T29794] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6749'. [ 2945.860293][T29795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6750'. [ 2945.944165][T29795] bond_slave_0: entered promiscuous mode [ 2945.949862][T29795] bond_slave_1: entered promiscuous mode [ 2946.038432][T29795] macvtap1: entered promiscuous mode [ 2946.262138][T29795] bond0: entered promiscuous mode [ 2946.267390][T29795] team0: entered promiscuous mode [ 2946.292135][T29795] team_slave_0: entered promiscuous mode [ 2946.298055][T29795] team_slave_1: entered promiscuous mode [ 2946.322268][T29795] macvtap1: entered allmulticast mode [ 2946.340656][T29795] bond0: entered allmulticast mode [ 2946.644371][T29795] bond_slave_0: entered allmulticast mode [ 2947.039264][T29795] bond_slave_1: entered allmulticast mode [ 2947.073211][T29795] team0: entered allmulticast mode [ 2947.090628][T29795] team_slave_0: entered allmulticast mode [ 2947.120663][T29795] team_slave_1: entered allmulticast mode [ 2947.163776][T29795] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 2949.151548][T29825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2953.060394][T29849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6765'. [ 2953.107045][T29849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6765'. [ 2953.945087][T29857] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6767'. [ 2955.206028][T29869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6772'. [ 2955.256940][T29869] bond_slave_0: entered promiscuous mode [ 2955.266220][T29869] macvtap1: entered promiscuous mode [ 2955.294903][T29869] bond0: entered promiscuous mode [ 2955.306236][T29869] team0: entered promiscuous mode [ 2955.319539][T29869] team_slave_0: entered promiscuous mode [ 2955.559204][T29869] team_slave_1: entered promiscuous mode [ 2955.842966][T29875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2956.242230][T29869] macvtap1: entered allmulticast mode [ 2956.247679][T29869] bond0: entered allmulticast mode [ 2956.354784][T29869] bond_slave_0: entered allmulticast mode [ 2956.396209][T29869] team0: entered allmulticast mode [ 2956.401595][T29869] team_slave_0: entered allmulticast mode [ 2956.407464][T29869] team_slave_1: entered allmulticast mode [ 2956.414681][T29869] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 2957.735096][T29900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2959.503006][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.509369][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2960.470887][T29915] ISOFS: Unable to identify CD-ROM format. [ 2961.996711][T29921] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6788'. [ 2962.242103][T29929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2963.855329][T29921] macvtap2: entered promiscuous mode [ 2963.960103][T29921] macvtap2: entered allmulticast mode [ 2964.011797][T29921] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 2971.264542][T29993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6809'. [ 2971.274505][T29993] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6809'. [ 2971.604371][T29997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2972.449845][T30006] netlink: 'syz.1.6813': attribute type 9 has an invalid length. [ 2972.480966][T30006] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6813'. [ 2973.380313][T30012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2975.165815][T30020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6818'. [ 2975.686767][T30022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6817'. [ 2977.915825][T30035] overlayfs: overlapping lowerdir path [ 2978.961388][T30046] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6826'. [ 2980.100755][T28779] Bluetooth: hci0: command 0x1003 tx timeout [ 2980.701012][T24197] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2981.650956][T30061] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6830'. [ 2982.236964][T30063] ISOFS: Unable to identify CD-ROM format. [ 2988.332742][T30103] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6843'. [ 2989.472409][T30112] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6846'. [ 2989.481551][T30112] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6846'. [ 2992.074073][T30120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2993.901382][T30136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6853'. [ 2994.731840][T30140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6854'. [ 2994.742479][T30140] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6854'. [ 2994.791599][T30140] vlan2: entered allmulticast mode [ 2997.544609][T30154] netlink: 'syz.3.6858': attribute type 10 has an invalid length. [ 2998.515489][T30167] Cannot find del_set index 0 as target [ 2999.364723][T30171] Cannot find del_set index 0 as target [ 2999.849859][T30175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3000.547047][T30183] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6869'. [ 3000.567609][T30183] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6869'. [ 3001.312309][T30195] Mount JFS Failure: -22 [ 3001.342088][T28075] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 3001.485964][T28075] usb 6-1: device descriptor read/64, error -71 [ 3002.342153][T30200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6874'. [ 3002.453270][T28075] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 3002.883443][T28075] usb 6-1: device descriptor read/64, error -71 [ 