last executing test programs: 10m44.024620006s ago: executing program 1 (id=111): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x10f0c2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = creat(&(0x7f0000001180)='./file0\x00', 0x8) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x3, 0x2}) pread64(r6, 0x0, 0x0, 0x100) r7 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r7, 0x0, 0x0, 0x0) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r8, &(0x7f0000000140)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1, 0xffffffff, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100000000000000000001"], 0x114}, {&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="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"]}], 0x0, 0x0, 0x0, 0x20008000}, 0x0) 10m42.67686725s ago: executing program 1 (id=117): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) setuid(0xee01) utimensat(r1, 0x0, 0x0, 0x0) 10m41.897173031s ago: executing program 1 (id=119): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000001880)=0xd1, 0x4) read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x2, 0x1, 0x1, 0x1}, 0x31, 0x1, 0x0, 0x0, "4b1550f307b34dfa1f8bed3b9658b1d83f16e704ec8ec39e72f3c54afa741ba4c22efdf58a92dd1a854513f12b353560f218c14a5c7ca5bf571e8da7b6eb15d6"}, 0x48}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffff7fff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x44934) 10m40.776769401s ago: executing program 1 (id=121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000000)=0xc) (async) readv(r1, 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xffffff78, 0x100, 0x0) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200), 0x10) (async) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="0500"/12, @ANYRESHEX=r6, @ANYRES64=0x0, @ANYRES16=r6, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) (async) r7 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000180), 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='(!\xef(.(\\-]\x00', &(0x7f0000000080)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000440)='\x00', &(0x7f0000000500)='^,/\x00', 0x0) (async) read(r7, 0x0, 0x0) (async) close(r7) sendmsg$can_bcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x5, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0xfd, 0x0, 0x0, 0x0, "6e0402d66efc80bb"}}, 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x8080) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r8, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x1e}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x11) (async) syz_usb_connect(0x6, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000cc0dcc2045053383868f0102030109021200010804a020098162424f3eb22b08"], 0x0) 10m40.309034638s ago: executing program 1 (id=123): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf9}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x41000000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 10m40.115766139s ago: executing program 1 (id=125): fsopen(&(0x7f00000001c0)='bpf\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x8d0, &(0x7f00000000c0)={0x0, 0xc48a, 0x800, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x2, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007b80)=ANY=[@ANYBLOB="12010000000000106a058400000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0xa, "1c51aa7b"}, @local=@item_4={0x3, 0x2, 0xa}]}}, 0x0}, 0x0) 10m24.150028333s ago: executing program 32 (id=125): fsopen(&(0x7f00000001c0)='bpf\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x8d0, &(0x7f00000000c0)={0x0, 0xc48a, 0x800, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x2, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007b80)=ANY=[@ANYBLOB="12010000000000106a058400000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0xa, "1c51aa7b"}, @local=@item_4={0x3, 0x2, 0xa}]}}, 0x0}, 0x0) 4m37.413080603s ago: executing program 0 (id=1060): unshare(0x2040400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00'}, 0x94) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 4m36.496921978s ago: executing program 0 (id=1061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r5, &(0x7f0000000140), 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = dup(r6) write$UHID_INPUT(r7, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x76, &(0x7f00000010c0)=0x2, 0x4) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000480)={0x0, 0x0, @ioapic}) syz_usb_connect(0x3, 0x3d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010000000009045f00020103df000905050008000200e5090501020800010000072501"], 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x13, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0xa}}, 0x20) 4m32.346335983s ago: executing program 0 (id=1075): socket$nl_route(0x10, 0x3, 0x0) write$snapshot(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0xb4b1, 0x4200, 0x0, 0x0}, {0x9, 0x221, 0x0, 0x0}], 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040)=0xffffffffffffffff, 0x12) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='workqueue_activate_work\x00', r3, 0x0, 0x40}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000001700), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}]}, 0x44}}, 0x8010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d3, &(0x7f00000004c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000002c0)) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x14, r7, 0xe23, 0x70bd27, 0x25dfdbff}, 0x14}}, 0x4080) 4m27.503647752s ago: executing program 0 (id=1088): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{0x2000000}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x48}}, 0x0) 4m27.281100888s ago: executing program 0 (id=1090): capset(0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec309d59191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358", 0xe0}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 4m25.016612203s ago: executing program 0 (id=1097): r0 = syz_io_uring_setup(0x231, &(0x7f0000000500)={0x0, 0xed67, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f00000006c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = syz_io_uring_setup(0x4d76, &(0x7f0000000300)={0x0, 0xaee0, 0x10000, 0x2, 0xbfdffffc, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000004c0)={&(0x7f0000000480)="938e391a09f7f1327bfc011d41bd354f1f700c83001b140f68961dca", 0x1c, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f00000005c0)={r8}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x17, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r9, 0x0, 0xffff}, 0x18) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r5, r6, &(0x7f0000000980)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r10, 0x3, &(0x7f0000000900)=[{&(0x7f0000000600)="6d87ea6363dbe24e3aec252659316fab3c565630a29b9c5e43e24c8dec93d1bea4b85f80804992c939260fd521b9363dd8e67b320ebb59b581a48e37c9443682da597569463449d86cb30d449d487607a5ec247c4c87d5865d6901cd41ed03f367981c6bd072723f0eff0ec1f290c39c297142f05e1dd679dfa796b5c895c98db7748000cd320e1e562b8f9254c1ffc2bdd18f8b5886ac8cb3429f8023ddcb5c5fa796dcb973ec5b98f506c8742a199ed827cba9bbe7b1d43bf208", 0xbb}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="1d6fb875345bead2d0d4056522dd3d855db75e8dc4cf0803cf8057c03dfaabce9c87af2f385f624078bf9bb5038ef814758a191b21dbc601db9cb1844be3e10e79e2cda9a7fdeec8c1e783225877e4f08ef069524f499d604cdf33ff6b6c275d08", 0x61}, {&(0x7f0000000780)="d5b512fe61143c3bb168dc92f1106f0e220e96ab0999f27b6062cedd45e6f9346b874921002aaf0a8538804236d4f2ccbfaa155251ca6837519ba58da37bfd898027c9cefcb7a3837ff153c248b11a6e95ffa6f8cfe02ce86b18f0207a56e4ca5b7c0e9113bcc62fa4fb40f20c53eae180791cce64a195d569eff12afc5274ed59c84fc04f240985a18ff4f8b9bdba29f68933", 0x93}, {&(0x7f0000000840)="4f207070d7cbe24c67651493ee0cb7f2b3f5b3025291846179f7ef6877a2b5b774dd2105ce0c7b6d8d7120094a6a8dad8ac6f5f4fb1509828bd05559", 0x3c}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000880)="de4ecd959dcffa7e4f6c49eca3718aa7c02ac15e1a27e876ea340cafce52a22b786658a6ce071edc6a3c09a893ff9d32f36f33de23ef068dc2403efb6ff30fb80da86ba90c9cfc6221ac69f3c4c812d12951eb1d61e5512b76a8be253864b92a68274f54e56d0dfccfd5a5f1b207f3a21854b99e03", 0x75}, {&(0x7f0000001a00)="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", 0xff}], 0x8, 0x1b, 0x0, {0x3}}) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="2800000042000b0026bd7000004000000300000008000200071000000a00018078a449a0dd640000b6005c03546dce96f8da519554ac0ed8c068f8a9a741998af5c1646546f79fafe6b3b7c86622d651fd550bbab30bb453e29e4541ea25c84e60083dd10afaaba6f0f6ee10ae31c7c7fa8c0bbfa939533002b2cad8c62fd49f7a7adfd5c9cc0dbf7a856659889d82f5c10ba693a8ca702eff25d4d31878378e7fad35e8761f2520d8a07d55ea59968d68adf802d401cc0836af11e62cb1555687fe00a2652640e4d926c4aaeca0618a9bcc5ec590f27487e7d5ccc26924ff108713ace09218100fda947b3f927bad4262991020e58eb1"], 0x28}}, 0x4040080) io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x84, &(0x7f0000000440)={r14, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) mkdir(&(0x7f0000000580)='./file0\x00', 0x114) r15 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) setxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'security.', 'group_id'}, &(0x7f0000000440)='[-{}[{#(-\x00', 0xa, 0x2) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000001b00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r15, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643da391b5f6dbabbd9d505b332d36c8e3002404618906eb71a0897e589e77c8583f0fd98df4ff2e44f6c9326a6f640d46", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) umount2(&(0x7f0000000140)='./file0\x00', 0x1) r16 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x5a29, &(0x7f0000000180)={0x0, 0xee5d, 0x4, 0x3, 0x359}, &(0x7f0000000200), &(0x7f0000000380)) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r16, 0x80, &(0x7f0000000240)=@nl=@proc}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xb635773f06ebbeed, 0x4000010, r10, 0x0) io_uring_enter(r0, 0x7ba2, 0xfffdfffd, 0x0, 0x0, 0x0) 4m9.72809879s ago: executing program 33 (id=1097): r0 = syz_io_uring_setup(0x231, &(0x7f0000000500)={0x0, 0xed67, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f00000006c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = syz_io_uring_setup(0x4d76, &(0x7f0000000300)={0x0, 0xaee0, 0x10000, 0x2, 0xbfdffffc, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000004c0)={&(0x7f0000000480)="938e391a09f7f1327bfc011d41bd354f1f700c83001b140f68961dca", 0x1c, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f00000005c0)={r8}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x17, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r9, 0x0, 0xffff}, 0x18) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r5, r6, &(0x7f0000000980)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r10, 0x3, &(0x7f0000000900)=[{&(0x7f0000000600)="6d87ea6363dbe24e3aec252659316fab3c565630a29b9c5e43e24c8dec93d1bea4b85f80804992c939260fd521b9363dd8e67b320ebb59b581a48e37c9443682da597569463449d86cb30d449d487607a5ec247c4c87d5865d6901cd41ed03f367981c6bd072723f0eff0ec1f290c39c297142f05e1dd679dfa796b5c895c98db7748000cd320e1e562b8f9254c1ffc2bdd18f8b5886ac8cb3429f8023ddcb5c5fa796dcb973ec5b98f506c8742a199ed827cba9bbe7b1d43bf208", 0xbb}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="1d6fb875345bead2d0d4056522dd3d855db75e8dc4cf0803cf8057c03dfaabce9c87af2f385f624078bf9bb5038ef814758a191b21dbc601db9cb1844be3e10e79e2cda9a7fdeec8c1e783225877e4f08ef069524f499d604cdf33ff6b6c275d08", 0x61}, {&(0x7f0000000780)="d5b512fe61143c3bb168dc92f1106f0e220e96ab0999f27b6062cedd45e6f9346b874921002aaf0a8538804236d4f2ccbfaa155251ca6837519ba58da37bfd898027c9cefcb7a3837ff153c248b11a6e95ffa6f8cfe02ce86b18f0207a56e4ca5b7c0e9113bcc62fa4fb40f20c53eae180791cce64a195d569eff12afc5274ed59c84fc04f240985a18ff4f8b9bdba29f68933", 0x93}, {&(0x7f0000000840)="4f207070d7cbe24c67651493ee0cb7f2b3f5b3025291846179f7ef6877a2b5b774dd2105ce0c7b6d8d7120094a6a8dad8ac6f5f4fb1509828bd05559", 0x3c}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000880)="de4ecd959dcffa7e4f6c49eca3718aa7c02ac15e1a27e876ea340cafce52a22b786658a6ce071edc6a3c09a893ff9d32f36f33de23ef068dc2403efb6ff30fb80da86ba90c9cfc6221ac69f3c4c812d12951eb1d61e5512b76a8be253864b92a68274f54e56d0dfccfd5a5f1b207f3a21854b99e03", 0x75}, {&(0x7f0000001a00)="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", 0xff}], 0x8, 0x1b, 0x0, {0x3}}) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="2800000042000b0026bd7000004000000300000008000200071000000a00018078a449a0dd640000b6005c03546dce96f8da519554ac0ed8c068f8a9a741998af5c1646546f79fafe6b3b7c86622d651fd550bbab30bb453e29e4541ea25c84e60083dd10afaaba6f0f6ee10ae31c7c7fa8c0bbfa939533002b2cad8c62fd49f7a7adfd5c9cc0dbf7a856659889d82f5c10ba693a8ca702eff25d4d31878378e7fad35e8761f2520d8a07d55ea59968d68adf802d401cc0836af11e62cb1555687fe00a2652640e4d926c4aaeca0618a9bcc5ec590f27487e7d5ccc26924ff108713ace09218100fda947b3f927bad4262991020e58eb1"], 0x28}}, 0x4040080) io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x84, &(0x7f0000000440)={r14, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) mkdir(&(0x7f0000000580)='./file0\x00', 0x114) r15 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) setxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'security.', 'group_id'}, &(0x7f0000000440)='[-{}[{#(-\x00', 0xa, 0x2) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000001b00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r15, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643da391b5f6dbabbd9d505b332d36c8e3002404618906eb71a0897e589e77c8583f0fd98df4ff2e44f6c9326a6f640d46", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) umount2(&(0x7f0000000140)='./file0\x00', 0x1) r16 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x5a29, &(0x7f0000000180)={0x0, 0xee5d, 0x4, 0x3, 0x359}, &(0x7f0000000200), &(0x7f0000000380)) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r16, 0x80, &(0x7f0000000240)=@nl=@proc}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xb635773f06ebbeed, 0x4000010, r10, 0x0) io_uring_enter(r0, 0x7ba2, 0xfffdfffd, 0x0, 0x0, 0x0) 1m38.483750568s ago: executing program 2 (id=1575): r0 = fsopen(&(0x7f0000000000)='hpfs\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix_mp={0x3, 0x10001, 0x4745504a, 0x2, 0xa, [{0xd0d}, {0xf}, {0x2}, {0x200}, {0x0, 0x9}, {0x0, 0x20000000}, {0x0, 0x3}, {0x0, 0x878}], 0x0, 0x0, 0x0, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)="7f08eda6d67e4db32259119e972e85220d", 0x11}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000084) flistxattr(r0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x4000038, 0x7, 0x0, 0x2}) ioctl$PPPIOCSACTIVE(r2, 0x40087446, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) write$FUSE_LK(r2, &(0x7f0000000240)={0x28, 0xffffffffffffffea, 0x0, {{0x401, 0x9, 0x1}}}, 0x28) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffff0000}, 0xffffffffffffffd2}, 0x48) socket$kcm(0x21, 0x2, 0x2) 1m38.026131786s ago: executing program 2 (id=1579): r0 = memfd_create(&(0x7f0000000240)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x18, 0x40, 0x9, 0xffffffff, 0x25dfdbfb, {0x1}, [@generic='z']}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) fallocate(r0, 0x0, 0x0, 0x400001) r2 = socket$netlink(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_unix(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x802ca2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010a2dbd1683c257716736b0000008000300", @ANYRES32=r8], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000229bd7000fedbdf257c0000000a000600ffff08706fc200000a00060008021100000000000a0006000802110000010000"], 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x10000010) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000006580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000030a01040000000000000000020000050900010073797a3000000000040008900900030073797a32000000001400000011874b642bf47302c1c6"], 0x58}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x40008c4, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x2200000c) r10 = socket$inet(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x80, 0x700, 0x3, 0x100, {{0x8, 0x4, 0x1, 0x3a, 0x20, 0x65, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@generic={0x82, 0x9, "3587287e9ba39b"}]}}}}}) 1m37.205121341s ago: executing program 2 (id=1582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m36.075964922s ago: executing program 2 (id=1586): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073"], 0xfc}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = syz_usb_connect(0x5, 0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a0601090512030008af07c109050c04400006030f07059acbcf32"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010102ae299820fc0d0100ac240102030109022b86c41f3e10170904510302ffffff010905071008000608080705933a96"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c00c9242bbd7000fbdbdf2507000000", @ANYRES32=r1, @ANYBLOB="80001e0a0a000200aaaaaaaaaa1b000008000f"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) 1m32.593049454s ago: executing program 2 (id=1595): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe90) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)=ANY=[@ANYBLOB="12015002420000402505a1a440000102030109023b0001010c90e6090400a10302060000052406000005240005000d240f01ffffffff050004000909058202000402020409050302080009b800"], &(0x7f0000000380)={0x0, 0x0, 0x10, &(0x7f0000000e40)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x6, 0x4, 0x13, 0x3, 0x3}]}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xdaf, &(0x7f0000000180)={0x0, 0x2, 0x13291, 0x0, 0x332}, &(0x7f0000000100), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) memfd_create(&(0x7f0000002bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\x99K\xcd\xab\x1a\x034btY\xdb\v\x86\xca<\x02R\xd6a\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7\x80\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8\x88\'\x06f\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51\tz\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\x97\xad\xef~\x15\xfd\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\\L\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1\xad&\x86\xcb\xf3\xad\x9e[\x8b\xc0\xd6\x1e\xe4N\x92\xf2\x905\xe0\x13\x90\xaeQ\xed\xea\xad\x9b\xcc\x9f\xc0P\xff_\xaa\xb2L\xf5\x1f\xc1\xa4[\xe51\xcb B*\xaa\a\x003\xc9\xae\x1f\x8c\xcdm\xb8\xce\x01\xdb\xaa\x1c\xc35\x16#\x04\xb7W4\xfd\'\xbe\x922\xde\xd6\x18\xf7`\xff\xfe%\x06\x02\xc6\x81Jr\x10\x88G\xea+^LA\x96\xed\x1d\xe1V\xbd\xebbyq\xd6\xb3', 0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00') readv(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000a0000000000001104000000ffffffff000000000000000200000000000000000000000b02000000020000000000000e0300000000000000000061000000000000002e"], 0x0, 0x5c}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f00000000c0)={0x3, 0x0, 0x9, 0x2, 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x1, &(0x7f0000000d40)=[{0x2, 0xb3, 0x4, 0x5}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f00000002c0)=""/84, 0x54, 0x3) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc) bind$qrtr(r4, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) fsetxattr$smack_xattr_label(r1, &(0x7f0000000dc0)='security.SMACK64EXEC\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d3dcef078d810400da80be1c8a"], 0x1, 0x1) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, 0x0) 1m29.189877441s ago: executing program 2 (id=1606): syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x9, @remote, 0xd}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 1m13.544794414s ago: executing program 34 (id=1606): syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x9, @remote, 0xd}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 1m11.826923854s ago: executing program 4 (id=1662): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0x20008000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000100)=' ']}, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_setup(0x5c79, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0xffffffffffffffd1) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) read$FUSE(r3, &(0x7f000000c400)={0x2020}, 0x2020) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x8, @win={{0x9, 0xff, 0xfff, 0x1}, 0x0, 0x7, 0x0, 