last executing test programs: 4m33.146104926s ago: executing program 2 (id=3): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x342) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) gettid() ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x342) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) (async) gettid() (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) (async) 4m33.054633008s ago: executing program 1 (id=2): r0 = syz_io_uring_setup(0x495, &(0x7f00000002c0)={0x0, 0x79af, 0x400, 0x8000, 0x40024d}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') syz_fuse_handle_req(r5, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000000540)='./file0\x00', 0x2) syz_fuse_handle_req(r5, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=r3, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000fd0400"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000100)=@raw=[@alu={0x4, 0x0, 0x6, 0x2, 0xb, 0xfffffffffffffff0, 0x15}, @alu={0x7, 0x1, 0x6, 0xd, 0x7, 0xc}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000180)='syzkaller\x00', 0xffffff01, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000200)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[r6], &(0x7f0000000380)=[{0x2, 0x3, 0xa}], 0x10, 0x1000}, 0x94) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000480), &(0x7f00000004c0)='%pK \x00'}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x1a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1e}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x20, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r12 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r12, 0x0, 0x40, &(0x7f0000000780)={'mangle\x00', 0x0, [0x7, 0x5, 0xffff, 0x3a2a157c, 0x1]}, &(0x7f00000000c0)=0x54) sendfile(r11, r12, 0x0, 0xb7a0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x1f, 0x49, 0xcb, r10}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_LABEL={0x14}]}, 0x34}}, 0x0) 4m32.87751549s ago: executing program 2 (id=10): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000100)=0xfff, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bind$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@enum64={0x2, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x1000000, 0xd, 0x79}]}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000380)=""/2, 0x34, 0x2, 0x1, 0x2}, 0x28) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, 0x0, 0x20000000) ioctl$TCSETSW2(r5, 0x5408, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "eb000000e88000ff", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "2879ffff", "62963dfa951f9b3d"}, 0x38) sendto$inet6(r4, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 4m31.072496839s ago: executing program 4 (id=5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x11, 0x80}}, 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f80)={0x24, 0x2, 0x3, 0xe0d, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xd}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$smackfs_change_rule(0xffffff9c, &(0x7f0000001140), 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x41) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000100)={0x1, 0x200, 0xfffffff9, 0x7, 0x9, 0x2}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x24}}, 0x4000000) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x7fff, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa05fc0083", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5020000090780000b09265c8c4b3fff4447688226350da47e1c476bf11de27df5261000c71b10ecebb47b8e8f76e807f4b77476d3025ed78c345e1b5591e3a674afea5d3d8a6ea80464444a6476aca706ff3ddc748dcb047b5d089feca857f294411ebdf52516200408ca31ca31e911489bd5baf2208436795e6ae1bc3453b5d6eb049f7a2bac3fa71aaaede0961c64e208478186b7725e0975286ccf009ae6b3c046aab2135ce9cc1c9df476121c3b8142d61cc5aedb54a3550fd0334f1cea8ea3d5a23dc41353eab78a8c52421cccefda8213e"], 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [], {0x14}}, 0x28}}, 0x40880) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') pipe2$9p(&(0x7f0000000240), 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/181, 0xb5) 4m30.957792056s ago: executing program 1 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r1, @ANYBLOB="4000a6080a000200ffffffffffff0000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x700000000000000) 4m30.237221649s ago: executing program 1 (id=16): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x29) (async) r1 = socket$inet(0x2, 0x2, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (rerun: 32) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) (async, rerun: 64) writev(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) syz_open_dev$usbfs(0x0, 0x76, 0x101301) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 64) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) readv(r5, &(0x7f0000000640)=[{&(0x7f0000000180)=""/169, 0xfffffd51}], 0x1) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) (async) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) (async) connect$unix(r6, 0x0, 0x0) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async) bind$inet(r8, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) (async) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) 4m29.377878927s ago: executing program 3 (id=18): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x32}, {@in, 0x0, 0x32}, @in6=@loopback, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0xffffffffffffffff, 0xe, 0x9}, {0x0, 0x400}, 0x70bd29, 0x0, 0xa, 0x3, 0x0, 0x27}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, 0x2b, 0xb, 0x0, 0x0, {0x7}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x7}]}, 0x30}}, 0x4000) 4m29.160000705s ago: executing program 0 (id=19): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = socket(0x10, 0xa, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) write$smackfs_change_rule(0xffffffffffffffff, &(0x7f0000000140)={'\x00', 0x20, '/dev/sequencer\x00', 0x20, 'rwtl', 0x20, 'rwxab'}, 0x1d) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={r3, 0x8}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0xff, 0x8, r4}}], 0x20, 0x4c004}], 0x1, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000007c0)={r3, 0x9, 0x9, 0x47, 0x2, 0x3, 0x1, 0x3, {r3, @in6={{0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7f}}, 0x10, 0x2, 0x9, 0x81}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={r3, 0x7fbe, 0x30, 0x5c25, 0xe5}, &(0x7f00000000c0)=0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x20a00, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$bt_hci(r0, 0x0, 0x6) 4m29.082732934s ago: executing program 1 (id=20): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000940)={'syz1\x00', {0x1, 0x2, 0x1ff, 0xb06}, 0x27, [0x1000, 0x10001, 0x7e, 0x10, 0xc, 0x827, 0x2, 0x1, 0xcf1, 0x2, 0x0, 0x8, 0x3, 0x100, 0xc776, 0x7, 0x7, 0x9, 0xffffffff, 0xfffffffd, 0xfffffffd, 0x4, 0x2, 0xa, 0xe, 0x1, 0x80000000, 0x4, 0x8, 0xb, 0x4, 0xa9, 0x956, 0x11, 0x88, 0x4, 0x2, 0x7, 0xa, 0x0, 0x9de, 0x1, 0x0, 0x80000200, 0x7, 0x2, 0x7fff, 0x9, 0x40000000, 0x6, 0xb05, 0xc, 0x5, 0x5, 0x6, 0x4, 0x0, 0x3, 0x3, 0x9, 0x5, 0x6252, 0x0, 0x8], [0x800, 0x96, 0x2fd1d58, 0x0, 0x401, 0x6, 0x1, 0x8, 0x7, 0x80, 0xfff, 0x2f, 0x9, 0x0, 0x10001, 0x0, 0xfffffbff, 0x6, 0x100, 0x9, 0x2, 0x20000001, 0x8001, 0x1, 0xd, 0x5, 0x1000, 0x8, 0x1, 0x9, 0x80000000, 0xc, 0x1, 0x0, 0xfa, 0x7, 0x9f9, 0x1, 0x2, 0xb342, 0xf7c, 0x451f, 0x1, 0x605f, 0xb2, 0xd4e5, 0x3, 0x80000001, 0x1, 0x2, 0x9, 0x0, 0xb9, 0x7, 0x101, 0xca8, 0x0, 0x7fffffff, 0xfffffffe, 0xffffff81, 0x5, 0x7, 0x5, 0xff], [0xfffffff5, 0x0, 0x0, 0xdd, 0x6, 0x7fffffff, 0x80000349, 0x10000000, 0x89ef, 0xcb4, 0x4, 0x587a, 0x0, 0xf, 0x100, 0xa0000000, 0x0, 0x5, 0x4, 0x9, 0x1000008, 0xe, 0xcc, 0x6, 0x200, 0x9, 0x6, 0x6, 0x3, 0x10001, 0x7fff, 0x1, 0xfb, 0x2, 0x5, 0x1, 0x0, 0x1fd, 0x6, 0x7, 0x4, 0x2, 0x1000, 0xfa, 0x5, 0x2, 0x6, 0x0, 0x2, 0x3, 0x7, 0x5, 0x741, 0x3, 0x8, 0x2, 0xff, 0x8, 0x6, 0x7ff, 0xd, 0x5, 0x7f, 0x6], [0x2e, 0x9, 0x1, 0x1d43, 0x5, 0x4f84, 0x803, 0x0, 0x4, 0x2b, 0x6, 0x81, 0x7, 0x200, 0xa, 0x1, 0x7fff, 0x9, 0x4, 0x1, 0x2acd684b, 0x2, 0x0, 0x80000000, 0x8009, 0x4, 0x41, 0x7, 0x2, 0x4, 0x2005, 0x6, 0xda, 0x200, 0x80000, 0x6, 0x2, 0xa0000, 0x6a, 0x6, 0x8, 0x8, 0x5, 0xffffff2d, 0x4, 0xbe9f, 0x5728, 0x2, 0x8cb3, 0x7, 0x400, 0x7, 0x10000, 0x1c0000, 0x8, 0xaa3, 0x38e5, 0x0, 0x5, 0x2, 0x1, 0x3, 0x6, 0xffffffff]}, 0x45c) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x46c601, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = getpid() socket$alg(0x26, 0x5, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b00)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004814}, 0x4000) gettid() getpid() rt_tgsigqueueinfo(0x0, r2, 0x7, &(0x7f00000008c0)={0xffffffff, 0xfffffffe, 0x4}) signalfd(r1, 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r5, 0xbabc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) 4m29.017762354s ago: executing program 2 (id=21): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000001240), 0x0}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = accept(r1, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000340)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x9) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)={0x20000, 0x1, 0x10}, 0x18) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f00000000002000000000000000010021"]) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073115800000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x88a, &(0x7f0000000140)={0x0, 0x90f7, 0x8, 0x2, 0x8001ae}, &(0x7f0000000240), &(0x7f0000000280)) 4m28.097501551s ago: executing program 0 (id=22): syz_open_procfs(0x0, 0x0) pipe2$9p(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="dfff25bd0c9e727000fcdbdf2503000000"], 0x14}}, 0x4004) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0xb4, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @mcast2}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x45, [0x5, 0xa]}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) syz_open_procfs(0x0, &(0x7f0000002280)='projid_map\x00') 4m28.096874482s ago: executing program 3 (id=23): socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x28, 0x37, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x6a, 0x0, 0x1, [@nested={0x4, 0xc8}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r1, r0, 0x0, 0x7ffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x7, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000001f00001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x2004, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x2, 0x1}, 0x50) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x700, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 4m26.66287338s ago: executing program 3 (id=24): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) (async, rerun: 32) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) rt_sigaction(0x1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x6}}) (async, rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0x7}}, 0x30) (rerun: 64) write$FUSE_DIRENTPLUS(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="b0000000000000", @ANYRES16], 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 4m26.610475983s ago: executing program 0 (id=25): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x4000000, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 4m26.317727699s ago: executing program 3 (id=26): iopl(0x3) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='decodes i'], 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040), 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_clone(0x3260080, 0x0, 0x30, 0x0, 0x0, 0x0) 4m26.276888599s ago: executing program 2 (id=27): r0 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x8c}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/102, 0x66}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010000100000064000000060a0b040000000000000000020000000900010073797a30000000000900020057797a32000000003800048034000180090001007866726d0000000024000280050003000000000008000140000000000800024000000004080002400000000214df04001100010000000000000000000000000a00"/140], 0x8c}}, 0x0) syz_extract_tcp_res(&(0x7f00000000c0), 0x4, 0x48) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000000)=@buf) 4m26.200039951s ago: executing program 0 (id=28): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x78, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x304}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001000}, 0xc014) 4m25.67227012s ago: executing program 0 (id=29): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0xb614b000) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x1, r2}) (async) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0xa196, 0x24080) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000100)={0x0, r2}) (async) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r4, 0x1d, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0]}, 0x40) (async) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x67dedd6789d20958) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000380)={0x7, 0x8, 0xfa00, {r6, 0xd}}, 0x10) (async) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'ip6gre0\x00'}) (async) r7 = syz_open_dev$dri(&(0x7f0000000440), 0x7f, 0x40000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x1, 0x4, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000600)={0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000700)={&(0x7f00000005c0)=[r9], 0x1, r11, r12, 0x6, 0x8f6e, 0x0, 0xb8bd, {0x8, 0x2, 0x5, 0x3, 0x5, 0x7, 0xdb, 0x4e2, 0xaa5c, 0x516f, 0x800, 0x7f, 0xfffffff8, 0x9, "63758771da1e6186eff405673409cd55d101f662ea02e87a0f249feb349c3b18"}}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x10000, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000007c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xc, @remote, 0x5}, r6}}, 0x30) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={@private=0xa010102, 0x0, 0x0, 0x60, 0x0, [{@initdev}, {@multicast2}, {@loopback}, {@initdev}, {@empty}, {@initdev}]}}) (async) fstatfs(r3, &(0x7f00000008c0)) (async) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000900)) (async) r13 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000a80)={&(0x7f0000000a00)=[0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, r8, 0xcccccccc}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000b40)={&(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0], 0x4, r11, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_ATOMIC(r13, 0xc03864bc, &(0x7f0000000c00)={0x600, 0x1, &(0x7f0000000980)=[r10], &(0x7f00000009c0)=[0x4, 0x15c3, 0x1000, 0xdf3, 0x0], &(0x7f0000000b80)=[r14, r15], &(0x7f0000000bc0)=[0x4, 0x4, 0x5, 0x3, 0x2, 0x4, 0x7003], 0x0, 0x2}) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x80, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 4m25.397660434s ago: executing program 1 (id=30): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001000900009fff0000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) 4m25.32535825s ago: executing program 4 (id=31): syz_open_procfs(0x0, 0x0) pipe2$9p(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="dfff25bd0c9e727000fcdbdf2503000000"], 0x14}}, 0x4004) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0xb4, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @mcast2}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) 4m25.242708943s ago: executing program 2 (id=32): openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x228c0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket(0x21, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000200)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) link(0x0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) 4m25.12171973s ago: executing program 3 (id=33): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x2, 0x15, 0x9, 0x9, 0x5, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_address={0x3, 0x7, 0x3c, 0x80, 0x0, @in={0x2, 0x4e24, @loopback}}]}, 0x28}}, 0x4000000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x22, 0x2, 0x23, &(0x7f0000000200)) epoll_create1(0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r3}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000040)={0x48, 0x1, r3, 0x0, 0x5, 0x1000000000005}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x790b0cfe605734f7, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r3, 0x0, &(0x7f00003bd000/0x3000)=nil, 0x3000, 0x80}) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000002c0)="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", 0xfc) 4m25.028500125s ago: executing program 0 (id=34): pipe(&(0x7f00000022c0)) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa}) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x87) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xd03000, 0x0) getdents64(r4, &(0x7f0000000240)=""/85, 0x55) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000240)=""/85, 0x55) getdents(r5, 0xfffffffffffffffd, 0x58) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x4000)=nil) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') 4m24.55962622s ago: executing program 32 (id=34): pipe(&(0x7f00000022c0)) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa}) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x87) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xd03000, 0x0) getdents64(r4, &(0x7f0000000240)=""/85, 0x55) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000240)=""/85, 0x55) getdents(r5, 0xfffffffffffffffd, 0x58) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x4000)=nil) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') 4m24.553691087s ago: executing program 1 (id=36): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x78, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x304}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001000}, 0xc014) 4m24.251881201s ago: executing program 33 (id=36): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x78, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x304}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001000}, 0xc014) 4m24.209561563s ago: executing program 2 (id=37): syz_open_procfs(0x0, 0x0) pipe2$9p(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="dfff25bd0c9e727000fcdbdf2503000000"], 0x14}}, 0x4004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0xb4, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @mcast2}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) 4m24.147759428s ago: executing program 34 (id=37): syz_open_procfs(0x0, 0x0) pipe2$9p(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="dfff25bd0c9e727000fcdbdf2503000000"], 0x14}}, 0x4004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0xb4, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @mcast2}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) 4m24.131293079s ago: executing program 3 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) setresuid(0x0, 0x0, 0xee00) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ac1414280c0001800800014080ffffff05001400f900000005000500020000000500010006"], 0x6c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x1b}, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x3050f9, &(0x7f0000000100)=ANY=[]) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000080), 0x600880, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@verity_require}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file1/file0\x00'}) mount$pvfs2(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x1000, &(0x7f0000000240)={[{'\x00'}, {}, {'lowerdir'}, {'G'}], [{@uid_gt={'uid>', r5}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="18000000700001000000000000000000070000000804"], 0x18}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @local, 0x8}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) 4m24.046462741s ago: executing program 35 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) setresuid(0x0, 0x0, 0xee00) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ac1414280c0001800800014080ffffff05001400f900000005000500020000000500010006"], 