3003.116059][T30204] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6876'. [ 3003.125584][T30204] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6876'. [ 3003.268522][T28075] usb usb6-port1: attempt power cycle [ 3004.047363][T28075] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 3004.260745][T28075] usb 6-1: device descriptor read/8, error -71 [ 3004.950648][T30218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6880'. [ 3005.651797][T30223] netlink: 165 bytes leftover after parsing attributes in process `syz.7.6881'. [ 3006.901354][T30232] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6885'. [ 3007.284983][T30233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6884'. [ 3007.301445][T30233] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6884'. [ 3007.365510][T30233] vlan2: entered allmulticast mode [ 3007.604760][T25457] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 3007.777507][T30245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3007.942962][T25457] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3008.323876][T25457] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3008.367532][T25457] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3008.926670][T30247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3008.934396][T25457] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3008.962436][T25457] usb 4-1: SerialNumber: syz [ 3009.185423][T25457] usb 4-1: 0:2 : does not exist [ 3009.205441][T25457] usb 4-1: unit 255 not found! [ 3009.274457][T25457] usb 4-1: USB disconnect, device number 50 [ 3010.322605][T30270] loop8: detected capacity change from 0 to 128 [ 3010.779607][T30270] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 3010.800992][T30270] ext4 filesystem being mounted at /479/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 3010.854871][T30273] ISOFS: Unable to identify CD-ROM format. [ 3011.002487][ T25] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 3011.200796][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 3011.258231][ T25] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 3011.380755][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3011.642400][ T25] usb 2-1: Product: syz [ 3011.826302][ T25] usb 2-1: Manufacturer: syz [ 3011.917453][ T25] usb 2-1: SerialNumber: syz [ 3012.032682][ T25] r8152-cfgselector 2-1: Unknown version 0x0000 [ 3012.038973][ T25] r8152-cfgselector 2-1: config 0 descriptor?? [ 3012.304697][T20016] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 3012.367902][T30291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6903'. [ 3012.401269][T30291] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6903'. [ 3012.600845][ T8] r8152-cfgselector 2-1: USB disconnect, device number 49 [ 3015.698202][T30317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6909'. [ 3017.953567][T30322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3018.068148][T30332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6914'. [ 3018.078700][T30332] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6914'. [ 3019.423012][T30343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6917'. [ 3019.432204][T30343] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6917'. [ 3020.026662][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.034208][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.163909][T30352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6919'. [ 3021.162292][T28075] IPVS: starting estimator thread 0... [ 3021.269204][T30354] IPVS: using max 18 ests per chain, 43200 per kthread [ 3021.615466][T30357] overlayfs: failed to clone lowerpath [ 3022.600941][T30380] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6927'. [ 3022.610048][T30380] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6927'. [ 3022.650827][T30380] vlan0: entered allmulticast mode [ 3024.293705][T30389] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6930'. [ 3024.302902][T30389] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6930'. [ 3027.053700][T30412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3028.052426][T30420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6942'. [ 3028.717067][T30423] pim6reg1: entered promiscuous mode [ 3028.741169][T30423] pim6reg1: entered allmulticast mode [ 3029.001910][ T8] IPVS: starting estimator thread 0... [ 3029.310857][T30427] IPVS: using max 18 ests per chain, 43200 per kthread [ 3029.478856][T30431] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6945'. [ 3030.265065][T30436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6946'. [ 3030.274278][T30436] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6946'. [ 3033.168437][T30447] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3033.178850][T30447] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3033.539883][T30442] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3033.983179][ T5929] kworker/0:7 (5929) used greatest stack depth: 12208 bytes left [ 3034.500983][T28779] Bluetooth: hci5: command 0x0406 tx timeout [ 3035.859769][T30475] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6957'. [ 3039.096941][T30500] netlink: 165 bytes leftover after parsing attributes in process `syz.8.6965'. [ 3045.540410][T30545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6979'. [ 3047.215818][T30564] Mount JFS Failure: -22 [ 3049.791048][T30573] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6989'. [ 