0x1, 0x0, 0x7}}) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) 1m9.669535366s ago: executing program 4 (id=1666): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 1m7.80673333s ago: executing program 4 (id=1671): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000010000108290000000000000001000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 1m6.869821938s ago: executing program 4 (id=1676): unshare(0x2a020400) r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0xa2d42) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@mcast1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r7, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x0, 0x10042, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000380), 0x4) 1m4.548307561s ago: executing program 4 (id=1686): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$MSR(&(0x7f0000000180), 0x4, 0x0) r1 = memfd_secret(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x16}, 0x48) mkdir(&(0x7f0000000080)='./file1\x00', 0x18) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r4}, './file0\x00'}) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r5, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@getnexthop={0x18, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000}}, 0x18}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f00000000c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) getsockopt$netlink(r7, 0x10e, 0xa, 0x0, &(0x7f0000000100)) 1m2.467340369s ago: executing program 4 (id=1690): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000010d00000000000000b7080000000000007b8af8ff00000000b7080000000000006b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c0008"], 0x178}}, 0x0) 47.288485868s ago: executing program 35 (id=1690): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000010d00000000000000b7080000000000007b8af8ff00000000b7080000000000006b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c0008"], 0x178}}, 0x0) 28.96295725s ago: executing program 3 (id=1777): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101100) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x3}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x200000000000000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0xac, 0x7, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x6d, 0x7, 0x1, 0x0, "1f933afe4991a094db601e3b181e2cd6e140d7b341ab97aae619072284faab907de6a1dd8ff1bc24acec58b22303d72a7dc68691499b5332d6d0fb27c535a752a02452fa7145497e8f477e187fefc3afa82de009aad2d2ae4db1b7665815d1fe453e301bb93495577e"}, @NFTA_RULE_ID={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000040), 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8000000000000002) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x2488}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x3, 0x8, 0x5}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000540)={0x79, 0x0, 0x273}) 27.341120677s ago: executing program 3 (id=1781): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 27.069837271s ago: executing program 3 (id=1784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x1100, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 26.331828293s ago: executing program 3 (id=1786): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000002000000090210004b6a7b2eb5775a9aeb17bbb431a705ec"], 0x1c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x102) mount$9p_rdma(0x0, 0x0, 0x0, 0x1000800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01071fb7761a88cf7a2501000000040001801c0002800c000180"], 0x34}}, 0x2000c050) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="02"], 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x2a020400) 25.356404177s ago: executing program 3 (id=1790): r0 = socket(0x10, 0x80002, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1020}], 0x1}}], 0x8, 0x34000, 0x0) 23.963623005s ago: executing program 3 (id=1796): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c007be60800001000390428bd7000fbffae9a00", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000000000000000000000021400020000000000000000000000000000000001"], 0x5c}}, 0x0) 14.991890939s ago: executing program 8 (id=1817): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001700)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x7}], 0x1, 0x2000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x0, 0x4, 0x722}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x7, 0xffffffff, 0xdc4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_names\x00') pread64(r6, &(0x7f0000000000)=""/232, 0xe8, 0x3) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x0, 0x3f}, @note={0x3, 0x3, 0x5, 0x2, 0x10}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) sendmsg$nl_route(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r8, @ANYRESHEX=r10, @ANYRES16=r9, @ANYRES16=r3], 0x44}}, 0x4000010) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r12, 0x10e, 0x1, &(0x7f0000000000)=0x3, 0x4) ioctl$DRM_IOCTL_MODE_ATOMIC(r11, 0xc03864d1, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) 10.917078779s ago: executing program 8 (id=1825): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101100) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x3}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x200000000000000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0xac, 0x7, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x6d, 0x7, 0x1, 0x0, "1f933afe4991a094db601e3b181e2cd6e140d7b341ab97aae619072284faab907de6a1dd8ff1bc24acec58b22303d72a7dc68691499b5332d6d0fb27c535a752a02452fa7145497e8f477e187fefc3afa82de009aad2d2ae4db1b7665815d1fe453e301bb93495577e"}, @NFTA_RULE_ID={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000040), 0x4) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x8000000000000002) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x2488}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x3, 0x8, 0x5}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000540)={0x79, 0x0, 0x273}) 9.073250526s ago: executing program 7 (id=1828): process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/142, 0x8e}], 0x1, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/210, 0xd2}, {&(0x7f0000000980)=""/170, 0xaa}, {&(0x7f0000000480)=""/7, 0xffffffffffffff83}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f0000000a40)=""/148, 0xfffffffffffffdb8}, {&(0x7f0000000b00)=""/212, 0xd4}, {&(0x7f0000000780)=""/26, 0x1a}], 0x7, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}}}, 0x24}}, 0x800) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x1}, &(0x7f0000000100), &(0x7f0000000000)) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x88183, 0x0) close(r5) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r5) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c1a0000", @ANYRES16=r7, @ANYBLOB="000428bd7000fddbdf2505000000050021000100000005000d00000000000800190000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c800) (async) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x800}, 0x8) (async, rerun: 64) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) (rerun: 64) 8.940085098s ago: executing program 8 (id=1829): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0xc4}}, 0x14) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x200, 0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}}}, 0xb8}}, 0x0) (fail_nth: 8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in=@private=0xa010101, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x80, 0x0, 0x32}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x100}, 0x0, 0x6e6bb7, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) 8.445097473s ago: executing program 7 (id=1832): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x200000, @dev={0xfe, 0x80, '\x00', 0x40}, 0xffff}}, 0x1}, &(0x7f0000000040)=0x90) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socket$inet6(0xa, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, r0, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000300)={0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x11, 0x40022022, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x11, 0x40022022, 0x0) setresuid(0xee01, 0xee01, 0x0) (async) setresuid(0xee01, 0xee01, 0x0) syz_clone(0x8044000, 0x0, 0xffffff4c, 0x0, 0x0, 0x0) (async) syz_clone(0x8044000, 0x0, 0xffffff4c, 0x0, 0x0, 0x0) 7.835109565s ago: executing program 7 (id=1833): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x2000000, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 7.488991426s ago: executing program 7 (id=1834): r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1020}], 0x1}}], 0x8, 0x34000, 0x0) 6.375004647s ago: executing program 7 (id=1835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x2000) 5.144634361s ago: executing program 5 (id=1837): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x8}, 0x18) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x3) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x20000, 0x0, 0x0, 0x100, 0x34, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000400)={0x4, @output={0x0, 0x0, {0x1, 0xf4}, 0x154}}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/185, &(0x7f0000000140)=""/92, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000ac0)) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 5.096320974s ago: executing program 7 (id=1838): r0 = socket$nl_route(0x10, 0x3, 0x0) write$snapshot(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0xb4b1, 0x4200, 0x0, 0x0}, {0x9, 0x221, 0x0, 0x0}], 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040)=0xffffffffffffffff, 0x12) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@getchain={0x24, 0x66, 0x300, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff3}, {0x4, 0xd}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x41) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='workqueue_activate_work\x00', r5, 0x0, 0x40}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000001700), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}]}, 0x44}}, 0x8010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d3, &(0x7f00000004c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f00000002c0)) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x14, r9, 0xe23, 0x70bd27, 0x25dfdbff}, 0x14}}, 0x4080) 5.029179151s ago: executing program 6 (id=1839): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101100) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x3}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x200000000000000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0xac, 0x7, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x6d, 0x7, 0x1, 0x0, "1f933afe4991a094db601e3b181e2cd6e140d7b341ab97aae619072284faab907de6a1dd8ff1bc24acec58b22303d72a7dc68691499b5332d6d0fb27c535a752a02452fa7145497e8f477e187fefc3afa82de009aad2d2ae4db1b7665815d1fe453e301bb93495577e"}, @NFTA_RULE_ID={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000040), 0x4) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x8000000000000002) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x2488}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x3, 0x8, 0x5}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000540)={0x79, 0x0, 0x273}) 4.070517349s ago: executing program 5 (id=1840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket(0x5, 0x80000, 0x13c3586a) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000054}, 0x4000800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000360000000000000000000000911237000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket(0x5, 0x80000, 0x13c3586a) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000054}, 0x4000800) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000360000000000000000000000911237000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) 2.947773898s ago: executing program 6 (id=1841): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002d80)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240), 0x0, 0xffffffffffffffff) fcntl$setlease(r1, 0x400, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x7, 0x0, &(0x7f0000000040)=0x15) lseek(r2, 0x1000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffc000, 0x0) 2.947390439s ago: executing program 8 (id=1842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x303}, "aaed7e5ba3da1eda", "a78239a747645802caa73be57ff46b9e95cda20ebe1ccdb4da076c850bd79da3", "1a1c2f6d", "97119af0cb3910e5"}, 0x38) sendto$inet6(r1, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0xfdef) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc09c1d9b59ddb52ae25a3ca48e8d5284721b4b8e2d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000e00)="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"/396, 0x18c}, {&(0x7f0000000940)="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", 0x105}, {&(0x7f0000000280)="0f1d547dfd011eee5ee96e9f1947184669b670def151f2ba53588a8d463cb08890097ea28302b894feb895090000fb0000000055c3a39a1e5ebde1638c8f408cbb197ede5a677de4582b685da9abb1184d1e4bf53bb5eafcc7d265002aeead4812d157cfb83a10f405c72c51bd99d99ea7f702c9424dcf", 0x77}, {&(0x7f0000000d00)="7ab285d32f60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1372c18000000", 0xd3}, {&(0x7f0000001700)="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", 0xbe4}, {&(0x7f0000001100)="156f35eda3eaf4031cfd47c8fcb457593de1fc6e333cc2f86d11cefa6387fed76e611ca44de9ed7fa9f1b85663b4edc3b5421dcddec26cc9364883aa6f289716b42062e393bbfaa8aaa392aa39bb4b97eaf3531f7b0e1a160f7515b6d23227bd2ecee43659064b7b2162fd46a67a98e65897b5d2c342b95457ecec93a4a85ea49eb29def262cd0682e8a7165cc4ce23eca591173f89401e81fa9e3831659d9c0babdbdd0c74440ee38b7caae639ac452cf896a4299551eb2c3bb59b976d072a36b49ba184237c1decd0000000000002f306068ed8e2ec7c07f59c3a42901d556a277844c0d27778337dc540efc07fe000000000000", 0xf5}, {&(0x7f00000006c0)="163c76999ae42cc5ecc01af351fb70e6e11409c5d3a344799b070cdd740699f7a1cc0bc12379c717a07625de3c464c8c0023f101be14eb4db316dd831fbd717de366fc76377e2ec18bc7a3a84d197de901a02e9787e530ae58eacd2459f729ce618cb52927ecb190ccb59052470c77f3a884e1208092d7ab2446a8d6e3ca5b642723a5519faaa38542c5ef7e98d45b4baa1620a70e0438cd083f3b860b05f5852749d96a5748f2d42ca3da2a34250d84a64bc6bc43a5b094b31ea4ec17a9b4973a4a0c589f1c1159773ec6bdcf99dacc886b07fa", 0xd4}, {&(0x7f0000000800)="4f7a08cb7e877b8163c9939a6fc02812ad2fe5f90078e5bb023fe54f0bfa7f933906000000392ba4ee60a9f8f24e5fd3a05eeafc0baa41c747752ec23fb297ee50f7a4b25a208ce6f518a2753e08dd6a598813e6d721ff302e", 0x59}, {&(0x7f0000000300)="cc098cb4f8101a257eb48ef649e4fd0dad820842c93863ab85977f0ab768a23d", 0x20}, {&(0x7f00000030c0)="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", 0xe6b}, {&(0x7f0000000380)="87288fd6f8a8a80d895fa7749bc2f0e5bcca9a49a501b4f9fb227ef4d8730085aab8f19ac4c0d7a958232b29202250f26311b768ca4fdb3c1d74b9571b1529fa8804e0e96e9d50d739ca5b682a1f1c4d5756655a8f2c427b7c110017df5cc0a1213f61ff525eb8659e82c646ec5abb51ff0712b62bee0ce64dad661b0083315bbb6dc70ad64740", 0x87}, {&(0x7f00000004c0)="00bd443813c38d87bf49516e31466e678bebb529c7075c25dc2ea89733fc665d172dc8b79d86dd420bd60d4661f3adb359c5a6e3ae0924cc94f672a71930373a35c3d97ddd3e832bfa7ed80dbb38d17e8eb605b3a5b7b591a340ce694a", 0x5d}, {&(0x7f0000000880)="6c5cc05a91bfd3bcd262b059d12608777876a7168de18104be83857cc1e201c5014bb0a769372f7276dd8660246a8c5b8c650c3dd4525c197fbc6b1db508394c43fe95e01aca6a84a4046660ead6f62cda8da60b56a683951b4db17ce7329a50f60d61445c64903606a659fd833a60bd5723d6178423122203cc1fd8b8c1b8323a", 0x81}, {&(0x7f0000000600)="68f2a042b0e917749bc9e0faaade59f49feb6406068473c401c792c3d0b1e58c9c2de57a8d874c64f3e73e6033f70a9bdbe8287faf", 0x35}, {&(0x7f0000000640)="796becfe3de2e555566bb7c4926ce32a2338bd1a01d8", 0x16}, {&(0x7f0000000a80)="aa875a0284fb632346b425e79cb7e050f23b5839ccb95fa9634c558c5dbb2bde5874a5ae89804c2e1145dc9b0baea36d4d63ede19c0f5498b61f776e838a24ef789efc72cbb25f78df4497c84598b615190b7090abc828edd154d992599c1119dfcf59c7afc627fa450a39097cfd0b895d28dd6770647273f14de4", 0x7b}, {&(0x7f0000001200)="c85d1626e9333f8dd93e543a91f57ced161c3fa5f677aa18c3e4ca9b8fc2ba8461ee338c307bb299112d72084a71f31b40e81fe83b0c5f02621014fa6679c04c12d195ceee6be033ee00f8b1929d79d0c7503476abca73401c89344351ff1437a4373b27aacdbaaad28012135225c4ceb021a867939e5d6e2847c039e5a0670353e259250c899d6cd7794f9c0acad79fbd815fccc398f00e30a2c23eefcb1e36", 0xa0}, {&(0x7f0000000c40)="d573ba403421fb59988e1c6c4a6aa3d1c1117a2207a8b7bbd3af426f8fdddc0fc031f832785163c9fb5702fd935e736c9668266e3e30ba1a595a6d69d7c684dc0a012835bcf2f45825964f9643d594c51420c799cbd756506a981769204dbb809b6f325a7c302372175c386cbcf9a9d79bea09be9f759b4afb55425af8160dfc4a28b654a352a79897ba5b02da59666470bd6562bae2d2779481b91e84f174cfdd35c4cc2675bc152186ed89", 0xac}], 0x13}, 0x40) 2.947155504s ago: executing program 5 (id=1843): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000440)) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000440)=0x0) ptrace(0x4207, r0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000480)=0x2, 0x4) socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}, 0x1}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="c6e20f82a69087d2ca9107de331fe97c4ccb2a8757e28bc3ef67743985e6e3d6dbe97c645230f378ed17cd8458013b9fd7ac42b58be5cc2e8d06b08b8123c12635102a8f3f823394012b7c47ba4b3c5e9424ac56bd3a322a77e49278c0e47d28bca764584776a3977c8c864ced6ef01e05702963d390fc9e77fb7c4da959032c963be9f1878e76444b6c836f64222094e4356594c53b4c7d377bf243153ea8", 0x9f}, {&(0x7f0000000140)="13fb8ac04ccc90f31aa5b123ee9676a2b0168fee9aef1420acf4", 0x1a}, {&(0x7f0000000180)="fd636e3a792a8c290030b2952a76e5d25cbc10293920c240965144cc3f70338fd3e56850826e3b87bcacf1d54e4be190642b35e1c9c3d80026dd58e04b7d35247a54bba75e3450facbe4a3446113336298f14101773dacd98a49ab6efbdfac3e932f407121526ef1e572e45f10a125a2a1d5587a885fec730cb172dd8742f66c357e930da2c4001572ab1a51cfa3add36af956eab005e586b693f73a", 0x9c}, {&(0x7f0000000240)="d84a8da244a2fa17519f18d1aea3049e40e7c50b6cd0ffcbce543c10dc202e24bfe085334fecbe5349f443556a0205c77c5105aa051b364683f4ed12601b85ff2b7a196fe695f9b7be96576155d405a44710daba7b7ef1b53c799018ee2d1ea7a48f54eb99db91c636aa5bc847ed8299da0c7cedc3f242741e7c8a56726e85ac2e9c54e2d826cce7217bf5f0ce8dbc0da31fb86cae335b767b6baf9637a17216ad318e8a00", 0xa5}], 0x4, &(0x7f0000000340)="9b8f749e6b328852a282f2229d3c325af7271dbe3202acdda82897cd9b032797301895e60f9a73d5cd1b909821c4832e9c7c31cebf35759a22d685616c710c7fbdde8d46220c62f30c51f0d1bc6f5d4c75a719651b3dca4c994c09d891418cb750489ad56eb6b1212415b8299b8486db41068c0b348ae7751cd1416fbf00f244bb6c0994352269c4968dc7e8db", 0x8d, 0x20000055}, 0x40000) 2.946880001s ago: executing program 6 (id=1844): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0, 0x0, 0x7fffffe], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000ff000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000003000000000100feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x138) 2.940750086s ago: executing program 8 (id=1845): r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1020}], 0x1}}], 0x8, 0x34000, 0x0) 2.884670124s ago: executing program 5 (id=1846): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) pipe2(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000440), 0x13f, 0x9}}, 0x20) 2.220660734s ago: executing program 6 (id=1847): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, r0, 0x625a9000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001200)='children\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, 0x0, 0x1003) fallocate(0xffffffffffffffff, 0x37, 0xfffffffffffff001, 0x400000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f393b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07420936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x104d}}, 0x1006) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) 1.925070678s ago: executing program 8 (id=1848): r0 = accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @dev, @bcast, 0x0, [@rose, @bcast, @netrom, @null, @bcast, @bcast]}, &(0x7f0000000180)=0x40, 0x80000) cachestat(r0, &(0x7f0000000240)={0xffffffff, 0x8}, &(0x7f0000000280), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, 0x0, 0x0, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x1, &(0x7f00000001c0)='\x00'}, {0x2, 0x201, 0x0, 0x0}], 0x2}) getsockopt$inet_buf(r2, 0x0, 0x24, &(0x7f0000000300)=""/161, &(0x7f0000000040)=0xa1) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r7, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) 