0x6c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x1b}, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x3050f9, &(0x7f0000000100)=ANY=[]) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000080), 0x600880, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@verity_require}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file1/file0\x00'}) mount$pvfs2(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x1000, &(0x7f0000000240)={[{'\x00'}, {}, {'lowerdir'}, {'G'}], [{@uid_gt={'uid>', r5}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="18000000700001000000000000000000070000000804"], 0x18}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @local, 0x8}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) 4m24.027927659s ago: executing program 4 (id=39): creat(&(0x7f0000000300)='./file0\x00', 0xe5) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x2, 0xfffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) pwritev(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)="7eb7f46a2b55", 0x6}], 0x1, 0x0, 0x1ff) 4m24.027349474s ago: executing program 36 (id=39): creat(&(0x7f0000000300)='./file0\x00', 0xe5) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x2, 0xfffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) pwritev(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)="7eb7f46a2b55", 0x6}], 0x1, 0x0, 0x1ff) 12.349538796s ago: executing program 7 (id=688): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000480)={@remote, 0x0}, &(0x7f0000000b80)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000bc0)={@loopback, 0x0}, &(0x7f0000000c00)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xbc69f816d79751c6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xfffffffffffffde2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000ac0), 0x0, &(0x7f0000000d00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x31}, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0xf0}, 0x804) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp6(0xa, 0x2, 0x73) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000085000070230000009500000020000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_POSITION_ID={0xffffffffffffffe5, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x44881) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$alg(0x26, 0x5, 0x0) r9 = socket$inet(0x2, 0x2, 0x1) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) 12.269432289s ago: executing program 6 (id=689): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (fail_nth: 2) 12.00265305s ago: executing program 7 (id=692): epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xb09) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x17, 0xa, 0x3, 0x0, 0x0, {0x3}}, 0x14}}, 0x4880) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000007c0)={0x1, 0x7, 0xffff1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) getpid() r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_mb_discard_preallocations\x00', 0xffffffffffffffff, 0x0, 0x400}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r0, 0x0, 0x3e, &(0x7f0000000200)='\xe60\xe0\x05\xa6\x0e\xd8g\xbd\xb0\xe1\xabB$(\xc8\xc8\x1e`\xd4\x94`\xc2\xb1\xe2Cg\xdb\xa6)\x90\xda\xd9\x87\x91\xc2V\xb5^5\x86%\'\xec\xa9cz\xf2e=9\xd7-\x11\x8d\xd6\xabZ\xb5?\xe6\x15'}, 0x30) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$kcm(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) write$sysctl(r7, &(0x7f0000000000)='2\x00', 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0xffffffffffffffff, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 11.930370962s ago: executing program 5 (id=693): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x48080, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = dup(r3) write$binfmt_aout(r4, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd25, 0x80000, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x40000c4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) sendmmsg(r2, &(0x7f0000000300), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000072b1d810120a105d"], 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x124a82, 0x0) 10.72851444s ago: executing program 6 (id=695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESHEX], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffa9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = io_uring_setup(0x423a, &(0x7f0000000000)={0x0, 0x6087, 0x40, 0x1}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000000c0)=[@ioring_restriction_register_op={0x0, 0x13}, @ioring_restriction_register_op={0x0, 0x7}], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000380)='omfs\x00', 0x2208004, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4010}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b2c, &(0x7f0000000040)) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r6, 0x0, 0x3, 0x7}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r8, &(0x7f0000000400)=ANY=[], 0xa2) 10.725685733s ago: executing program 7 (id=696): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) close(r1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xf0b, 0x2000, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x16, 0x2, [@TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_RAW={0x0, 0xc, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r1, 0x0, 0x0}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x6, 0xc, 0x0, 0x3, 0x3}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000400)=0x11) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000140)) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01072cbd7010fcfff3eb04"], 0x34}}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6}]}}}]}, 0x40}}, 0x0) 9.041719287s ago: executing program 9 (id=698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000540)={0x48, 0x8, r6, 0x0, 0x2fff, 0x1, &(0x7f00000000c0)='r', 0x4}) 8.181603056s ago: executing program 6 (id=699): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) socket$inet(0x2, 0x3, 0x401) 7.613213654s ago: executing program 7 (id=700): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) socket$inet(0x2, 0x3, 0x401) 7.258460955s ago: executing program 5 (id=701): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x50, r1, 0x1, 0x270bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x4, 0x3}}, 0x3, @random=0x400, 0x146, @void, @void, @void, @val={0x4, 0x6, {0x9a, 0xf7, 0xc2ac, 0xa}}, @val={0x6, 0x2, 0x6}, @void, @void, @void}}]}, 0xff80}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) 7.257509831s ago: executing program 9 (id=702): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000480)={@remote, 0x0}, &(0x7f0000000b80)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000bc0)={@loopback, 0x0}, &(0x7f0000000c00)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xbc69f816d79751c6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xfffffffffffffde2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000ac0), 0x0, &(0x7f0000000d00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x31}, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0xf0}, 0x804) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp6(0xa, 0x2, 0x73) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000085000070230000009500000020000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_POSITION_ID={0xffffffffffffffe5, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x44881) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$alg(0x26, 0x5, 0x0) r9 = socket$inet(0x2, 0x2, 0x1) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) 7.108134136s ago: executing program 8 (id=703): openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000001bc0a25d8729039142534a5c771e0f63a"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000940)=0x3) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000005180)={0x2020}, 0x2020) recvmsg$can_j1939(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f00000003c0)={0x2, 0x4e22, @remote}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x6, 0x1f, {0x15, 0x4, 0x3, 0x14, 0x7ff, 0x64, 0x1ce2, 0xd9, 0x1, 0xe5c, @loopback=0xac14140a, @remote, {[@timestamp={0x44, 0xc, 0x37, 0x0, 0x2, [0x7ff, 0x7]}, @timestamp_addr={0x44, 0x34, 0x87, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x5}, {@loopback, 0x20005}, {@private=0xa010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x329}, {@multicast2, 0x4}]}]}}}}}}}, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000780), r5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80006) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032bc61375810536b20abd700025030000000c000600010400000000000008000100000000000342def14e124b3b8e6afb76b4914f5aaa118f21967bb719e1d0784f8237a98ebf0c92b31ab36851b425e7e5b5fcb24ffa2f0cb5efe87a0cc447"], 0x28}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f0000000040)={0x708d58cb, 0x0, 0x4}, &(0x7f0000000300)=[{}, {}, {}, {}]) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980)={0xf, {"a2e3ad21e08eeb661b5d390987f70e06d038e7ff7fc6e5539b0d650e8b089b3f363b68090890e0878f0e1ac6e7049b3b43959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07470936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc08c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eaff9fffaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffffc00", 0x1000}}, 0x1006) 6.361577204s ago: executing program 5 (id=704): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x80a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c0d1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) r7 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x4000, 0x80000000, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r7, 0x21, &(0x7f0000000340)={0x0, 0x40eb99, 0x8, 0x0, 0xd5}, 0x1) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/15, 0xf}], 0x1}, 0x7}], 0x1, 0x2021, 0x0) read$msr(r0, &(0x7f00000000c0)=""/34, 0x22) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000002000000000000001000000095000000000000000d593999b57f170fb822787b94a240d9e5521543c7ca352c3b40f058a8142b4c6cefe28eec48ef90e459872ef8fa5be22419fdbfb4f9545573a1c3a9f4e10e60d70435b98b1baff2cd59a8c727a14eff89462900"/121], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.931738358s ago: executing program 8 (id=705): r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="10091989c33edc530b46be2242129be6e4eba99909ebcea4b61b53a5c06d6de16d512ec2a0bc03a96a34ab00b5c651982a1a75c355603341386de07aa8a7a85e2ec67be325403bc03b641955ac5332fc855c", 0x52, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0}, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000002c0)={r4, 0x736acb53}, 0xc) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x0, 0x0, 0xf0, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'team_slave_0\x00', {0xfdd3}}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffff00], [0xff, 0xff000000, 0xffffffff, 0xff000000], 'batadv0\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0xf1, 0xf8, 0x4, 0x23}, 0x0, 0x108, 0x140, 0x0, {}, [@common=@srh={{0x30}, {0x21, 0x0, 0xa4, 0x9, 0x1, 0x40}}, @common=@ah={{0x30}, {[0x4d2, 0x4d4], 0x7fffffff, 0x9, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x4}, {0x0, 0x5}, {0x1, 0x2, 0x6}, 0x4}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x3b, 0x5, 0xff, 0x9, 0x2, 0x81, 0x110}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0x7a8ba74a}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 5.792350229s ago: executing program 9 (id=706): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x13, r0, 0xffffd000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x32ad}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa69", 0x33}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1", 0x1d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x6}, {&(0x7f0000000200)=""/101, 0x61}], 0x2}, 0x2120) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}}, 0x200400c0) 4.925676701s ago: executing program 8 (id=707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x24}, 0x2, 0x34005}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002840)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x5}, @void, @val={0x25, 0x3, {0x1, 0x7, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 4.843290402s ago: executing program 5 (id=708): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000540)=[@code={0x1, 0x94, {"66baf80cb83053c480ef66bafc0ced66baf80cb8122ca188ef66bafc0c66b855ec66ef0f01c3670f21948fa91002b300000000f0219c7467000000c74424000a000000c744240200000000c7442406000000000f011c240fc79d2c000000b99a020000b8d8000000ba000000000f3066baf80cb880319e81ef66bafc0c66b8be0066ef"}}, @uexit={0x0, 0x18, 0x6d1768b}, @code={0x1, 0x53, {"67420f1c02660f3882950b00000080c90d0f01c20f200366baf80cb80a55298def66bafc0c66edf080619fa3430f06440f20c0350a000000440f22c066440fc77741"}}, @uexit={0x0, 0x18, 0xf2a}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x52, {"3647dd90020000000f01d14a0fc76a1db805000000b9000000000f01c1673e410f01cfc4a17d29f6660f38388600380000c4e27d39fa460f01c9f746009bf40000"}}, @code={0x1, 0x5c, {"360f204166bad00466edb8010000000f01c1c4011cc2e90766baf80cb8ea231e8eef66bafc0cb000eec481f97fbe68cf000067440f30c4416812ed26f0f790794a16c1400fc7b600800000"}}, @uexit={0x0, 0x18, 0xfffffffffffffff7}, @code={0x1, 0x55, {"c4627d0eb8b1000000430f9066606766460fd628460fbf76a96726660f3882916b8900002e0f01c96467450f9782fa000000400f01df430f005e0dc4814deb91b205baf9"}}, @code={0x1, 0x42, {"f30f1b3766bad004b00deec461e5d4fa260f2080410f01343a0f01df260f062e0f0130c461e55f1d00000000c462fd3113"}}, @uexit={0x0, 0x18, 0x1000000000000000}, @code={0x1, 0x7e, {"c74424009a000000c744240204000000ff1c24440f20c03505000000440f22c03e2e0feb28c744240000000000c74424020a000000c7442406000000000f011424c442793042836566460fc7323640d35b0c66bad10466b80c0066ef66ba4200b0f7ee66baa000b80e000000ef"}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x8000}, @code={0x1, 0x54, {"b9a30a00000f320f1ee445f4450f7875f13e0f0fe0a7c4e22991ac5201000000652e66420f38811b3666410f38358a06000000c441e8c29f000000000bf30fc7746843"}}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @code={0x1, 0x4e, {"470f01c444f48f486097658d3036660f3a08ea0065450f01c366b81d000f00d066baf80cb8d194a784ef66bafc0cb000ee36400fae210f9078060f20c0"}}, @code={0x1, 0x4f, {"c4227d5ab43d3bb400000f01cbc44119f5d0460f01f0b9800000c00f3235000800000f300f01cbb9840500000f32660f3835557146da3366b821000f00d8"}}, @code={0x1, 0x74, {"66b821010f00d066b80b000f00d0f466baf80cb874c15085ef66bafc0ced673ef2460f598901000000b9ec0b0000b80ff5f437bab79f8e5b0f300f20e035000001000f22e00f23adc74424002b010000c744240200000100ff2c24b8010000000f01c1"}}, @code={0x1, 0x64, {"66bad10466ed0f01df0f011e400f20dfedc74424001acd0000c744240259ff0000c7442406000000000f01142466baf80cb86c689885ef66bafc0ced470fa319f30f0966baf80cb876d1498def66bafc0c66ed"}}, @uexit={0x0, 0x18, 0xdcc4}, @uexit={0x0, 0x18, 0x67}, @code={0x1, 0x6e, {"0f01c426660f017ebb400f06c744240072000000c7442402ff000000ff2c2466440fc7b6008000002e2e2664410f3066b838010f00d8c481a456d448b805000100000000000f23d80f21f835800000600f23f8643e460fc7b79de315e6"}}], 0x5d1}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) 4.482484251s ago: executing program 8 (id=709): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) r2 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x20, 0x0, 0x6}, {0x28, 0x41, 0x0, 0x6}, {0x6, 0x0, 0x0, 0x7}]}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) r7 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x4a00) ioctl$NBD_SET_BLKSIZE(r7, 0xab01, 0xb) sendto$packet(r5, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0xd888, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) prlimit64(r2, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000080)="29000300010003", 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r9 = getpid() shutdown(r0, 0x0) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.688219141s ago: executing program 5 (id=710): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x100) epoll_create1(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000eb7fffff00000000000000000000010c00000080e049125384f88eb708e89fa6869a4f3d61048a1c151c27a0273caca657ff02226fc8e4ca74594e19d2e99a6b95769abcc95de3ff8f9becb0f1fe9cf8d292eeacfce6ddba14b59679b3cc9b726edfdda404ba2dd4dea2ea69a2fdecf26dc3ede0c6f0a58c64ef18cfee3196ed8002c483a1f933c727d5ee89e1e34909d7d2bd84074bc6c6763a52678ceec1c73176b5408dbb9e69817d140e"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) pipe2$watch_queue(&(0x7f0000000300), 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x80, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0) 3.205575399s ago: executing program 5 (id=711): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x48080, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = dup(r3) write$binfmt_aout(r4, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd25, 0x80000, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x40000c4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) sendmmsg(r2, &(0x7f0000000300), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000072b1d810120a105d5afc"], 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x124a82, 0x0) 3.094275s ago: executing program 8 (id=712): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000540)={0x48, 0x8, r6, 0x0, 0x2fff, 0x1, &(0x7f00000000c0)='r', 0x4}) 2.158182004s ago: executing program 6 (id=713): syz_emit_ethernet(0x288, 0x0, 0x0) syz_extract_tcp_res(&(0x7f000000e5c0), 0x58, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x3e}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003300)=ANY=[@ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r0, r2, 0x7, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xc, {"a2e3ad204fc752f91b5d34f70b06d038e7ff7fc6e5539b325d098b089b3b08381a090890e0878f0e1ac6e7049b3344959b5d9a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa45237f104b98110403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e0090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x100f}}, 0x1006) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f0000000040)={0xd, 0x7}) 2.032672929s ago: executing program 9 (id=714): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f00000021c0)=""/102384, 0x18ff0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500001c000b0020fc0290780000001ce000040f3700000000000000"], 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001100000018110000", @ANYRES32=r5, @ANYBLOB="000000ffffffff00b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7000000030000009500000000000000", @ANYRES16=r1], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) 2.031379821s ago: executing program 8 (id=715): prlimit64(0x0, 0xf, &(0x7f0000000000)={0xff, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) waitid(0x1, 0x0, &(0x7f0000000300), 0xa1000010, &(0x7f0000000380)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES8=r2], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x18004, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) fanotify_mark(0xffffffffffffffff, 0x115, 0x5000003a, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x26, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 1.211724211s ago: executing program 7 (id=716): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x26c8, 0x0, 0x1, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x24, 0x3, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x5, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) 1.111790753s ago: executing program 6 (id=717): r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000080)) r1 = gettid() syz_clone(0x80804000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7fffffff, 0x0) (async) r3 = syz_open_dev$video(&(0x7f0000000000), 0x7fffffff, 0x0) pread64(r3, &(0x7f0000000040)=""/238, 0xee, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f1439fae"}, 0x0, 0x2, {0x0}}) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x10, &(0x7f0000000200)='uid=1\x00nk]e\t\xee\x00\xb5\x91[!