3052.214098][T30592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3052.569788][T30599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3052.878843][T30603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3053.635132][T30613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3057.857262][T30635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7004'. [ 3058.475364][T30644] Mount JFS Failure: -22 [ 3060.724348][T30655] ISOFS: Unable to identify CD-ROM format. [ 3062.112060][T30667] overlayfs: failed to clone upperpath [ 3064.650277][T30684] loop8: detected capacity change from 0 to 512 [ 3064.772633][T30684] EXT4-fs: Ignoring removed oldalloc option [ 3064.795418][T30684] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 3064.823729][T30686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7018'. [ 3064.864634][T30684] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.7017: Parent and EA inode have the same ino 15 [ 3064.982969][T30684] EXT4-fs (loop8): 1 orphan inode deleted [ 3065.012808][T30684] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3065.287459][T30684] EXT4-fs error (device loop8): ext4_lookup:1817: inode #2: comm syz.8.7017: deleted inode referenced: 15 [ 3065.544072][T30694] xt_nfacct: accounting object `syz1' does not exists [ 3067.741464][T30698] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7017'. [ 3068.185922][T20016] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3069.143849][T29407] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3069.156737][T29407] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3069.172995][T29407] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3069.175832][T30711] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3069.187792][T30711] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3069.196214][T30711] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3069.204107][T30711] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 3069.211597][T30711] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3069.265829][T30711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3069.292340][T30711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3069.305417][T30711] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3069.313262][T30711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3070.160077][T30722] Mount JFS Failure: -22 [ 3071.018905][T30721] ISOFS: Unable to identify CD-ROM format. [ 3071.301295][T28779] Bluetooth: hci7: command tx timeout [ 3071.380761][T28779] Bluetooth: hci0: command tx timeout [ 3072.375046][T30730] ISOFS: Unable to identify CD-ROM format. [ 3072.782320][T30733] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7032'. [ 3073.197338][T30741] loop7: detected capacity change from 0 to 512 [ 3073.309192][T30741] EXT4-fs: Ignoring removed oldalloc option [ 3073.424688][T28779] Bluetooth: hci7: command tx timeout [ 3073.460838][T28779] Bluetooth: hci0: command tx timeout [ 3073.748169][T30751] ISOFS: Unable to identify CD-ROM format. [ 3074.040787][T30741] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 3074.530013][T30741] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.7035: Parent and EA inode have the same ino 15 [ 3074.563089][T30741] EXT4-fs (loop7): 1 orphan inode deleted [ 3074.612190][T30741] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3075.049058][T30741] EXT4-fs error (device loop7): ext4_lookup:1817: inode #2: comm syz.7.7035: deleted inode referenced: 15 [ 3075.247839][T30741] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7035'. [ 3075.317015][T20500] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3075.501436][T28779] Bluetooth: hci7: command tx timeout [ 3075.572511][T28779] Bluetooth: hci0: command tx timeout [ 3076.773503][T30769] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7046'. [ 3077.546018][T28779] Bluetooth: hci7: command tx timeout [ 3077.626165][T28779] Bluetooth: hci0: command tx timeout [ 3077.645994][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3077.864501][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3078.634141][T30799] i2c i2c-0: Invalid block write size 254 [ 3079.479709][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3080.026566][T30810] serio: Serial port ptm0 [ 3080.043823][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3080.112111][T30708] chnl_net:caif_netlink_parms(): no params data found [ 3081.463465][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.470239][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3081.640680][T30708] bridge0: port 1(bridge_slave_0) entered blocking state [ 3081.652535][T30708] bridge0: port 1(bridge_slave_0) entered disabled state [ 3081.676975][T30708] bridge_slave_0: entered allmulticast mode [ 3081.692520][T30708] bridge_slave_0: entered promiscuous mode [ 3081.829008][T30830] SET target dimension over the limit! [ 3081.923947][T30707] chnl_net:caif_netlink_parms(): no params data found [ 3082.282334][ T35] bridge_slave_1: left allmulticast mode [ 3082.352612][ T35] bridge_slave_1: left promiscuous mode [ 3082.358349][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 3082.408344][ T35] bridge_slave_0: left promiscuous mode [ 3082.440946][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 3084.922007][ T35] bond0 (unregistering): left allmulticast mode [ 3084.929181][ T35] bond_slave_0: left allmulticast mode [ 3084.935242][ T35] bond_slave_1: left allmulticast mode [ 3084.941838][ T35] team0: left allmulticast mode [ 3084.952341][ T35] team_slave_0: left allmulticast