1.89718958s ago: executing program 5 (id=1849): syz_open_procfs(0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r2 = dup(r1) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000e0ffff8204"]) r7 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0xa2) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x1d, 0x21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820529009dbb0000000109022400011b00001009040000022a3e740009058bff7f0000100109050b362f"], 0x0) getdents(r8, &(0x7f0000000040)=""/36, 0x24) setresuid(0xee00, 0xee00, 0x0) 744.143043ms ago: executing program 6 (id=1850): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$binfmt_elf32(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4604020008fffbffffffffffff02000300fcffffff97000000380000000000000003000000060020"], 0xd2) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time_for_children\x00') ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x120c00, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f0000000240)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r0}) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x120c00, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r6, 0xc00864c0, &(0x7f0000000240)={r7}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f00000003c0)={&(0x7f00000002c0)=[r4, r5, r7, r8, r9], 0xe, 0x5, 0x4}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a000000000000611166000000000085000000d100000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) 417.259164ms ago: executing program 6 (id=1851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0xf5ffffff, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) 0s ago: executing program 5 (id=1852): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 0x60, 0x0, [{@dev}, {@multicast1}, {@broadcast}, {@multicast1}, {@loopback}, {@remote}]}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x3, 0x1, 0x0, 0x3, 0x7}}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000140)={0xfffffffffffffffc, 0x132e000, 0x1800, 0x0, 0x1}, 0x20) symlink(0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x10}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x200000000000000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x80000006, 0x48002) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) kernel console output (not intermixed with test programs): p link [ 533.044954][T10241] team0: Port device team_slave_0 added [ 533.080857][T10241] team0: Port device team_slave_1 added [ 533.323999][T10241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.400947][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.666788][ T51] Bluetooth: hci1: command tx timeout [ 533.769018][T10241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.970512][T10241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.981546][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 533.981563][ T30] audit: type=1400 audit(1751308640.054:1670): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10297 comm="syz.2.1164" [ 533.995658][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.204583][T10241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.234462][T10301] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1165'. [ 534.502838][T10241] hsr_slave_0: entered promiscuous mode [ 534.524069][T10241] hsr_slave_1: entered promiscuous mode [ 534.566924][T10241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 534.588555][T10241] Cannot create hsr debugfs directory [ 535.144245][ T30] audit: type=1400 audit(1751308641.214:1671): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10320 comm="syz.3.1172" daddr=0:0:200::ac14:1414 [ 535.536820][ T9427] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 535.697309][T10326] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1173'. [ 535.739027][ T51] Bluetooth: hci1: command tx timeout [ 536.220787][ T9427] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 536.416654][ T9427] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.460724][ T9427] usb 3-1: Product: syz [ 536.470933][ T9427] usb 3-1: Manufacturer: syz [ 536.496147][ T9427] usb 3-1: SerialNumber: syz [ 536.564768][ T9427] usb 3-1: config 0 descriptor?? [ 536.784907][ T9427] usb 3-1: ignoring: probably an ADSL modem [ 536.992129][ T9427] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 537.090906][T10241] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 537.147441][T10241] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 537.183337][T10241] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 537.225996][T10241] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 537.935828][ T51] Bluetooth: hci1: command tx timeout [ 538.396847][T10357] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd3": -EINTR [ 538.430962][T10356] kthread_run failed with err -4 [ 538.700587][ T9422] usb 3-1: USB disconnect, device number 31 [ 538.721758][T10241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.767396][T10363] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1179'. [ 538.918670][T10241] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.944624][ T7905] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.951951][ T7905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.167628][T10369] loop6: detected capacity change from 67108871 to 0 [ 540.029248][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.036505][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.676043][T10241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 540.689054][ T30] audit: type=1400 audit(1751308646.764:1672): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10379 comm="syz.2.1185" daddr=::ffff:172.20.20.42 dest=20004 [ 540.870287][T10241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 542.262684][T10397] libceph: resolve '. [ 542.262684][T10397] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 542.262684][T10397] ' (ret=-3): failed [ 543.873106][T10241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.599714][T10409] syz.3.1193: attempt to access beyond end of device [ 544.599714][T10409] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 544.779950][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'. [ 546.197631][ T9423] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 546.577177][T10439] FAULT_INJECTION: forcing a failure. [ 546.577177][T10439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.590419][T10439] CPU: 0 UID: 0 PID: 10439 Comm: syz.3.1198 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 546.590445][T10439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 546.590458][T10439] Call Trace: [ 546.590466][T10439] [ 546.590475][T10439] dump_stack_lvl+0x189/0x250 [ 546.590510][T10439] ? __pfx____ratelimit+0x10/0x10 [ 546.590539][T10439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.590569][T10439] ? __pfx__printk+0x10/0x10 [ 546.590602][T10439] should_fail_ex+0x414/0x560 [ 546.590631][T10439] strncpy_from_user+0x36/0x290 [ 546.590657][T10439] getname_flags+0xf3/0x540 [ 546.590690][T10439] user_path_at+0x24/0x60 [ 546.590710][T10439] __se_sys_mount+0x2d3/0x410 [ 546.590743][T10439] ? __pfx___se_sys_mount+0x10/0x10 [ 546.590776][T10439] ? do_syscall_64+0xbe/0x3b0 [ 546.590803][T10439] ? __x64_sys_mount+0x20/0xc0 [ 546.590831][T10439] do_syscall_64+0xfa/0x3b0 [ 546.590861][T10439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.590879][T10439] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 546.590898][T10439] ? clear_bhb_loop+0x60/0xb0 [ 546.590927][T10439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.590947][T10439] RIP: 0033:0x7fadd498e929 [ 546.590980][T10439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.590997][T10439] RSP: 002b:00007fadd5836038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 546.591018][T10439] RAX: ffffffffffffffda RBX: 00007fadd4bb6160 RCX: 00007fadd498e929 [ 546.591033][T10439] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000040 [ 546.591047][T10439] RBP: 00007fadd5836090 R08: 00002000000001c0 R09: 0000000000000000 [ 546.591060][T10439] R10: 0000000000008080 R11: 0000000000000246 R12: 0000000000000001 [ 546.591072][T10439] R13: 0000000000000000 R14: 00007fadd4bb6160 R15: 00007ffc11f53f88 [ 546.591108][T10439] [ 547.055374][ T9423] usb 3-1: Using ep0 maxpacket: 8 [ 547.119502][ T9423] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.864337][ T9423] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.886692][ T9423] usb 3-1: config 0 interface 0 has no altsetting 0 [ 547.903070][ T9423] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 548.135866][ T9429] libceph: connect (1)[c::]:6789 error -13 [ 548.214325][ T9429] libceph: mon0 (1)[c::]:6789 connect error [ 548.226941][ T9423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.266161][ T9423] usb 3-1: config 0 descriptor?? [ 548.372927][T10443] ceph: No mds server is up or the cluster is laggy [ 549.488377][T10465] ext2: Unknown parameter 'discardu/#/msr' [ 550.744957][ T9423] usb 3-1: can't set config #0, error -71 [ 550.814035][ T9423] usb 3-1: USB disconnect, device number 32 [ 551.547428][T10482] syz.3.1207: attempt to access beyond end of device [ 551.547428][T10482] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 552.603548][T10241] veth0_vlan: entered promiscuous mode [ 552.665860][T10241] veth1_vlan: entered promiscuous mode [ 552.882996][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1213'. [ 552.908068][T10241] veth0_macvtap: entered promiscuous mode [ 553.406839][ T9429] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 553.445233][T10513] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1215'. [ 553.552350][T10241] veth1_macvtap: entered promiscuous mode [ 553.598181][ T9429] usb 5-1: Using ep0 maxpacket: 32 [ 553.641674][ T9429] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.682105][ T9429] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.695236][T10241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.716539][ T9429] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 553.751765][ T9429] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.773379][T10241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.787863][ T9429] usb 5-1: config 0 descriptor?? [ 553.821411][ T9429] hub 5-1:0.0: USB hub found [ 553.835896][T10241] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.884556][T10241] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.917245][T10241] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.938392][T10241] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.215250][ T9429] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 554.219108][T10520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.272891][T10520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.560137][ T30] audit: type=1400 audit(1751308660.464:1673): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10522 comm="syz.3.1221" daddr=::ffff:172.20.20.42 dest=20004 [ 554.589295][ T6756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.605135][ T6000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.775905][T10527] syz.2.1220: attempt to access beyond end of device [ 554.775905][T10527] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 554.789530][T10527] EXT4-fs (nbd2): unable to read superblock [ 555.289453][ T6000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.296614][ T6756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.308232][ T30] audit: type=1400 audit(1751308660.464:1674): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10522 comm="syz.3.1221" daddr=fe88::4 dest=20001 [ 555.308992][ T9429] usbhid 5-1:0.0: can't add hid device: -71 [ 555.312438][T10530] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 555.346787][T10530] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 555.356541][T10530] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 555.364749][T10530] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 556.044641][ T9429] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 556.089111][ T9429] usb 5-1: USB disconnect, device number 26 [ 556.291207][T10539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.399893][T10539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.487065][ T9427] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 556.735302][T10547] FAULT_INJECTION: forcing a failure. [ 556.735302][T10547] name failslab, interval 1, probability 0, space 0, times 0 [ 556.748103][T10547] CPU: 1 UID: 0 PID: 10547 Comm: syz.4.1225 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 556.748130][T10547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 556.748143][T10547] Call Trace: [ 556.748151][T10547] [ 556.748160][T10547] dump_stack_lvl+0x189/0x250 [ 556.748194][T10547] ? __pfx____ratelimit+0x10/0x10 [ 556.748223][T10547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.748251][T10547] ? __pfx__printk+0x10/0x10 [ 556.748275][T10547] ? __pfx___might_resched+0x10/0x10 [ 556.748304][T10547] ? fs_reclaim_acquire+0x7d/0x100 [ 556.748337][T10547] should_fail_ex+0x414/0x560 [ 556.748380][T10547] should_failslab+0xa8/0x100 [ 556.748409][T10547] __kmalloc_noprof+0xcb/0x4f0 [ 556.748432][T10547] ? tomoyo_encode+0x28b/0x550 [ 556.748465][T10547] tomoyo_encode+0x28b/0x550 [ 556.748500][T10547] tomoyo_realpath_from_path+0x58d/0x5d0 [ 556.748541][T10547] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 556.748566][T10547] tomoyo_path_number_perm+0x1e8/0x5a0 [ 556.748593][T10547] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 556.748621][T10547] ? __pfx___schedule+0x10/0x10 [ 556.748658][T10547] ? __lock_acquire+0xab9/0xd20 [ 556.748708][T10547] ? __fget_files+0x2a/0x420 [ 556.748756][T10547] ? __fget_files+0x2a/0x420 [ 556.748782][T10547] ? __fget_files+0x3a0/0x420 [ 556.748819][T10547] ? __fget_files+0x2a/0x420 [ 556.748849][T10547] security_file_ioctl+0xcb/0x2d0 [ 556.748877][T10547] __se_sys_ioctl+0x47/0x170 [ 556.748901][T10547] do_syscall_64+0xfa/0x3b0 [ 556.748932][T10547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.748951][T10547] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 556.748970][T10547] ? clear_bhb_loop+0x60/0xb0 [ 556.748995][T10547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.749014][T10547] RIP: 0033:0x7f7a1218e929 [ 556.749032][T10547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.749049][T10547] RSP: 002b:00007f7a12f5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.749071][T10547] RAX: ffffffffffffffda RBX: 00007f7a123b6160 RCX: 00007f7a1218e929 [ 556.749086][T10547] RDX: 0000000000000000 RSI: 0000000000004112 RDI: 000000000000000a [ 556.749098][T10547] RBP: 00007f7a12f5f090 R08: 0000000000000000 R09: 0000000000000000 [ 556.749116][T10547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.749127][T10547] R13: 0000000000000000 R14: 00007f7a123b6160 R15: 00007ffc3349c258 [ 556.749179][T10547] [ 556.749334][T10547] ERROR: Out of memory at tomoyo_realpath_from_path. [ 557.995463][T10553] kvm: kvm [10552]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1c [ 558.006819][T10553] kvm: kvm [10552]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x401c [ 558.923712][T10560] No such timeout policy "syz0" [ 559.322194][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'. [ 559.489550][T10575] netlink: 'syz.3.1232': attribute type 27 has an invalid length. [ 559.568243][ T30] audit: type=1400 audit(1751308665.584:1675): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10568 comm="syz.3.1232" dest=2 [ 560.214998][ T1208] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 560.446548][ T1208] usb 7-1: Using ep0 maxpacket: 16 [ 560.467016][T10581] xt_connbytes: Forcing CT accounting to be enabled [ 560.474534][T10581] set match dimension is over the limit! [ 560.512251][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1234'. [ 560.526908][ T9427] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 560.913484][ T1208] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 560.951319][ T1208] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.960536][ T1208] usb 7-1: Product: syz [ 560.964768][ T1208] usb 7-1: Manufacturer: syz [ 560.983121][ T1208] usb 7-1: SerialNumber: syz [ 561.011770][ T1208] usb 7-1: config 0 descriptor?? [ 561.027812][ T9427] usb 3-1: Using ep0 maxpacket: 32 [ 561.091218][ T9427] usb 3-1: config 2 has an invalid interface number: 190 but max is 0 [ 561.232975][ T9427] usb 3-1: config 2 has no interface number 0 [ 561.246616][ T9427] usb 3-1: config 2 interface 190 has no altsetting 0 [ 561.325286][ T9427] usb 3-1: language id specifier not provided by device, defaulting to English [ 561.343269][ T9427] usb 3-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=f7.69 [ 561.373262][ T9427] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.426568][ T9427] usb 3-1: Product: syz [ 561.430965][ T9427] usb 3-1: Manufacturer: 񷟗è [ 561.435897][ T30] audit: type=1400 audit(1751308667.504:1676): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10584 comm="syz.3.1235" daddr=::ffff:172.20.20.42 dest=20004 [ 561.447526][ T1208] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 561.473878][ T9427] usb 3-1: SerialNumber: syz [ 561.474036][T10585] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 561.515028][ T1208] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 561.524656][ T30] audit: type=1400 audit(1751308667.504:1677): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10584 comm="syz.3.1235" daddr=fe80::aa dest=20001 [ 561.657891][ T1208] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 561.666899][T10571] dtv5100: wlen = 0, aborting. [ 562.163137][ T1208] usb 7-1: media controller created [ 562.248989][ T1208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 562.299831][ T9427] usb 3-1: USB disconnect, device number 33 [ 562.427113][ T1208] zl10353_read_register: readreg error (reg=127, ret==0) [ 562.469131][ T1208] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 562.503064][ T1208] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 562.573481][ T1208] usb 7-1: USB disconnect, device number 2 [ 562.713710][ T1208] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 562.756583][ T9422] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 562.995198][ T9422] usb 4-1: config 0 has an invalid interface number: 95 but max is 0 [ 563.023733][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.031736][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.044959][ T9422] usb 4-1: config 0 has no interface number 0 [ 563.072993][ T9422] usb 4-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 563.104901][ T9422] usb 4-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 563.122383][ T9422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.140590][ T9422] usb 4-1: Product: syz [ 563.152988][ T9422] usb 4-1: Manufacturer: syz [ 563.168060][ T9422] usb 4-1: SerialNumber: syz [ 563.435329][ T9422] usb 4-1: config 0 descriptor?? [ 563.443036][T10591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 563.712478][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1238'. [ 563.722791][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1238'. [ 563.959357][ T9422] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 564.540622][ T9422] usb 4-1: MIDIStreaming interface descriptor not found [ 564.697655][ T9422] usb 4-1: USB disconnect, device number 28 [ 565.291708][ T9427] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 565.420690][T10243] Bluetooth: hci1: command 0x0405 tx timeout [ 565.451929][T10616] veth2: entered allmulticast mode [ 565.475330][ T9427] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 565.508352][ T9427] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 565.598441][ T9427] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 565.624632][ T9427] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 566.100462][ T9427] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 566.110789][ T9427] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 566.120985][ T9427] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 566.254113][ T9427] usb 5-1: language id specifier not provided by device, defaulting to English [ 566.270615][ T9427] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 