\xb1\xe0\xaf\xff\x01T_zf\xd9\xd8\xca\x13\x05\xdb\xddA\xcb\xa1\x03\x03\xd0\xf9ds\x80@\xef\xce<\x8b\xd8|\x85U\xa7\xb3;^U*\x16\xa8\xb4S L\xd3\x8b \x14\x8a\xf6\xf9\x95\x8b*qy4J\xf4\\\xe2\xa5\x04U\xfd\x02G\xa9\x8fD[\xe5\xafE@\xa2\x9e3\x1a`\xa9\xe4\xae\xd49k\xc2\xfc\xadL\xe6EIe\xd4\xea\xed\xa3\b~\xce\x8a\xec\xb3\x89N\x8e=\x12\xc2\"\xf8&C\x93\xd4\x99\xf0') ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r6 = syz_open_procfs(r5, &(0x7f00000000c0)='attr/sockcreate\x00') read$FUSE(r6, &(0x7f0000000cc0)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f0000000cc0)={0x2020}, 0x2020) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'xfrm0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11, 0x80, 0x3, 0xfffff596, 0x1, 0xfffffe47, 0x4, 0x39157fa8, 0x8000}}) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'xfrm0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11, 0x80, 0x3, 0xfffff596, 0x1, 0xfffffe47, 0x4, 0x39157fa8, 0x8000}}) 1.100399238s ago: executing program 9 (id=718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xa00}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) 157.616981ms ago: executing program 7 (id=719): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000002080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x4b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x80008b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r7, &(0x7f0000000000)={0x2020}, 0x96) close(r6) 84.580325ms ago: executing program 9 (id=720): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) 0s ago: executing program 6 (id=721): r0 = socket(0x2, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) getpeername$packet(r2, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) kernel console output (not intermixed with test programs): es left [ 91.553971][ T5982] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.620965][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.646400][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.799418][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.856907][ T5988] netlink: 'syz.0.11': attribute type 1 has an invalid length. [ 91.887292][ T5988] Bluetooth: MGMT ver 1.23 [ 91.892167][ T5988] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 92.034209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.043473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.237966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 92.345850][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.772597][ T5992] netlink: 'syz.3.12': attribute type 1 has an invalid length. [ 92.798975][ T5992] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 92.948167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.958707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 93.058457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 93.717785][ T5998] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14'. [ 93.758292][ T5998] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 93.908599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.592904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.602033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.869144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 95.101685][ T6015] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 96.644411][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 97.080933][ T6036] netlink: 'syz.0.22': attribute type 1 has an invalid length. [ 97.110686][ T6036] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 97.490384][ T6030] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 97.518685][ T5890] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.690858][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 97.708920][ T5890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 97.750744][ T5890] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 97.765131][ T5890] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 97.794254][ T5890] usb 2-1: Product: syz [ 97.803202][ T5890] usb 2-1: Manufacturer: syz [ 97.808190][ T5890] usb 2-1: SerialNumber: syz [ 97.864835][ T6042] netlink: 'syz.0.25': attribute type 1 has an invalid length. [ 98.088372][ T5890] usb 2-1: palm_os_3_probe - error -71 getting connection information [ 98.120091][ T5890] visor 2-1:1.0: probe with driver visor failed with error -71 [ 98.166979][ T5890] usb 2-1: USB disconnect, device number 2 [ 99.481417][ T1161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.769800][ T1161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.046972][ T1161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.154011][ T1161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.476371][ T1161] bridge_slave_1: left allmulticast mode [ 100.483247][ T1161] bridge_slave_1: left promiscuous mode [ 100.511452][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.519678][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.527483][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.529281][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.538311][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.597971][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.724762][ T1161] bridge_slave_0: left allmulticast mode [ 100.742762][ T1161] bridge_slave_0: left promiscuous mode [ 100.768341][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.934087][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.948767][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.959575][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.967578][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.002456][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.158470][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.166868][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.178435][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.189096][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.197626][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.345615][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.359182][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.366794][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 101.375669][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.383451][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.387180][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.401527][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.409317][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.444098][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.458194][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.734399][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.745196][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.755878][ T1161] bond0 (unregistering): Released all slaves [ 102.284378][ T1161] hsr_slave_0: left promiscuous mode [ 102.294998][ T1161] hsr_slave_1: left promiscuous mode [ 102.301478][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.309925][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.324875][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.332443][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.361742][ T1161] veth1_macvtap: left promiscuous mode [ 102.367511][ T1161] veth0_macvtap: left promiscuous mode [ 102.373820][ T1161] veth1_vlan: left promiscuous mode [ 102.386231][ T1161] veth0_vlan: left promiscuous mode [ 102.715628][ T5838] Bluetooth: hci0: command tx timeout [ 102.872127][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 102.903751][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 103.028514][ T5838] Bluetooth: hci1: command tx timeout [ 103.268142][ T5838] Bluetooth: hci2: command tx timeout [ 103.508798][ T5838] Bluetooth: hci4: command tx timeout [ 103.510465][ T5844] Bluetooth: hci3: command tx timeout [ 103.560096][ T6078] chnl_net:caif_netlink_parms(): no params data found [ 103.588641][ T6074] chnl_net:caif_netlink_parms(): no params data found [ 103.770676][ T6079] chnl_net:caif_netlink_parms(): no params data found [ 103.965729][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.973122][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.986340][ T6078] bridge_slave_0: entered allmulticast mode [ 104.005429][ T6078] bridge_slave_0: entered promiscuous mode [ 104.041037][ T6072] chnl_net:caif_netlink_parms(): no params data found [ 104.125649][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.136101][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.149983][ T6078] bridge_slave_1: entered allmulticast mode [ 104.161447][ T6078] bridge_slave_1: entered promiscuous mode [ 104.253464][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.266697][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.275526][ T6074] bridge_slave_0: entered allmulticast mode [ 104.293604][ T6074] bridge_slave_0: entered promiscuous mode [ 104.334965][ T6065] chnl_net:caif_netlink_parms(): no params data found [ 104.403352][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.411989][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.419663][ T6074] bridge_slave_1: entered allmulticast mode [ 104.436205][ T6074] bridge_slave_1: entered promiscuous mode [ 104.527344][ T1161] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.547652][ T6078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.649105][ T6078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.676168][ T6074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.697086][ T6074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.726785][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.735885][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.743392][ T6079] bridge_slave_0: entered allmulticast mode [ 104.750543][ T6079] bridge_slave_0: entered promiscuous mode [ 104.768516][ T1161] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.788078][ T5844] Bluetooth: hci0: command tx timeout [ 104.859964][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.867143][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.876267][ T6079] bridge_slave_1: entered allmulticast mode [ 104.883782][ T6079] bridge_slave_1: entered promiscuous mode [ 104.906554][ T6078] team0: Port device team_slave_0 added [ 104.954525][ T1161] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.973325][ T6074] team0: Port device team_slave_0 added [ 105.025044][ T6078] team0: Port device team_slave_1 added [ 105.051828][ T6072] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.059328][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.066594][ T6072] bridge_slave_0: entered allmulticast mode [ 105.074349][ T6072] bridge_slave_0: entered promiscuous mode [ 105.083432][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.090733][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.098158][ T6072] bridge_slave_1: entered allmulticast mode [ 105.105328][ T6072] bridge_slave_1: entered promiscuous mode [ 105.108291][ T5844] Bluetooth: hci1: command tx timeout [ 105.115019][ T6074] team0: Port device team_slave_1 added [ 105.151183][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.160248][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.167595][ T6065] bridge_slave_0: entered allmulticast mode [ 105.175161][ T6065] bridge_slave_0: entered promiscuous mode [ 105.186258][ T6079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.199899][ T6079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.246411][ T1161] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.263266][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.271409][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.297767][ T6074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.312500][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.320564][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.347823][ T6074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.348419][ T5844] Bluetooth: hci2: command tx timeout [ 105.365801][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.374755][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.382344][ T6065] bridge_slave_1: entered allmulticast mode [ 105.390448][ T6065] bridge_slave_1: entered promiscuous mode [ 105.425288][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.432819][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.459907][ T6078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.472977][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.480418][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.509408][ T6078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.588086][ T5844] Bluetooth: hci4: command tx timeout [ 105.588287][ T5838] Bluetooth: hci3: command tx timeout [ 105.595237][ T6079] team0: Port device team_slave_0 added [ 105.635461][ T6072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.648852][ T6072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.678681][ T6065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.704490][ T6079] team0: Port device team_slave_1 added [ 105.747207][ T6078] hsr_slave_0: entered promiscuous mode [ 105.756243][ T6078] hsr_slave_1: entered promiscuous mode [ 105.764273][ T6078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.772407][ T6078] Cannot create hsr debugfs directory [ 105.808447][ T6065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.825150][ T6074] hsr_slave_0: entered promiscuous mode [ 105.832642][ T6074] hsr_slave_1: entered promiscuous mode [ 105.842480][ T6074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.850156][ T6074] Cannot create hsr debugfs directory [ 105.874052][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.881128][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.907410][ T6079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.926101][ T6072] team0: Port device team_slave_0 added [ 105.935232][ T6072] team0: Port device team_slave_1 added [ 106.003832][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.011705][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.038439][ T6079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.081497][ T6065] team0: Port device team_slave_0 added [ 106.173513][ T6065] team0: Port device team_slave_1 added [ 106.265673][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.275553][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.303463][ T6072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.477320][ T6079] hsr_slave_0: entered promiscuous mode [ 106.485248][ T6079] hsr_slave_1: entered promiscuous mode [ 106.502444][ T6079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.514319][ T6079] Cannot create hsr debugfs directory [ 106.562238][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.571766][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.600140][ T6072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.612642][ T6065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.626726][ T6065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.660560][ T6065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.701827][ T1161] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.808722][ T6065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.815802][ T6065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.842503][ T6065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.877988][ T5838] Bluetooth: hci0: command tx timeout [ 106.902022][ T1161] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.055886][ T1161] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.076937][ T6072] hsr_slave_0: entered promiscuous mode [ 107.084097][ T6072] hsr_slave_1: entered promiscuous mode [ 107.094274][ T6072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.103221][ T6072] Cannot create hsr debugfs directory [ 107.181347][ T1161] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.200021][ T5838] Bluetooth: hci1: command tx timeout [ 107.315621][ T6065] hsr_slave_0: entered promiscuous mode [ 107.322918][ T6065] hsr_slave_1: entered promiscuous mode [ 107.330639][ T6065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.339525][ T6065] Cannot create hsr debugfs directory [ 107.438163][ T5838] Bluetooth: hci2: command tx timeout [ 107.553989][ T6078] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 107.572453][ T6078] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 107.668116][ T5838] Bluetooth: hci3: command tx timeout [ 107.673570][ T5838] Bluetooth: hci4: command tx timeout [ 107.691223][ T6078] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 107.704701][ T6078] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 107.810428][ T1161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.888942][ T1161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.932901][ T6079] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 107.948314][ T6079] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 107.983181][ T1161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.008345][ T6079] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 108.030174][ T6079] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 108.085377][ T1161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.180969][ T6074] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 108.264391][ T6074] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 108.348357][ T6074] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 108.422589][ T6074] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 108.506244][ T1161] bridge_slave_1: left allmulticast mode [ 108.517345][ T1161] bridge_slave_1: left promiscuous mode [ 108.527039][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.565166][ T1161] bridge_slave_0: left allmulticast mode [ 108.573441][ T1161] bridge_slave_0: left promiscuous mode [ 108.583948][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.601323][ T1161] bridge_slave_1: left allmulticast mode [ 108.614415][ T1161] bridge_slave_1: left promiscuous mode [ 108.624523][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.649164][ T1161] bridge_slave_0: left allmulticast mode [ 108.654869][ T1161] bridge_slave_0: left promiscuous mode [ 108.661410][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.674956][ T1161] bridge_slave_1: left allmulticast mode [ 108.680902][ T1161] bridge_slave_1: left promiscuous mode [ 108.686666][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.705159][ T1161] bridge_slave_0: left allmulticast mode [ 108.713758][ T1161] bridge_slave_0: left promiscuous mode [ 108.721926][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.950841][ T5838] Bluetooth: hci0: command tx timeout [ 109.098798][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.110583][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.121038][ T1161] bond0 (unregistering): Released all slaves [ 109.268270][ T5838] Bluetooth: hci1: command tx timeout [ 109.361247][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.372758][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.384548][ T1161] bond0 (unregistering): Released all slaves [ 109.508228][ T5838] Bluetooth: hci2: command tx timeout [ 109.602038][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.612437][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.624390][ T1161] bond0 (unregistering): Released all slaves [ 109.750372][ T5838] Bluetooth: hci3: command tx timeout [ 109.755858][ T6072] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 109.758370][ T5838] Bluetooth: hci4: command tx timeout [ 109.813074][ T6078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.855690][ T6072] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 109.893318][ T6072] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 109.909495][ T6072] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 110.000412][ T6065] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.040715][ T6065] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.064558][ T6065] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.138402][ T6065] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.180412][ T6078] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.192792][ T6079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.319517][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.326686][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.387242][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.394456][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.437024][ T6079] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.487150][ T6074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.615504][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.622740][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.717012][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.724240][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.826012][ T1161] hsr_slave_0: left promiscuous mode [ 110.832261][ T1161] hsr_slave_1: left promiscuous mode [ 110.838814][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.846255][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.858358][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.865824][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.891841][ T1161] hsr_slave_0: left promiscuous mode [ 110.902148][ T1161] hsr_slave_1: left promiscuous mode [ 110.911456][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.920581][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.931571][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.939119][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.962091][ T1161] hsr_slave_0: left promiscuous mode [ 110.972070][ T1161] hsr_slave_1: left promiscuous mode [ 110.978926][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.986379][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.995949][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.003899][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.046498][ T1161] veth1_macvtap: left promiscuous mode [ 111.052827][ T1161] veth0_macvtap: left promiscuous mode [ 111.058794][ T1161] veth1_vlan: left promiscuous mode [ 111.064055][ T1161] veth0_vlan: left promiscuous mode [ 111.072681][ T1161] veth1_macvtap: left promiscuous mode [ 111.078569][ T1161] veth0_macvtap: left promiscuous mode [ 111.084182][ T1161] veth1_vlan: left promiscuous mode [ 111.090100][ T1161] veth0_vlan: left promiscuous mode [ 111.097345][ T1161] veth1_macvtap: left promiscuous mode [ 111.103596][ T1161] veth0_macvtap: left promiscuous mode [ 111.109963][ T1161] veth1_vlan: left promiscuous mode [ 111.115255][ T1161] veth0_vlan: left promiscuous mode [ 111.626601][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 111.669425][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 112.194841][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 112.229103][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 112.746837][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 112.776704][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 113.075370][ T6074] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.096777][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.103997][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.166505][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.173709][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.269514][ T6072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.332408][ T6065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.432587][ T6072] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.490295][ T6065] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.543211][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.550420][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.562628][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.569819][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.642553][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.649770][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.684365][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.691577][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.842112][ T6078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.023985][ T6079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.544741][ T6074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.779934][ T1161] IPVS: stop unused estimator thread 0... [ 114.813606][ T6065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.890761][ T6072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.112837][ T6078] veth0_vlan: entered promiscuous mode [ 115.243523][ T6078] veth1_vlan: entered promiscuous mode [ 115.367485][ T6079] veth0_vlan: entered promiscuous mode [ 115.442732][ T6078] veth0_macvtap: entered promiscuous mode [ 115.487550][ T6079] veth1_vlan: entered promiscuous mode [ 115.515436][ T6078] veth1_macvtap: entered promiscuous mode [ 115.757318][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.775215][ T6079] veth0_macvtap: entered promiscuous mode [ 115.807722][ T6074] veth0_vlan: entered promiscuous mode [ 115.825729][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.844554][ T6078] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.856114][ T6078] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.865411][ T6078] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.875341][ T6078] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.896001][ T6079] veth1_macvtap: entered promiscuous mode [ 115.917275][ T6074] veth1_vlan: entered promiscuous mode [ 116.025579][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.079445][ T6065] veth0_vlan: entered promiscuous mode [ 116.086142][ T6072] veth0_vlan: entered promiscuous mode [ 116.104028][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.145521][ T6072] veth1_vlan: entered promiscuous mode [ 116.156842][ T6079] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.167636][ T6079] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.176890][ T6079] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.185940][ T6079] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.222354][ T6065] veth1_vlan: entered promiscuous mode [ 116.269952][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.280485][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.309461][ T6074] veth0_macvtap: entered promiscuous mode [ 116.345452][ T6074] veth1_macvtap: entered promiscuous mode [ 116.433561][ T6074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.451092][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.464600][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.504456][ T6072] veth0_macvtap: entered promiscuous mode [ 116.525327][ T6074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.570606][ T6065] veth0_macvtap: entered promiscuous mode [ 116.599036][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.606898][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.636492][ T6072] veth1_macvtap: entered promiscuous mode [ 116.653593][ T6074] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.662685][ T6074] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.671664][ T6074] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.680524][ T6074] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.762532][ T6065] veth1_macvtap: entered promiscuous mode [ 116.842696][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.880526][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.897013][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.979974][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.006207][ T6065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.063976][ T6072] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.084825][ T6072] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.096619][ T6072] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.116088][ T6072] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.140449][ T6065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.240348][ T6065] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.253699][ T6065] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.263815][ T6065] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.273503][ T6065] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.301736][ T6310] warning: `syz.7.40' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.406631][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.536952][ T6311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.680062][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.193758][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.206990][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.233499][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.275516][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.398084][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 118.407214][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.433431][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.461537][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.488809][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.586542][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.671349][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.715057][ T6240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.753928][ T9] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 118.780800][ T6240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.826178][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.910800][ T9] usb 9-1: config 0 descriptor?? [ 119.217556][ T6338] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.645971][ T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 119.906043][ T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 119.919005][ T6320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.948801][ T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 119.962644][ T6320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.972397][ T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 120.062193][ T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 120.239018][ T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 120.856817][ T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 120.974230][ T6347] netlink: 'syz.9.46': attribute type 66 has an invalid length. [ 120.989738][ T9] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 121.122431][ T9] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 121.868252][ T6354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.877263][ T6354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.880530][ T6375] netlink: 'syz.9.50': attribute type 1 has an invalid length. [ 122.950925][ T6376] Bluetooth: MGMT ver 1.23 [ 122.955639][ T6376] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 123.163406][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 123.177809][ T9] cp2112 0003:10C4:EA90.0001: error requesting SMBus config [ 123.651768][ T9] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -32 [ 123.665148][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 123.683337][ T6379] netlink: 'syz.7.51': attribute type 12 has an invalid length. [ 123.743413][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 123.794010][ T9] usb 9-1: USB disconnect, device number 2 [ 123.824514][ T10] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 123.865661][ T10] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 123.904186][ T10] usb 6-1: Product: syz [ 123.912193][ T6369] fido_id[6369]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 123.939857][ T10] usb 6-1: Manufacturer: syz [ 123.944507][ T10] usb 6-1: SerialNumber: syz [ 124.379827][ T10] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 124.413107][ T10] visor 6-1:1.0: probe with driver visor failed with error -110 [ 124.413688][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 124.756946][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 124.768467][ T6404] netlink: 56 bytes leftover after parsing attributes in process `syz.7.54'. [ 124.789946][ T6404] netlink: 56 bytes leftover after parsing attributes in process `syz.7.54'. [ 125.113050][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 125.174902][ T6395] ceph: No mds server is up or the cluster is laggy [ 125.389981][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 125.942207][ T6418] netlink: 'syz.9.58': attribute type 12 has an invalid length. [ 126.274991][ T5911] usb 6-1: USB disconnect, device number 2 [ 127.498044][ T5953] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 127.698012][ T5953] usb 10-1: Using ep0 maxpacket: 16 [ 127.730052][ T5953] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.766110][ T5953] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.895470][ T5953] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 127.946189][ T5953] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 128.191438][ T5953] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.218415][ T5953] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 128.254449][ T5953] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 128.313601][ T5953] usb 10-1: Manufacturer: syz [ 128.361677][ T5953] usb 10-1: config 0 descriptor?? [ 129.178062][ T5953] rc_core: IR keymap rc-hauppauge not found [ 129.194568][ T5953] Registered IR keymap rc-empty [ 129.215959][ T6444] sp0: Synchronizing with TNC [ 129.250234][ T5953] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 129.386310][ T5953] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 129.463312][ T5953] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 129.516322][ T5953] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input7 [ 129.623860][ T5953] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 129.700725][ T5953] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 129.709335][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.7.64'. [ 129.748090][ T5953] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 129.798035][ T5953] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 129.848020][ T5953] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 129.908286][ T5953] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 130.008897][ T5953] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 130.048039][ T5953] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 130.108000][ T5953] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 130.147628][ T5953] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 130.211715][ T5953] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 130.211757][ T5953] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 130.272520][ T5953] usb 10-1: USB disconnect, device number 2 [ 130.319624][ T6470] netlink: 32 bytes leftover after parsing attributes in process `syz.5.69'. [ 131.248092][ T5953] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 131.528592][ T5953] usb 6-1: Using ep0 maxpacket: 8 [ 131.728489][ T5953] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 131.732405][ T6490] capability: warning: `syz.6.72' uses deprecated v2 capabilities in a way that may be insecure [ 131.742778][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.800628][ T5953] usb 6-1: Product: syz [ 131.811727][ T5953] usb 6-1: Manufacturer: syz [ 131.829962][ T5953] usb 6-1: SerialNumber: syz [ 131.900826][ T5953] usb 6-1: config 0 descriptor?? [ 131.935645][ T5953] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 132.036038][ T6494] IPVS: stopping master sync thread 6495 ... [ 132.042632][ T6495] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 132.058489][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.067214][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.085162][ T6498] bridge0: entered allmulticast mode [ 132.104305][ T6498] bridge_slave_1: left allmulticast mode [ 132.114818][ T6498] bridge_slave_1: left promiscuous mode [ 132.123010][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.147830][ T6498] bridge_slave_0: left allmulticast mode [ 132.163212][ T6498] bridge_slave_0: left promiscuous mode [ 132.177090][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.795112][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.803856][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.119702][ T5953] gspca_sonixj: reg_r err -71 [ 133.139107][ T5953] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 133.210417][ T5953] usb 6-1: USB disconnect, device number 3 [ 134.288486][ T6520] syz.6.78 (6520) used greatest stack depth: 16320 bytes left [ 134.633068][ T6533] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 137.039282][ T6539] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 137.066641][ T6539] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 137.133927][ T6539] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 137.189187][ T6539] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 137.227046][ T6539] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 137.289049][ T6539] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 137.311807][ T6539] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.318422][ T6539] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 137.368279][ T6539] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 137.406529][ T6539] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.441551][ T6539] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 137.495349][ T6539] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 137.521703][ T6539] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 137.528500][ T6539] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 137.538827][ T6551] netlink: 24 bytes leftover after parsing attributes in process `syz.8.85'. [ 137.553061][ T6539] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 137.825697][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.6.86'. [ 138.414939][ T6562] Zero length message leads to an empty skb [ 138.468273][ T6569] netlink: 780 bytes leftover after parsing attributes in process `syz.6.86'. [ 138.828051][ T5953] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 139.003823][ T6585] xt_TPROXY: Can be used only with -p tcp or -p udp [ 139.559854][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.567432][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.575974][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.583235][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.595831][ T5156] Bluetooth: hci4: command 0x0c1a tx timeout [ 139.598177][ T5953] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.733080][ T5953] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 139.880012][ T6590] netlink: 'syz.6.93': attribute type 1 has an invalid length. [ 139.949388][ T6590] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 140.268173][ T5953] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 140.387592][ T5953] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.539117][ T6572] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 140.603768][ T6583] netlink: 40 bytes leftover after parsing attributes in process `syz.7.91'. [ 140.637301][ T5953] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.795972][ T6603] netlink: 'syz.5.97': attribute type 10 has an invalid length. [ 140.839822][ T6605] FAULT_INJECTION: forcing a failure. [ 140.839822][ T6605] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 140.853450][ T6605] CPU: 1 UID: 0 PID: 6605 Comm: syz.6.98 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 140.853464][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.853473][ T6605] Call Trace: [ 140.853480][ T6605] [ 140.853485][ T6605] dump_stack_lvl+0x189/0x250 [ 140.853507][ T6605] ? __pfx____ratelimit+0x10/0x10 [ 140.853519][ T6605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.853530][ T6605] ? __pfx__printk+0x10/0x10 [ 140.853543][ T6605] ? __might_fault+0xb0/0x130 [ 140.853560][ T6605] should_fail_ex+0x414/0x560 [ 140.853574][ T6605] _copy_from_iter+0x1db/0x16f0 [ 140.853587][ T6605] ? bpf_trace_run2+0x322/0x4b0 [ 140.853602][ T6605] ? bpf_trace_run2+0x186/0x4b0 [ 140.853616][ T6605] ? __pfx_bpf_trace_run2+0x10/0x10 [ 140.853629][ T6605] ? __pfx__copy_from_iter+0x10/0x10 [ 140.853640][ T6605] ? file_tty_write+0x2e8/0x990 [ 140.853654][ T6605] ? file_tty_write+0x2a8/0x990 [ 140.853667][ T6605] ? file_tty_write+0x2e8/0x990 [ 140.853679][ T6605] ? rcu_is_watching+0x15/0xb0 [ 140.853691][ T6605] ? kfree+0x4d/0x440 [ 140.853710][ T6605] file_tty_write+0x486/0x990 [ 140.853728][ T6605] vfs_write+0x54b/0xa90 [ 140.853740][ T6605] ? __pfx_tty_write+0x10/0x10 [ 140.853753][ T6605] ? __pfx_vfs_write+0x10/0x10 [ 140.853769][ T6605] ? __fget_files+0x2a/0x420 [ 140.853786][ T6605] ksys_write+0x145/0x250 [ 140.853796][ T6605] ? __pfx_ksys_write+0x10/0x10 [ 140.853804][ T6605] ? rcu_is_watching+0x15/0xb0 [ 140.853818][ T6605] ? do_syscall_64+0xbe/0x3b0 [ 140.853831][ T6605] do_syscall_64+0xfa/0x3b0 [ 140.853841][ T6605] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.853852][ T6605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.853862][ T6605] ? clear_bhb_loop+0x60/0xb0 [ 140.853874][ T6605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.853883][ T6605] RIP: 0033:0x7f46a698ebe9 [ 140.853898][ T6605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.853906][ T6605] RSP: 002b:00007f46a7777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.853924][ T6605] RAX: ffffffffffffffda RBX: 00007f46a6bb5fa0 RCX: 00007f46a698ebe9 [ 140.853931][ T6605] RDX: 0000000000001006 RSI: 0000200000000980 RDI: 0000000000000006 [ 140.853938][ T6605] RBP: 00007f46a7777090 R08: 0000000000000000 R09: 0000000000000000 [ 140.853943][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.853949][ T6605] R13: 00007f46a6bb6038 R14: 00007f46a6bb5fa0 R15: 00007ffd228298a8 [ 140.853966][ T6605] [ 141.180281][ T6603] team0: Port device virt_wifi0 added [ 141.585972][ T6613] delete_channel: no stack [ 141.591028][ T6613] delete_channel: no stack [ 141.601171][ T6613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.674176][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 141.681398][ T5156] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.687437][ T5156] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.693562][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.700437][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.992345][ T6613] netlink: 'syz.6.100': attribute type 12 has an invalid length. [ 142.203967][ T30] audit: type=1326 audit(1755782926.505:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6615 comm="syz.7.