mode [ 3084.964525][ T35] team_slave_1: left allmulticast mode [ 3084.976687][ T35] bond0 (unregistering): left promiscuous mode [ 3084.992080][ T35] bond_slave_0: left promiscuous mode [ 3085.006707][ T35] bond_slave_1: left promiscuous mode [ 3085.019972][ T35] team0: left promiscuous mode [ 3085.031094][ T35] team_slave_0: left promiscuous mode [ 3085.036779][ T35] team_slave_1: left promiscuous mode [ 3085.151779][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3085.166679][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3085.184779][ T35] bond0 (unregistering): (slave team0): Releasing backup interface [ 3085.196824][ T35] bond0 (unregistering): Released all slaves [ 3085.229328][ T35] bond1 (unregistering): Released all slaves [ 3085.259689][T30708] bridge0: port 2(bridge_slave_1) entered blocking state [ 3085.268360][T30708] bridge0: port 2(bridge_slave_1) entered disabled state [ 3085.278391][T30708] bridge_slave_1: entered allmulticast mode [ 3085.321674][T30708] bridge_slave_1: entered promiscuous mode [ 3085.552961][T30708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3085.593784][T30708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3087.653548][T30708] team0: Port device team_slave_0 added [ 3087.890268][T30708] team0: Port device team_slave_1 added [ 3087.910704][T30866] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7070'. [ 3087.967069][T30870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7070'. [ 3088.344576][T30708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3088.367027][T30708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3088.490637][T30708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3088.558820][T30707] bridge0: port 1(bridge_slave_0) entered blocking state [ 3088.569136][T30707] bridge0: port 1(bridge_slave_0) entered disabled state [ 3088.583438][T30707] bridge_slave_0: entered allmulticast mode [ 3088.596368][T30707] bridge_slave_0: entered promiscuous mode [ 3088.708774][T30708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3088.726475][T30708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3088.824326][T30708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3089.600398][ T35] hsr_slave_0: left promiscuous mode [ 3089.621902][ T35] hsr_slave_1: left promiscuous mode [ 3089.647150][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3089.679129][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3089.713309][T30890] netlink: 348 bytes leftover after parsing attributes in process `syz.8.7076'. [ 3089.722899][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3089.749500][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3089.802481][ T35] bridge_slave_0: left allmulticast mode [ 3089.818202][ T35] veth1_macvtap: left promiscuous mode [ 3089.832718][ T35] veth0_macvtap: left promiscuous mode [ 3089.848964][ T35] veth1_vlan: left promiscuous mode [ 3089.861022][ T35] veth0_vlan: left promiscuous mode [ 3089.900850][T25785] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 3090.083072][T25785] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 3090.117190][T25785] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 3090.149075][T25785] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3090.603714][T25785] usb 6-1: config 0 descriptor?? [ 3090.613107][T30889] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3091.065659][T25785] elan 0003:04F3:0755.003A: item fetching failed at offset 3/5 [ 3091.087472][T25785] elan 0003:04F3:0755.003A: Hid Parse failed [ 3091.102841][T25785] elan 0003:04F3:0755.003A: probe with driver elan failed with error -22 [ 3091.270534][T30889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3091.292169][T30889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3092.612462][ T35] team0 (unregistering): Port device team_slave_1 removed [ 3092.698566][ T35] team0 (unregistering): Port device team_slave_0 removed [ 3093.223638][ C0] vkms_vblank_simulate: vblank timer overrun [ 3093.592713][T25785] usb 6-1: USB disconnect, device number 35 [ 3094.125148][T30911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.210212][T30707] bridge0: port 2(bridge_slave_1) entered blocking state [ 3094.225903][T30707] bridge0: port 2(bridge_slave_1) entered disabled state [ 3094.247838][T30707] bridge_slave_1: entered allmulticast mode [ 3094.269866][T30707] bridge_slave_1: entered promiscuous mode [ 3095.110065][T30707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3095.154742][T30707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3095.635696][T30707] team0: Port device team_slave_0 added [ 3095.651396][T30708] hsr_slave_0: entered promiscuous mode [ 3095.657762][T30708] hsr_slave_1: entered promiscuous mode [ 3095.668014][T30708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3095.679637][T30708] Cannot create hsr debugfs directory [ 3095.720238][T30707] team0: Port device team_slave_1 added [ 3095.843716][T30707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3095.861821][T30707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3096.019284][ T8] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 3096.035992][T30707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3096.074691][T30707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3096.097965][T30707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3096.172824][T30707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3096.227512][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 