last executing test programs: 11m21.915456224s ago: executing program 32 (id=94): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) getsockname$packet(r2, &(0x7f00000003c0), &(0x7f0000000400)=0x14) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, 0x6, 0x5a1, 0x883d}, 0x9c) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x400}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 3m13.08795611s ago: executing program 1 (id=1027): syz_open_dev$dri(&(0x7f00000000c0), 0x1fc, 0xa800) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_clone(0xd5240700, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x80082, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) ioperm(0x6, 0x2, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0xff7f000000000000, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @broadcast}, 0x10) prlimit64(r0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) bind$netlink(r5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70bd2a, 0xfffff7fd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xc}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$nl_route(r5, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000190008042abd7000fddbdf251c100001fe00c80800010000140012001100730e283eeec86d195a75f6d866628400130000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000f0e0000000000000000000000010000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000005001a000600000008000400", @ANYRES32=0x0, @ANYBLOB="0c00090009001e4c", @ANYRES32=0x0, @ANYBLOB="fb374881c46741c8ae903bfd7421a70d0c528038c36675f44cf0467ebc6c3c149aa8e515e2912b1bdd1b6553ff0551cb4d5679f56f62fe52488b513c9cf795557f3d0405618b26b75a46e35b57e91115f4a5a69f8b63b46cd04adc49edbc05881babc38a3d19f17980343ed7b0a9ac79f20f8af36621dd11de33040723744f9eb9a37517b266f3478006c849a65807967b9c55123f45ce718d3ba7b4f165924064caefcea28ab8d9c592e53a7ceb0af2caa22e2fe9a1c16e3307c4424c12c8d7fafc00000000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x400c1}, 0x10) mount(0x0, &(0x7f00000003c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 3m10.194075914s ago: executing program 1 (id=1030): r0 = socket$inet_tcp(0x2, 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000423) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) clock_nanosleep(0x9, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x5, 0xa, 0x3, 0x1, {0x5, 0x17d, 0x8, 0x5, 0x100, 0x7cf1, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) r2 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) fsopen(0x0, 0x1) r3 = socket(0x2, 0x3, 0x4) getsockopt(r3, 0xff, 0x100000000000001, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18030400000044030920"], 0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x4, @mcast1, 0x40}}, 0x4}, &(0x7f0000000180)=0x90) syz_usb_control_io(r2, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000780)={0x14, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 3m7.722001855s ago: executing program 3 (id=1032): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="2400000076001f0329bd70000000000008000000ffffffff0c000d80"], 0x24}], 0x1, 0x0, 0x0, 0x30004041}, 0xc854) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x45, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xbc, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0xbb, 0x5, 0x1, {0x22, 0x6ab}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x1, 0x3}}}}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x5, 0xe4, 0x80, 0x8, 0x5}, 0x9d, &(0x7f0000001740)={0x5, 0xf, 0x9d, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x14, 0x7, 0x3, 0x5, 0xf2}, @generic={0x8d, 0x10, 0x2, "6e4f5a7cdbb9b039a5e2aa323cc263f5a9f4a3e579aba38a7e918d7345126aac534153cc41b8b3475a53f871246af799da8d59eeef2a18dc75480f2bec1a22500d20cbd5eed53664d16eeb801353eb8368469ecce77568dd1ccb8eeac6196fa1a5efe61f52fadcd5912a82da10b9878568aa1a83f2392358090cbd73cc89c64beeac93dc33a581efe8ce"}]}, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x380a}}, {0x5, &(0x7f0000000480)=@string={0x5, 0x3, "f70aa2"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x42a}}]}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 3m5.718338901s ago: executing program 4 (id=1038): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12) 3m5.533641007s ago: executing program 1 (id=1039): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './bus\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x100001ff, 0xfff, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x7, 0x4, 0x0, 0x0, 0xfffffffc, 0x81, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) fchdir(r3) (async) fchdir(r3) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r9 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwrite64(r9, &(0x7f0000000080)="8e", 0x1, 0x709c) pwritev2(r8, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='netlink_extack\x00', r7}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='netlink_extack\x00', r7}, 0x18) socket$kcm(0x10, 0x2, 0x0) (async) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) ftruncate(r6, 0x2007ffb) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)=0x0) syz_clone3(&(0x7f0000000240)={0x118042400, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100), {0x5}, &(0x7f0000000140)=""/59, 0x3b, &(0x7f0000000180)=""/56, &(0x7f0000000200)=[r11], 0x1, {r3}}, 0x58) (async) syz_clone3(&(0x7f0000000240)={0x118042400, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)=0x0, {0x5}, &(0x7f0000000140)=""/59, 0x3b, &(0x7f0000000180)=""/56, &(0x7f0000000200)=[r11], 0x1, {r3}}, 0x58) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000400)={@private0, r13}, 0x14) (async) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000400)={@private0, r13}, 0x14) ptrace$setregs(0xf, r12, 0x101, &(0x7f00000002c0)="b703cbf7dd3c97e24119703be8acfce198f3075037390530f9f79282291f51cad400268f19ea3c587d8a421a68a132e5a5d6e4c4c5a9b591dab5ef3f41938b7e685f8fb03de7078c06d798a480435fa82fb5f7e2f91de933f8724f9f35cf962c1b55b2a9b6e82a80bfa1a62e4373e45110bd04007cefa72ecce35c2f4b69ca103953d94d4082a2bdebbbc5b643e7829a6470e5dbb2d877facc9629465147eba230fa98d77a2671d1b29ecf5ef32ec7dc92a3d2bd57f431f1da83fd8dec635ea930098bd11010c767f629fb9276") (async) ptrace$setregs(0xf, r12, 0x101, &(0x7f00000002c0)="b703cbf7dd3c97e24119703be8acfce198f3075037390530f9f79282291f51cad400268f19ea3c587d8a421a68a132e5a5d6e4c4c5a9b591dab5ef3f41938b7e685f8fb03de7078c06d798a480435fa82fb5f7e2f91de933f8724f9f35cf962c1b55b2a9b6e82a80bfa1a62e4373e45110bd04007cefa72ecce35c2f4b69ca103953d94d4082a2bdebbbc5b643e7829a6470e5dbb2d877facc9629465147eba230fa98d77a2671d1b29ecf5ef32ec7dc92a3d2bd57f431f1da83fd8dec635ea930098bd11010c767f629fb9276") 3m5.496082345s ago: executing program 4 (id=1040): setxattr$system_posix_acl(&(0x7f0000000540)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', 0x0, 0x2c, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x2, 0x7, 0x13) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0xe8030000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0xb000000, @local}}}, 