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556358ebe9 code=0x7fc00000 [ 142.673762][ T9] usb 10-1: USB disconnect, device number 3 [ 143.748118][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.754194][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.764043][ T5156] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.764068][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 143.770273][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.502340][ T6647] Invalid source name [ 144.506838][ T6647] UBIFS error (pid: 6647): cannot open "/dev/sg0", error -22 [ 144.546668][ T6647] netlink: 36 bytes leftover after parsing attributes in process `syz.6.107'. [ 144.664140][ T30] audit: type=1326 audit(1755782928.755:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.5.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495678ebe9 code=0x7ffc0000 [ 145.132564][ T6646] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 145.162255][ T30] audit: type=1326 audit(1755782928.795:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.5.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495678ebe9 code=0x7ffc0000 [ 145.583350][ T30] audit: type=1326 audit(1755782928.925:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.5.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f495678ebe9 code=0x7ffc0000 [ 146.056500][ T30] audit: type=1326 audit(1755782929.095:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.5.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495678ebe9 code=0x7ffc0000 [ 146.279312][ T30] audit: type=1326 audit(1755782929.125:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.5.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495678ebe9 code=0x7ffc0000 [ 146.300722][ T30] audit: type=1326 audit(1755782929.425:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.5.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f495678ebe9 code=0x7ffc0000 [ 146.323798][ T30] audit: type=1326 audit(1755782929.425:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.5.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495678ebe9 code=0x7ffc0000 [ 146.345241][ T30] audit: type=1326 audit(1755782929.425:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.5.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495678ebe9 code=0x7ffc0000 [ 146.366915][ T30] audit: type=1326 audit(1755782929.435:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6615 comm="syz.7.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f556352add9 code=0x7fc00000 [ 146.603038][ T6656] netlink: 5 bytes leftover after parsing attributes in process `syz.6.111'. [ 146.673355][ T6656] netlink: 5 bytes leftover after parsing attributes in process `syz.6.111'. [ 146.754241][ T6656] netlink: 24 bytes leftover after parsing attributes in process `syz.6.111'. [ 147.011647][ T6671] netlink: 'syz.6.116': attribute type 6 has an invalid length. [ 147.162665][ T6671] bridge1: entered promiscuous mode [ 147.168319][ T6671] bridge1: entered allmulticast mode [ 147.768096][ T6681] netlink: 'syz.8.119': attribute type 12 has an invalid length. [ 147.948113][ T6370] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 148.140500][ T6370] usb 7-1: config 150 has an invalid interface number: 204 but max is 1 [ 148.153712][ T6690] delete_channel: no stack [ 148.160566][ T6690] delete_channel: no stack [ 148.209750][ T6690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.241834][ T6370] usb 7-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 148.258241][ T6370] usb 7-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 148.268403][ T6370] usb 7-1: config 150 has no interface number 0 [ 148.274761][ T6370] usb 7-1: config 150 interface 204 has no altsetting 0 [ 148.282360][ T6690] netlink: 'syz.5.122': attribute type 12 has an invalid length. [ 148.301331][ T6370] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 148.319595][ T6370] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.345546][ T6370] usb 7-1: Product: syz [ 148.361808][ T6370] usb 7-1: Manufacturer: syz [ 148.366546][ T6370] usb 7-1: SerialNumber: syz [ 148.605095][ T6370] xr_serial 7-1:150.204: skipping garbage [ 148.639241][ T6370] usb 7-1: USB disconnect, device number 2 [ 148.650462][ T6702] netlink: 'syz.7.125': attribute type 1 has an invalid length. [ 148.685400][ T6703] IPVS: Error connecting to the multicast addr [ 149.008507][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 149.238315][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 149.258159][ T24] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 149.282867][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 149.680870][ T24] usb 6-1: can't read configurations, error -61 [ 150.009619][ T6726] netlink: 'syz.9.133': attribute type 12 has an invalid length. [ 150.057775][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 150.185226][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 150.452655][ T10] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 150.625701][ T10] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 150.682626][ T6732] netlink: 'syz.9.134': attribute type 10 has an invalid length. [ 150.700801][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.736483][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 150.767957][ T6732] netlink: 40 bytes leftover after parsing attributes in process `syz.9.134'. [ 150.817502][ T6732] batman_adv: batadv0: Adding interface: virt_wifi0 [ 150.837952][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 150.843718][ T24] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 150.846468][ T6732] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.901951][ T6732] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 150.913288][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 150.923816][ T24] usb 6-1: can't read configurations, error -61 [ 150.944365][ T24] usb usb6-port1: attempt power cycle [ 151.498197][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 151.743345][ T6746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.752058][ T6746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.839826][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 151.872692][ T6742] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 151.889779][ T6742] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 151.898785][ T10] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 152.132870][ T24] usb 6-1: device not accepting address 6, error -71 [ 152.775211][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 152.786420][ T10] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 152.959851][ T6757] netlink: 'syz.5.138': attribute type 1 has an invalid length. [ 153.102966][ T10] usb 7-1: USB disconnect, device number 3 [ 153.444977][ T6761] netlink: 'syz.8.141': attribute type 15 has an invalid length. [ 153.453619][ T6761] netlink: 723 bytes leftover after parsing attributes in process `syz.8.141'. [ 153.968265][ T6776] netlink: 'syz.7.143': attribute type 1 has an invalid length. [ 153.989262][ T6778] netlink: 120 bytes leftover after parsing attributes in process `syz.5.144'. [ 155.027770][ T6785] binder: 6772:6785 ioctl 5429 200000000300 returned -22 [ 155.566476][ T6808] netlink: 'syz.6.149': attribute type 11 has an invalid length. [ 155.971920][ T6805] netlink: 32 bytes leftover after parsing attributes in process `syz.9.150'. [ 156.028663][ T6810] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.036084][ T6810] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.049524][ T6811] binder: 6803:6811 ioctl c0189374 200000000280 returned -22 [ 156.120495][ T6810] bridge0: entered allmulticast mode [ 156.178842][ T6813] bridge_slave_1: left allmulticast mode [ 156.223162][ T6813] bridge_slave_1: left promiscuous mode [ 156.269563][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.450980][ T6813] bridge_slave_0: left allmulticast mode [ 156.456790][ T6813] bridge_slave_0: left promiscuous mode [ 156.495241][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.872068][ T6823] process 'syz.7.155' launched '/dev/fd/6' with NULL argv: empty string added [ 157.806817][ T6834] input: syz0 as /devices/virtual/input/input8 [ 158.169914][ T6837] netlink: 24 bytes leftover after parsing attributes in process `syz.7.158'. [ 160.838658][ T6854] netlink: 24 bytes leftover after parsing attributes in process `syz.9.162'. [ 162.238422][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.7.165'. [ 163.866273][ T6899] netlink: 'syz.6.170': attribute type 1 has an invalid length. [ 164.367129][ T6903] fuse: Unknown parameter '0x0000000000000007' [ 164.492968][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz.6.174'. [ 166.013350][ T6927] netlink: 32 bytes leftover after parsing attributes in process `syz.6.178'. [ 166.550745][ T6941] program syz.5.181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.978316][ T6940] Driver unsupported XDP return value 0 on prog (id 43) dev N/A, expect packet loss! [ 168.457996][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 168.727554][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 169.337163][ T24] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 169.351071][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.368021][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.381348][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.391825][ T24] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.407934][ T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 169.417097][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.627339][ T6980] capability: warning: `syz.6.189' uses 32-bit capabilities (legacy support in use) [ 169.748527][ T24] usb 9-1: GET_CAPABILITIES returned 0 [ 169.756699][ T24] usbtmc 9-1:16.0: can't read capabilities [ 170.372860][ T24] usb 9-1: USB disconnect, device number 3 [ 171.578560][ T6995] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20001 [ 171.594571][ T5911] IPVS: starting estimator thread 0... [ 171.668844][ T7000] syz.9.195 uses obsolete (PF_INET,SOCK_PACKET) [ 171.738333][ T6999] IPVS: using max 24 ests per chain, 57600 per kthread [ 171.762896][ T7005] netlink: 'syz.9.195': attribute type 4 has an invalid length. [ 173.273640][ T7058] delete_channel: no stack [ 173.278296][ T7058] delete_channel: no stack [ 173.286145][ T7058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.466477][ T7064] overlayfs: failed to clone upperpath [ 173.541335][ T7058] netlink: 'syz.5.199': attribute type 12 has an invalid length. [ 173.968051][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 174.128140][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 174.181802][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.224756][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 174.268806][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 174.450688][ T9] usb 9-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 174.506619][ T7088] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 174.838058][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.904842][ T9] usb 9-1: config 0 descriptor?? [ 175.586061][ T9] nintendo 0003:057E:2019.0002: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.8-1/input0 [ 175.848628][ T7104] netlink: 'syz.5.209': attribute type 1 has an invalid length. [ 176.349906][ T7111] netlink: 300 bytes leftover after parsing attributes in process `syz.7.210'. [ 176.383752][ T7111] netlink: 24 bytes leftover after parsing attributes in process `syz.7.210'. [ 176.414400][ T9] nintendo 0003:057E:2019.0002: Failed to get joycon info; ret=-71 [ 176.657983][ T9] nintendo 0003:057E:2019.0002: Failed to retrieve controller info; ret=-71 [ 176.907318][ T7113] futex_wake_op: syz.6.211 tries to shift op by -1; fix this program [ 176.923404][ T9] nintendo 0003:057E:2019.0002: Failed to initialize controller; ret=-71 [ 176.998578][ T9] nintendo 0003:057E:2019.0002: probe - fail = -71 [ 177.016302][ T9] nintendo 0003:057E:2019.0002: probe with driver nintendo failed with error -71 [ 177.147411][ T9] usb 9-1: USB disconnect, device number 4 [ 177.625510][ T7139] siw: device registration error -23 [ 178.498663][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 178.498676][ T30] audit: type=1326 audit(1755782962.815:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7148 comm="syz.5.218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f495678ebe9 code=0x0 [ 180.497741][ T7160] netlink: 'syz.8.222': attribute type 10 has an invalid length. [ 180.574304][ T7163] kvm: apic: phys broadcast and lowest prio [ 180.688528][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.027007][ T7160] bridge_slave_1: left allmulticast mode [ 181.067762][ T7160] bridge_slave_1: left promiscuous mode [ 181.095603][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.152847][ T7160] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 181.375864][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.227'. [ 181.578962][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.7.228'. [ 182.837355][ T7200] netlink: 'syz.5.230': attribute type 1 has an invalid length. [ 182.882056][ T7200] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 183.690929][ T7213] netlink: 20 bytes leftover after parsing attributes in process `syz.5.234'. [ 184.269026][ T7224] block nbd5: NBD_DISCONNECT [ 184.275352][ T7224] block nbd5: Send disconnect failed -22 [ 184.291195][ T7220] block nbd5: Disconnected due to user request. [ 184.300442][ T7220] block nbd5: shutting down sockets [ 184.728107][ T5904] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 184.880250][ T5904] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 185.336800][ T5904] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 185.374608][ T5904] usb 7-1: config 0 interface 0 has no altsetting 0 [ 185.445288][ T5904] usb 7-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 185.501733][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.554817][ T5904] usb 7-1: config 0 descriptor?? [ 185.705306][ T7228] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 185.977148][ T7248] delete_channel: no stack [ 185.996201][ T7248] delete_channel: no stack [ 186.229051][ T7247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 186.444031][ T5904] usbhid 7-1:0.0: can't add hid device: -71 [ 186.472089][ T5904] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 186.501061][ T5904] usb 7-1: USB disconnect, device number 4 [ 186.909428][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.242'. [ 187.170142][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 188.002126][ T24] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.022307][ T24] usb 9-1: config 0 has no interface number 0 [ 188.052027][ T24] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 188.144212][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.232579][ T24] usb 9-1: Product: syz [ 188.236796][ T24] usb 9-1: Manufacturer: syz [ 188.263756][ T24] usb 9-1: SerialNumber: syz [ 188.395158][ T24] usb 9-1: config 0 descriptor?? [ 188.638232][ T7285] fuse: Bad value for 'fd' [ 188.808711][ T24] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 188.901803][ T24] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 188.959004][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 188.967177][ T24] usb 9-1: media controller created [ 189.063802][ T7291] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 189.063802][ T7291] program syz.5.249 not setting count and/or reply_len properly [ 189.235606][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.324081][ T7298] delete_channel: no stack [ 189.328655][ T7298] delete_channel: no stack [ 189.335668][ T7298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.474671][ T7303] binder: 7302:7303 ioctl 4018620d 0 returned -22 [ 189.492631][ T24] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 189.613736][ T7308] delete_channel: no stack [ 189.622246][ T7308] delete_channel: no stack [ 189.699230][ T7308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.752133][ T7308] netlink: 'syz.5.256': attribute type 12 has an invalid length. [ 190.681144][ T24] usb 9-1: USB disconnect, device number 5 [ 191.704576][ T7332] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 191.957468][ T5839] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 191.967227][ T5839] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 191.977136][ T5839] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 191.985063][ T5839] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 191.993237][ T5839] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 192.001737][ T5839] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 192.009506][ T5839] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 192.017168][ T5839] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 192.145718][ T5839] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 192.311121][ T7347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.661840][ T7349] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 192.668633][ T7349] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 192.749256][ T7359] delete_channel: no stack [ 192.753761][ T7359] delete_channel: no stack [ 192.770203][ T7359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.854669][ T7355] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(11) [ 192.861330][ T7355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 192.915954][ T7362] netlink: 16 bytes leftover after parsing attributes in process `syz.8.264'. [ 193.003556][ T7366] netlink: 340 bytes leftover after parsing attributes in process `syz.5.269'. [ 193.153303][ T7355] vhci_hcd vhci_hcd.0: Device attached [ 193.160846][ T7366] netlink: 48 bytes leftover after parsing attributes in process `syz.5.269'. [ 193.207084][ T7349] vhci_hcd vhci_hcd.0: Device attached [ 193.219243][ T7364] netlink: 'syz.6.267': attribute type 1 has an invalid length. [ 