566.286463][ T9427] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.294606][ T9427] usb 5-1: Manufacturer: ␉ [ 566.308146][ T9427] usb 5-1: config 0 descriptor?? [ 566.336933][ T9427] hub 5-1:0.0: bad descriptor, ignoring hub [ 566.342954][ T9427] hub 5-1:0.0: probe with driver hub failed with error -5 [ 566.405498][ T9427] input: ␉ as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input16 [ 566.436744][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 566.530550][ T9427] usb 5-1: USB disconnect, device number 27 [ 566.623828][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 566.679886][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 566.705782][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.734627][ T9] usb 4-1: Product: syz [ 566.754561][ T9] usb 4-1: Manufacturer: syz [ 566.773272][ T9] usb 4-1: SerialNumber: syz [ 566.807979][ T9] usb 4-1: config 0 descriptor?? [ 566.831663][ T9] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 567.083874][T10612] syz.6.1243: vmalloc error: size 100663296, failed to allocated page array size 196608, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 567.111991][T10612] CPU: 1 UID: 0 PID: 10612 Comm: syz.6.1243 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 567.112021][T10612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 567.112034][T10612] Call Trace: [ 567.112043][T10612] [ 567.112052][T10612] dump_stack_lvl+0x189/0x250 [ 567.112089][T10612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.112120][T10612] ? __pfx__printk+0x10/0x10 [ 567.112141][T10612] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 567.112174][T10612] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 567.112211][T10612] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 567.112246][T10612] warn_alloc+0x214/0x310 [ 567.112289][T10612] ? __pfx_warn_alloc+0x10/0x10 [ 567.112327][T10612] ? __get_vm_area_node+0x28f/0x300 [ 567.112354][T10612] ? bpf_uprobe_multi_link_attach+0x585/0xf10 [ 567.112384][T10612] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 567.112444][T10612] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 567.112477][T10612] ? rcu_is_watching+0x15/0xb0 [ 567.112507][T10612] ? bpf_uprobe_multi_link_attach+0x585/0xf10 [ 567.112532][T10612] ? bpf_uprobe_multi_link_attach+0x585/0xf10 [ 567.112555][T10612] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 567.112581][T10612] ? bpf_uprobe_multi_link_attach+0x585/0xf10 [ 567.112607][T10612] ? bpf_uprobe_multi_link_attach+0x566/0xf10 [ 567.112638][T10612] bpf_uprobe_multi_link_attach+0x585/0xf10 [ 567.112678][T10612] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 567.112702][T10612] ? __fget_files+0x2a/0x420 [ 567.112743][T10612] ? __fget_files+0x2a/0x420 [ 567.112768][T10612] ? __fget_files+0x2a/0x420 [ 567.112796][T10612] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 567.112828][T10612] link_create+0x70a/0x8a0 [ 567.112859][T10612] __sys_bpf+0x599/0x860 [ 567.112884][T10612] ? __pfx___sys_bpf+0x10/0x10 [ 567.112928][T10612] ? rcu_is_watching+0x15/0xb0 [ 567.112963][T10612] __x64_sys_bpf+0x7c/0x90 [ 567.112984][T10612] do_syscall_64+0xfa/0x3b0 [ 567.113011][T10612] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.113041][T10612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.113060][T10612] ? clear_bhb_loop+0x60/0xb0 [ 567.113082][T10612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.113101][T10612] RIP: 0033:0x7f605418e929 [ 567.113118][T10612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.113135][T10612] RSP: 002b:00007f60550a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 567.113155][T10612] RAX: ffffffffffffffda RBX: 00007f60543b5fa0 RCX: 00007f605418e929 [ 567.113170][T10612] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 567.113182][T10612] RBP: 00007f6054210b39 R08: 0000000000000000 R09: 0000000000000000 [ 567.113194][T10612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.113206][T10612] R13: 0000000000000000 R14: 00007f60543b5fa0 R15: 00007fffc88d6e38 [ 567.113235][T10612] [ 567.113387][T10612] Mem-Info: [ 567.330671][ T9] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 567.477142][T10612] active_anon:3357 inactive_anon:23016 isolated_anon:0 [ 567.477142][T10612] active_file:18882 inactive_file:40510 isolated_file:0 [ 567.477142][T10612] unevictable:768 dirty:87 writeback:0 [ 567.477142][T10612] slab_reclaimable:10671 slab_unreclaimable:105403 [ 567.477142][T10612] mapped:46892 shmem:20515 pagetables:1708 [ 567.477142][T10612] sec_pagetables:0 bounce:0 [ 567.477142][T10612] kernel_misc_reclaimable:0 [ 567.477142][T10612] free:1262408 free_pcp:19023 free_cma:0 [ 567.565633][T10612] Node 0 active_anon:13428kB inactive_anon:92564kB active_file:75284kB inactive_file:162040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:187724kB dirty:344kB writeback:0kB shmem:80924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13372kB pagetables:6460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 567.600552][T10633] vcan0: tx drop: invalid sa for name 0xbffffffffffffffd [ 567.626610][T10612] Node 1 active_anon:0kB inactive_anon:0kB active_file:244kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:272kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 567.767283][T10612] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 567.840931][T10612] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 567.855707][T10612] Node 0 DMA32 free:1136280kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13424kB inactive_anon:97724kB active_file:73520kB inactive_file:161972kB unevictable:1536kB writepending:344kB present:3129332kB managed:2561452kB mlocked:0kB bounce:0kB free_pcp:47084kB local_pcp:21552kB free_cma:0kB [ 567.987537][T10612] lowmem_reserve[]: 0 0 1 1 1 [ 568.006645][T10612] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1764kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 568.380674][T10612] lowmem_reserve[]: 0 0 0 0 0 [ 568.526852][T10612] Node 1 Normal free:3896224kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:244kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:25140kB local_pcp:15604kB free_cma:0kB [ 568.720132][T10612] lowmem_reserve[]: 0 0 0 0 0 [ 568.725029][T10612] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 568.775830][T10612] Node 0 DMA32: 323*4kB (UME) 125*8kB (UE) 53*16kB (UE) 61*32kB (UE) 11*64kB (UME) 21*128kB (UME) 113*256kB (UME) 125*512kB (UME) 52*1024kB (UM) 17*2048kB (M) 229*4096kB (M) = 1127460kB [ 568.798537][ T9] usb 4-1: USB disconnect, device number 29 [ 568.847892][T10612] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 568.994413][T10612] Node 1 Normal: 184*4kB (UE) 56*8kB (UE) 50*16kB (UME) 145*32kB (UE) 45*64kB (UE) 11*128kB (UME) 9*256kB (UME) 10*512kB (UME) 7*1024kB (UM) 4*2048kB (UE) 943*4096kB (UM) = 3896224kB [ 569.021732][T10612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 569.032254][T10612] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 569.171950][T10612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 569.239421][T10612] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 569.290413][T10612] 80726 total pagecache pages [ 569.295370][T10612] 1 pages in swap cache [ 569.330747][T10612] Free swap = 124992kB [ 569.369497][T10612] Total swap = 124996kB [ 569.373718][T10612] 2097051 pages RAM [ 569.391107][T10612] 0 pages HighMem/MovableOnly [ 569.396046][T10612] 424581 pages reserved [ 569.410766][T10612] 0 pages cma reserved [ 569.486767][ T1208] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 569.706549][ T1208] usb 5-1: config 0 has an invalid interface number: 95 but max is 0 [ 569.746644][ T1208] usb 5-1: config 0 has no interface number 0 [ 569.765800][ T1208] usb 5-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 570.037720][ T1208] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 570.061929][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.243721][ T1208] usb 5-1: Product: syz [ 570.269776][ T1208] usb 5-1: Manufacturer: syz [ 570.354692][T10667] lo speed is unknown, defaulting to 1000 [ 570.372490][T10667] lo speed is unknown, defaulting to 1000 [ 570.384060][T10667] lo speed is unknown, defaulting to 1000 [ 571.088779][T10667] infiniband syz0: set active [ 571.093777][T10667] infiniband syz0: added lo [ 571.137463][ T9427] lo speed is unknown, defaulting to 1000 [ 571.192242][ T1208] usb 5-1: SerialNumber: syz [ 571.219659][ T1208] usb 5-1: config 0 descriptor?? [ 571.255640][T10649] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 571.310468][T10667] RDS/IB: syz0: added [ 571.315595][T10667] smc: adding ib device syz0 with port count 1 [ 571.322246][T10667] smc: ib device syz0 port 1 has pnetid [ 571.497289][ T1208] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 571.506575][ T1208] usb 5-1: MIDIStreaming interface descriptor not found [ 571.518339][T10667] lo speed is unknown, defaulting to 1000 [ 571.700283][T10667] lo speed is unknown, defaulting to 1000 [ 571.852440][T10667] lo speed is unknown, defaulting to 1000 [ 572.008142][T10667] lo speed is unknown, defaulting to 1000 [ 572.165142][T10667] lo speed is unknown, defaulting to 1000 [ 572.313120][T10667] lo speed is unknown, defaulting to 1000 [ 572.468776][ T9427] lo speed is unknown, defaulting to 1000 [ 572.630619][ T1208] usb 5-1: USB disconnect, device number 28 [ 573.346856][ T9958] udevd[9958]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 573.409203][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1262'. [ 575.283420][T10697] syz.4.1267: attempt to access beyond end of device [ 575.283420][T10697] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 576.287737][T10713] binder: 10712:10713 ioctl c0306201 2000000003c0 returned -14 [ 576.298630][T10713] xt_hashlimit: size too large, truncated to 1048576 [ 576.407589][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1272'. [ 576.466682][ T9422] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 576.666612][ T9422] usb 7-1: Using ep0 maxpacket: 16 [ 576.689162][ T9422] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.936645][ T9422] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 576.945780][ T9422] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.970226][ T9422] usb 7-1: config 0 descriptor?? [ 578.710765][ T9422] usbhid 7-1:0.0: can't add hid device: -71 [ 578.726599][ T9422] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 578.764005][ T9422] usb 7-1: USB disconnect, device number 3 [ 578.817026][T10735] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1277'. [ 580.158613][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1283'. [ 580.167860][T10756] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 581.276528][ T9422] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 581.426741][ T9422] usb 5-1: Using ep0 maxpacket: 16 [ 581.586192][T10776] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 581.603144][ T9422] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 581.754187][ T9422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.874065][ T9422] usb 5-1: Product: syz [ 581.940818][ T9422] usb 5-1: Manufacturer: syz [ 582.017227][ T9422] usb 5-1: SerialNumber: syz [ 582.193652][ T9422] usb 5-1: config 0 descriptor?? [ 582.826117][ T9422] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 582.843703][ T9422] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 582.907290][ T9422] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 582.936844][ T9422] usb 5-1: media controller created [ 583.128284][ T9422] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 584.099715][T10792] mmap: syz.3.1297 (10792): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 584.600795][ T9422] zl10353_read_register: readreg error (reg=127, ret==0) [ 584.620564][ T9422] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 584.650155][ T9422] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 585.044489][ T5911] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 585.414587][ T5911] usb 7-1: Using ep0 maxpacket: 32 [ 585.574951][ T9429] usb 5-1: USB disconnect, device number 29 [ 585.577286][ T5911] usb 7-1: config 0 has an invalid interface number: 25 but max is 0 [ 585.600912][ T5911] usb 7-1: config 0 has no interface number 0 [ 585.620227][ T5911] usb 7-1: config 0 interface 25 has no altsetting 0 [ 585.638518][ T5911] usb 7-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice=1d.e8 [ 585.696560][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.777793][ T5911] usb 7-1: config 0 descriptor?? [ 585.793706][ T9429] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 585.820454][ T5911] usb 7-1: can't set first interface for hiFace device. [ 585.838831][ T5911] snd-usb-hiface 7-1:0.25: probe with driver snd-usb-hiface failed with error -5 [ 586.048001][ T5911] usb 7-1: USB disconnect, device number 4 [ 586.077844][ T9422] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 586.556591][ T9422] usb 4-1: device descriptor read/64, error -71 [ 586.610744][T10809] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 586.618213][T10809] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 586.792513][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1302'. [ 586.826535][ T9422] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 587.006668][ T9422] usb 4-1: device descriptor read/64, error -71 [ 587.161139][ T9422] usb usb4-port1: attempt power cycle [ 587.708501][ T9422] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 587.767213][ T9422] usb 4-1: device descriptor read/8, error -71 [ 588.977341][ T9422] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 589.303252][ T9422] usb 4-1: device not accepting address 33, error -71 [ 589.346385][ T9422] usb usb4-port1: unable to enumerate USB device [ 589.850840][ T30] audit: type=1326 audit(1751308695.924:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10840 comm="syz.5.1312" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21c0f8e929 code=0x0 [ 590.317254][T10850] netfs: Couldn't get user pages (rc=-14) [ 594.237752][T10885] tipc: New replicast peer: 0.0.0.0 [ 594.243652][T10885] tipc: Enabled bearer , priority 10 [ 594.255294][T10885] tipc: New replicast peer: 172.20.20.170 [ 594.286344][T10885] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1324'. [ 594.577074][T10894] netlink: 'syz.6.1328': attribute type 10 has an invalid length. [ 594.627970][T10896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.687001][T10896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.880869][ T9427] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 595.327636][ T9427] usb 5-1: config 0 has an invalid interface number: 30 but max is 0 [ 595.458580][ T5911] tipc: Node number set to 4269801488 [ 595.486588][ T9427] usb 5-1: config 0 has no interface number 0 [ 595.520427][ T9427] usb 5-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04 [ 595.776562][ T9427] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.806573][ T9427] usb 5-1: Product: syz [ 596.532891][ T9427] usb 5-1: Manufacturer: syz [ 596.572198][ T9427] usb 5-1: SerialNumber: syz [ 596.796842][ T9427] usb 5-1: config 0 descriptor?? [ 597.352055][ T9427] hub 5-1:0.30: bad descriptor, ignoring hub [ 597.385873][ T9427] hub 5-1:0.30: probe with driver hub failed with error -5 [ 597.429372][ T9427] keyspan 5-1:0.30: Keyspan - (without firmware) converter detected [ 597.768136][ T5911] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 597.809276][T10920] FAULT_INJECTION: forcing a failure. [ 597.809276][T10920] name failslab, interval 1, probability 0, space 0, times 0 [ 597.822312][T10920] CPU: 0 UID: 0 PID: 10920 Comm: syz.3.1335 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 597.822341][T10920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 597.822354][T10920] Call Trace: [ 597.822362][T10920] [ 597.822371][T10920] dump_stack_lvl+0x189/0x250 [ 597.822407][T10920] ? __pfx____ratelimit+0x10/0x10 [ 597.822438][T10920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.822468][T10920] ? __pfx__printk+0x10/0x10 [ 597.822491][T10920] ? __pfx___might_resched+0x10/0x10 [ 597.822521][T10920] ? fs_reclaim_acquire+0x7d/0x100 [ 597.822556][T10920] should_fail_ex+0x414/0x560 [ 597.822586][T10920] should_failslab+0xa8/0x100 [ 597.822614][T10920] __kmalloc_noprof+0xcb/0x4f0 [ 597.822637][T10920] ? tomoyo_encode+0x28b/0x550 [ 597.822671][T10920] tomoyo_encode+0x28b/0x550 [ 597.822706][T10920] tomoyo_realpath_from_path+0x58d/0x5d0 [ 597.822748][T10920] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 597.822773][T10920] tomoyo_path_number_perm+0x1e8/0x5a0 [ 597.822801][T10920] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 597.822856][T10920] ? __lock_acquire+0xab9/0xd20 [ 597.822930][T10920] ? __fget_files+0x2a/0x420 [ 597.822961][T10920] ? __fget_files+0x2a/0x420 [ 597.822986][T10920] ? __fget_files+0x3a0/0x420 [ 597.823011][T10920] ? __fget_files+0x2a/0x420 [ 597.823042][T10920] security_file_ioctl+0xcb/0x2d0 [ 597.823071][T10920] __se_sys_ioctl+0x47/0x170 [ 597.823096][T10920] do_syscall_64+0xfa/0x3b0 [ 597.823124][T10920] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.823152][T10920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.823185][T10920] ? clear_bhb_loop+0x60/0xb0 [ 597.823209][T10920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.823229][T10920] RIP: 0033:0x7fadd498e929 [ 597.823246][T10920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.823263][T10920] RSP: 002b:00007fadd5836038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.823284][T10920] RAX: ffffffffffffffda RBX: 00007fadd4bb6160 RCX: 00007fadd498e929 [ 597.823299][T10920] RDX: 0000000000000005 RSI: 000000000000ab00 RDI: 0000000000000003 [ 597.823314][T10920] RBP: 00007fadd5836090 R08: 0000000000000000 R09: 0000000000000000 [ 597.823327][T10920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.823338][T10920] R13: 0000000000000000 R14: 00007fadd4bb6160 R15: 00007ffc11f53f88 [ 597.823371][T10920] [ 597.823449][T10920] ERROR: Out of memory at tomoyo_realpath_from_path. [ 598.092850][ T9427] usb 5-1: USB disconnect, device number 30 [ 598.109141][ T9427] keyspan 5-1:0.30: device disconnected [ 598.160119][ T5911] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 598.173296][ T5911] usb 3-1: config 0 has no interface number 0 [ 598.183816][ T5911] usb 3-1: too many endpoints for config 0 interface 32 altsetting 112: 37, using maximum allowed: 30 [ 598.197092][T10920] block nbd3: Device being setup by another task [ 598.222160][ T5911] usb 3-1: config 0 interface 32 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 598.241648][ T5911] usb 3-1: config 0 interface 32 has no altsetting 0 [ 598.252058][ T5911] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 598.256923][T10920] block nbd3: shutting down sockets [ 598.361119][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.388050][ T5911] usb 3-1: Product: syz [ 598.420399][ T5911] usb 3-1: Manufacturer: syz [ 598.444519][ T5911] usb 3-1: SerialNumber: syz [ 598.471614][ T5911] usb 3-1: config 0 descriptor?? [ 598.529896][T10925] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1338'. [ 598.787850][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1337'. [ 599.162221][T10916] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 599.318992][T10933] fuse: Unknown parameter 'rootmode' [ 599.466462][ T5911] usb 3-1: USB disconnect, device number 34 [ 599.482858][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 599.877020][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 599.897127][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.919531][ T10] usb 7-1: config 2 has an invalid interface number: 190 but max is 0 [ 599.975426][ T10] usb 7-1: config 2 has no interface number 0 [ 599.983019][ T10] usb 7-1: config 2 interface 190 has no altsetting 0 [ 600.015391][ T10] usb 7-1: language id specifier not provided by device, defaulting to English [ 600.069156][ T10] usb 7-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=f7.69 [ 600.095734][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.115857][ T10] usb 7-1: Product: syz [ 600.134069][ T10] usb 7-1: Manufacturer: 񷟗è [ 600.140419][ T10] usb 7-1: SerialNumber: syz [ 