0x88) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 3m3.817709127s ago: executing program 4 (id=1042): socket$kcm(0x10, 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x3}, 0x1) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x22, 0x2, 0x24) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r3 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x2, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000007c0)=ANY=[], 0xffe0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r6, 0x8188aea6, &(0x7f0000000500)) r7 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0) 3m3.736244785s ago: executing program 5 (id=1043): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) memfd_create(&(0x7f0000000300)='simple\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x2, @pix={0x0, 0x2, 0x34324241, 0x0, 0x101, 0x0, 0xa, 0x0, 0x0, 0x6, 0x0, 0x6}}) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14f5ff001000010000000000000000000000000a34000000120a0900000009000200b35000000000"], 0x90}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r5, 0x1, 0x10000000000009, 0x0, 0x0) 3m3.61541012s ago: executing program 0 (id=1044): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0xffe5}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2cf, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRES16=r0, @ANYRES8=r2, @ANYBLOB="0800dc00", @ANYRES8=r1, @ANYRES64=r2, @ANYRES32, @ANYBLOB="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", @ANYRESOCT=0x0, @ANYBLOB="08001300", @ANYRES32, @ANYRES16=r0], 0x980}, 0x1, 0x0, 0x0, 0x20008880}, 0x4010) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="1a9bbeed934a", 0x0, 0x2000000, 0x10, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getpid() (async) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0xffe5}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2cf, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRES16=r0, @ANYRES8=r2, @ANYBLOB="0800dc00", @ANYRES8=r1, @ANYRES64=r2, @ANYRES32, @ANYBLOB="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", @ANYRESOCT=0x0, @ANYBLOB="08001300", @ANYRES32, @ANYRES16=r0], 0x980}, 0x1, 0x0, 0x0, 0x20008880}, 0x4010) (async) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="1a9bbeed934a", 0x0, 0x2000000, 0x10, 0x0, 0x0}) (async) 3m1.841623657s ago: executing program 3 (id=1045): open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x29c) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) fcntl$setlease(r0, 0x400, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) 3m1.224092027s ago: executing program 0 (id=1046): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000180)={0x2, 0xfffffffffffffa5d, 0xca, &(0x7f0000000080)=""/202}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00001200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000400000000000000000000002e522bf3c804603be88aa67ec32b0f4f0f050200ac779384a129a91046d1873cb993c619ae15fb4c98ff283ce0000df968b140b9", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) r7 = memfd_secret(0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x16}, 0x48) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r8, r7, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r9, 0x4) close_range(r6, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r5, 0x0, 0xf3c, 0x8) tee(0xffffffffffffffff, r5, 0x8f5, 0x100000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000180000007b2a", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r11 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r10}, 0x8) close(r11) 2m57.407930216s ago: executing program 5 (id=1047): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @empty, 0x10008001}, {0xa, 0x4e23, 0x7, @empty, 0x4}, r1, 0x7}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) creat(0x0, 0xd931d3864d39dcca) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) connect$rds(r3, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRES32=r2], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x117, 0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r7 = creat(&(0x7f0000000200)='./file0\x00', 0x35) close(r7) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) 2m56.482017624s ago: executing program 0 (id=1048): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r1, &(0x7f0000000bc0)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b3") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 2m56.479856846s ago: executing program 4 (id=1049): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x12ebc2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xfe) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x10) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="000000007b59368b3347e762c3de8104efd1505d51fd539889db1557e9db73ea047d9173460a30c415b973baad848c79e91e65b1719f19e07e17d31145a40000000000009dc09d8907d2086c7e7331ef4f890d5d8b3c1989d4b928d6e4e8a87f1620aa17163bdeb1"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRES32=r3, @ANYRES64, @ANYRES32, @ANYBLOB="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"], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401010000000008000000000004000500010001000000"], 0x1c}}, 0x0) close(0x3) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, 0x0) 2m56.367859847s ago: executing program 3 (id=1050): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12) 2m54.98512989s ago: executing program 5 (id=1051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000008104"]) 2m54.951263369s ago: executing program 3 (id=1052): socket$inet6_sctp(0xa, 0x1, 0x84) socket(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000002840), 0xa0000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0xfffffffd) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0x300) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x684e, &(0x7f00000000c0)={0x0, 0x9b97, 0x8000, 0x1, 0x2a9}, &(0x7f00000001c0), &(0x7f0000000340)) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa509, 0x1000, 0x2, 0xbfdffffc, 0x0, r5}, &(0x7f0000000000), &(0x7f0000000280)) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000300)="e99d136e181f7535c1ceaf29dea9c5cc", 0x10) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000580)=0x777, 0x4) 2m54.893780906s ago: executing program 1 (id=1053): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x7fff, 0x0) recvfrom$rxrpc(r1, &(0x7f0000000340)=""/198, 0xc6, 0x40000062, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0x1c5ea000) syz_open_dev$video4linux(&(0x7f0000000000), 0x87, 0x20100) r2 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f000078b000/0x14000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x14000, 0x3, 0x2}) 2m54.839787806s ago: executing program 0 (id=1054): socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a40)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e12080018000000040108001600e8fcb3ee77f4d29504400a00014006001100036010fab94dcf5c0461c1d67f6f940071fdcf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5ec43bdb934e276899013ac7943d451a7cef4090000001fb791643a5e9bafe493297695d5e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1ca", 