193.287696][ T7375] syz.9.270 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 193.328013][ T7358] vhci_hcd: connection closed [ 193.328988][ T7352] vhci_hcd: connection closed [ 193.363144][ T1161] vhci_hcd: stop threads [ 193.388743][ T5839] usb 49-2: new low-speed USB device number 2 using vhci_hcd [ 193.417204][ T1161] vhci_hcd: release socket [ 193.449591][ T1161] vhci_hcd: disconnect device [ 193.472600][ T1161] vhci_hcd: stop threads [ 193.477025][ T1161] vhci_hcd: release socket [ 193.497968][ T1161] vhci_hcd: disconnect device [ 194.238963][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.250558][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.858016][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 195.011122][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.115899][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.211638][ T10] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 195.237108][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.268320][ T5911] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 195.286091][ T10] usb 10-1: config 0 descriptor?? [ 195.407997][ T5911] usb 6-1: device descriptor read/64, error -71 [ 195.700241][ T5911] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 195.801268][ T10] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 195.820165][ T10] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 195.878158][ T5911] usb 6-1: device descriptor read/64, error -71 [ 195.879715][ T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0D8C:0022.0004/input/input9 [ 195.984086][ T10] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.9-1/input0 [ 196.039944][ T5911] usb usb6-port1: attempt power cycle [ 196.063203][ T10] usb 10-1: USB disconnect, device number 4 [ 196.245867][ T7411] fido_id[7411]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 196.419847][ T5911] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 196.479550][ T5911] usb 6-1: device descriptor read/8, error -71 [ 196.728078][ T5911] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 196.799729][ T5911] usb 6-1: device descriptor read/8, error -71 [ 196.918837][ T5911] usb usb6-port1: unable to enumerate USB device [ 197.026079][ T7435] netlink: 'syz.9.282': attribute type 1 has an invalid length. [ 197.231652][ T7444] input: syz0 as /devices/virtual/input/input10 [ 198.698016][ T5839] vhci_hcd: vhci_device speed not set [ 198.916929][ T7463] netlink: 168 bytes leftover after parsing attributes in process `syz.7.287'. [ 200.139080][ T7485] netlink: 'syz.8.293': attribute type 1 has an invalid length. [ 200.303097][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.291'. [ 200.542611][ T7482] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 200.653442][ T7486] netlink: 'syz.9.294': attribute type 1 has an invalid length. [ 205.759512][ T7533] overlay: ./file1 is not a directory [ 205.810712][ T7540] tmpfs: Bad value for 'mpol' [ 209.658646][ T7615] delete_channel: no stack [ 209.663174][ T7615] delete_channel: no stack [ 209.703770][ T7613] netlink: 24 bytes leftover after parsing attributes in process `syz.6.318'. [ 210.246199][ T7624] delete_channel: no stack [ 210.251894][ T7624] delete_channel: no stack [ 210.323625][ T7624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.533207][ T7650] netlink: 'syz.7.324': attribute type 1 has an invalid length. [ 215.110999][ T7669] netlink: 'syz.9.330': attribute type 1 has an invalid length. [ 215.764509][ T7672] --map-set only usable from mangle table [ 216.475000][ T7678] delete_channel: no stack [ 216.479599][ T7678] delete_channel: no stack [ 216.485938][ T7678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.397147][ T7698] netlink: 'syz.8.339': attribute type 1 has an invalid length. [ 217.405136][ T7698] netlink: 224 bytes leftover after parsing attributes in process `syz.8.339'. [ 217.962879][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 218.156651][ T10] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 218.181129][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.213430][ T10] usb 9-1: Product: syz [ 218.225181][ T10] usb 9-1: Manufacturer: syz [ 218.237342][ T10] usb 9-1: SerialNumber: syz [ 218.261282][ T10] usb 9-1: config 0 descriptor?? [ 218.288270][ T10] ch341 9-1:0.0: ch341-uart converter detected [ 218.318151][ T7712] netlink: 'syz.6.341': attribute type 16 has an invalid length. [ 218.405085][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.449867][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.334318][ T24] libceph: connect (1)[c::]:6789 error -101 [ 219.368871][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 219.588767][ T10] usb 9-1: ch341-uart converter now attached to ttyUSB0 [ 219.639654][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 219.674364][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 219.761806][ T7738] delete_channel: no stack [ 219.767314][ T7738] delete_channel: no stack [ 219.864219][ T7737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.909609][ T7741] netlink: 24 bytes leftover after parsing attributes in process `syz.6.346'. [ 220.085681][ T7727] ceph: No mds server is up or the cluster is laggy [ 220.917539][ T7745] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 220.949328][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 221.014139][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 221.173087][ T10] usb 9-1: USB disconnect, device number 6 [ 221.239952][ T10] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 221.311507][ T10] ch341 9-1:0.0: device disconnected [ 223.621681][ T7779] FAULT_INJECTION: forcing a failure. [ 223.621681][ T7779] name failslab, interval 1, probability 0, space 0, times 1 [ 223.899894][ T7779] CPU: 1 UID: 0 PID: 7779 Comm: syz.6.355 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 223.899912][ T7779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.899919][ T7779] Call Trace: [ 223.899924][ T7779] [ 223.899930][ T7779] dump_stack_lvl+0x189/0x250 [ 223.899956][ T7779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.899968][ T7779] ? __pfx__printk+0x10/0x10 [ 223.899983][ T7779] ? fs_reclaim_acquire+0x7d/0x100 [ 223.900000][ T7779] ? should_fail_ex+0x399/0x560 [ 223.900015][ T7779] should_fail_ex+0x414/0x560 [ 223.900028][ T7779] should_failslab+0xa8/0x100 [ 223.900040][ T7779] __kmalloc_noprof+0xcb/0x4f0 [ 223.900050][ T7779] ? kfree+0x4d/0x440 [ 223.900064][ T7779] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 223.900080][ T7779] tomoyo_realpath_from_path+0xe3/0x5d0 [ 223.900094][ T7779] ? tomoyo_domain+0xda/0x130 [ 223.900110][ T7779] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 223.900121][ T7779] tomoyo_path_number_perm+0x1e8/0x5a0 [ 223.900133][ T7779] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 223.900153][ T7779] ? __lock_acquire+0xab9/0xd20 [ 223.900174][ T7779] ? __fget_files+0x2a/0x420 [ 223.900187][ T7779] ? __fget_files+0x2a/0x420 [ 223.900197][ T7779] ? __fget_files+0x3a0/0x420 [ 223.900207][ T7779] ? __fget_files+0x2a/0x420 [ 223.900220][ T7779] security_file_ioctl+0xcb/0x2d0 [ 223.900234][ T7779] __se_sys_ioctl+0x47/0x170 [ 223.900251][ T7779] do_syscall_64+0xfa/0x3b0 [ 223.900264][ T7779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.900274][ T7779] ? asm_sysvec_call_function_single+0x1a/0x20 [ 223.900283][ T7779] ? clear_bhb_loop+0x60/0xb0 [ 223.900295][ T7779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.900305][ T7779] RIP: 0033:0x7f46a698ebe9 [ 223.900317][ T7779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.900326][ T7779] RSP: 002b:00007f46a7756038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.900343][ T7779] RAX: ffffffffffffffda RBX: 00007f46a6bb6090 RCX: 00007f46a698ebe9 [ 223.900350][ T7779] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000006 [ 223.900357][ T7779] RBP: 00007f46a7756090 R08: 0000000000000000 R09: 0000000000000000 [ 223.900363][ T7779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.900369][ T7779] R13: 00007f46a6bb6128 R14: 00007f46a6bb6090 R15: 00007ffd228298a8 [ 223.900385][ T7779] [ 223.900396][ T7779] ERROR: Out of memory at tomoyo_realpath_from_path. [ 224.261827][ T7782] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.269270][ T7782] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.703257][ T7789] sg_write: data in/out 589948/1 bytes for SCSI command 0x1c-- guessing data in; [ 224.703257][ T7789] program syz.8.357 not setting count and/or reply_len properly [ 225.212305][ T7782] bridge0: entered allmulticast mode [ 225.376552][ T7791] bridge_slave_1: left allmulticast mode [ 225.417990][ T7791] bridge_slave_1: left promiscuous mode [ 225.465844][ T7791] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.583098][ T7791] bridge_slave_0: left allmulticast mode [ 225.593887][ T7791] bridge_slave_0: left promiscuous mode [ 225.775236][ T7791] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.767767][ T30] audit: type=1326 audit(1755783011.085:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7809 comm="syz.6.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f46a698ebe9 code=0x7ffc0000 [ 226.885373][ T30] audit: type=1326 audit(1755783011.085:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7809 comm="syz.6.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f46a698ebe9 code=0x7ffc0000 [ 226.970515][ T30] audit: type=1326 audit(1755783011.085:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7809 comm="syz.6.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f46a692add9 code=0x7ffc0000 [ 227.075995][ T30] audit: type=1326 audit(1755783011.085:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7809 comm="syz.6.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f46a692add9 code=0x7ffc0000 [ 227.382693][ T30] audit: type=1326 audit(1755783011.085:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7809 comm="syz.6.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f46a698ebe9 code=0x7ffc0000 [ 227.741835][ T30] audit: type=1326 audit(1755783011.085:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7809 comm="syz.6.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f46a692add9 code=0x7ffc0000 [ 227.763056][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.785696][ T30] audit: type=1326 audit(1755783011.085:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7809 comm="syz.6.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f46a692add9 code=0x7ffc0000 [ 227.852449][ T30] audit: type=1326 audit(1755783011.085:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7809 comm="syz.6.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f46a692add9 code=0x7ffc0000 [ 227.966533][ T30] audit: type=1326 audit(1755783011.085:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7809 comm="syz.6.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f46a692add9 code=0x7ffc0000 [ 227.988956][ T30] audit: type=1326 audit(1755783011.085:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7809 comm="syz.6.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f46a692add9 code=0x7ffc0000 [ 229.459063][ T5953] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 229.633850][ T7841] input: syz0 as /devices/virtual/input/input11 [ 229.646431][ T7845] input: syz0 as /devices/virtual/input/input12 [ 229.668064][ T5953] usb 6-1: device descriptor read/64, error -71 [ 230.851647][ T5953] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 231.808091][ T5953] usb 6-1: device descriptor read/64, error -71 [ 232.248282][ T5953] usb usb6-port1: attempt power cycle [ 232.550258][ T7871] nbd: must specify at least one socket [ 232.701257][ T7876] netlink: 'syz.5.373': attribute type 1 has an invalid length. [ 235.182054][ T7903] trusted_key: syz.6.381 sent an empty control message without MSG_MORE. [ 237.779953][ T24] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 237.980841][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.015844][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 238.042199][ T24] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 238.073447][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.141662][ T24] usb 10-1: config 0 descriptor?? [ 238.165773][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 238.196465][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 238.240485][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 238.283386][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 238.308611][ T24] usb 10-1: media controller created [ 238.333996][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.437934][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 238.444110][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 238.488152][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input13 [ 238.550304][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 238.590230][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 238.643107][ T24] usb 10-1: USB disconnect, device number 5 [ 238.819696][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 239.151998][ T7965] input: syz0 as /devices/virtual/input/input14 [ 239.522474][ T7975] sg_write: data in/out 589948/1 bytes for SCSI command 0x1c-- guessing data in; [ 239.522474][ T7975] program syz.9.398 not setting count and/or reply_len properly [ 241.047118][ T8008] fuse: Bad value for 'fd' [ 241.760136][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 241.768693][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.408'. [ 241.937960][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 241.991908][ T8026] delete_channel: no stack [ 241.996441][ T8026] delete_channel: no stack [ 242.071825][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 242.078731][ T10] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 242.106016][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.165329][ T10] usb 10-1: config 0 descriptor?? [ 242.509042][ T8031] sg_write: data in/out 589948/1 bytes for SCSI command 0x1c-- guessing data in; [ 242.509042][ T8031] program syz.5.411 not setting count and/or reply_len properly [ 244.097257][ T10] corsair-cpro 0003:1B1C:0C10.0005: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.9-1/input0 [ 244.389633][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 244.548666][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 244.555929][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 244.614980][ T9] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 244.628834][ T10] corsair-cpro 0003:1B1C:0C10.0005: probe with driver corsair-cpro failed with error -110 [ 244.716906][ T9] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 244.768190][ T9] usb 6-1: Product: syz [ 244.772411][ T9] usb 6-1: Manufacturer: syz [ 244.777026][ T9] usb 6-1: SerialNumber: syz [ 245.166001][ T9] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 245.217622][ T9] usb 6-1: Handspring Visor / Palm OS: port 163, is for unknown use [ 245.251649][ T9] usb 6-1: Handspring Visor / Palm OS: port 51, is for unknown use [ 245.287508][ T9] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 245.371290][ T9] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 245.424222][ T9] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 245.525499][ T9] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 245.730251][ T9] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 246.061164][ T9] usb 6-1: USB disconnect, device number 15 [ 246.120191][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 246.174515][ T5839] usb 10-1: USB disconnect, device number 6 [ 246.236079][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 246.288717][ T9] visor 6-1:1.0: device disconnected [ 246.859226][ T8076] delete_channel: no stack [ 246.864617][ T8076] delete_channel: no stack [ 246.873114][ T8076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.489743][ T8089] nbd: must specify a size in bytes for the device [ 252.204388][ T8135] delete_channel: no stack [ 252.209030][ T8135] delete_channel: no stack [ 252.230491][ T8135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.388224][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 252.587434][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 252.625797][ T9] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 252.789326][ T8145] netlink: 'syz.5.435': attribute type 1 has an invalid length. [ 253.101694][ T9] usb 7-1: config 0 has no interface number 0 [ 253.188924][ T9] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 253.374918][ T8147] netlink: 'syz.9.436': attribute type 1 has an invalid length. [ 253.382929][ T8147] netlink: 224 bytes leftover after parsing attributes in process `syz.9.436'. [ 253.482169][ T9] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 253.511780][ T9] usb 7-1: config 0 interface 41 has no altsetting 0 [ 253.730895][ T9] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 253.761565][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.935106][ T9] usb 7-1: Product: syz [ 254.546608][ T9] usb 7-1: Manufacturer: syz [ 254.552190][ T9] usb 7-1: SerialNumber: syz [ 254.564092][ T9] usb 7-1: config 0 descriptor?? [ 254.571162][ T8136] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 254.578960][ T8136] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 254.791629][ T8136] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 254.809113][ T8136] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 254.927832][ T8161] netlink: 'syz.5.438': attribute type 8 has an invalid length. [ 255.748261][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.024513][ T9] Error reading MAC address [ 257.033563][ T9] sr9700 7-1:0.41: probe with driver sr9700 failed with error -71 [ 257.058249][ T9] usb 7-1: USB disconnect, device number 5 [ 257.583909][ T8187] FAULT_INJECTION: forcing a failure. [ 257.583909][ T8187] name failslab, interval 1, probability 0, space 0, times 0 [ 257.597030][ T8187] CPU: 0 UID: 0 PID: 8187 Comm: syz.9.445 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 257.597056][ T8187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.597067][ T8187] Call Trace: [ 257.597075][ T8187] [ 257.597082][ T8187] dump_stack_lvl+0x189/0x250 [ 257.597109][ T8187] ? __pfx____ratelimit+0x10/0x10 [ 257.597131][ T8187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.597152][ T8187] ? __pfx__printk+0x10/0x10 [ 257.597178][ T8187] ? __pfx___might_resched+0x10/0x10 [ 257.597199][ T8187] ? fs_reclaim_acquire+0x7d/0x100 [ 257.597226][ T8187] should_fail_ex+0x414/0x560 [ 257.597252][ T8187] should_failslab+0xa8/0x100 [ 257.597274][ T8187] __kmalloc_noprof+0xcb/0x4f0 [ 257.597298][ T8187] ? iovec_from_user+0x87/0x250 [ 257.597328][ T8187] iovec_from_user+0x87/0x250 [ 257.597357][ T8187] __import_iovec+0x163/0x7f0 [ 257.597394][ T8187] import_iovec+0x74/0xa0 [ 257.597423][ T8187] ___sys_sendmsg+0x1e7/0x2a0 [ 257.597455][ T8187] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.597521][ T8187] ? __fget_files+0x2a/0x420 [ 257.597541][ T8187] ? __fget_files+0x3a0/0x420 [ 257.597573][ T8187] __sys_sendmmsg+0x227/0x430 [ 257.597607][ T8187] ? __pfx___sys_sendmmsg+0x10/0x10 [ 257.597633][ T8187] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 257.597682][ T8187] ? ksys_write+0x22a/0x250 [ 257.597703][ T8187] ? __pfx_ksys_write+0x10/0x10 [ 257.597718][ T8187] ? rcu_is_watching+0x15/0xb0 [ 257.597745][ T8187] __x64_sys_sendmmsg+0xa0/0xc0 [ 257.597776][ T8187] do_syscall_64+0xfa/0x3b0 [ 257.597798][ T8187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.597816][ T8187] ? asm_sysvec_call_function_single+0x1a/0x20 [ 257.597835][ T8187] ? clear_bhb_loop+0x60/0xb0 [ 257.597859][ T8187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.597876][ T8187] RIP: 0033:0x7f912a78ebe9 [ 257.597892][ T8187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.597908][ T8187] RSP: 002b:00007f912b513038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 257.597928][ T8187] RAX: ffffffffffffffda RBX: 00007f912a9b6090 RCX: 00007f912a78ebe9 [ 257.597942][ T8187] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000007 [ 257.597955][ T8187] RBP: 00007f912b513090 R08: 0000000000000000 R09: 0000000000000000 [ 257.597967][ T8187] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.597978][ T8187] R13: 00007f912a9b6128 R14: 00007f912a9b6090 R15: 00007ffedeed2db8 [ 257.598009][ T8187] [ 259.694305][ T8201] ======================================================= [ 259.694305][ T8201] WARNING: The mand mount option has been deprecated and [ 259.694305][ T8201] and is ignored by this kernel. Remove the mand [ 259.694305][ T8201] option from the mount to silence this warning. [ 259.694305][ T8201] ======================================================= [ 262.509692][ T928] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 262.673441][ T8254] mmap: syz.9.460 (8254) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 262.710014][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 262.710031][ T30] audit: type=1326 audit(1755783047.035:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8253 comm="syz.9.460" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f912a78ebe9 code=0x0 [ 262.742628][ T928] usb 9-1: Using ep0 maxpacket: 16 [ 262.764649][ T928] usb 9-1: config 0 interface 0 has no altsetting 0 [ 262.771583][ T928] usb 9-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 262.786113][ T928] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.799847][ T928] usb 9-1: config 0 descriptor?? [ 263.401110][ T928] usbhid 9-1:0.0: can't add hid device: -71 [ 263.423806][ T928] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 263.458321][ T928] usb 9-1: USB disconnect, device number 7 [ 264.116958][ T8278] netlink: 16 bytes leftover after parsing attributes in process `syz.6.465'. [ 264.574352][ T8287] program syz.9.466 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.626011][ T8321] fuse: Unknown parameter 'Cd' [ 268.195821][ T8326] input: syz0 as /devices/virtual/input/input16 [ 269.563423][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.476'. [ 270.328070][ T928] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 270.360487][ T8340] kAFS: unable to lookup cell '/,' [ 270.422478][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 270.620521][ T928] usb 9-1: device descriptor read/64, error -32 [ 271.418096][ T928] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 271.452242][ T8356] delete_channel: no stack [ 271.456787][ T8356] delete_channel: no stack [ 271.598012][ T928] usb 9-1: Using ep0 maxpacket: 32 [ 271.646787][ T928] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.695068][ T928] usb 9-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 271.716131][ T928] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.736393][ T928] usb 9-1: Product: syz [ 271.745903][ T928] usb 9-1: Manufacturer: syz [ 271.758788][ T928] usb 9-1: SerialNumber: syz [ 271.807661][ T928] usb 9-1: config 0 descriptor?? [ 271.856598][ T928] usb 9-1: no audio or video endpoints found [ 272.105633][ T928] usb 9-1: USB disconnect, device number 9 [ 272.196363][ T8378] overlayfs: failed to resolve './file1': -2 [ 274.161744][ T8418] netlink: 'syz.8.498': attribute type 1 has an invalid length. [ 275.211046][ T8436] sg_write: data in/out 589948/1 bytes for SCSI command 0x1c-- guessing data in; [ 275.211046][ T8436] program syz.6.500 not setting count and/or reply_len properly [ 276.188603][ T8444] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20017 [ 276.564361][ T8448] netlink: 12 bytes leftover after parsing attributes in process `syz.9.505'. [ 277.243103][ T8444] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 277.319747][ T8444] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 277.327712][ T8459] netlink: 'syz.6.509': attribute type 1 has an invalid length. [ 277.346987][ T8459] netlink: 224 bytes leftover after parsing attributes in process `syz.6.509'. [ 277.356562][ T8444] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 277.385616][ T8444] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 277.395060][ T8444] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 278.334424][ T6370] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 278.554880][ T6370] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 278.597969][ T6370] usb 7-1: config 0 has no interface number 0 [ 278.813738][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 278.883209][ T6370] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 278.907931][ T6370] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.348561][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 279.354854][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 279.428565][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 279.434754][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 279.445441][ T6370] usb 7-1: Product: syz [ 279.465949][ T6370] usb 7-1: Manufacturer: syz [ 279.477419][ T6370] usb 7-1: SerialNumber: syz [ 279.529411][ T6370] usb 7-1: config 0 descriptor?? [ 279.800112][ T6370] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 279.852756][ T6370] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 279.878917][ T6370] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 279.918520][ T6370] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 279.978107][ T6370] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 280.041900][ T6370] usb 7-1: USB disconnect, device number 6 [ 280.070133][ T6370] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 280.391161][ T6370] keyspan 7-1:0.133: device disconnected [ 280.923401][ T8523] siw: device registration error -23 [ 282.240791][ T8534] FAULT_INJECTION: forcing a failure. [ 282.240791][ T8534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.256291][ T8534] CPU: 0 UID: 0 PID: 8534 Comm: syz.5.525 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 282.256315][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.256325][ T8534] Call Trace: [ 282.256333][ T8534] [ 282.256341][ T8534] dump_stack_lvl+0x189/0x250 [ 282.256367][ T8534] ? __pfx____ratelimit+0x10/0x10 [ 282.256388][ T8534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.256409][ T8534] ? __pfx__printk+0x10/0x10 [ 282.256434][ T8534] ? __might_fault+0xb0/0x130 [ 282.256465][ T8534] should_fail_ex+0x414/0x560 [ 282.256490][ T8534] _copy_from_user+0x2d/0xb0 [ 282.256517][ T8534] ___sys_sendmsg+0x158/0x2a0 [ 282.256549][ T8534] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.256625][ T8534] ? __might_fault+0xb0/0x130 [ 282.256647][ T8534] __sys_sendmmsg+0x227/0x430 [ 282.256682][ T8534] ? __pfx___sys_sendmmsg+0x10/0x10 [ 282.256707][ T8534] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 282.256757][ T8534] ? ksys_write+0x22a/0x250 [ 282.256778][ T8534] ? __pfx_ksys_write+0x10/0x10 [ 282.256793][ T8534] ? rcu_is_watching+0x15/0xb0 [ 282.256821][ T8534] __x64_sys_sendmmsg+0xa0/0xc0 [ 282.256852][ T8534] do_syscall_64+0xfa/0x3b0 [ 282.256874][ T8534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.256892][ T8534] ? asm_sysvec_call_function_single+0x1a/0x20 [ 282.256911][ T8534] ? clear_bhb_loop+0x60/0xb0 [ 282.256934][ T8534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.256952][ T8534] RIP: 0033:0x7f495678ebe9 [ 282.256969][ T8534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.256984][ T8534] RSP: 002b:00007f495763e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 282.257004][ T8534] RAX: ffffffffffffffda RBX: 00007f49569b6180 RCX: 00007f495678ebe9 [ 282.257025][ T8534] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000005 [ 282.257038][ T8534] RBP: 00007f495763e090 R08: 0000000000000000 R09: 0000000000000000 [ 282.257049][ T8534] R10: 000000000401eb94 R11: 0000000000000246 R12: 0000000000000001 [ 282.257061][ T8534] R13: 00007f49569b6218 R14: 00007f49569b6180 R15: 00007ffd9fbcc7e8 [ 282.257092][ T8534] [ 282.495431][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.526'. [ 282.770885][ T8532] netlink: 16 bytes leftover after parsing attributes in process `syz.6.526'. [ 282.810444][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.6.526'. [ 282.979236][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.8.528'. [ 283.058074][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.8.528'. [ 283.084370][ T8553] netlink: 'syz.9.527': attribute type 1 has an invalid length. [ 286.085834][ T8590] random: crng reseeded on system resumption [ 287.849252][ T8610] netlink: 'syz.5.540': attribute type 7 has an invalid length. [ 288.016628][ T8610] : entered promiscuous mode [ 288.179120][ T8610] netlink: 16 bytes leftover after parsing attributes in process `syz.5.540'. [ 290.150735][ T8636] fuse: Bad value for 'fd' [ 290.841955][ T8663] FAULT_INJECTION: forcing a failure. [ 290.841955][ T8663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.965918][ T8665] netlink: 'syz.8.552': attribute type 1 has an invalid length. [ 291.071977][ T8663] CPU: 0 UID: 0 PID: 8663 Comm: syz.5.553 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 291.072005][ T8663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.072016][ T8663] Call Trace: [ 291.072024][ T8663] [ 291.072032][ T8663] dump_stack_lvl+0x189/0x250 [ 291.072060][ T8663] ? __pfx____ratelimit+0x10/0x10 [ 291.072081][ T8663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.072102][ T8663] ? __pfx__printk+0x10/0x10 [ 291.072126][ T8663] ? __might_fault+0xb0/0x130 [ 291.072157][ T8663] should_fail_ex+0x414/0x560 [ 291.072182][ T8663] _copy_from_user+0x2d/0xb0 [ 291.072210][ T8663] video_usercopy+0x354/0x14f0 [ 291.072256][ T8663] ? __pfx___video_do_ioctl+0x10/0x10 [ 291.072283][ T8663] ? __pfx_video_usercopy+0x10/0x10 [ 291.072330][ T8663] ? v4l2_ioctl+0xff/0x1e0 [ 291.072359][ T8663] v4l2_ioctl+0x18a/0x1e0 [ 291.072387][ T8663] ? __pfx_v4l2_ioctl+0x10/0x10 [ 291.072413][ T8663] __se_sys_ioctl+0xfc/0x170 [ 291.072444][ T8663] do_syscall_64+0xfa/0x3b0 [ 291.072467][ T8663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.072485][ T8663] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 291.072504][ T8663] ? clear_bhb_loop+0x60/0xb0 [ 291.072527][ T8663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.072546][ T8663] RIP: 0033:0x7f495678ebe9 [ 291.072563][ T8663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.072580][ T8663] RSP: 002b:00007f4957680038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.072601][ T8663] RAX: ffffffffffffffda RBX: 00007f49569b5fa0 RCX: 00007f495678ebe9 [ 291.072616][ T8663] RDX: 0000200000000200 RSI: 00000000c050561a RDI: 0000000000000003 [ 291.072629][ T8663] RBP: 00007f4957680090 R08: 0000000000000000 R09: 0000000000000000 [ 291.072641][ T8663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.072653][ T8663] R13: 00007f49569b6038 R14: 00007f49569b5fa0 R15: 00007ffd9fbcc7e8 [ 291.072685][ T8663] [ 292.804806][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 294.791029][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 294.950130][ T5846] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 297.485449][ T8689] netlink: 'syz.6.561': attribute type 10 has an invalid length. [ 297.508818][ T8694] delete_channel: no stack [ 297.517617][ T8694] delete_channel: no stack [ 297.562930][ T8693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.837774][ T8695] trusted_key: encrypted_key: insufficient parameters specified [ 297.890832][ T8689] veth0_vlan: left promiscuous mode [ 297.906736][ T8689] veth0_vlan: entered promiscuous mode [ 297.996560][ T8689] team0: Device veth0_vlan failed to register rx_handler [ 298.234119][ T8705] fuse: Bad value for 'fd' [ 298.248063][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 298.458802][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 298.477385][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 298.480259][ T10] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 298.533158][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.533186][ T10] usb 6-1: Product: syz [ 298.533202][ T10] usb 6-1: Manufacturer: syz [ 298.533217][ T10] usb 6-1: SerialNumber: syz [ 298.550342][ T10] usb 6-1: config 0 descriptor?? [ 298.557084][ T8701] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 298.583540][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 298.838882][ T8701] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.564' sets config #-1 [ 298.892456][ T10] usb 6-1: USB disconnect, device number 16 [ 300.349894][ T8749] netlink: 'syz.5.574': attribute type 1 has an invalid length. [ 300.357583][ T8749] netlink: 224 bytes leftover after parsing attributes in process `syz.5.574'. [ 302.159764][ T8778] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 303.812735][ T8790] program syz.6.583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.509800][ T8831] netlink: 'syz.8.589': attribute type 1 has an invalid length. [ 308.757741][ T8848] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 309.343102][ T8852] bridge0: entered allmulticast mode [ 310.666463][ T8866] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 310.674628][ T8866] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 310.686614][ T8866] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 310.694565][ T8866] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 311.136589][ T8867] FAULT_INJECTION: forcing a failure. [ 311.136589][ T8867] name failslab, interval 1, probability 0, space 0, times 0 [ 311.207111][ T8867] CPU: 0 UID: 0 PID: 8867 Comm: syz.6.599 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 311.207138][ T8867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.207173][ T8867] Call Trace: [ 311.207181][ T8867] [ 311.207190][ T8867] dump_stack_lvl+0x189/0x250 [ 311.207216][ T8867] ? __pfx____ratelimit+0x10/0x10 [ 311.207237][ T8867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.207259][ T8867] ? __pfx__printk+0x10/0x10 [ 311.207290][ T8867] ? __pfx___might_resched+0x10/0x10 [ 311.207316][ T8867] should_fail_ex+0x414/0x560 [ 311.207341][ T8867] ? vhost_dev_ioctl+0x6f9/0xbc0 [ 311.207363][ T8867] should_failslab+0xa8/0x100 [ 311.207383][ T8867] __kvmalloc_node_noprof+0x161/0x5f0 [ 311.207404][ T8867] ? vhost_dev_ioctl+0x6f9/0xbc0 [ 311.207434][ T8867] vhost_dev_ioctl+0x6f9/0xbc0 [ 311.207466][ T8867] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 311.207500][ T8867] ? smack_file_ioctl+0x24a/0x340 [ 311.207523][ T8867] vhost_vsock_dev_ioctl+0x21f/0xdc0 [ 311.207555][ T8867] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 311.207581][ T8867] ? __fget_files+0x2a/0x420 [ 311.207600][ T8867] ? __fget_files+0x3a0/0x420 [ 311.207620][ T8867] ? __fget_files+0x2a/0x420 [ 311.207644][ T8867] ? bpf_lsm_file_ioctl+0x9/0x20 [ 311.207666][ T8867] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 311.207698][ T8867] __se_sys_ioctl+0xfc/0x170 [ 311.207730][ T8867] do_syscall_64+0xfa/0x3b0 [ 311.207749][ T8867] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.207768][ T8867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.207787][ T8867] ? clear_bhb_loop+0x60/0xb0 [ 311.207811][ T8867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.207829][ T8867] RIP: 0033:0x7f46a698ebe9 [ 311.207850][ T8867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.207864][ T8867] RSP: 002b:00007f46a7777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.207883][ T8867] RAX: ffffffffffffffda RBX: 00007f46a6bb5fa0 RCX: 00007f46a698ebe9 [ 311.207897][ T8867] RDX: 0000200000000b00 RSI: 000000004008af03 RDI: 0000000000000003 [ 311.207909][ T8867] RBP: 00007f46a7777090 R08: 0000000000000000 R09: 0000000000000000 [ 311.207920][ T8867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.207931][ T8867] R13: 00007f46a6bb6038 R14: 00007f46a6bb5fa0 R15: 00007ffd228298a8 [ 311.207964][ T8867] [ 313.467182][ T8888] netlink: 'syz.9.604': attribute type 1 has an invalid length. [ 314.969614][ T8904] netlink: 'syz.9.608': attribute type 1 has an invalid length. [ 314.977757][ T8904] netlink: 224 bytes leftover after parsing attributes in process `syz.9.608'. [ 315.454354][ T8911] input: syz0 as /devices/virtual/input/input17 [ 315.478033][ T5839] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 316.510483][ T5839] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 316.782081][ T5839] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.791963][ T5839] usb 10-1: Product: syz [ 316.796243][ T5839] usb 10-1: Manufacturer: syz [ 316.802978][ T5839] usb 10-1: SerialNumber: syz [ 316.819694][ T5839] usb 10-1: config 0 descriptor?? [ 316.839045][ T5839] ch341 10-1:0.0: ch341-uart converter detected [ 316.854424][ T8919] input: syz0 as /devices/virtual/input/input18 [ 317.113028][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.195565][ T8929] siw: device registration error -23 [ 317.922553][ T5839] usb 10-1: failed to receive control message: -110 [ 317.922620][ T5839] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 320.366380][ T5953] usb 10-1: USB disconnect, device number 7 [ 320.383060][ T5953] ch341 10-1:0.0: device disconnected [ 320.478804][ T8945] bridge0: entered allmulticast mode [ 320.535096][ T8945] bridge_slave_1: left allmulticast mode [ 320.555584][ T8945] bridge_slave_1: left promiscuous mode [ 320.658222][ T8945] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.101922][ T8945] bridge_slave_0: left allmulticast mode [ 322.102140][ T8945] bridge_slave_0: left promiscuous mode [ 322.108670][ T8945] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.405259][ T30] audit: type=1326 audit(1755783106.725:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8946 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495678ebe9 code=0x7ffc0000 [ 322.439182][ T8963] binder: 8960:8963 ioctl c0306201 200000000080 returned -14 [ 322.442051][ T30] audit: type=1326 audit(1755783106.765:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8960 comm="syz.8.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870058ebe9 code=0x7ffc0000 [ 322.442082][ T30] audit: type=1326 audit(1755783106.765:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8960 comm="syz.8.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870058ebe9 code=0x7ffc0000 [ 322.442104][ T30] audit: type=1326 audit(1755783106.765:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8960 comm="syz.8.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870058ebe9 code=0x7ffc0000 [ 322.442126][ T30] audit: type=1326 audit(1755783106.765:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8960 comm="syz.8.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f870058ebe9 code=0x7ffc0000 [ 322.442148][ T30] audit: type=1326 audit(1755783106.765:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8960 comm="syz.8.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870058ebe9 code=0x7ffc0000 [ 322.442169][ T30] audit: type=1326 audit(1755783106.765:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8960 comm="syz.8.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870058ebe9 code=0x7ffc0000 [ 322.442191][ T30] audit: type=1326 audit(1755783106.765:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8960 comm="syz.8.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870058ebe9 code=0x7ffc0000 [ 322.442211][ T30] audit: type=1326 audit(1755783106.765:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8960 comm="syz.8.