3096.258866][ T8] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 3096.277885][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3096.344840][ T8] usb 6-1: config 0 descriptor?? [ 3096.366480][T30932] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3096.471543][T30707] hsr_slave_0: entered promiscuous mode [ 3096.491065][T30707] hsr_slave_1: entered promiscuous mode [ 3096.508326][T30707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3096.526907][T30707] Cannot create hsr debugfs directory [ 3096.708103][ T35] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3096.803777][ T8] elan 0003:04F3:0755.003B: item fetching failed at offset 3/5 [ 3096.819537][ T8] elan 0003:04F3:0755.003B: Hid Parse failed [ 3096.842992][ T8] elan 0003:04F3:0755.003B: probe with driver elan failed with error -22 [ 3096.870269][ T35] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3096.968396][ T35] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3097.014163][T30932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3097.058835][T30932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3097.078821][ T35] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3098.451177][ T35] bridge_slave_1: left allmulticast mode [ 3098.466181][ T35] bridge_slave_1: left promiscuous mode [ 3098.485703][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 3098.523577][ T35] bridge_slave_0: left allmulticast mode [ 3098.529253][ T35] bridge_slave_0: left promiscuous mode [ 3098.553969][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 3099.876126][T25457] usb 6-1: USB disconnect, device number 36 [ 3100.260171][T30957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3100.395698][ C0] vkms_vblank_simulate: vblank timer overrun [ 3100.686546][ T35] bond0 (unregistering): left allmulticast mode [ 3100.697376][ T35] bond_slave_0: left allmulticast mode [ 3100.714576][ T35] team0: left allmulticast mode [ 3100.728213][ T35] team_slave_0: left allmulticast mode [ 3100.747953][ T35] team_slave_1: left allmulticast mode [ 3100.764285][ T35] bond0 (unregistering): left promiscuous mode [ 3100.770504][ T35] bond_slave_0: left promiscuous mode [ 3100.786279][ T35] team0: left promiscuous mode [ 3100.978172][ T35] team_slave_0: left promiscuous mode [ 3100.989438][ T35] team_slave_1: left promiscuous mode [ 3101.353374][T30966] i2c i2c-0: Invalid block write size 254 [ 3101.824286][T30968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7098'. [ 3101.833296][T30968] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7098'. [ 3101.983094][T14893] smc: removing ib device syz0 [ 3101.995020][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3102.013814][ T35] bond0 (unregistering): (slave team0): Releasing backup interface [ 3102.124743][ T35] bond0 (unregistering): Released all slaves [ 3102.403165][T30958] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3102.413399][T30958] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3102.864667][T30977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3104.553555][T30986] netlink: 'syz.5.7102': attribute type 1 has an invalid length. [ 3104.561460][T30986] netlink: 134744 bytes leftover after parsing attributes in process `syz.5.7102'. [ 3105.214562][T30991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3105.395696][T30708] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3105.685904][T30708] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3107.156706][T30708] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3107.274942][T30708] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3108.203823][T30707] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3108.848663][T30707] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3109.381916][T31021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3109.658163][T30707] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3109.774896][T31025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7114'. [ 3109.784919][T31025] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7114'. [ 3110.521924][T30707] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3110.522450][T31019] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3110.538969][T31019] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3110.869201][T31030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3111.231642][T30711] Bluetooth: hci7: command 0x0405 tx timeout [ 3111.375660][ T35] tipc: Left network mode [ 3112.108479][T30708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3113.309752][T30708] 8021q: adding VLAN 0 to HW filter on device team0 [ 3114.058348][ T7015] bridge0: port 1(bridge_slave_0) entered blocking state [ 3114.065742][ T7015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3114.400966][ T7015] bridge0: port 2(bridge_slave_1) entered blocking state [ 3114.408275][ T7015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3114.525514][T30707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3114.785241][T30708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3114.851265][T30707] 8021q: adding VLAN 0 to HW filter on device team0 [ 3114.976098][T30707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3115.009759][T30707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3115.059552][T15344] bridge0: port 1(bridge_slave_0) entered blocking state [ 3115.066698][T15344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3115.108657][T15344] bridge0: port 2(bridge_slave_1) entered blocking