0xd8}], 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) 2m54.778582294s ago: executing program 4 (id=1055): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000f10d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32ef"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="2400000076001f0329bd70000000000008000000ffffffff0c000d80"], 0x24}], 0x1, 0x0, 0x0, 0x30004041}, 0xc854) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x45, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xbc, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0xbb, 0x5, 0x1, {0x22, 0x6ab}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x1, 0x3}}}}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x5, 0xe4, 0x80, 0x8, 0x5}, 0x9d, &(0x7f0000001740)={0x5, 0xf, 0x9d, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x14, 0x7, 0x3, 0x5, 0xf2}, @generic={0x8d, 0x10, 0x2, "6e4f5a7cdbb9b039a5e2aa323cc263f5a9f4a3e579aba38a7e918d7345126aac534153cc41b8b3475a53f871246af799da8d59eeef2a18dc75480f2bec1a22500d20cbd5eed53664d16eeb801353eb8368469ecce77568dd1ccb8eeac6196fa1a5efe61f52fadcd5912a82da10b9878568aa1a83f2392358090cbd73cc89c64beeac93dc33a581efe8ce"}]}, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x380a}}, {0x5, &(0x7f0000000480)=@string={0x5, 0x3, "f70aa2"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x42a}}]}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 2m53.206019545s ago: executing program 5 (id=1056): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000f00)=0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) 2m53.151500525s ago: executing program 0 (id=1057): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00', 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) gettid() syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x65, 0x2, 0x8, 0x10}, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="b425426dcb"]}) listen(r3, 0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x13}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, 0xffffffffffffffff, 0xffffc000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0xe) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) 2m53.131975651s ago: executing program 1 (id=1058): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x20000) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4140aecd, &(0x7f0000000240)) ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f0000000000)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9fa02400180000000000005e34000000000000000213fe"], &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0x1, 0x2}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x5, 0x2, 0x80a0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x54, &(0x7f0000000000), 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x5}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, &(0x7f00000000c0)=0x1, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m52.873845238s ago: executing program 5 (id=1059): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000400)={0x101, 0xffffffe, 0x8}, 0x10) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000700)={r2, 0xfffb}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x9, 0x8, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x1c4292}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2}, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r7, @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xd0240, 0x3f46137792f68255) ioctl$AUTOFS_IOC_ASKUMOUNT(r8, 0xc0089364, 0x0) syz_usb_control_io(r7, 0x0, 0x0) 2m49.609250297s ago: executing program 0 (id=1060): socket$kcm(0x10, 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x3}, 0x1) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x22, 0x2, 0x24) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r3 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x2, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000007c0)=ANY=[], 0xffe0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r6, 0x8188aea6, &(0x7f0000000500)) r7 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0) 2m49.549281397s ago: executing program 1 (id=1061): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0xffffffffffffffba) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x83d}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000b63300010326bd7002fcdbdf2503000040"], 0x14}, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000071353838000000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002f660e4241a75bbe6960008ab290aa06d367cfbc12f4c8c4fb1e7bd078d96ff894171f39075fd0db7f3b07cef091ef7418b0edb5ba0f19d755123913b9f0b71c0b4147c3eae24c", @ANYRES32=r6, @ANYRESDEC], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r8, 0x5608, 0x3) 2m49.469240161s ago: executing program 3 (id=1062): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12) 2m49.46890865s ago: executing program 4 (id=1063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$SIOCAX25DELUID(r2, 0x89e2, 0x0) r3 = gettid() ptrace$setregset(0x4205, r3, 0x3, &(0x7f0000000040)={&(0x7f00000007c0)="47221ada7bad185b39ed6435c60c3a7092064e5ee740cd7332fc6c6f85f49ed432f73ccf4b1d5129b3ba8b68e30928bbd4887f44b3b28e096a26217004b9941ea08cb28f2cc277f263362d543065a75bbbf300dd09c44af918db0367774403edea1b51d8725aa842e464ea9f1288bae64c71925b1ef1ecb4469b0218986bf4cf081a9967fede220adc263aee5bd8bf343deff3bfbb24485eed970a3db44ff053d89ca217e4566223d76d7a0d384d01c72121f13b2a93bf5484571530ef3a403f7854dae212b7089dbe2e363d550fb4f34ebb90509e10c89325af8fe99f33730d662c218f4478d6313d4a1e3e7aa5d987012076ec817b7aef6ccde382600d90cb9144b331407b1c5308165233b69b9a0303045d95b3d5ca6ab98dc34637c005746bd258595994784f886477d060947f30bdc6b8f04ec56d2926c32f384d8304d1e1bbd02a0e5020f9b0174b76d053d1b2cefce542aa0d149b1c703de2480deda22feea7e7c66911045c6a640508ec8139fd9bc0207f7a8a19c23fac22be410ba032915e51cefd8b7450c6e3404d882da7a657561df99dad4a94a83646b3", 0xfffffff0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES16=r0], 0x100}}, 0x40090) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r6, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) recvmmsg(r6, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/221, 0xdd}, 0xfffffc01}], 0x1, 0x2003, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) accept4(r5, 0x0, 0x0, 0x0) r7 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r7, 0x116, 0x80, 0x0, 0x5f) 2m48.323003393s ago: executing program 3 (id=1064): r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x8, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000670000/0x1000)=nil) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x8a, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001200)="000000000000f00cce65ecf1d5f5b6ba14c3fd07970f1df0fe9b07b4732b28468712d34340ac59660fe1af6196d88720970262b765f618142cb7c67d9f0ffb60d22ef237cf28f20eca87c8a69e4ecbd142b9a9e1a6c3bec1587ff1bc19fc59c0f7e98277e52791c8e86d284442b64c5ce9a73fc85f92e4c8a3970584bae3f37bb2fde86d122e6e762fe3", &(0x7f00000001c0)=""/4095, 