600.249215][T10941] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1336'. [ 600.512131][ T10] usb 7-1: USB disconnect, device number 5 [ 603.220718][ T9422] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 603.546539][ T9422] usb 5-1: Using ep0 maxpacket: 16 [ 603.563999][ T9422] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 603.581095][ T9422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.600471][ T9422] usb 5-1: Product: syz [ 603.610085][ T9422] usb 5-1: Manufacturer: syz [ 603.614920][ T9422] usb 5-1: SerialNumber: syz [ 603.628313][ T9422] usb 5-1: config 0 descriptor?? [ 604.437541][ T9422] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 604.850401][ T9422] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 604.882031][ T9422] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 604.890598][ T9422] usb 5-1: media controller created [ 605.068938][T10981] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 605.374192][ T9422] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 605.389426][T10978] IPVS: stopping master sync thread 10981 ... [ 605.508251][ T9422] zl10353_read_register: readreg error (reg=127, ret==0) [ 605.546229][ T9422] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 605.589996][ T9422] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 605.655632][ T9422] usb 5-1: USB disconnect, device number 31 [ 605.758612][ T9422] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 606.547585][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 606.757860][T11000] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -2 [ 606.799460][T11002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1362'. [ 606.927045][T11002] netlink: 'syz.5.1362': attribute type 15 has an invalid length. [ 606.944732][T11002] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.954461][T11002] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.963489][T11002] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.972341][T11002] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.618032][T11002] vxlan0: entered promiscuous mode [ 607.661166][ T9422] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 607.856536][ T9422] usb 3-1: Using ep0 maxpacket: 32 [ 607.871199][ T9422] usb 3-1: config 2 has an invalid interface number: 190 but max is 0 [ 607.920110][ T9422] usb 3-1: config 2 has no interface number 0 [ 607.926276][ T9422] usb 3-1: config 2 interface 190 has no altsetting 0 [ 607.969239][ T9422] usb 3-1: language id specifier not provided by device, defaulting to English [ 607.991244][ T9422] usb 3-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=f7.69 [ 608.069396][T11017] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1358'. [ 608.453170][ T9422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.461500][ T9422] usb 3-1: Product: syz [ 608.465715][ T9422] usb 3-1: Manufacturer: 񷟗è [ 608.470686][ T9422] usb 3-1: SerialNumber: syz [ 608.806929][ T9422] usb 3-1: USB disconnect, device number 35 [ 609.518274][T11028] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 611.197298][T11041] binder: 11040:11041 ioctl c018620c 200000000640 returned -22 [ 613.235028][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 614.028662][ T10] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 614.056470][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.096110][ T10] usb 7-1: config 0 has no interface number 0 [ 615.591052][ T10] usb 7-1: string descriptor 0 read error: -71 [ 615.616733][ T10] usb 7-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 615.942383][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.955671][ T10] usb 7-1: config 0 descriptor?? [ 615.977087][ T10] usb 7-1: can't set config #0, error -71 [ 616.044662][ T10] usb 7-1: USB disconnect, device number 6 [ 616.331063][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1387'. [ 616.898263][T11087] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 616.904859][T11087] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 616.926548][ T9427] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 616.966592][T11087] vhci_hcd vhci_hcd.0: Device attached [ 617.081225][T11090] netlink: 'syz.2.1390': attribute type 10 has an invalid length. [ 617.115584][ T9427] usb 7-1: Using ep0 maxpacket: 32 [ 617.121934][T11090] team0: Device bond0 is up. Set it down before adding it as a team port [ 617.140859][ T9427] usb 7-1: config 2 has an invalid interface number: 190 but max is 0 [ 617.170979][ T9427] usb 7-1: config 2 has no interface number 0 [ 617.197755][ T9427] usb 7-1: config 2 interface 190 has no altsetting 0 [ 617.206536][ T9422] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 617.239587][ T9427] usb 7-1: language id specifier not provided by device, defaulting to English [ 617.269275][T11088] vhci_hcd: connection reset by peer [ 617.282665][ T9427] usb 7-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=f7.69 [ 617.314537][ T9427] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.320367][ T49] vhci_hcd: stop threads [ 617.353189][ T9427] usb 7-1: Product: syz [ 617.359130][ T49] vhci_hcd: release socket [ 617.363657][ T49] vhci_hcd: disconnect device [ 617.366769][ T9427] usb 7-1: Manufacturer: 񷟗è [ 617.379126][ T9427] usb 7-1: SerialNumber: syz [ 618.381863][ T9427] usb 7-1: USB disconnect, device number 7 [ 620.721855][T11126] netlink: 'syz.5.1400': attribute type 29 has an invalid length. [ 620.789919][T11132] netlink: 'syz.5.1400': attribute type 29 has an invalid length. [ 621.021308][T11138] FAULT_INJECTION: forcing a failure. [ 621.021308][T11138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.034738][T11138] CPU: 0 UID: 0 PID: 11138 Comm: syz.4.1402 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 621.034766][T11138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 621.034779][T11138] Call Trace: [ 621.034787][T11138] [ 621.034797][T11138] dump_stack_lvl+0x189/0x250 [ 621.034842][T11138] ? __pfx____ratelimit+0x10/0x10 [ 621.034872][T11138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.034902][T11138] ? __pfx__printk+0x10/0x10 [ 621.034938][T11138] should_fail_ex+0x414/0x560 [ 621.034980][T11138] _copy_to_user+0x31/0xb0 [ 621.035013][T11138] simple_read_from_buffer+0xe1/0x170 [ 621.035043][T11138] proc_fail_nth_read+0x1df/0x250 [ 621.035075][T11138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 621.035107][T11138] ? rw_verify_area+0x258/0x650 [ 621.035128][T11138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 621.035158][T11138] vfs_read+0x1fd/0x980 [ 621.035186][T11138] ? __pfx___mutex_lock+0x10/0x10 [ 621.035217][T11138] ? __pfx_vfs_read+0x10/0x10 [ 621.035241][T11138] ? __fget_files+0x2a/0x420 [ 621.035272][T11138] ? __fget_files+0x3a0/0x420 [ 621.035297][T11138] ? __fget_files+0x2a/0x420 [ 621.035333][T11138] ksys_read+0x145/0x250 [ 621.035353][T11138] ? snd_pcm_hw_free+0x5ca/0x7a0 [ 621.035386][T11138] ? __pfx_ksys_read+0x10/0x10 [ 621.035415][T11138] ? do_syscall_64+0xbe/0x3b0 [ 621.035448][T11138] do_syscall_64+0xfa/0x3b0 [ 621.035478][T11138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.035496][T11138] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 621.035515][T11138] ? clear_bhb_loop+0x60/0xb0 [ 621.035540][T11138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.035559][T11138] RIP: 0033:0x7f7a1218d33c [ 621.035578][T11138] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 621.035594][T11138] RSP: 002b:00007f7a12f5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 621.035615][T11138] RAX: ffffffffffffffda RBX: 00007f7a123b6160 RCX: 00007f7a1218d33c [ 621.035630][T11138] RDX: 000000000000000f RSI: 00007f7a12f5f0a0 RDI: 000000000000000b [ 621.035641][T11138] RBP: 00007f7a12f5f090 R08: 0000000000000000 R09: 0000000000000000 [ 621.035654][T11138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.035666][T11138] R13: 0000000000000000 R14: 00007f7a123b6160 R15: 00007ffc3349c258 [ 621.035699][T11138] [ 621.509480][T11144] veth2: entered allmulticast mode [ 621.777923][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1406'. [ 622.286693][ T9422] vhci_hcd: vhci_device speed not set [ 622.316525][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 622.436514][ T5911] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 622.496563][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 622.776584][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 623.247959][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 623.257489][ T10] usb 4-1: too many endpoints for config 4 interface 0 altsetting 129: 229, using maximum allowed: 30 [ 623.271265][ T10] usb 4-1: config 4 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 229 [ 623.284847][ T10] usb 4-1: config 4 interface 0 has no altsetting 0 [ 623.291567][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 623.300197][ T10] usb 4-1: string descriptor 0 read error: -22 [ 623.307138][ T10] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 623.316323][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.331323][ T5911] usb 5-1: config 2 has an invalid interface number: 190 but max is 0 [ 623.340290][ T5911] usb 5-1: config 2 has no interface number 0 [ 623.346705][ T5911] usb 5-1: config 2 interface 190 has no altsetting 0 [ 623.359940][ T10] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 623.375281][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 623.388667][ T5911] usb 5-1: language id specifier not provided by device, defaulting to English [ 623.401138][ T5911] usb 5-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=f7.69 [ 623.411018][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 624.341770][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.350626][ T10] usb 4-1: media controller created [ 624.386736][ T5911] usb 5-1: Product: syz [ 624.393054][ T5911] usb 5-1: Manufacturer: 񷟗è [ 624.406367][ T5911] usb 5-1: SerialNumber: syz [ 624.411787][ T30] audit: type=1400 audit(1751308730.124:1679): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=11161 comm="syz.2.1411" daddr=fc01:: [ 624.425330][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 624.572675][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.589530][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.861788][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 625.155830][ T5911] usb 5-1: USB disconnect, device number 32 [ 625.206686][ T9424] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 625.315124][ T10] usb 4-1: USB disconnect, device number 34 [ 625.431553][ T9424] usb 7-1: device descriptor read/64, error -71 [ 625.736924][ T9424] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 625.888704][ T9424] usb 7-1: device descriptor read/64, error -71 [ 625.948443][T11188] veth2: entered allmulticast mode [ 626.052111][ T9424] usb usb7-port1: attempt power cycle [ 626.062028][T11195] FAULT_INJECTION: forcing a failure. [ 626.062028][T11195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 626.104100][T11195] CPU: 1 UID: 0 PID: 11195 Comm: syz.4.1422 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 626.104128][T11195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 626.104140][T11195] Call Trace: [ 626.104148][T11195] [ 626.104158][T11195] dump_stack_lvl+0x189/0x250 [ 626.104193][T11195] ? __pfx____ratelimit+0x10/0x10 [ 626.104220][T11195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 626.104248][T11195] ? __pfx__printk+0x10/0x10 [ 626.104270][T11195] ? fs_reclaim_acquire+0x7d/0x100 [ 626.104305][T11195] should_fail_ex+0x414/0x560 [ 626.104334][T11195] prepare_alloc_pages+0x213/0x610 [ 626.104371][T11195] __alloc_frozen_pages_noprof+0x123/0x370 [ 626.104406][T11195] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 626.104447][T11195] ? policy_nodemask+0x27c/0x720 [ 626.104470][T11195] ? __lock_acquire+0xab9/0xd20 [ 626.104501][T11195] alloc_pages_mpol+0x232/0x4a0 [ 626.104533][T11195] vma_alloc_folio_noprof+0xe4/0x200 [ 626.104562][T11195] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 626.104608][T11195] folio_prealloc+0x30/0x180 [ 626.104635][T11195] __handle_mm_fault+0x2c88/0x5620 [ 626.104678][T11195] ? __pfx___handle_mm_fault+0x10/0x10 [ 626.104725][T11195] ? find_vma+0xe7/0x160 [ 626.104747][T11195] ? __pfx_find_vma+0x10/0x10 [ 626.104772][T11195] handle_mm_fault+0x2d5/0x7f0 [ 626.104806][T11195] do_user_addr_fault+0x764/0x1390 [ 626.104865][T11195] exc_page_fault+0x76/0xf0 [ 626.104909][T11195] asm_exc_page_fault+0x26/0x30 [ 626.104926][T11195] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 626.104948][T11195] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 00 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 626.104964][T11195] RSP: 0018:ffffc9000404f858 EFLAGS: 00050202 [ 626.105000][T11195] RAX: 5620202020202032 RBX: ffff888057560013 RCX: 000000000000002b [ 626.105017][T11195] RDX: 0000000000000000 RSI: ffff888057560013 RDI: 0000200000003d40 [ 626.105030][T11195] RBP: ffffc9000404f9b0 R08: ffff88805756003d R09: 1ffff1100aeac007 [ 626.105045][T11195] R10: dffffc0000000000 R11: ffffed100aeac008 R12: dffffc0000000000 [ 626.105061][T11195] R13: 0000000000000000 R14: 00007ffffffff000 R15: 000000000000002b [ 626.105095][T11195] _copy_to_iter+0x484/0x16f0 [ 626.105142][T11195] ? __pfx__copy_to_iter+0x10/0x10 [ 626.105169][T11195] ? traverse+0x537/0x570 [ 626.105206][T11195] seq_read_iter+0x2e4/0xe10 [ 626.105241][T11195] ? __asan_memset+0x22/0x50 [ 626.105268][T11195] seq_read+0x2e2/0x3d0 [ 626.105287][T11195] ? __lock_acquire+0xab9/0xd20 [ 626.105323][T11195] ? __pfx_seq_read+0x10/0x10 [ 626.105351][T11195] ? __import_iovec+0x5d4/0x7f0 [ 626.105393][T11195] ? __pfx_seq_read+0x10/0x10 [ 626.105412][T11195] proc_reg_read+0x1e6/0x2e0 [ 626.105437][T11195] vfs_readv+0x5a7/0x850 [ 626.105467][T11195] ? __pfx_proc_reg_read+0x10/0x10 [ 626.105490][T11195] ? __pfx_vfs_readv+0x10/0x10 [ 626.105536][T11195] ? __fget_files+0x2a/0x420 [ 626.105569][T11195] ? __fget_files+0x3a0/0x420 [ 626.105601][T11195] ? __fget_files+0x2a/0x420 [ 626.105639][T11195] __x64_sys_preadv+0x197/0x2a0 [ 626.105669][T11195] ? __pfx___x64_sys_preadv+0x10/0x10 [ 626.105692][T11195] ? rcu_is_watching+0x15/0xb0 [ 626.105728][T11195] ? do_syscall_64+0xbe/0x3b0 [ 626.105762][T11195] do_syscall_64+0xfa/0x3b0 [ 626.105790][T11195] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.105829][T11195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.105849][T11195] ? clear_bhb_loop+0x60/0xb0 [ 626.105874][T11195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.105892][T11195] RIP: 0033:0x7f7a1218e929 [ 626.105910][T11195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.105927][T11195] RSP: 002b:00007f7a12fa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 626.105947][T11195] RAX: ffffffffffffffda RBX: 00007f7a123b5fa0 RCX: 00007f7a1218e929 [ 626.105961][T11195] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 626.105973][T11195] RBP: 00007f7a12fa1090 R08: 00000000000003ff R09: 0000000000000000 [ 626.105986][T11195] R10: 000000000000032e R11: 0000000000000246 R12: 0000000000000001 [ 626.105997][T11195] R13: 0000000000000000 R14: 00007f7a123b5fa0 R15: 00007ffc3349c258 [ 626.106030][T11195] [ 626.521254][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.866799][ T9424] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 626.887187][ T9424] usb 7-1: device descriptor read/8, error -71 [ 626.916137][T11206] usb usb8: usbfs: process 11206 (syz.3.1428) did not claim interface 0 before use [ 627.489547][ T9424] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 627.586016][ T9424] usb 7-1: device descriptor read/8, error -71 [ 627.971415][T11220] siw: device registration error -23 [ 627.987046][ T9424] usb usb7-port1: unable to enumerate USB device [ 628.015628][ T30] audit: type=1400 audit(1751308734.054:1680): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=11211 comm="syz.3.1430" [ 628.065181][T11217] tty tty29: ldisc open failed (-12), clearing slot 28 [ 628.767194][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.776846][T11226] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.991233][ T30] audit: type=1400 audit(1751308736.064:1681): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=11223 comm="syz.4.1433" daddr=fc00:: [ 631.201984][T11255] overlayfs: failed to clone upperpath [ 631.271995][T11256] tipc: Started in network mode [ 631.286950][T11256] tipc: Node identity 161a91970f07, cluster identity 4711 [ 631.326797][T11256] tipc: Enabled bearer , priority 0 [ 631.333715][T11258] syzkaller0: entered promiscuous mode [ 631.400569][T11258] syzkaller0: entered allmulticast mode [ 631.619549][T11256] tipc: Resetting bearer [ 631.675753][T11253] tipc: Resetting bearer [ 631.981024][T11253] tipc: Disabling bearer [ 632.465940][T11282] random: crng reseeded on system resumption [ 632.509327][T11277] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.547011][T11277] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.839489][T11277] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.881593][T11277] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.668737][T11277] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.679172][T11277] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.998184][T11299] loop2: detected capacity change from 0 to 524287999 [ 634.722803][T11277] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.806541][T11277] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.004295][T11301] bridge0: left promiscuous mode [ 635.095304][T11301] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 635.143825][T11304] lo speed is unknown, defaulting to 1000 [ 635.340749][T11277] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.391554][T11277] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.502789][T11277] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.563633][T11277] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.659786][T11277] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.699322][T11277] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.828656][T11277] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.900509][T11277] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.791751][T11340] siw: device registration error -23 [ 638.846644][ T30] audit: type=1400 audit(1751308744.884:1682): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=11335 comm="syz.6.1467" [ 646.086859][T11391] rdma_rxe: rxe_newlink: failed to add syz_tun [ 647.397790][T11402] overlayfs: failed to clone upperpath [ 647.447500][ T9424] infiniband syz1: ib_query_port failed (-19) [ 648.238627][T11417] lo speed is unknown, defaulting to 1000 [ 648.693693][T11429] ALSA: mixer_oss: invalid OSS volume '' [ 651.294673][T11453] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1500'. [ 651.789995][T11466] 9pnet_virtio: no channels available for device syz [ 654.099161][T11485] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1509'. [ 654.171765][T11487] syz_tun: entered allmulticast mode [ 654.191313][T11486] syz_tun: left allmulticast mode [ 658.235933][ T30] audit: type=1400 audit(1751308764.304:1683): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=11514 comm="syz.6.1519" daddr=::ffff:172.20.20.187 [ 658.989074][T11510] ALSA: mixer_oss: invalid OSS volume '' [ 659.140257][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1519'. [ 659.291071][ T51] Bluetooth: hci5: connection err: -111 [ 659.315526][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1517'. [ 659.340485][T11521] vivid-007: ================= START STATUS ================= [ 659.352881][T11521] vivid-007: Generate PTS: true [ 659.368635][ T30] audit: type=1800 audit(1751308765.434:1684): pid=11518 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1519" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 659.389976][ C1] vkms_vblank_simulate: vblank timer overrun [ 659.400255][T11518] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 659.409871][T11521] vivid-007: Generate SCR: true [ 659.417496][T11518] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 659.438071][T11521] tpg source WxH: 320x240 (Y'CbCr) [ 659.453981][T11521] tpg field: 1 [ 659.459896][T11521] tpg crop: (0,0)/320x240 [ 659.480459][T11518] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 659.494826][T11521] tpg compose: (0,0)/320x240 [ 659.500384][T11521] tpg colorspace: 8 [ 659.504267][T11521] tpg transfer function: 0/0 [ 659.533716][T11521] tpg Y'CbCr encoding: 0/0 [ 659.586808][T11521] tpg quantization: 0/0 [ 659.591087][T11521] tpg RGB range: 0/2 [ 659.625624][T11521] vivid-007: ================== END STATUS ================== [ 659.992299][T11527] ip6gretap0: left allmulticast mode [ 660.027957][T11527] ip6gretap0: left promiscuous mode [ 660.033480][T11527] bridge0: port 3(ip6gretap0) entered disabled state [ 660.113207][T11527] bridge_slave_0: left allmulticast mode [ 660.293562][T11527] bridge_slave_0: left promiscuous mode [ 660.326698][T11527] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.405892][T11527] bridge_slave_1: left allmulticast mode [ 660.424378][T11527] bridge_slave_1: left promiscuous mode [ 660.526871][T11527] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.601829][T11527] bond0: (slave bond_slave_0): Releasing backup interface [ 660.651577][T11527] bond0: (slave bond_slave_1): Releasing backup interface [ 660.698656][T11527] team0: Port device team_slave_0 removed [ 660.754263][T11527] team0: Port device team_slave_1 removed [ 660.799376][T11527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.816624][T11527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.094899][T11527] team0: Port device bridge1 removed [ 661.923462][T11540] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 662.101554][T11540] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 663.364008][T11568] syzkaller0: entered promiscuous mode [ 663.372103][T11568] syzkaller0: entered allmulticast mode [ 665.324477][T11589] vivid-002: disconnect [ 665.892366][T11585] vivid-002: reconnect [ 668.708420][T11612] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 668.755467][T11612] kvm: pic: level sensitive irq not supported [ 668.765310][T11612] kvm: pic: non byte read [ 668.786229][T11612] kvm: pic: level sensitive irq not supported [ 668.786915][T11612] kvm: pic: non byte read [ 668.807040][T11612] kvm: pic: level sensitive irq not supported [ 668.807184][T11612] kvm: pic: non byte read [ 668.826763][T11612] kvm: pic: level sensitive irq not supported [ 668.826836][T11612] kvm: pic: non byte read [ 669.175749][T11540] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 669.185177][T11540] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 669.529602][T11540] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 669.553543][T11540] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 669.702100][T11629] input input17: cannot allocate more than FF_MAX_EFFECTS effects [ 670.098666][T11641] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1548'. [ 670.243699][T11641] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.252722][T11641] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.261679][T11641] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.270502][T11641] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.391024][T11641] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.400877][T11641] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.410278][T11641] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.419967][T11641] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.466799][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1552'. [ 672.413788][ T9422] libceph: connect (1)[c::]:6789 error -101 [ 672.447279][ T9422] libceph: mon0 (1)[c::]:6789 connect error [ 672.859606][T11669] syz.2.1555: attempt to access beyond end of device [ 672.859606][T11669] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 673.113429][ T9424] libceph: connect (1)[c::]:6789 error -101 [ 673.147136][ T9424] libceph: mon0 (1)[c::]:6789 connect error [ 673.422697][T11658] ceph: No mds server is up or the cluster is laggy [ 673.755745][T11691] ieee802154 phy0 wpan0: encryption failed: -22 [ 674.492301][ T30] audit: type=1400 audit(1751308780.564:1685): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=11699 comm="syz.5.1562" daddr=fe80::aa dest=3 [ 674.711258][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 675.841027][T11709] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1565'. [ 675.850350][T11709] netlink: 'syz.5.1565': attribute type 7 has an invalid length. [ 675.951129][T11709] netlink: 'syz.5.1565': attribute type 8 has an invalid length. [ 676.102942][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1565'. [ 676.103494][ T1208] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 676.402365][ T1208] usb 5-1: Using ep0 maxpacket: 32 [ 676.446985][ T1208] usb 5-1: config 2 has an invalid interface number: 190 but max is 0 [ 676.455198][ T1208] usb 5-1: config 2 has no interface number 0 [ 676.570092][ T1208] usb 5-1: config 2 interface 190 has no altsetting 0 [ 676.762469][ T1208] usb 5-1: language id specifier not provided by device, defaulting to English [ 677.007207][ T1208] usb 5-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=f7.69 [ 677.056626][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.064692][ T1208] usb 5-1: Product: syz [ 677.086434][ T1208] usb 5-1: Manufacturer: 񷟗è [ 677.093950][ T1208] usb 5-1: SerialNumber: syz [ 677.522682][ T1208] usb 5-1: USB disconnect, device number 33 [ 677.616808][T11726] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd6": -EINTR [ 679.349345][T11764] ieee802154 phy0 wpan0: encryption failed: -22 [ 679.721387][ T30] audit: type=1400 audit(1751308785.794:1686): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=11775 comm="syz.5.1578" daddr=fc02:: [ 679.765789][ T30] audit: type=1400 audit(1751308785.814:1687): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=11775 comm="syz.5.1578" daddr=fe88::6 dest=20001 [ 679.877426][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1579'. [ 680.474254][T11781] syz.3.1576: attempt to access beyond end of device [ 680.474254][T11781] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 680.590505][T11793] dummy0: entered promiscuous mode [ 680.601896][T11793] macsec1: entered promiscuous mode [ 680.631775][T11793] macsec1: entered allmulticast mode [ 680.669204][T11793] dummy0: entered allmulticast mode [ 680.720582][T11798] tipc: Started in network mode [ 680.750627][T11798] tipc: Node identity 080211, cluster identity 4711 [ 680.795818][T11798] tipc: Enabled bearer , priority 0 [ 680.865752][T11804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.913231][T11795] tipc: Resetting bearer [ 680.932012][T11804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.957899][T11801] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 680.978006][T11801] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 681.058557][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'. [ 681.566213][T11811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.677640][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 681.808856][ T10] tipc: Node number set to 134353152 [ 681.956661][ T9429] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 681.993725][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 682.147045][ T9429] usb 3-1: Using ep0 maxpacket: 8 [ 682.198407][ T9] usb 5-1: config 2 has an invalid interface number: 190 but max is 0 [ 682.275344][ T9429] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 682.282194][ T9] usb 5-1: config 2 has no interface number 0 [ 682.315856][ T9] usb 5-1: config 2 interface 190 has no altsetting 0 [ 682.330869][ T9429] usb 3-1: config 0 has no interface number 0 [ 682.339743][ T9] usb 5-1: language id specifier not provided by device, defaulting to English [ 682.353571][ T9429] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 682.371149][ T9] usb 5-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=f7.69 [ 682.390797][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.416497][ T9429] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 682.436658][ T9] usb 5-1: Product: syz [ 682.441197][ T9] usb 5-1: Manufacturer: 񷟗è [ 682.446104][ T9] usb 5-1: SerialNumber: syz [ 682.470448][ T9429] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x2 has an invalid bInterval 175, changing to 11 [ 682.690266][ T9429] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 682.716563][ T9429] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 682.727768][ T9429] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8911, setting to 1024 [ 682.739747][ T9429] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.757584][ T9429] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 682.767713][ T9] usb 5-1: USB disconnect, device number 34 [ 682.772803][ T9429] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.794672][ T9429] usb 3-1: Product: syz [ 682.800259][ T9429] usb 3-1: Manufacturer: syz [ 682.812223][ T9429] usb 3-1: SerialNumber: syz [ 682.881927][ T9429] usb 3-1: config 0 descriptor?? [ 683.121568][T11817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.746990][T11817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.898127][T11817] bridge_slave_0: invalid flags given to default FDB implementation [ 684.268755][ T9429] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 684.914341][ T9429] usb 3-1: USB disconnect, device number 36 [ 684.997802][ T30] audit: type=1400 audit(1751308791.064:1688): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=11847 comm="syz.3.1592" daddr=::ffff:172.20.20.0 [ 685.013422][T11851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 685.015308][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.130162][T11854] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1594'. [ 685.298151][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1594'. [ 685.483220][T11851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.649842][T11864] tipc: Started in network mode [ 685.654800][T11864] tipc: Node identity fe89bdc8213a, cluster identity 4711 [ 685.672461][ T9429] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 685.796937][T11864] tipc: Enabled bearer , priority 0 [ 685.905481][T11863] tipc: Resetting bearer [ 685.911819][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.918642][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.953670][ T9429] usb 3-1: config 1 interface 0 altsetting 161 bulk endpoint 0x82 has invalid maxpacket 1024 [ 685.961216][T11866] syzkaller0: entered promiscuous mode [ 685.980184][T11866] syzkaller0: entered allmulticast mode [ 686.061172][T11861] tipc: Resetting bearer [ 686.116488][ T9429] usb 3-1: config 1 interface 0 altsetting 161 bulk endpoint 0x3 has invalid maxpacket 8 [ 686.134304][T11861] tipc: Disabling bearer [ 686.187243][ T9429] usb 3-1: config 1 interface 0 altsetting 161 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.226852][ T9429] usb 3-1: config 1 interface 0 has no altsetting 0 [ 686.245627][ T9429] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 686.276492][ T9429] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.295951][ T9429] usb 3-1: Product: syz [ 686.336655][ T9429] usb 3-1: Manufacturer: syz [ 686.372003][ T9429] usb 3-1: SerialNumber: syz [ 686.387148][T11856] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 686.435827][T11856] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 686.651425][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 687.707154][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.736526][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 687.785064][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 687.826616][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.856187][ T9429] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 687.880789][ T9] usb 5-1: Product: syz [ 687.886672][ T9] usb 5-1: Manufacturer: syz [ 687.902641][ T9429] usb 3-1: USB disconnect, device number 37 [ 687.925698][ T9] usb 5-1: SerialNumber: syz [ 688.147382][T11897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.175293][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1604'. [ 688.201003][T11876] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 688.658434][T11908] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.812358][ T30] audit: type=1400 audit(1751308794.884:1689): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=11913 comm="syz.2.1606" daddr=fe80::aa dest=3 [ 688.940815][T11876] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 689.049499][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x7 [ 689.296513][ T5911] hid-generic 0000:0000:0000.0007: ignoring exceeding usage max [ 689.316266][ T9] cdc_mbim 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 689.327743][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.335287][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.346536][ T9] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 689.376760][ T9] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 689.384637][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.415629][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.430277][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.438977][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.447052][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.461617][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.475930][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.513174][ T9] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 689.548524][ T9] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 689.566599][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.580631][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.601990][ T9] wwan wwan0: port wwan0mbim0 attached [ 689.603728][T11908] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.607757][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.607803][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.607832][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.607860][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.607888][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.607915][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.607942][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.607970][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.607998][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.608026][ T5911] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 689.778365][ T5911] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 689.841486][ T9] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 42:42:42:42:42:42 [ 689.856690][ T9422] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 689.997968][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1609'. [ 690.006967][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1609'. [ 690.015853][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1609'. [ 690.038423][T11908] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.051532][ T9] usb 5-1: USB disconnect, device number 35 [ 690.066568][ T9422] usb 3-1: Using ep0 maxpacket: 16 [ 690.076183][ T9422] usb 3-1: config 0 has no interfaces? [ 690.097819][ T9422] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 690.101825][ T9] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 690.110421][T11925] fido_id[11925]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 690.155592][ T9422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.184667][ T9422] usb 3-1: Product: syz [ 690.193683][ T9422] usb 3-1: Manufacturer: syz [ 690.211747][ T9422] usb 3-1: SerialNumber: syz [ 690.261995][ T9422] usb 3-1: config 0 descriptor?? [ 690.359445][T11908] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.573945][T11931] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.751654][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 691.971033][T11908] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.997596][T11908] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.019204][T11908] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.244315][T11944] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1615'. [ 692.535862][T11908] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.093263][T11953] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1616'. [ 693.199467][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1617'. [ 693.305957][ T30] audit: type=1400 audit(1751308799.364:1690): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=11952 comm="syz.3.1618" daddr=fe88::104 dest=20004 [ 693.906265][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 694.024450][T11961] veth1_to_bond: entered allmulticast mode [ 694.034463][T11960] veth1_to_bond: left allmulticast mode [ 694.086522][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 694.103489][ T9] usb 5-1: config 2 has an invalid interface number: 190 but max is 0 [ 694.112295][ T9] usb 5-1: config 2 has no interface number 0 [ 694.130706][ T9] usb 5-1: config 2 interface 190 has no altsetting 0 [ 694.192610][ T9] usb 5-1: language id specifier not provided by device, defaulting to English [ 694.207932][ T9] usb 5-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=f7.69 [ 694.218381][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.231017][ T9] usb 5-1: Product: syz [ 694.235216][ T9] usb 5-1: Manufacturer: 񷟗è [ 694.240833][ T9] usb 5-1: SerialNumber: syz [ 694.796761][ T9] usb 5-1: USB disconnect, device number 36 [ 697.480564][T11997] PKCS8: Unsupported PKCS#8 version [ 697.752893][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1634'. [ 698.486682][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 698.697001][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 698.704357][ T9] usb 4-1: config 2 has an invalid interface number: 190 but max is 0 [ 698.726465][ T9] usb 4-1: config 2 has no interface number 0 [ 698.732662][ T9] usb 4-1: config 2 interface 190 has no altsetting 0 [ 698.826774][ T9] usb 4-1: language id specifier not provided by device, defaulting to English [ 698.867955][ T9] usb 4-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=f7.69 [ 698.903312][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.936652][ T9] usb 4-1: Product: syz [ 698.940899][ T9] usb 4-1: Manufacturer: 񷟗è [ 698.945782][ T9] usb 4-1: SerialNumber: syz [ 699.279964][ T9] usb 4-1: USB disconnect, device number 35 [ 700.031736][T12023] loop9: detected capacity change from 0 to 7 [ 700.041252][T12023] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.049786][T12023] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.058171][T12023] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.066892][T12023] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.075300][T12023] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.083888][T12023] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.092705][T12023] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.101094][T12023] ldm_validate_partition_table(): Disk read failed. [ 700.108149][T12023] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.116750][T12023] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.125076][T12023] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.133728][T12023] Dev loop9: unable to read RDB block 0 [ 700.140433][T12023] loop9: unable to read partition table [ 700.147182][T12023] loop9: partition table beyond EOD, truncated [ 700.153562][T12023] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 700.153562][T12023] ) failed (rc=-5) [ 701.116103][T12037] dvmrp0: entered allmulticast mode [ 701.191051][T12032] syz.4.1643: attempt to access beyond end of device [ 701.191051][T12032] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 701.449182][ T9424] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 701.636616][ T30] audit: type=1400 audit(1751308807.704:1691): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12044 comm="syz.5.1646" daddr=::ffff:172.20.20.42 dest=20004 [ 701.638256][T12045] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 701.753821][ T9424] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.786003][ T9424] usb 7-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 701.804293][ T9424] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.824167][ T9424] usb 7-1: config 0 descriptor?? [ 702.608969][ T9424] usbhid 7-1:0.0: can't add hid device: -71 [ 702.631837][ T9424] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 702.847037][ T9424] usb 7-1: USB disconnect, device number 12 [ 702.986536][ T1208] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 703.176965][ T1208] usb 4-1: config index 0 descriptor too short (expected 39069, got 18) [ 703.206697][ T1208] usb 4-1: config 26 has an invalid descriptor of length 68, skipping remainder of the config [ 703.245954][ T1208] usb 4-1: config 26 has 0 interfaces, different from the descriptor's value: 16 [ 703.296793][ T1208] usb 4-1: New USB device found, idVendor=8325, idProduct=ee6c, bcdDevice=8f.d3 [ 703.305985][ T1208] usb 4-1: New USB device strings: Mfr=21, Product=241, SerialNumber=180 [ 703.336751][ T1208] usb 4-1: Product: syz [ 703.340982][ T1208] usb 4-1: Manufacturer: syz [ 703.345622][ T1208] usb 4-1: SerialNumber: syz [ 704.157801][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 704.316576][ T9] usb 7-1: device descriptor read/64, error -71 [ 704.576748][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 705.066988][ T9] usb 7-1: device descriptor read/64, error -71 [ 705.176999][ T9] usb usb7-port1: attempt power cycle [ 705.355041][T10243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 705.366698][T10243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 705.374977][T10243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 705.387542][T10243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 705.406713][T10243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 705.464831][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 705.472890][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 705.480506][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 705.499677][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 705.507839][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 705.546263][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 705.572659][ T9] usb 7-1: device descriptor read/8, error -71 [ 705.707208][ T9422] libceph: connect (1)[c::]:6789 error -101 [ 705.765160][ T9422] libceph: mon0 (1)[c::]:6789 connect error [ 705.803777][T12082] lo speed is unknown, defaulting to 1000 [ 705.817888][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 705.847265][ T9] usb 7-1: device descriptor read/8, error -71 [ 705.958423][ T9] usb usb7-port1: unable to enumerate USB device [ 706.059912][ T9424] libceph: connect (1)[c::]:6789 error -101 [ 706.236140][ T9424] libceph: mon0 (1)[c::]:6789 connect error [ 706.477543][ T30] audit: type=1400 audit(1751308812.554:1692): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12098 comm="syz.5.1663" dest=20002 [ 706.962231][T12090] ceph: No mds server is up or the cluster is laggy [ 707.036893][ T9429] libceph: connect (1)[c::]:6789 error -101 [ 707.076611][ T9429] libceph: mon0 (1)[c::]:6789 connect error [ 707.586147][ T51] Bluetooth: hci2: command tx timeout [ 707.887311][T12111] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1665'. [ 707.957814][T12111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.389029][T12082] chnl_net:caif_netlink_parms(): no params data found [ 709.466249][ T1208] usb 4-1: USB disconnect, device number 36 [ 709.676415][ T51] Bluetooth: hci2: command tx timeout [ 710.172529][T12082] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.201281][T12082] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.245378][T12082] bridge_slave_0: entered allmulticast mode [ 710.297179][T12082] bridge_slave_0: entered promiscuous mode [ 710.595697][T12082] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.623704][T12082] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.648405][T12082] bridge_slave_1: entered allmulticast mode [ 710.692919][T12082] bridge_slave_1: entered promiscuous mode [ 710.976850][T12150] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 711.508828][T12154] ieee802154 phy0 wpan0: encryption failed: -22 [ 711.523009][T12082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.874294][ T51] Bluetooth: hci2: command tx timeout [ 712.039206][T12082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.604944][T12082] team0: Port device team_slave_0 added [ 712.637994][T12082] team0: Port device team_slave_1 added [ 712.821668][T12167] can: request_module (can-proto-0) failed. [ 712.829557][ T9424] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 712.949752][T12082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.010856][T12082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.028420][ T9424] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 713.073385][T12174] ieee802154 phy0 wpan0: encryption failed: -22 [ 713.111778][ T9424] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.307514][ T9424] usb 4-1: config 0 has no interface number 0 [ 713.335393][T12082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.371301][ T9424] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 713.614865][T12082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.666457][ T9424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.847130][T12082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.890557][ T9424] usb 4-1: Product: syz [ 713.894838][ T9424] usb 4-1: Manufacturer: syz [ 713.916741][ T9424] usb 4-1: SerialNumber: syz [ 713.931731][T12179] netlink: 788 bytes leftover after parsing attributes in process `syz.5.1685'. [ 713.966761][T10243] Bluetooth: hci2: command tx timeout [ 714.473840][T12082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.521124][ T9424] usb 4-1: config 0 descriptor?? [ 714.961919][T12163] netlink: 'syz.3.1680': attribute type 2 has an invalid length. [ 715.019640][ T9424] usb 4-1: USB disconnect, device number 37 [ 715.024096][T12082] hsr_slave_0: entered promiscuous mode [ 715.069616][T12082] hsr_slave_1: entered promiscuous mode [ 715.113905][T12082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 715.145502][T12082] Cannot create hsr debugfs directory [ 717.709320][ T30] audit: type=1400 audit(1751308823.774:1693): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12211 comm="syz.6.1695" daddr=fe80::bb dest=20001 [ 717.886161][T12216] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 717.906477][T12216] fuse: Unknown parameter 'rootmode' [ 717.948267][T12214] ieee802154 phy0 wpan0: encryption failed: -22 [ 719.207060][T12082] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 719.432305][T12082] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 719.568857][T12082] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 719.648146][T12082] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 719.726749][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 719.916112][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 719.967023][ T9] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 720.002133][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.081223][ T9] usb 4-1: Product: syz [ 720.085464][ T9] usb 4-1: Manufacturer: syz [ 720.104389][ T9] usb 4-1: SerialNumber: syz [ 720.140838][ T9] usb 4-1: config 0 descriptor?? [ 720.265955][T12082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.477733][T12082] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.569812][ T7906] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.577051][ T7906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.585562][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 720.639427][ T7906] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.646724][ T7906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.652535][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 720.727982][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 720.746530][ T9] usb 4-1: media controller created [ 721.505332][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 721.686916][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 721.716060][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 721.734623][T12250] veth2: entered allmulticast mode [ 721.755421][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 721.815679][ T9] usb 4-1: USB disconnect, device number 38 [ 722.457996][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 722.602504][T12256] syz.6.1706: attempt to access beyond end of device [ 722.602504][T12256] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 722.897816][T12082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.656662][ T9427] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 724.804938][T12082] veth0_vlan: entered promiscuous mode [ 724.827505][T12082] veth1_vlan: entered promiscuous mode [ 724.840359][ T9427] usb 7-1: Using ep0 maxpacket: 16 [ 724.852503][ T9427] usb 7-1: config 252 has an invalid interface number: 15 but max is 0 [ 724.874128][ T9427] usb 7-1: config 252 has no interface number 0 [ 724.911546][ T9427] usb 7-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 255, setting to 64 [ 724.954378][T12082] veth0_macvtap: entered promiscuous mode [ 724.993098][ T9427] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 725.022944][ T9427] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.035803][T12082] veth1_macvtap: entered promiscuous mode [ 725.050358][ T9427] usb 7-1: Product: syz [ 725.065578][ T9427] usb 7-1: Manufacturer: syz [ 725.082789][ T9427] usb 7-1: SerialNumber: syz [ 725.106985][T12082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.149852][ T9427] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 725.164450][T12082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.200809][T12082] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.223936][T12082] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.235400][T12082] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.244781][T12082] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.310676][ T13] usb 7-1: Failed to submit usb control message: -71 [ 725.322042][ T9] usb 7-1: USB disconnect, device number 17 [ 725.345930][ T13] usb 7-1: unable to send the bmi data to the device: -71 [ 725.365399][ T13] usb 7-1: unable to get target info from device [ 725.420101][ T13] usb 7-1: could not get target info (-71) [ 725.455207][ T13] usb 7-1: could not probe fw (-71) [ 725.619648][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.660675][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.888394][ T7905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.899466][ T7905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.894257][T12305] veth2: entered allmulticast mode [ 727.172236][T12308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.200128][T12308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.556456][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 729.303290][T12319] syz.3.1719: attempt to access beyond end of device [ 729.303290][T12319] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 730.542030][T12340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.929896][T10441] team0: Port device syz_tun removed [ 732.013408][T12339] syz.3.1724 (12339) used greatest stack depth: 16776 bytes left [ 732.475467][T12348] netlink: 'syz.3.1727': attribute type 3 has an invalid length. [ 734.353137][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 734.363749][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 734.386750][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 734.395006][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 734.458498][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 734.637509][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1721'. [ 734.811660][T12361] lo speed is unknown, defaulting to 1000 [ 735.884936][ T1208] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 736.029145][T12378] syz.3.1734: attempt to access beyond end of device [ 736.029145][T12378] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 736.094258][ T1208] usb 8-1: Using ep0 maxpacket: 16 [ 736.183133][T12387] pimreg3: entered allmulticast mode [ 736.256024][ T1208] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 736.287553][ T1208] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.450133][ T1208] usb 8-1: config 0 has no interface number 0 [ 736.543816][T12393] NILFS (nullb0): couldn't find nilfs on the device [ 736.619610][T10243] Bluetooth: hci0: command tx timeout [ 736.767923][ T1208] usb 8-1: config 0 interface 251 altsetting 121 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 736.984406][ T1208] usb 8-1: config 0 interface 251 has no altsetting 0 [ 737.124455][ T1208] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 737.303181][ T1208] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.311493][ T1208] usb 8-1: Product: syz [ 737.315861][ T1208] usb 8-1: Manufacturer: syz [ 737.333216][ T1208] usb 8-1: SerialNumber: syz [ 738.217215][ T1208] usb 8-1: config 0 descriptor?? [ 738.286578][ T1208] usb 8-1: can't set config #0, error -71 [ 738.333041][ T1208] usb 8-1: USB disconnect, device number 2 [ 738.470309][T12401] tipc: Enabled bearer , priority 0 [ 738.527552][T12401] syzkaller0: entered promiscuous mode [ 738.602606][T12401] syzkaller0: entered allmulticast mode [ 738.675080][T12406] tipc: Resetting bearer [ 738.697887][T10243] Bluetooth: hci0: command tx timeout [ 738.791163][T12400] tipc: Resetting bearer [ 739.011508][T12400] tipc: Disabling bearer [ 739.121181][ T1208] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 739.549916][T12413] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 739.758589][ T5911] tipc: Node number set to 421368215 [ 739.949513][ T1208] usb 8-1: config 1 interface 0 altsetting 161 bulk endpoint 0x82 has invalid maxpacket 1024 [ 740.005432][ T1208] usb 8-1: config 1 interface 0 altsetting 161 bulk endpoint 0x3 has invalid maxpacket 8 [ 740.016562][ T1208] usb 8-1: config 1 interface 0 altsetting 161 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 740.046477][ T1208] usb 8-1: config 1 interface 0 has no altsetting 0 [ 740.120552][ T1208] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 740.150196][ T1208] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.196963][ T1208] usb 8-1: Product: syz [ 740.215658][ T1208] usb 8-1: Manufacturer: syz [ 740.236160][ T1208] usb 8-1: SerialNumber: syz [ 740.258318][T12410] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 740.265918][T12410] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 740.368994][T12428] syz.6.1747: attempt to access beyond end of device [ 740.368994][T12428] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 740.778939][T10243] Bluetooth: hci0: command tx timeout [ 741.225780][T12361] chnl_net:caif_netlink_parms(): no params data found [ 742.168681][ T1208] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 742.266680][ T1208] usb 8-1: USB disconnect, device number 3 [ 742.599971][T12361] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.607531][T12361] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.614970][T12361] bridge_slave_0: entered allmulticast mode [ 742.638001][T12361] bridge_slave_0: entered promiscuous mode [ 742.655575][T12361] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.671219][T12361] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.708415][T12361] bridge_slave_1: entered allmulticast mode [ 742.741392][T12361] bridge_slave_1: entered promiscuous mode [ 742.804429][T12451] kvm: pic: non byte write [ 742.857603][T10243] Bluetooth: hci0: command tx timeout [ 743.554752][T12361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.567421][T12361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.806654][ T30] audit: type=1400 audit(1751308849.874:1694): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=12468 comm="syz.3.1758" saddr=fe80::aa daddr=fe80::aa dest=20002 netif=wpan0 [ 743.894020][T12361] team0: Port device team_slave_0 added [ 743.975515][T12361] team0: Port device team_slave_1 added [ 744.250487][T12476] syz.7.1759: attempt to access beyond end of device [ 744.250487][T12476] nbd7: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 744.508760][T12361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.551585][T12361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.094355][T12361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.209529][T12361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.259320][T12361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.313506][T12492] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input18 [ 745.395752][T12361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.144708][T12516] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 747.170983][T12361] hsr_slave_0: entered promiscuous mode [ 747.263015][T12361] hsr_slave_1: entered promiscuous mode [ 747.291628][T12361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 747.343122][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.349545][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.404011][T12361] Cannot create hsr debugfs directory [ 747.824182][T12520] bridge2: entered promiscuous mode [ 748.413734][T12525] binder_alloc: 12524: binder_alloc_buf, no vma [ 748.477086][T12525] binder: 12524:12525 ioctl c0306201 200000000240 returned -11 [ 748.906035][T12536] syz.3.1777: attempt to access beyond end of device [ 748.906035][T12536] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 749.018440][ T1208] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 749.232436][T12361] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 749.396678][ T1208] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 749.416725][T12361] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 749.423503][ T1208] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.441519][T12361] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 749.449147][ T1208] usb 7-1: config 0 descriptor?? [ 750.170102][T12361] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 750.217352][ T1208] cp210x 7-1:0.0: cp210x converter detected [ 750.426541][ T1208] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 750.486204][ T30] audit: type=1400 audit(1751308856.544:1695): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=12555 comm="syz.3.1781" saddr=fe80::aa daddr=fe80::aa dest=20002 netif=wpan0 [ 750.687371][ T1208] usb 7-1: cp210x converter now attached to ttyUSB0 [ 750.707159][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1783'. [ 750.792857][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1783'. [ 750.821213][T12361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.844682][T12565] tipc: Enabling of bearer rejected, failed to enable media [ 750.846068][ T9424] usb 7-1: USB disconnect, device number 19 [ 750.893438][T12361] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.236059][ T9424] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 751.309958][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.317247][ T6009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.403053][ T9424] cp210x 7-1:0.0: device disconnected [ 751.571019][T12573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1786'. [ 751.760850][ T7906] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.768106][ T7906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.047603][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1787'. [ 752.489385][T12579] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1788'. [ 752.526511][T12579] netlink: 212 bytes leftover after parsing attributes in process `syz.6.1788'. [ 753.696967][ T30] audit: type=1400 audit(1751308859.774:1696): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=12593 comm="syz.7.1794" saddr=fe80::aa daddr=fe80::aa dest=20002 netif=wpan0 [ 754.388719][ T30] audit: type=1400 audit(1751308859.924:1697): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12595 comm="syz.6.1795" daddr=::ffff:172.20.20.20 dest=20001 [ 754.728103][T12361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.445812][T12361] veth0_vlan: entered promiscuous mode [ 756.538307][T12361] veth1_vlan: entered promiscuous mode [ 756.795401][T12361] veth0_macvtap: entered promiscuous mode [ 756.829992][T12361] veth1_macvtap: entered promiscuous mode [ 757.604688][T12361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.753559][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 757.768839][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 757.778007][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 