state [ 3115.115820][T15344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3115.189898][T31058] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3115.200802][T31058] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3115.247546][ T35] hsr_slave_0: left promiscuous mode [ 3115.275749][ T35] hsr_slave_1: left promiscuous mode [ 3115.298475][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3115.336355][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3115.374365][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3115.396670][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3115.447100][ T35] veth1_macvtap: left promiscuous mode [ 3115.474481][ T35] veth0_macvtap: left promiscuous mode [ 3116.169369][T31073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3119.579540][ T35] team0 (unregistering): Port device team_slave_1 removed [ 3119.948627][T31099] i2c i2c-0: Invalid block write size 254 [ 3121.008606][ T35] team0 (unregistering): Port device team_slave_0 removed [ 3122.090876][ T8] usb 9-1: new full-speed USB device number 51 using dummy_hcd [ 3122.295120][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 3122.316379][ T8] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 3122.332700][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3122.368069][ T8] usb 9-1: config 0 descriptor?? [ 3122.392217][T31104] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 3122.776653][T30707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3122.879780][ T8] elan 0003:04F3:0755.003C: item fetching failed at offset 3/5 [ 3122.914929][ T8] elan 0003:04F3:0755.003C: Hid Parse failed [ 3122.927667][T30708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3122.939100][ T8] elan 0003:04F3:0755.003C: probe with driver elan failed with error -22 [ 3123.080142][T31104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3123.150177][T31104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3123.162538][T30708] veth0_vlan: entered promiscuous mode [ 3123.207672][T30708] veth1_vlan: entered promiscuous mode [ 3125.008815][ T5818] ================================================================== [ 3125.016913][ T5818] BUG: KASAN: wild-memory-access in __lock_acquire+0xc94/0x2100 [ 3125.024550][ T5818] Read of size 8 at addr 1fffffff84f84980 by task syz-executor/5818 [ 3125.032519][ T5818] [ 3125.034841][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: syz-executor Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 3125.034863][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 3125.034876][ T5818] Call Trace: [ 3125.034883][ T5818] [ 3125.034891][ T5818] dump_stack_lvl+0x241/0x360 [ 3125.034916][ T5818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3125.034937][ T5818] ? __pfx__printk+0x10/0x10 [ 3125.034956][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3125.034986][ T5818] ? _printk+0xd5/0x120 [ 3125.035006][ T5818] print_report+0xe3/0x5b0 [ 3125.035030][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3125.035059][ T5818] ? __virt_addr_valid+0x58/0x530 [ 3125.035078][ T5818] ? __lock_acquire+0xc94/0x2100 [ 3125.035106][ T5818] kasan_report+0x143/0x180 [ 3125.035130][ T5818] ? __lock_acquire+0xc94/0x2100 [ 3125.035159][ T5818] ? ZSTD_compressBlock_opt0+0xa90/0x9180 [ 3125.035185][ T5818] kasan_check_range+0x282/0x290 [ 3125.035208][ T5818] ? ZSTD_compressBlock_opt0+0xa90/0x9180 [ 3125.035233][ T5818] __lock_acquire+0xc94/0x2100 [ 3125.035268][ T5818] lock_acquire+0x1ed/0x550 [ 3125.035295][ T5818] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 3125.035322][ T5818] ? __pfx_lock_acquire+0x10/0x10 [ 3125.035349][ T5818] ? rcu_note_context_switch+0xd44/0x1060 [ 3125.035379][ T5818] ? __pfx_validate_chain+0x10/0x10 [ 3125.035405][ T5818] _raw_spin_lock_nested+0x31/0x40 [ 3125.035430][ T5818] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 3125.035453][ T5818] raw_spin_rq_lock_nested+0xb0/0x140 [ 3125.035478][ T5818] __schedule+0x357/0x4c90 [ 3125.035503][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3125.035532][ T5818] ? validate_chain+0x11e/0x5920 [ 3125.035561][ T5818] ? mark_lock+0x9a/0x360 [ 3125.035580][ T5818] ? __pfx___schedule+0x10/0x10 [ 3125.035605][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3125.035637][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3125.035665][ T5818] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3125.035695][ T5818] ? preempt_schedule+0xe1/0xf0 [ 3125.035718][ T5818] preempt_schedule_common+0x84/0xd0 [ 3125.035742][ T5818] preempt_schedule+0xe1/0xf0 [ 3125.035765][ T5818] ? __pfx_preempt_schedule+0x10/0x10 [ 3125.035788][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3125.035821][ T5818] preempt_schedule_thunk+0x1a/0x30 [ 3125.035851][ T5818] unwind_next_frame+0x18f8/0x22d0 [ 3125.035884][ T5818] ? jbd2_journal_stop+0x902/0xd70 [ 3125.035911][ T5818] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3125.035937][ T5818] arch_stack_walk+0x11c/0x150 [ 3125.035957][ T5818] ? __ext4_journal_stop+0xfd/0x1a0 [ 3125.035979][ T5818] stack_trace_save+0x118/0x1d0 [ 3125.036003][ T5818] ? __pfx_stack_trace_save+0x10/0x10 [ 3125.036028][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3125.036057][ T5818] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3125.036088][ T5818] kasan_save_track+0x3f/0x80 [ 3125.036107][ T5818] ? kasan_save_track+0x3f/0x80 [ 3125.036126][ T5818] ? kasan_save_free_info+0x40/0x50 [ 3125.036153][ T5818] ? __kasan_slab_free+0x59/0x70 [ 3125.036173][ T5818] ? kmem_cache_free+0x195/0x410 [ 3125.036199][ T5818] ? jbd2_journal_stop+0x902/0xd70 [ 3125.036245][ T5818] kasan_save_free_info+0x40/0x50 [ 3125.036272][ T5818] __kasan_slab_free+0x59/0x70 [ 3125.036292][ T5818] ? jbd2_journal_stop+0x902/0xd70 [ 3125.036316][ T5818] kmem_cache_free+0x195/0x410 [ 3125.036341][ T5818] ? jbd2_journal_stop+0x902/0xd70 [ 3125.036368][ T5818] jbd2_journal_stop+0x902/0xd70 [ 3125.036396][ T5818] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 3125.036423][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3125.036451][ T5818] ? __ext4_journal_start_sb+0x239/0x600 [ 3125.036472][ T5818] __ext4_journal_stop+0xfd/0x1a0 [ 3125.036490][ T5818] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 3125.036510][ T5818] __mark_inode_dirty+0x2f0/0xe90 [ 3125.036541][ T5818] file_update_time+0x3d2/0x450 [ 3125.036565][ T5818] ext4_page_mkwrite+0x213/0x1100 [ 3125.036590][ T5818] ? do_wp_page+0x71a/0x49b0 [ 3125.036618][ T5818] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 3125.036638][ T5818] ? __pfx_lock_release+0x10/0x10 [ 3125.036669][ T5818] do_page_mkwrite+0x15e/0x350 [ 3125.036693][ T5818] do_wp_page+0x23cd/0x49b0 [ 3125.036726][ T5818] ? __pfx_do_wp_page+0x10/0x10 [ 3125.036753][ T5818] ? mark_lock+0x9a/0x360 [ 3125.036773][ T5818] ? __pfx_lock_acquire+0x10/0x10 [ 3125.036799][ T5818] ? rcu_is_watching+0x15/0xb0 [ 3125.036821][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3125.036849][ T5818] ? do_raw_spin_lock+0x14f/0x370 [ 3125.036873][ T5818] ? __pfx____pte_offset_map+0x10/0x10 [ 3125.036904][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3125.036936][ T5818] __handle_mm_fault+0x24d5/0x70f0 [ 3125.036977][ T5818] ? __pfx___handle_mm_fault+0x10/0x10 [ 3125.037005][ T5818] ? rcu_preempt_deferred_qs_irqrestore+0x8c4/0xca0 [ 3125.037040][ T5818] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 3125.037074][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3125.037102][ T5818] ? rcu_is_watching+0x15/0xb0 [ 3125.037123][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3125.037151][ T5818] ? rcu_read_unlock_special+0x497/0x570 [ 3125.037179][ T5818] ? mtree_range_walk+0x6fd/0x8e0 [ 3125.037203][ T5818] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 3125.037231][ T5818] ? __pfx_lock_release+0x10/0x10 [ 3125.037257][ T5818] ? lock_vma_under_rcu+0x34b/0x790 [ 3125.037295][ T5818] ? lock_vma_under_rcu+0x1dd/0x790 [ 3125.037325][ T5818] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 3125.037353][ T5818] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3125.037383][ T5818] handle_mm_fault+0x3e5/0x8d0 [ 3125.037415][ T5818] exc_page_fault+0x459/0x8b0 [ 3125.037450][ T5818] asm_exc_page_fault+0x26/0x30 [ 3125.037486][ T5818] RIP: 0033:0x7f2ffc6765ef [ 3125.037502][ T5818] Code: 49 89 d1 48 c1 ea 03 48 83 c6 08 49 c1 e9 06 48 c1 e0 0e 48 89 d1 48 01 f8 41 81 e1 ff 3f 00 00 83 e1 07 bf 01 00 00 00 d3 e7 <41> 08 bc 01 20 20 00 00 49 39 f0 0f 85 78 fe ff ff 48 8b 9d 68 fd [ 3125.037518][ T5818] RSP: 002b:00007ffdbbafa360 EFLAGS: 00010212 [ 3125.037535][ T5818] RAX: 00007f2ffa6ac000 RBX: 00005555793c60f0 RCX: 0000000000000005 [ 3125.037548][ T5818] RDX: 1ffffffff03f519d RSI: 00005555793b8850 RDI: 0000000000000020 [ 3125.037566][ T5818] RBP: 00007ffdbbafa650 R08: 00005555793b8860 R09: 0000000000002a33 [ 3125.037580][ T5818] R10: 00007f2ffd5a8038 R11: 00007ffdbbafa860 R12: 00007ffdbbafa6b0 [ 3125.037594][ T5818] R13: 0000000000000006 R14: 00007ffdbbafa3d0 R15: 00007ffdbbafa4a0 [ 3125.037614][ T5818] [ 3125.037621][ T5818] ================================================================== [ 3125.644560][ T5818] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3125.651748][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: syz-executor Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 3125.662594][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 3125.672646][ T5818] Call Trace: [ 3125.675916][ T5818] [ 3125.678840][ T5818] dump_stack_lvl+0x241/0x360 [ 3125.683525][ T5818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3125.688730][ T5818] ? __pfx__printk+0x10/0x10 [ 3125.693315][ T5818] ? rcu_is_watching+0x15/0xb0 [ 3125.698093][ T5818] ? lock_release+0xbf/0xa30 [ 3125.702701][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3125.708345][ T5818] ? vscnprintf+0x5d/0x90 [ 3125.712677][ T5818] panic+0x349/0x880 [ 3125.716572][ T5818] ? check_panic_on_warn+0x21/0xb0 [ 3125.721696][ T5818] ? __pfx_panic+0x10/0x10 [ 3125.726103][ T5818] ? do_raw_spin_unlock+0x13c/0x8b0 [ 3125.731311][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3125.736981][ T5818] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3125.742881][ T5818] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3125.749214][ T5818] ? print_report+0xe3/0x5b0 [ 3125.753811][ T5818] check_panic_on_warn+0x86/0xb0 [ 3125.758757][ T5818] ? __lock_acquire+0xc94/0x2100 [ 3125.763707][ T5818] end_report+0x77/0x160 [ 3125.767951][ T5818] kasan_report+0x154/0x180 [ 3125.772479][ T5818] ? __lock_acquire+0xc94/0x2100 [ 3125.777426][ T5818] ? ZSTD_compressBlock_opt0+0xa90/0x9180 [ 3125.783152][ T5818] kasan_check_range+0x282/0x290 [ 3125.788091][ T5818] ? ZSTD_compressBlock_opt0+0xa90/0x9180 [ 3125.793818][ T5818] __lock_acquire+0xc94/0x2100 [ 3125.798688][ T5818] lock_acquire+0x1ed/0x550 [ 3125.803197][ T5818] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 3125.808750][ T5818] ? __pfx_lock_acquire+0x10/0x10 [ 3125.813778][ T5818] ? rcu_note_context_switch+0xd44/0x1060 [ 3125.819520][ T5818] ? __pfx_validate_chain+0x10/0x10 [ 3125.824739][ T5818] _raw_spin_lock_nested+0x31/0x40 [ 3125.829864][ T5818] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 3125.835409][ T5818] raw_spin_rq_lock_nested+0xb0/0x140 [ 3125.840786][ T5818] __schedule+0x357/0x4c90 [ 3125.845208][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3125.850851][ T5818] ? validate_chain+0x11e/0x5920 [ 3125.855795][ T5818] ? mark_lock+0x9a/0x360 [ 3125.860140][ T5818] ? __pfx___schedule+0x10/0x10 [ 3125.865010][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3125.870662][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3125.876306][ T5818] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3125.882297][ T5818] ? preempt_schedule+0xe1/0xf0 [ 3125.887150][ T5818] preempt_schedule_common+0x84/0xd0 [ 3125.892446][ T5818] preempt_schedule+0xe1/0xf0 [ 3125.897127][ T5818] ? __pfx_preempt_schedule+0x10/0x10 [ 3125.902506][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3125.908157][ T5818] preempt_schedule_thunk+0x1a/0x30 [ 3125.913369][ T5818] unwind_next_frame+0x18f8/0x22d0 [ 3125.918503][ T5818] ? jbd2_journal_stop+0x902/0xd70 [ 3125.923635][ T5818] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3125.929799][ T5818] arch_stack_walk+0x11c/0x150 [ 3125.934569][ T5818] ? __ext4_journal_stop+0xfd/0x1a0 [ 3125.939772][ T5818] stack_trace_save+0x118/0x1d0 [ 3125.944628][ T5818] ? __pfx_stack_trace_save+0x10/0x10 [ 3125.950003][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3125.955669][ T5818] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3125.961664][ T5818] kasan_save_track+0x3f/0x80 [ 3125.966340][ T5818] ? kasan_save_track+0x3f/0x80 [ 3125.971191][ T5818] ? kasan_save_free_info+0x40/0x50 [ 3125.976411][ T5818] ? __kasan_slab_free+0x59/0x70 [ 3125.981348][ T5818] ? kmem_cache_free+0x195/0x410 [ 3125.986294][ T5818] ? jbd2_journal_stop+0x902/0xd70 [ 3125.991436][ T5818] kasan_save_free_info+0x40/0x50 [ 3125.996466][ T5818] __kasan_slab_free+0x59/0x70 [ 3126.001231][ T5818] ? jbd2_journal_stop+0x902/0xd70 [ 3126.006358][ T5818] kmem_cache_free+0x195/0x410 [ 3126.011131][ T5818] ? jbd2_journal_stop+0x902/0xd70 [ 3126.016249][ T5818] jbd2_journal_stop+0x902/0xd70 [ 3126.021196][ T5818] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 3126.026680][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3126.032321][ T5818] ? __ext4_journal_start_sb+0x239/0x600 [ 3126.037954][ T5818] __ext4_journal_stop+0xfd/0x1a0 [ 3126.042976][ T5818] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 3126.048348][ T5818] __mark_inode_dirty+0x2f0/0xe90 [ 3126.053391][ T5818] file_update_time+0x3d2/0x450 [ 3126.058242][ T5818] ext4_page_mkwrite+0x213/0x1100 [ 3126.063270][ T5818] ? do_wp_page+0x71a/0x49b0 [ 3126.067884][ T5818] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 3126.073344][ T5818] ? __pfx_lock_release+0x10/0x10 [ 3126.078401][ T5818] do_page_mkwrite+0x15e/0x350 [ 3126.083170][ T5818] do_wp_page+0x23cd/0x49b0 [ 3126.087696][ T5818] ? __pfx_do_wp_page+0x10/0x10 [ 3126.092554][ T5818] ? mark_lock+0x9a/0x360 [ 3126.096886][ T5818] ? __pfx_lock_acquire+0x10/0x10 [ 3126.101943][ T5818] ? rcu_is_watching+0x15/0xb0 [ 3126.106715][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3126.112361][ T5818] ? do_raw_spin_lock+0x14f/0x370 [ 3126.117395][ T5818] ? __pfx____pte_offset_map+0x10/0x10 [ 3126.122869][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3126.128520][ T5818] __handle_mm_fault+0x24d5/0x70f0 [ 3126.133670][ T5818] ? __pfx___handle_mm_fault+0x10/0x10 [ 3126.139143][ T5818] ? rcu_preempt_deferred_qs_irqrestore+0x8c4/0xca0 [ 3126.145753][ T5818] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 3126.152711][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3126.158360][ T5818] ? rcu_is_watching+0x15/0xb0 [ 3126.163128][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3126.168771][ T5818] ? rcu_read_unlock_special+0x497/0x570 [ 3126.174412][ T5818] ? mtree_range_walk+0x6fd/0x8e0 [ 3126.179438][ T5818] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 3126.185427][ T5818] ? __pfx_lock_release+0x10/0x10 [ 3126.190482][ T5818] ? lock_vma_under_rcu+0x34b/0x790 [ 3126.195704][ T5818] ? lock_vma_under_rcu+0x1dd/0x790 [ 3126.200916][ T5818] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 3126.206472][ T5818] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3126.212467][ T5818] handle_mm_fault+0x3e5/0x8d0 [ 3126.217248][ T5818] exc_page_fault+0x459/0x8b0 [ 3126.221934][ T5818] asm_exc_page_fault+0x26/0x30 [ 3126.226792][ T5818] RIP: 0033:0x7f2ffc6765ef [ 3126.231203][ T5818] Code: 49 89 d1 48 c1 ea 03 48 83 c6 08 49 c1 e9 06 48 c1 e0 0e 48 89 d1 48 01 f8 41 81 e1 ff 3f 00 00 83 e1 07 bf 01 00 00 00 d3 e7 <41> 08 bc 01 20 20 00 00 49 39 f0 0f 85 78 fe ff ff 48 8b 9d 68 fd [ 3126.250813][ T5818] RSP: 002b:00007ffdbbafa360 EFLAGS: 00010212 [ 3126.256885][ T5818] RAX: 00007f2ffa6ac000 RBX: 00005555793c60f0 RCX: 0000000000000005 [ 3126.264854][ T5818] RDX: 1ffffffff03f519d RSI: 00005555793b8850 RDI: 0000000000000020 [ 3126.272823][ T5818] RBP: 00007ffdbbafa650 R08: 00005555793b8860 R09: 0000000000002a33 [ 3126.280791][ T5818] R10: 00007f2ffd5a8038 R11: 00007ffdbbafa860 R12: 00007ffdbbafa6b0 [ 3126.288759][ T5818] R13: 0000000000000006 R14: 00007ffdbbafa3d0 R15: 00007ffdbbafa4a0 [ 3126.296737][ T5818] [ 3126.299964][ T5818] Kernel Offset: disabled [ 3126.304284][ T5818] Rebooting in 86400 seconds..