0x0, 0x0, 0x800000, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) tee(r4, r5, 0x6, 0x0) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) syz_open_dev$sg(&(0x7f0000000000), 0x2000, 0x22000) 2m48.251638497s ago: executing program 5 (id=1065): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x12ebc2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xfe) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100000000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x10) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="000000007b59368b3347e762c3de8104efd1505d51fd539889db1557e9db73ea047d9173460a30c415b973baad848c79e91e65b1719f19e07e17d31145a40000000000009dc09d8907d2086c7e7331ef4f890d5d8b3c1989d4b928d6e4e8a87f1620aa17163bdeb1"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRES32=r3, @ANYRES64, @ANYRES32, @ANYBLOB="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"], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401010000000008000000000004000500010001000000"], 0x1c}}, 0x0) close(0x3) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, 0x0) 2m26.701600714s ago: executing program 33 (id=1060): socket$kcm(0x10, 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x3}, 0x1) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x22, 0x2, 0x24) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r3 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x2, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000007c0)=ANY=[], 0xffe0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r6, 0x8188aea6, &(0x7f0000000500)) r7 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0) 2m26.150273349s ago: executing program 34 (id=1061): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0xffffffffffffffba) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x83d}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000b63300010326bd7002fcdbdf2503000040"], 0x14}, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000071353838000000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002f660e4241a75bbe6960008ab290aa06d367cfbc12f4c8c4fb1e7bd078d96ff894171f39075fd0db7f3b07cef091ef7418b0edb5ba0f19d755123913b9f0b71c0b4147c3eae24c", @ANYRES32=r6, @ANYRESDEC], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r8, 0x5608, 0x3) 2m25.812182597s ago: executing program 35 (id=1065): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x12ebc2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xfe) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100000000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x10) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="000000007b59368b3347e762c3de8104efd1505d51fd539889db1557e9db73ea047d9173460a30c415b973baad848c79e91e65b1719f19e07e17d31145a40000000000009dc09d8907d2086c7e7331ef4f890d5d8b3c1989d4b928d6e4e8a87f1620aa17163bdeb1"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRES32=r3, @ANYRES64, @ANYRES32, @ANYBLOB="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"], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401010000000008000000000004000500010001000000"], 0x1c}}, 0x0) close(0x3) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, 0x0) 2m25.215882338s ago: executing program 36 (id=1064): r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x8, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000670000/0x1000)=nil) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x8a, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001200)="000000000000f00cce65ecf1d5f5b6ba14c3fd07970f1df0fe9b07b4732b28468712d34340ac59660fe1af6196d88720970262b765f618142cb7c67d9f0ffb60d22ef237cf28f20eca87c8a69e4ecbd142b9a9e1a6c3bec1587ff1bc19fc59c0f7e98277e52791c8e86d284442b64c5ce9a73fc85f92e4c8a3970584bae3f37bb2fde86d122e6e762fe3", &(0x7f00000001c0)=""/4095, 0x0, 0x0, 0x800000, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) tee(r4, r5, 0x6, 0x0) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) syz_open_dev$sg(&(0x7f0000000000), 0x2000, 0x22000) 2m24.740607776s ago: executing program 37 (id=1063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$SIOCAX25DELUID(r2, 0x89e2, 0x0) r3 = gettid() ptrace$setregset(0x4205, r3, 0x3, &(0x7f0000000040)={&(0x7f00000007c0)="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", 0xfffffff0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES16=r0], 0x100}}, 0x40090) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r6, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) recvmmsg(r6, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/221, 0xdd}, 0xfffffc01}], 0x1, 0x2003, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) accept4(r5, 0x0, 0x0, 0x0) r7 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r7, 0x116, 0x80, 0x0, 0x5f) 13.168719606s ago: executing program 6 (id=1277): socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000080)={0x3, r5, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4090}, 0x22000010) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r6, 0x1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='block_bio_complete\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 12.839791666s ago: executing program 8 (id=1279): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000180)={0x2, 0xfffffffffffffa5d, 0xca, &(0x7f0000000080)=""/202}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00001200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000400000000000000000000002e522bf3c804603be88aa67ec32b0f4f0f050200ac779384a129a91046d1873cb993c619ae15fb4c98ff283ce0000df968b140b9", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) r9 = memfd_secret(0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x16}, 0x48) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r10, r9, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r11, 0x4) close_range(r8, 0xffffffffffffffff, 0x0) splice(r6, 0x0, r7, 0x0, 0xf3c, 0x8) tee(0xffffffffffffffff, r7, 0x8f5, 0x100000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000180000007b2a", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r13 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r12}, 0x8) close(r13) 11.933937602s ago: executing program 6 (id=1281): socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x26) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x156eccba77a09d1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001200010100000000000000000700000008000000", @ANYRES32, @ANYBLOB="540000804e0031"], 0x70}}, 0x0) 9.261587373s ago: executing program 7 (id=1286): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x20002, 0x80095760, 0x1000000, 0x8000000}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xb, r2, 0x0, r1}) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40000, 