757.786138][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 757.788365][T12361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.794098][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 757.934919][T12361] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.956938][T12635] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1804'. [ 757.978967][T12361] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.006649][T12635] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1804'. [ 758.022650][T12361] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.041721][T12361] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.075861][T12628] lo speed is unknown, defaulting to 1000 [ 758.101977][T12635] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1804'. [ 758.461336][T12639] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 758.528843][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.569353][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.694970][ T7905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.746507][ T7905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.868837][ T30] audit: type=1400 audit(1751308864.934:1698): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=12642 comm="syz.7.1808" saddr=fe80::aa daddr=fe80::aa dest=20002 netif=wpan0 [ 759.297416][T12645] overlayfs: missing 'lowerdir' [ 759.307614][T12650] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1810'. [ 759.317159][T12650] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1810'. [ 759.905792][ T51] Bluetooth: hci3: command tx timeout [ 760.263979][T12662] xt_cgroup: invalid path, errno=-2 [ 760.802732][T12628] chnl_net:caif_netlink_parms(): no params data found [ 761.048859][T12667] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd7": -EINTR [ 761.977139][ T51] Bluetooth: hci3: command tx timeout [ 762.851808][T12628] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.896637][T12628] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.903976][T12628] bridge_slave_0: entered allmulticast mode [ 762.945832][T12692] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1817'. [ 762.989096][T12628] bridge_slave_0: entered promiscuous mode [ 763.057658][T12628] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.064853][T12628] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.142730][T12628] bridge_slave_1: entered allmulticast mode [ 763.191124][ T30] audit: type=1400 audit(1751308869.264:1699): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=12694 comm="syz.7.1818" saddr=fe80::aa daddr=fe80::aa dest=20002 netif=wpan0 [ 763.195485][T12628] bridge_slave_1: entered promiscuous mode [ 763.541185][ T9422] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 763.595028][T12628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.669475][T12628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.726481][ T9422] usb 9-1: Using ep0 maxpacket: 16 [ 763.752357][ T9422] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.980631][ T9422] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.078019][ T51] Bluetooth: hci3: command tx timeout [ 764.130132][ T9422] usb 9-1: config 0 interface 0 has no altsetting 0 [ 764.138535][ T9422] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 764.156599][ T9422] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.172301][ T9422] usb 9-1: config 0 descriptor?? [ 764.235699][T12705] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1821'. [ 764.317768][T12706] netlink: 'syz.7.1821': attribute type 3 has an invalid length. [ 764.523281][T12628] team0: Port device team_slave_0 added [ 764.573078][T12628] team0: Port device team_slave_1 added [ 764.865848][T12710] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 766.136585][ T51] Bluetooth: hci3: command tx timeout [ 766.663446][ T9422] usbhid 9-1:0.0: can't add hid device: -71 [ 766.684698][ T9422] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 767.218856][T12628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.219980][ T9422] usb 9-1: USB disconnect, device number 2 [ 767.303685][T12628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.337884][T12628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.494255][T12628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.501435][T12628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.528051][T12628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.427653][T12726] syz.8.1825: attempt to access beyond end of device [ 768.427653][T12726] nbd8: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 768.924771][T12628] hsr_slave_0: entered promiscuous mode [ 769.021865][T12628] hsr_slave_1: entered promiscuous mode [ 769.050144][T12628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 769.068180][T12750] fuse: Bad value for 'rootmode' [ 769.083035][T12628] Cannot create hsr debugfs directory [ 769.816478][ T1208] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 769.844184][T12752] bridge0: left promiscuous mode [ 770.035113][ T1208] usb 7-1: LPM exit latency is zeroed, disabling LPM. [ 770.066847][T12752] bridge1: left promiscuous mode [ 770.073808][ T1208] usb 7-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 770.102294][T12752] vxlan0: left promiscuous mode [ 770.107893][ T1208] usb 7-1: config 1 interface 0 has no altsetting 0 [ 770.148032][ T1208] usb 7-1: string descriptor 0 read error: -22 [ 770.171536][T12752] bridge2: left promiscuous mode [ 770.176897][ T1208] usb 7-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 770.206510][ T1208] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.245569][T12769] FAULT_INJECTION: forcing a failure. [ 770.245569][T12769] name failslab, interval 1, probability 0, space 0, times 0 [ 770.259292][T12769] CPU: 0 UID: 0 PID: 12769 Comm: syz.8.1829 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 770.259320][T12769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 770.259332][T12769] Call Trace: [ 770.259341][T12769] [ 770.259350][T12769] dump_stack_lvl+0x189/0x250 [ 770.259388][T12769] ? __pfx____ratelimit+0x10/0x10 [ 770.259418][T12769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 770.259448][T12769] ? __pfx__printk+0x10/0x10 [ 770.259469][T12769] ? rhashtable_lookup+0x667/0x6b0 [ 770.259499][T12769] ? __pfx_xfrm_pol_bin_cmp+0x10/0x10 [ 770.259525][T12769] ? __pfx_rhashtable_lookup+0x10/0x10 [ 770.259552][T12769] should_fail_ex+0x414/0x560 [ 770.259589][T12769] should_failslab+0xa8/0x100 [ 770.259618][T12769] __kmalloc_cache_noprof+0x70/0x3d0 [ 770.259642][T12769] ? xfrm_policy_inexact_alloc_bin+0x3a5/0x15b0 [ 770.259669][T12769] ? xfrm_policy_inexact_alloc_bin+0x1a5/0x15b0 [ 770.259696][T12769] ? xfrm_policy_inexact_alloc_bin+0x1a5/0x15b0 [ 770.259720][T12769] xfrm_policy_inexact_alloc_bin+0x3a5/0x15b0 [ 770.259745][T12769] ? register_lock_class+0x51/0x320 [ 770.259779][T12769] ? __lock_acquire+0xab9/0xd20 [ 770.259816][T12769] ? __pfx_xfrm_policy_inexact_alloc_bin+0x10/0x10 [ 770.259844][T12769] ? __get_hash_thresh+0x10e/0x420 [ 770.259871][T12769] ? policy_hash_bysel+0x108/0x6e0 [ 770.259893][T12769] xfrm_policy_inexact_insert+0x1e/0x180 [ 770.259916][T12769] xfrm_policy_insert+0x116/0x940 [ 770.259947][T12769] xfrm_add_policy+0x2e2/0x800 [ 770.259978][T12769] ? __pfx_xfrm_add_policy+0x10/0x10 [ 770.260005][T12769] ? __nla_parse+0x40/0x60 [ 770.260036][T12769] xfrm_user_rcv_msg+0x7a0/0xab0 [ 770.260065][T12769] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 770.260127][T12769] ? __mutex_trylock_common+0x153/0x260 [ 770.260162][T12769] ? __pfx___mutex_trylock_common+0x10/0x10 [ 770.260201][T12769] ? rcu_is_watching+0x15/0xb0 [ 770.260231][T12769] ? trace_contention_end+0x39/0x120 [ 770.260258][T12769] netlink_rcv_skb+0x205/0x470 [ 770.260293][T12769] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 770.260321][T12769] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 770.260363][T12769] ? netlink_deliver_tap+0x2e/0x1b0 [ 770.260384][T12769] ? netlink_deliver_tap+0x2e/0x1b0 [ 770.260408][T12769] xfrm_netlink_rcv+0x79/0x90 [ 770.260430][T12769] netlink_unicast+0x758/0x8d0 [ 770.260485][T12769] netlink_sendmsg+0x805/0xb30 [ 770.260517][T12769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.260548][T12769] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 770.260577][T12769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.260599][T12769] __sock_sendmsg+0x219/0x270 [ 770.260632][T12769] ____sys_sendmsg+0x505/0x830 [ 770.260661][T12769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 770.260694][T12769] ? import_iovec+0x74/0xa0 [ 770.260728][T12769] ___sys_sendmsg+0x21f/0x2a0 [ 770.260754][T12769] ? __pfx____sys_sendmsg+0x10/0x10 [ 770.260824][T12769] ? __fget_files+0x2a/0x420 [ 770.260849][T12769] ? __fget_files+0x3a0/0x420 [ 770.260887][T12769] __x64_sys_sendmsg+0x19b/0x260 [ 770.260914][T12769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 770.260948][T12769] ? __pfx_ksys_write+0x10/0x10 [ 770.260967][T12769] ? rcu_is_watching+0x15/0xb0 [ 770.261001][T12769] ? do_syscall_64+0xbe/0x3b0 [ 770.261038][T12769] do_syscall_64+0xfa/0x3b0 [ 770.261065][T12769] ? lockdep_hardirqs_on+0x9c/0x150 [ 770.261092][T12769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.261111][T12769] ? clear_bhb_loop+0x60/0xb0 [ 770.261135][T12769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.261164][T12769] RIP: 0033:0x7f327fb8e929 [ 770.261182][T12769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.261199][T12769] RSP: 002b:00007f32809ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.261219][T12769] RAX: ffffffffffffffda RBX: 00007f327fdb6080 RCX: 00007f327fb8e929 [ 770.261233][T12769] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 770.261246][T12769] RBP: 00007f32809ea090 R08: 0000000000000000 R09: 0000000000000000 [ 770.261258][T12769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.261269][T12769] R13: 0000000000000000 R14: 00007f327fdb6080 R15: 00007ffe2cc3ac18 [ 770.261301][T12769] [ 770.672906][ C0] vkms_vblank_simulate: vblank timer overrun [ 772.582632][ T1208] usbhid 7-1:1.0: can't add hid device: -71 [ 772.602521][ T1208] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 772.649735][ T1208] usb 7-1: USB disconnect, device number 20 [ 772.752734][T12628] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.492530][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 773.647201][T12789] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd6": -EINTR [ 773.756507][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 773.810898][ T10] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 773.840727][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.064362][ T10] usb 8-1: Product: syz [ 774.406470][ T10] usb 8-1: Manufacturer: syz [ 774.411177][ T10] usb 8-1: SerialNumber: syz [ 774.458428][T12628] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.478631][ T10] usb 8-1: config 0 descriptor?? [ 774.838533][T12628] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.276570][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 775.294575][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 775.328719][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 775.364097][ T10] usb 8-1: media controller created [ 775.459437][T12628] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.468916][T12782] dtv5100: wlen = 0, aborting. [ 775.607406][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 776.784481][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 776.791636][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 776.826022][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 777.287099][ T1208] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 777.463345][T12628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 777.494434][ T1208] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 777.517965][ T1208] usb 9-1: config 0 has no interface number 0 [ 777.554651][ T1208] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 777.570946][T12628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 777.619301][ T1208] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.652318][T12628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 777.680608][ T1208] usb 9-1: config 0 descriptor?? [ 777.748977][T12628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 777.799640][ T1208] usb 9-1: selecting invalid altsetting 1 [ 777.827719][ T1208] dvb_ttusb_budget: ttusb_init_controller: error [ 777.839122][ T1208] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 777.956802][T12825] ------------[ cut here ]------------ [ 777.962389][T12825] usb 8-1: BOGUS control dir, pipe 80000480 doesn't match bRequestType c0 [ 777.971572][T12825] WARNING: CPU: 0 PID: 12825 at drivers/usb/core/urb.c:413 usb_submit_urb+0x115d/0x1890 [ 777.981951][T12825] Modules linked in: [ 777.986648][T12825] CPU: 0 UID: 0 PID: 12825 Comm: syz.8.1848 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 777.997653][T12825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 778.007835][T12825] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 778.013499][T12825] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 c0 55 33 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 f4 eb 69 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 778.033366][T12825] RSP: 0018:ffffc9000af87830 EFLAGS: 00010246 [ 778.039577][T12825] RAX: 24165bfe5f6ee500 RBX: ffff88803ca86500 RCX: 0000000000080000 [ 778.047692][T12825] RDX: ffffc90017151000 RSI: 000000000000438b RDI: 000000000000438c [ 778.055705][T12825] RBP: 1ffff1100a344cac R08: 0000000000000003 R09: 0000000000000004 [ 778.064786][T12825] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: ffff888051a26560 [ 778.072852][T12825] R13: dffffc0000000000 R14: 0000000080000480 R15: ffff88803e2dc0a0 [ 778.080888][T12825] FS: 00007f3280a0b6c0(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 778.089942][T12825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 778.097040][T12825] CR2: 0000001b2f314ff8 CR3: 000000003b54a000 CR4: 00000000003526f0 [ 778.105045][T12825] Call Trace: [ 778.108397][T12825] [ 778.111352][T12825] usb_start_wait_urb+0x114/0x4c0 [ 778.116492][T12825] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 778.122085][T12825] usb_control_msg+0x232/0x3e0 [ 778.126965][T12825] dtv5100_i2c_msg+0x250/0x330 [ 778.131766][T12825] dtv5100_i2c_xfer+0x269/0x3c0 [ 778.137063][T12825] __i2c_transfer+0x874/0x2170 [ 778.141873][T12825] ? lockdep_hardirqs_on+0x9c/0x150 [ 778.147169][T12825] ? __pfx___i2c_transfer+0x10/0x10 [ 778.152385][T12825] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 778.157809][T12825] ? i2c_transfer+0x11d/0x3a0 [ 778.162501][T12825] i2c_transfer+0x25b/0x3a0 [ 778.167061][T12825] ? __pfx_i2c_transfer+0x10/0x10 [ 778.172101][T12825] ? _copy_from_user+0x94/0xb0 [ 778.176959][T12825] i2cdev_ioctl_rdwr+0x460/0x740 [ 778.181919][T12825] i2cdev_ioctl+0x64b/0x7f0 [ 778.186476][T12825] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 778.191521][T12825] ? __fget_files+0x3a0/0x420 [ 778.196439][T12825] ? __fget_files+0x2a/0x420 [ 778.201069][T12825] ? bpf_lsm_file_ioctl+0x9/0x20 [ 778.206023][T12825] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 778.211363][T12825] __se_sys_ioctl+0xfc/0x170 [ 778.215971][T12825] do_syscall_64+0xfa/0x3b0 [ 778.220538][T12825] ? lockdep_hardirqs_on+0x9c/0x150 [ 778.225749][T12825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.231854][T12825] ? clear_bhb_loop+0x60/0xb0 [ 778.236592][T12825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.242490][T12825] RIP: 0033:0x7f327fb8e929 [ 778.246951][T12825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.266635][T12825] RSP: 002b:00007f3280a0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 778.275077][T12825] RAX: ffffffffffffffda RBX: 00007f327fdb5fa0 RCX: 00007f327fb8e929 [ 778.283098][T12825] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000006 [ 778.291194][T12825] RBP: 00007f327fc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 778.299873][T12825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.307983][T12825] R13: 0000000000000000 R14: 00007f327fdb5fa0 R15: 00007ffe2cc3ac18 [ 778.315996][T12825] [ 778.319068][T12825] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 778.326362][T12825] CPU: 0 UID: 0 PID: 12825 Comm: syz.8.1848 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 778.336703][T12825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 778.346776][T12825] Call Trace: [ 778.350160][T12825] [ 778.353103][T12825] dump_stack_lvl+0x99/0x250 [ 778.357801][T12825] ? __asan_memcpy+0x40/0x70 [ 778.362396][T12825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 778.367607][T12825] ? __pfx__printk+0x10/0x10 [ 778.372213][T12825] panic+0x2db/0x790 [ 778.376119][T12825] ? __pfx_panic+0x10/0x10 [ 778.380567][T12825] __warn+0x31b/0x4b0 [ 778.384554][T12825] ? usb_submit_urb+0x115d/0x1890 [ 778.389592][T12825] ? usb_submit_urb+0x115d/0x1890 [ 778.394629][T12825] report_bug+0x2be/0x4f0 [ 778.398972][T12825] ? usb_submit_urb+0x115d/0x1890 [ 778.404009][T12825] ? usb_submit_urb+0x115d/0x1890 [ 778.409058][T12825] ? usb_submit_urb+0x115f/0x1890 [ 778.414089][T12825] handle_bug+0x84/0x160 [ 778.418341][T12825] exc_invalid_op+0x1a/0x50 [ 778.422849][T12825] asm_exc_invalid_op+0x1a/0x20 [ 778.427712][T12825] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 778.433351][T12825] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 c0 55 33 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 f4 eb 69 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 778.452963][T12825] RSP: 0018:ffffc9000af87830 EFLAGS: 00010246 [ 778.459071][T12825] RAX: 24165bfe5f6ee500 RBX: ffff88803ca86500 RCX: 0000000000080000 [ 778.467068][T12825] RDX: ffffc90017151000 RSI: 000000000000438b RDI: 000000000000438c [ 778.475058][T12825] RBP: 1ffff1100a344cac R08: 0000000000000003 R09: 0000000000000004 [ 778.483037][T12825] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: ffff888051a26560 [ 778.491022][T12825] R13: dffffc0000000000 R14: 0000000080000480 R15: ffff88803e2dc0a0 [ 778.499035][T12825] usb_start_wait_urb+0x114/0x4c0 [ 778.504089][T12825] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 778.509671][T12825] usb_control_msg+0x232/0x3e0 [ 778.514460][T12825] dtv5100_i2c_msg+0x250/0x330 [ 778.519240][T12825] dtv5100_i2c_xfer+0x269/0x3c0 [ 778.524121][T12825] __i2c_transfer+0x874/0x2170 [ 778.528889][T12825] ? lockdep_hardirqs_on+0x9c/0x150 [ 778.534125][T12825] ? __pfx___i2c_transfer+0x10/0x10 [ 778.539333][T12825] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 778.544716][T12825] ? i2c_transfer+0x11d/0x3a0 [ 778.549417][T12825] i2c_transfer+0x25b/0x3a0 [ 778.553931][T12825] ? __pfx_i2c_transfer+0x10/0x10 [ 778.558988][T12825] ? _copy_from_user+0x94/0xb0 [ 778.563768][T12825] i2cdev_ioctl_rdwr+0x460/0x740 [ 778.568725][T12825] i2cdev_ioctl+0x64b/0x7f0 [ 778.573233][T12825] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 778.578269][T12825] ? __fget_files+0x3a0/0x420 [ 778.582976][T12825] ? __fget_files+0x2a/0x420 [ 778.587588][T12825] ? bpf_lsm_file_ioctl+0x9/0x20 [ 778.592538][T12825] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 778.597583][T12825] __se_sys_ioctl+0xfc/0x170 [ 778.602184][T12825] do_syscall_64+0xfa/0x3b0 [ 778.606791][T12825] ? lockdep_hardirqs_on+0x9c/0x150 [ 778.612005][T12825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.618168][T12825] ? clear_bhb_loop+0x60/0xb0 [ 778.622882][T12825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.628804][T12825] RIP: 0033:0x7f327fb8e929 [ 778.633318][T12825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.652950][T12825] RSP: 002b:00007f3280a0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 778.661392][T12825] RAX: ffffffffffffffda RBX: 00007f327fdb5fa0 RCX: 00007f327fb8e929 [ 778.669400][T12825] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000006 [ 778.677382][T12825] RBP: 00007f327fc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 778.685361][T12825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.693339][T12825] R13: 0000000000000000 R14: 00007f327fdb5fa0 R15: 00007ffe2cc3ac18 [ 778.701342][T12825] [ 778.704921][T12825] Kernel Offset: disabled [ 778.709306][T12825] Rebooting in 86400 seconds..