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f870058ebe9 code=0x7ffc0000 [ 322.449359][ T30] audit: type=1326 audit(1755783106.775:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8946 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495678ebe9 code=0x7ffc0000 [ 322.853681][ T8964] tty tty2: ldisc open failed (-12), clearing slot 1 [ 324.498159][ T8993] netlink: 340 bytes leftover after parsing attributes in process `syz.7.627'. [ 324.517700][ T8993] netlink: 48 bytes leftover after parsing attributes in process `syz.7.627'. [ 324.900104][ T9000] sg_write: data in/out 589948/1 bytes for SCSI command 0x1c-- guessing data in; [ 324.900104][ T9000] program syz.9.624 not setting count and/or reply_len properly [ 325.436043][ T5890] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 325.691949][ T5890] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 325.739607][ T5890] usb 9-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 325.996696][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.406636][ T5890] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 326.919068][ T9022] netlink: 24 bytes leftover after parsing attributes in process `syz.7.634'. [ 326.940317][ T9025] siw: device registration error -23 [ 326.973601][ T9024] netlink: 'syz.7.634': attribute type 3 has an invalid length. [ 326.981346][ T9024] netlink: 64 bytes leftover after parsing attributes in process `syz.7.634'. [ 327.431455][ T9027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.442594][ T9027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.519036][ T5890] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 327.573125][ T5890] stv0680 9-1:4.0: STV(e): camera ping failed!! [ 328.736287][ T9040] netlink: 16 bytes leftover after parsing attributes in process `syz.6.635'. [ 328.799702][ T5890] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 329.175835][ T6350] tipc: Subscription rejected, illegal request [ 329.198295][ T5890] stv0680 9-1:4.0: last error: 0, command = 0x0 [ 329.290537][ T5890] usb 9-1: USB disconnect, device number 10 [ 330.519156][ T9061] 9pnet_fd: Insufficient options for proto=fd [ 330.792169][ T9068] netlink: 96 bytes leftover after parsing attributes in process `syz.9.641'. [ 335.875360][ T9112] netlink: 'syz.7.649': attribute type 1 has an invalid length. [ 336.220758][ T5839] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 337.081869][ T5839] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 337.120383][ T5839] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 337.239787][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.300548][ T5839] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 337.539657][ T9142] hub 8-0:1.0: USB hub found [ 337.547918][ T9142] hub 8-0:1.0: 1 port detected [ 338.332256][ T9148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.340974][ T9148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.356164][ T5839] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 338.440137][ T5839] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 338.985208][ T9169] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 339.617097][ T5839] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 339.648687][ T5839] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 339.777723][ T9163] program syz.5.655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.874525][ T5953] usb 7-1: USB disconnect, device number 7 [ 341.188425][ T9193] netlink: 'syz.6.661': attribute type 1 has an invalid length. [ 341.269098][ T9193] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 342.108653][ T9200] netlink: 28 bytes leftover after parsing attributes in process `syz.8.663'. [ 343.053607][ T9212] netlink: 'syz.7.665': attribute type 1 has an invalid length. [ 344.106535][ T9224] syz.9.667: attempt to access beyond end of device [ 344.106535][ T9224] nbd9: rw=0, sector=64, nr_sectors = 8 limit=0 [ 344.121233][ T9224] syz.9.667: attempt to access beyond end of device [ 344.121233][ T9224] nbd9: rw=0, sector=120, nr_sectors = 8 limit=0 [ 344.134451][ T9224] Mount JFS Failure: -5 [ 345.771988][ T5890] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 346.242359][ T5890] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 346.273260][ T5890] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 346.336906][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.845590][ T5890] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 347.589579][ T9259] netlink: 'syz.8.677': attribute type 21 has an invalid length. [ 347.597351][ T9259] netlink: 128 bytes leftover after parsing attributes in process `syz.8.677'. [ 347.606510][ T9259] netlink: 'syz.8.677': attribute type 5 has an invalid length. [ 347.614221][ T9259] netlink: 3 bytes leftover after parsing attributes in process `syz.8.677'. [ 347.978110][ T9260] siw: device registration error -23 [ 348.243703][ T9261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.256912][ T9261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.624401][ T5890] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 348.632857][ T5890] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 349.477463][ T5890] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 349.486281][ T5890] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 349.608427][ T5953] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 349.722355][ T6370] usb 6-1: USB disconnect, device number 17 [ 349.880235][ T5953] usb 7-1: Using ep0 maxpacket: 32 [ 349.921535][ T5953] usb 7-1: config 0 has an invalid interface number: 141 but max is 0 [ 349.958341][ T5953] usb 7-1: config 0 has no interface number 0 [ 349.964513][ T5953] usb 7-1: config 0 interface 141 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 350.240086][ T5953] usb 7-1: config 0 interface 141 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 350.253223][ T5953] usb 7-1: config 0 interface 141 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 351.226313][ T5953] usb 7-1: config 0 interface 141 altsetting 0 bulk endpoint 0xB has invalid maxpacket 32 [ 351.237169][ T5953] usb 7-1: config 0 interface 141 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 351.248285][ T5953] usb 7-1: config 0 interface 141 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 351.259059][ T5953] usb 7-1: config 0 interface 141 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 351.696953][ T5953] usb 7-1: config 0 interface 141 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 351.697025][ T5953] usb 7-1: config 0 interface 141 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 351.697088][ T5953] usb 7-1: config 0 interface 141 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 351.697155][ T5953] usb 7-1: config 0 interface 141 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 351.697218][ T5953] usb 7-1: config 0 interface 141 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 351.697284][ T5953] usb 7-1: config 0 interface 141 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 351.697349][ T5953] usb 7-1: config 0 interface 141 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 351.697413][ T5953] usb 7-1: config 0 interface 141 altsetting 0 endpoint 0xA has an invalid bInterval 91, changing to 7 [ 351.697478][ T5953] usb 7-1: config 0 interface 141 altsetting 0 endpoint 0xA has invalid maxpacket 34323, setting to 1024 [ 351.697551][ T5953] usb 7-1: config 0 interface 141 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 351.697612][ T5953] usb 7-1: config 0 interface 141 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 351.697673][ T5953] usb 7-1: config 0 interface 141 altsetting 0 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 352.020569][ T5953] usb 7-1: New USB device found, idVendor=2019, idProduct=ab24, bcdDevice=d9.4a [ 352.111554][ T9295] overlayfs: failed to resolve './file1/file0': -2 [ 352.154233][ T5953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.217359][ T5953] usb 7-1: Product: syz [ 352.252548][ T5953] usb 7-1: Manufacturer: syz [ 352.273956][ T5953] usb 7-1: config 0 descriptor?? [ 352.306746][ T5953] usb 7-1: can't set config #0, error -71 [ 352.348386][ T5953] usb 7-1: USB disconnect, device number 8 [ 352.566647][ T9304] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3742998066 (479103752448 ns) > initial count (440160584064 ns). Using initial count to start timer. [ 352.672524][ T9319] FAULT_INJECTION: forcing a failure. [ 352.672524][ T9319] name failslab, interval 1, probability 0, space 0, times 0 [ 352.685333][ T9319] CPU: 0 UID: 0 PID: 9319 Comm: syz.6.689 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 352.685358][ T9319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 352.685370][ T9319] Call Trace: [ 352.685379][ T9319] [ 352.685387][ T9319] dump_stack_lvl+0x189/0x250 [ 352.685415][ T9319] ? __pfx____ratelimit+0x10/0x10 [ 352.685436][ T9319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.685458][ T9319] ? __pfx__printk+0x10/0x10 [ 352.685490][ T9319] ? __pfx___might_resched+0x10/0x10 [ 352.685517][ T9319] should_fail_ex+0x414/0x560 [ 352.685544][ T9319] should_failslab+0xa8/0x100 [ 352.685567][ T9319] __kmalloc_noprof+0xcb/0x4f0 [ 352.685586][ T9319] ? sock_kmalloc+0xd6/0x160 [ 352.685611][ T9319] sock_kmalloc+0xd6/0x160 [ 352.685633][ T9319] af_alg_alloc_areq+0x8d/0x260 [ 352.685656][ T9319] skcipher_recvmsg+0x356/0x11c0 [ 352.685707][ T9319] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 352.685730][ T9319] ? sock_recvmsg+0x2a/0x270 [ 352.685752][ T9319] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 352.685770][ T9319] ? security_socket_recvmsg+0x7e/0x2e0 [ 352.685789][ T9319] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 352.685812][ T9319] sock_recvmsg+0x22c/0x270 [ 352.685839][ T9319] ____sys_recvmsg+0x1c9/0x460 [ 352.685868][ T9319] ? __pfx_____sys_recvmsg+0x10/0x10 [ 352.685905][ T9319] ? import_iovec+0x74/0xa0 [ 352.685936][ T9319] ___sys_recvmsg+0x1b5/0x510 [ 352.685952][ T9319] ? rcu_is_watching+0x15/0xb0 [ 352.685979][ T9319] ? __pfx____sys_recvmsg+0x10/0x10 [ 352.686021][ T9319] ? __rcu_read_unlock+0x84/0xe0 [ 352.686050][ T9319] ? __fget_files+0x3a0/0x420 [ 352.686084][ T9319] __x64_sys_recvmsg+0x198/0x260 [ 352.686106][ T9319] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 352.686137][ T9319] ? __pfx_ksys_write+0x10/0x10 [ 352.686162][ T9319] ? do_syscall_64+0xbe/0x3b0 [ 352.686194][ T9319] do_syscall_64+0xfa/0x3b0 [ 352.686216][ T9319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.686235][ T9319] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 352.686253][ T9319] ? clear_bhb_loop+0x60/0xb0 [ 352.686277][ T9319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.686296][ T9319] RIP: 0033:0x7f46a698ebe9 [ 352.686313][ T9319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.686331][ T9319] RSP: 002b:00007f46a7735038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 352.686352][ T9319] RAX: ffffffffffffffda RBX: 00007f46a6bb6180 RCX: 00007f46a698ebe9 [ 352.686367][ T9319] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 352.686380][ T9319] RBP: 00007f46a7735090 R08: 0000000000000000 R09: 0000000000000000 [ 352.686392][ T9319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.686403][ T9319] R13: 00007f46a6bb6218 R14: 00007f46a6bb6180 R15: 00007ffd228298a8 [ 352.686436][ T9319] [ 352.963181][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.108513][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 353.611086][ T10] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 353.662177][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 353.712823][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.953685][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 353.985355][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.7.696'. [ 354.066255][ T9334] syz.6.695: attempt to access beyond end of device [ 354.066255][ T9334] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 354.802270][ T9332] netlink: 2 bytes leftover after parsing attributes in process `syz.7.696'. [ 355.304109][ T9342] siw: device registration error -23 [ 355.400225][ T9344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.412156][ T9344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.872244][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 355.881463][ T10] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 356.990556][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 357.029122][ T10] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 357.075436][ T10] usb 6-1: USB disconnect, device number 18 [ 357.458264][ T9368] netlink: 'syz.9.702': attribute type 1 has an invalid length. [ 357.466543][ T9368] netlink: 224 bytes leftover after parsing attributes in process `syz.9.702'. [ 357.476927][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.9.702'. [ 358.634887][ T9378] x_tables: duplicate underflow at hook 2 [ 360.700092][ T9398] Bluetooth: MGMT ver 1.23 [ 362.249111][ T5948] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 362.420217][ T5948] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 362.517664][ T9424] syz_tun: entered allmulticast mode [ 362.663141][ T9424] dvmrp1: entered allmulticast mode [ 362.893186][ T5948] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 362.926866][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.019757][ T5948] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 363.151987][ T9419] syz_tun: left allmulticast mode [ 363.483361][ T9439] siw: device registration error -23 [ 363.981379][ T9441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.993461][ T9441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.148778][ T5948] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 364.159239][ T5948] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 364.511371][ T9456] [ 364.513734][ T9456] ====================================================== [ 364.520747][ T9456] WARNING: possible circular locking dependency detected [ 364.527762][ T9456] 6.16.0-syzkaller #0 Not tainted [ 364.532762][ T9456] ------------------------------------------------------ [ 364.539755][ T9456] syz.6.721/9456 is trying to acquire lock: [ 364.545623][ T9456] ffff88802577b988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 364.556665][ T9456] [ 364.556665][ T9456] but task is already holding lock: [ 364.564011][ T9456] ffff88802577ba30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 364.572873][ T9456] [ 364.572873][ T9456] which lock already depends on the new lock. [ 364.572873][ T9456] [ 364.583260][ T9456] [ 364.583260][ T9456] the existing dependency chain (in reverse order) is: [ 364.592293][ T9456] [ 364.592293][ T9456] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 364.600101][ T9456] lock_acquire+0x120/0x360 [ 364.605108][ T9456] __mutex_lock+0x182/0xe80 [ 364.610118][ T9456] refcount_dec_and_mutex_lock+0x30/0xa0 [ 364.616256][ T9456] nbd_config_put+0x2c/0x790 [ 364.621359][ T9456] nbd_release+0xfe/0x140 [ 364.626215][ T9456] bdev_release+0x533/0x650 [ 364.631224][ T9456] blkdev_release+0x15/0x20 [ 364.636229][ T9456] __fput+0x449/0xa70 [ 364.640743][ T9456] fput_close_sync+0x119/0x200 [ 364.646018][ T9456] __x64_sys_close+0x7f/0x110 [ 364.651285][ T9456] do_syscall_64+0xfa/0x3b0 [ 364.656375][ T9456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.662766][ T9456] [ 364.662766][ T9456] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 364.670565][ T9456] lock_acquire+0x120/0x360 [ 364.675587][ T9456] __mutex_lock+0x182/0xe80 [ 364.680610][ T9456] __del_gendisk+0x129/0x9e0 [ 364.685713][ T9456] del_gendisk+0xe8/0x160 [ 364.690544][ T9456] loop_remove+0x42/0xc0 [ 364.695289][ T9456] loop_control_ioctl+0x4ac/0x5a0 [ 364.700811][ T9456] __se_sys_ioctl+0xfc/0x170 [ 364.705905][ T9456] do_syscall_64+0xfa/0x3b0 [ 364.710912][ T9456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.717305][ T9456] [ 364.717305][ T9456] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 364.725889][ T9456] validate_chain+0xb9b/0x2140 [ 364.731179][ T9456] __lock_acquire+0xab9/0xd20 [ 364.736356][ T9456] lock_acquire+0x120/0x360 [ 364.741360][ T9456] down_write+0x96/0x1f0 [ 364.746102][ T9456] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 364.752335][ T9456] nbd_start_device+0x16c/0xac0 [ 364.757688][ T9456] nbd_ioctl+0x636/0xeb0 [ 364.762434][ T9456] blkdev_ioctl+0x5a8/0x6d0 [ 364.767442][ T9456] __se_sys_ioctl+0xfc/0x170 [ 364.772540][ T9456] do_syscall_64+0xfa/0x3b0 [ 364.777541][ T9456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.783933][ T9456] [ 364.783933][ T9456] other info that might help us debug this: [ 364.783933][ T9456] [ 364.794143][ T9456] Chain exists of: [ 364.794143][ T9456] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 364.794143][ T9456] [ 364.808310][ T9456] Possible unsafe locking scenario: [ 364.808310][ T9456] [ 364.815738][ T9456] CPU0 CPU1 [ 364.821080][ T9456] ---- ---- [ 364.826431][ T9456] lock(&nbd->config_lock); [ 364.831046][ T9456] lock(&disk->open_mutex); [ 364.838136][ T9456] lock(&nbd->config_lock); [ 364.845223][ T9456] lock(&set->update_nr_hwq_lock); [ 364.850488][ T9456] [ 364.850488][ T9456] *** DEADLOCK *** [ 364.850488][ T9456] [ 364.858609][ T9456] 1 lock held by syz.6.721/9456: [ 364.863518][ T9456] #0: ffff88802577ba30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 364.872811][ T9456] [ 364.872811][ T9456] stack backtrace: [ 364.878689][ T9456] CPU: 1 UID: 0 PID: 9456 Comm: syz.6.721 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 364.878702][ T9456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 364.878711][ T9456] Call Trace: [ 364.878720][ T9456] [ 364.878726][ T9456] dump_stack_lvl+0x189/0x250 [ 364.878742][ T9456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.878753][ T9456] ? __pfx__printk+0x10/0x10 [ 364.878766][ T9456] ? print_lock_name+0xde/0x100 [ 364.878779][ T9456] print_circular_bug+0x2ee/0x310 [ 364.878793][ T9456] check_noncircular+0x134/0x160 [ 364.878806][ T9456] validate_chain+0xb9b/0x2140 [ 364.878817][ T9456] ? trace_sched_exit_tp+0x38/0x120 [ 364.878831][ T9456] ? __schedule+0x16c8/0x4c90 [ 364.878845][ T9456] __lock_acquire+0xab9/0xd20 [ 364.878855][ T9456] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 364.878869][ T9456] lock_acquire+0x120/0x360 [ 364.878878][ T9456] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 364.878892][ T9456] ? __mutex_trylock_common+0x153/0x260 [ 364.878906][ T9456] down_write+0x96/0x1f0 [ 364.878918][ T9456] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 364.878931][ T9456] ? __pfx_down_write+0x10/0x10 [ 364.878942][ T9456] ? rcu_is_watching+0x15/0xb0 [ 364.878953][ T9456] ? trace_contention_end+0x39/0x120 [ 364.878965][ T9456] ? __mutex_lock+0x330/0xe80 [ 364.878976][ T9456] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 364.878990][ T9456] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.879000][ T9456] ? nbd_ioctl+0x131/0xeb0 [ 364.879014][ T9456] ? __pfx___mutex_lock+0x10/0x10 [ 364.879026][ T9456] nbd_start_device+0x16c/0xac0 [ 364.879038][ T9456] ? security_capable+0x7e/0x2e0 [ 364.879052][ T9456] nbd_ioctl+0x636/0xeb0 [ 364.879067][ T9456] ? __pfx_nbd_ioctl+0x10/0x10 [ 364.879079][ T9456] ? preempt_schedule_irq+0xde/0x150 [ 364.879088][ T9456] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 364.879097][ T9456] ? smack_file_ioctl+0x24a/0x340 [ 364.879108][ T9456] ? irqentry_exit+0x74/0x90 [ 364.879117][ T9456] ? __pfx_nbd_ioctl+0x10/0x10 [ 364.879130][ T9456] blkdev_ioctl+0x5a8/0x6d0 [ 364.879142][ T9456] ? __pfx_blkdev_ioctl+0x10/0x10 [ 364.879154][ T9456] ? __pfx_blkdev_ioctl+0x10/0x10 [ 364.879165][ T9456] __se_sys_ioctl+0xfc/0x170 [ 364.879181][ T9456] do_syscall_64+0xfa/0x3b0 [ 364.879193][ T9456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.879202][ T9456] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 364.879212][ T9456] ? clear_bhb_loop+0x60/0xb0 [ 364.879223][ T9456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.879233][ T9456] RIP: 0033:0x7f46a698ebe9 [ 364.879244][ T9456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.879253][ T9456] RSP: 002b:00007f46a7777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.879264][ T9456] RAX: ffffffffffffffda RBX: 00007f46a6bb5fa0 RCX: 00007f46a698ebe9 [ 364.879272][ T9456] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 364.879279][ T9456] RBP: 00007f46a6a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 364.879285][ T9456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.879291][ T9456] R13: 00007f46a6bb6038 R14: 00007f46a6bb5fa0 R15: 00007ffd228298a8 [ 364.879303][ T9456] [ 365.204649][ T5948] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 365.213093][ T5948] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 365.284481][ T5948] usb 6-1: USB disconnect, device number 19 [ 365.387481][ T9456] block nbd6: shutting down sockets