0x32) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,Vfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) 9.251822894s ago: executing program 6 (id=1287): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, 0xffffffffffffffff, 0x2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff034}, {0x20, 0x2, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r6, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) sendmmsg(r6, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 8.937811066s ago: executing program 7 (id=1289): r0 = socket(0x10, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@getstats={0x1c, 0x5e, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x5}}, 0x1c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000004f00000076000000000f42400f500000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x7, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x47) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') read$FUSE(r4, &(0x7f0000004440)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6(0xa, 0x802, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 8.482166246s ago: executing program 7 (id=1291): mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100}, 0x94) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x1ff) 8.239334346s ago: executing program 8 (id=1293): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ed00008f0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file1\x00', 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000180), 0x221420, &(0x7f0000000140)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x2) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) ioctl$VIDIOC_QBUF(r6, 0xc058ff0b, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x10, 0x200, {}, {0x5, 0x8, 0xe, 0x9f, 0x0, 0x7b, "c16599e2"}, 0xabdb, 0x1, {}, 0xbaa}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[], 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f00000000c0)=0x10000, 0x4) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 8.189578711s ago: executing program 7 (id=1294): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000180)={0x2, 0xfffffffffffffa5d, 0xca, &(0x7f0000000080)=""/202}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00001200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000400000000000000000000002e522bf3c804603be88aa67ec32b0f4f0f050200ac779384a129a91046d1873cb993c619ae15fb4c98ff283ce0000df968b140b9", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) r6 = memfd_secret(0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x16}, 0x48) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r7, r6, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r8, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xf3c, 0x8) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8f5, 0x100000000000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) close(0xffffffffffffffff) 7.225465381s ago: executing program 2 (id=1295): r0 = socket(0x1, 0xa, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000600)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x80}}, 0x4000004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x1, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x7e}, 0x9c) bind$inet6(r7, &(0x7f0000000340)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/12, @ANYRES16=r1], 0x0, 0x10, 0x0, 0x0, 0x21700}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r9, &(0x7f0000000080)=""/116, 0xfffffeb2) read(r9, &(0x7f0000000280)=""/96, 0x60) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0xc01, 0x3, 0x250, 0x128, 0x5002004a, 0x0, 0x128, 0x0, 0x1b8, 0x3c8, 0x3c8, 0x1b8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x6}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) socket$can_raw(0x1d, 0x3, 0x1) 7.143117403s ago: executing program 8 (id=1296): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000002f3144e900000000030006000720000002004000e0000001000000f5000000000800120002000100000000000000000030006c000201009f6eae02000000adb20200000000152c000000000000000001020014bb7acde1b8e96408d700000000030005000020000002"], 0x80}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) unshare(0x22020400) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x7, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x10}, &(0x7f0000000080)={0x1f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) write(r1, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x2c8, 0x0) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x200000000114, 0x5, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffe73) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000200)={'wlan0\x00', {0x2, 0x0, @local}}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="08002dbd7000ffcddf256500000008000300", @ANYRES32=0x0, @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x20000844) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10000091, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @mcast2, 0xe}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 5.460538431s ago: executing program 2 (id=1297): r0 = socket$inet(0x2, 0x4, 0x405) socket$qrtr(0x2a, 0x2, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x3) prlimit64(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100008b}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x408040, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000180)=ANY=[]) ioctl$KVM_RUN(r5, 0xae80, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x7, 0xfffffff9, 0x0, 0x1, 0x7, 0x800, 0x3, 0x8, 0xe1e, 0xa7ec, 0x7, 0xbd, 0x8, 0x800006, 0x0, 0x0, {0x3, 0xd}, 0xf, 0xe}}) ftruncate(r7, 0x2007ffb) sendfile(r7, r7, 0x0, 0x1000000201005) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x0, @pix_mp={0x4000006, 0x8008, 0x771c162c, 0x9, 0x5, [{0x6, 0xa45}, {0x3, 0xa}, {0x81, 0x1}, {0x8001, 0x8}, {0x1, 0xfffffff9}, {0x7, 0x8}, {0x5}, {0x3715, 0xfff}], 0x8, 0xa1, 0x0, 0x0, 0x4}}) ftruncate(r7, 0x30) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2004cffc, &(0x7f0000e68000)={0x2, 0x4e24, @local}, 0x10) 5.139253606s ago: executing program 9 (id=1298): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0xf0) r2 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000200)=0xf0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x5adc, &(0x7f0000000040)={0x0, 0xc19d, 0x40, 0x0, 0x65}, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 5.077690966s ago: executing program 6 (id=1299): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) close(0xffffffffffffffff) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r1, 0x0, 0x10000, 0x0, 0x20002, 0x80095760, 0x1000000, 0x8000000}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xb, r1}) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40000, 0x32) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,Vfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) 3.655740046s ago: executing program 8 (id=1300): syz_open_dev$dri(&(0x7f00000000c0), 0x1fc, 0xa800) mount(0x0, &(0x7f00000003c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x5c99) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x9) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = memfd_create(&(0x7f0000000f00)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZS;\x80\fp\xafB\xb3\xfc\x93\x9cTcfL\x94\x00\x04\x95\x8fNh&\xc1\xae\xef\xc2uz\f6\xf2\x8a*9\x82\x17a\x93\xc8\xfbpd*T\xc8\x18\x14\xf0\xdee\xf2D&U\x9b\x90\xf2;65\xfd\x92+\x91#\x83\xe0\x8a\xf6+\x93\x91\x16\xc8\x1f\f\x809\xcd+\xa0Mq\f\xa8W\xe1}#\xc6\xa7s\xd5\x7f\xa5`\xf9,\x98\x99', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) open(&(0x7f00000002c0)='./file0\x00', 0x2a4c0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r9 = dup3(r8, r6, 0x80000) writev(r9, &(0x7f0000000900)=[{&(0x7f0000000340)="8ff93b9cded52add1e01be027d81e787eafacfc6f6e8e49881d23a137b04ccc7ff1fffa8f905a4e3b01fbfdb16115e73c4265b19dbbc63ac8c61366603a4a34ca949e04cafaccaaeed46f162a27db173c2839a9117e136153e35fd231e50ccbc71dd2308721cc8955d6a283790a2cf7c60395dad6709ea033bb31cd873de228f65ecd1091e793dc8ecdb88d72278bb25108dd5d355bc0557791cec2c3f2f1d0cd4ac33a909f943b20e2f52452eea865c93943059dae61a1764750571a521e9f8b489fc", 0xc3}, {&(0x7f0000000480)="dd11bb35fea25b2ecb0f57efaec1298a856441cb93fac1c3dce70bbb536544df4e86ba320f6f35ab01c372ce2560aa87cb6029173ea49a3d23963df318e32ff263cd2d6de6e709045855394e24eff3797b", 0x51}, {&(0x7f0000000540)="0ff3fa4ab3e911288a6a01b058bee4c1025603690e383cca8caec431b703b37022f25d0b01000000000000004d4338bb1a5928c1d392755c19667bc4a8e155fbacea7d39320c73", 0x47}, {&(0x7f0000000f00)="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", 0xe94}, {0x0}, {&(0x7f0000000840)="bc410f919a", 0x5}], 0x6) socket$pppl2tp(0x18, 0x1, 0x1) 3.635699759s ago: executing program 6 (id=1301): r0 = syz_io_uring_setup(0x481f, &(0x7f0000000000)={0x0, 0x93a5, 0x0, 0x0, 0x1a1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0xb90, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "75587ba42f58777c5457b426fee6056656be4cdd"}}]}, @TIPC_NLA_NODE={0xaec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xae6, 0x3, "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"}]}]}, 0xb90}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004000) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002240)=""/13, 0xd}, {&(0x7f0000000180)=""/207, 0xcf}], 0x2, 0x3c, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x60, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000340)='./file0\x00', 0x12, 0x800, 0x1}) r5 = syz_io_uring_setup(0x3eeb, &(0x7f0000000480)={0x0, 0x8000, 0x800}, &(0x7f00000001c0), &(0x7f00000003c0)) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000340)={r6, r6, r6}, &(0x7f0000000040)=""/94, 0x5e, &(0x7f0000000240)={&(0x7f00000000c0)={'crc32c\x00'}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1fffffff}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380), 0x882, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r7, 0x10f, 0x83, &(0x7f0000000400), &(0x7f0000001080)=0x4) io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, &(0x7f0000000180)={0x200000000000001f, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20) 3.281916693s ago: executing program 7 (id=1302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0xbb, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x4, &(0x7f0000000140)=0x8, 0x4) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x48, &(0x7f0000000580)=@generic={0x2, 0x0, 0x40, "a591d370", "db1b3f103a9d6fda9db703d7fdd2c0876d995d6aa30a0bfcecfdc003b0941bc7b30158e76236e9b85707bf6deefd6a52a3d0ce69f256090a6a51ae26639fd3eb"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r6, &(0x7f0000000040)=@ceph_nfs_confh={0x10, 0x2, {0xe7c, 0x97}}, 0x143900) 3.251282805s ago: executing program 9 (id=1303): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000180)={0x2, 0xfffffffffffffa5d, 0xca, &(0x7f0000000080)=""/202}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00001200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000400000000000000000000002e522bf3c804603be88aa67ec32b0f4f0f050200ac779384a129a91046d1873cb993c619ae15fb4c98ff283ce0000df968b140b9", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) r9 = memfd_secret(0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x16}, 0x48) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r10, r9, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r11, 0x4) close_range(r8, 0xffffffffffffffff, 0x0) splice(r6, 0x0, r7, 0x0, 0xf3c, 0x8) tee(0xffffffffffffffff, r7, 0x8f5, 0x100000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000180000007b2a", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r13 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r12}, 0x8) close(r13) 3.169748802s ago: executing program 2 (id=1304): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RSYMLINK(r1, &(0x7f0000000080)={0xfffffffffffffd75, 0x11, 0x2, {0x10, 0x2002, 0x6}}, 0x14) accept$unix(r0, 0x0, 0x0) 3.085913318s ago: executing program 2 (id=1305): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendto$inet(r0, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendto$inet(r0, &(0x7f0000000140)='\r', 0x1, 0x2000c094, 0x0, 0x0) close(r0) 2.537255982s ago: executing program 6 (id=1306): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xe2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix_mp={0x0, 0x0, 0x38414261}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x31, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x0, 0x17}, 0x0, 0x0, &(0x7f00000003c0), 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.908813813s ago: executing program 2 (id=1307): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @empty, 0x10008001}, {0xa, 0x4e23, 0x7, @empty, 0x4}, r1, 0x7}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) creat(0x0, 0xd931d3864d39dcca) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) connect$rds(r3, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRES32=r2], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x117, 0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) 1.673076152s ago: executing program 9 (id=1308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x13}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x30000, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)="f89fcfb587a4792b", 0x8) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mount$afs(&(0x7f0000000340)=@cell={0x25, 'syz0:', 'syz1', '.backup'}, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000001540)={[{@dyn}, {@flock_local}, {@flock_write}], [{@fsname={'fsname', 0x3d, '+,}@'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ethtool\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'flock=local'}}]}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404005400ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b70000000000000095000000000000003f0c54cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752688300000000dbc2777df150b7cdd77b85b941092314fd085f1b1b2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c830fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b8498aa787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28179f09943b1b0452d1b72183aacf4a84f9130b701b81675dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fd80f3876acb45821d0c48fb657c29b309c73f0977e7cde65a89d9458aac2795b2b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d2665016ac59dd20fde0745db06753a7ac7fe13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2084bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a3894696082417304fff0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bdb539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572ac45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af00200f900cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee78ebf9ef40662d7836961a8de6f2d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408816eae08cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb7819441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005391577f480000ea65559eb00e2b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e710d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d4ac534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f0300000000000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca396eeec1f53bb0bc1bc9ce45bb671f2dea5eafc74551cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b847e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fde46ad265983eb1b1c6adb1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0c5605000063902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f617396c18cc7130000fc000000210000006e00002000000000000027c9a46157a3ffff6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4472b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc4c860495b240e80063bde261fd000000000072f6df342f3e7071e28ef6806b6b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2b3a113e47edf76f7d116d2b0976cf2ec447c0309316d1dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a80500e92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949c68b7a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273061fc5c0e0a33db7f2d43ea8086cf059f40fa2645944cd9e7f2e6ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858e13e8f0ba9d1dec469dc71e998d99ebf7cfda638d7ce859acfec3f14ec2aa98b53cd68a0d99d62a5620b7c0f61dc386c449664a94bca09859a35760b7b818087347697c239990daec8384a12d973d5470efe5dae887be689c6b1551f4c5a649d9dc563d7049c91453facecbee789a1d5a4896b2b7bec3ec5e60c4916e5561888502a12f4985f9c7dab41cbf31c26cd12d5116de95b521a57408adbbac278be82fef3f9d8a51385b376b57e20be83e7b27460729a626250ccd7982eba588f86195e15119eca569bebba8514e5bfcbe51f1a628793b4ed4424c95a731628fa38e167b79affcd50b561d3a9cb4bea872d9e5a06a4201fd09eecfe283854837a65ecf8cd6cdaad4bf223db323de9d4854d66d324a0d125e3ebe2ed3c78e47392962860de6bb86759406e74335443407d9ee7d4a4430b60b6ef369604e1282b0c1aa8d4b18e8db32a0eeaaabc7f7b5c49bd88cfe860f69f5510179d867970f975169591908282cd4367f82e62e3fa37876f30934c23dc2d02a0c25839f008ec099503c8d1b3169aa9c5a7db7f0116d203ac6503596c3a5b063c28f84c9eb4200000000000000000000000000000000000009f491210abc6ed14c49e22898d449d435f7e0e94a6b8b37924f725c47d17471ea258133681ff4dca50beba02eacfe0910c1676bdff06e737e0d12878ab5366985c0e8245864b3abd02e81ba0638e4de4b2f62098108535546b58ae8baee1fcc301a3b4101588e60f6f7678b82aa80e37832a2f49744d23e3a11bd2282ec7ff3400e8748f91e247b80e1b65400"/3088], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r8 = dup(r7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r8, r6, 0x25, 0x4, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_open_dev$loop(&(0x7f00000002c0), 0x7, 0x2900) ioctl$LOOP_SET_FD(r9, 0x4c00, r2) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback, 0x64}, 0x1c) getsockopt$inet6_int(r10, 0x29, 0x18, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) 1.369895764s ago: executing program 8 (id=1309): socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x26) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffb90cf58ff9b796ec5f23fa8d15c975c4d8f431ecf7f124948392951a4492cae8c53681ea62edb73252fc94e8f14a6c37de1340cb719b5262e1f956d0048402ea844eb22739c9eee0a359f6d08842dc8aceb76215e7f82063506bdd865876146a28154c6974c17fb984f3e37e38631fe4f3468ba32cc1b3eb47cab890defd64c2fcf7740c167b17770a6611043d5c773b41c220c7533dd2fea885fcf32871fa1f4ce8d172e50145a12fb4f5a90a522f70dc19c39380be1ac2793f6e9a48974476fc64916783b711581ce022df532f"], 0x8) write(r2, &(0x7f00000000c0)="8f2a0a65", 0x4) 748.374563ms ago: executing program 2 (id=1310): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x6, 0x301}, 0x14}}, 0x0) writev(r0, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x40000}) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000010b304003100000000000109022d00010000c02009040009010300ca0009210700200122270009058103ff03f50802090502100800ff8003c65405d71c89d9df"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000240)=0x7) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_pressure(r3, 0x0, 0x2, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$dri(0x0, 0x8, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) 629.444732ms ago: executing program 9 (id=1311): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) close(0xffffffffffffffff) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r1, 0x0, 0x10000, 0x0, 0x20002, 0x80095760, 0x1000000, 0x8000000}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xb, r1}) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40000, 0x32) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,Vfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) 562.70679ms ago: executing program 8 (id=1312): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000180)={0x2, 0xfffffffffffffa5d, 0xca, &(0x7f0000000080)=""/202}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00001200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000400000000000000000000002e522bf3c804603be88aa67ec32b0f4f0f050200ac779384a129a91046d1873cb993c619ae15fb4c98ff283ce0000df968b140b9", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) r6 = memfd_secret(0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x16}, 0x48) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r7, r6, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r8, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xf3c, 0x8) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8f5, 0x100000000000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) close(0xffffffffffffffff) 433.364926ms ago: executing program 9 (id=1313): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$inet(0x2, 0xa, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000dc0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000e00)={0x1, 0x5}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f00000013c0)={0x1018, 0x2, 0x4, 0x6, "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"}) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030001001800ef80040002804d0001007564703a73797ab21f0aded5000000000000000000003b01ffffffffffffffc688454f5c3cacb84aa2b3c55d8f714ce2"], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x0) 5.86288ms ago: executing program 7 (id=1314): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0xf0) r2 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000200)=0xf0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x5adc, &(0x7f0000000040)={0x0, 0xc19d, 0x40, 0x0, 0x65}, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 0s ago: executing program 9 (id=1315): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f000000fa80), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f000000fb80)={0x0, 0x0, &(0x7f000000fb40)={&(0x7f000000fac0)={0x68, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffffb, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (fail_nth: 16) kernel console output (not intermixed with test programs): USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.546361][ T10] usb 4-1: Product: syz [ 300.675500][ T10] usb 4-1: Manufacturer: syz [ 300.887643][ T10] usb 4-1: SerialNumber: syz [ 301.237980][ T10] usb 4-1: config 0 descriptor?? [ 301.278048][ T10] io_ti 4-1:0.22: required endpoints missing [ 301.584073][ T7713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.633592][ T7713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.745519][ T10] usb 4-1: USB disconnect, device number 4 [ 304.205539][ T7747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.004314][ T7758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.377759][ T7765] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20000 [ 308.157581][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 309.373986][ T7768] delete_channel: no stack [ 311.950018][ T7796] netlink: 'syz.4.416': attribute type 6 has an invalid length. [ 312.534674][ T7796] bridge2: entered promiscuous mode [ 312.542729][ T7796] bridge2: entered allmulticast mode [ 317.080697][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.146154][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.146822][ T7837] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 318.220740][ T7837] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 318.370373][ T7837] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 318.411407][ T7837] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 318.462793][ T7837] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 318.472042][ T7837] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 318.523949][ T7837] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 318.745062][ T7837] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 319.461265][ T7837] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 319.506824][ T7837] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 319.854150][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 320.412659][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 320.492449][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 320.575111][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 320.976611][ T7871] netlink: 'syz.1.432': attribute type 6 has an invalid length. [ 321.351955][ T7871] bridge3: entered promiscuous mode [ 321.357973][ T7871] bridge3: entered allmulticast mode [ 321.626567][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 321.933274][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 322.492394][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 322.576965][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 322.757244][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 323.852530][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 325.928916][ T7888] ceph: No mds server is up or the cluster is laggy [ 325.936301][ T43] libceph: connect (1)[c::]:6789 error -101 [ 325.955773][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 326.042502][ T5960] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 326.057128][ T7907] netlink: 'syz.0.441': attribute type 3 has an invalid length. [ 328.549973][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 328.559297][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 328.753827][ T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 328.794834][ T7933] netlink: 'syz.0.448': attribute type 7 has an invalid length. [ 328.837118][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 328.839269][ T7922] ceph: No mds server is up or the cluster is laggy [ 328.844517][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 329.035877][ T5834] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 329.795509][ T5916] libceph: connect (1)[c::]:6789 error -101 [ 329.801693][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 329.922532][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 329.966245][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.977470][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.988491][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 329.994956][ T43] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 330.011049][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.028848][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.097187][ T5834] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 330.145470][ T43] usb 4-1: config 0 descriptor?? [ 330.184902][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.365767][ T5834] usb 5-1: config 0 descriptor?? [ 331.219065][ T5834] hkems 0003:2006:0118.0005: unknown main item tag 0x0 [ 331.271339][ T5834] hkems 0003:2006:0118.0005: hidraw0: USB HID vda.6f Device [HID 2006:0118] on usb-dummy_hcd.4-1/input0 [ 331.283762][ T5834] hkems 0003:2006:0118.0005: no inputs found [ 331.291488][ T5834] hkems 0003:2006:0118.0005: force feedback init failed [ 332.448891][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 332.483673][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 332.564137][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 333.025858][ T43] usb 4-1: USB disconnect, device number 6 [ 333.146639][ T7943] delete_channel: no stack [ 333.182579][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 333.194997][ T10] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 333.225064][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.268660][ T10] usb 2-1: Product: syz [ 333.287381][ T10] usb 2-1: Manufacturer: syz [ 333.322715][ T10] usb 2-1: SerialNumber: syz [ 333.418649][ T10] usb 2-1: config 0 descriptor?? [ 333.954663][ T43] libceph: connect (1)[c::]:6789 error -101 [ 333.961131][ T5960] usb 5-1: USB disconnect, device number 4 [ 334.003843][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 334.101737][ T7962] ceph: No mds server is up or the cluster is laggy [ 334.911769][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 335.964545][ T7974] netlink: 'syz.5.457': attribute type 7 has an invalid length. [ 336.185281][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 337.382348][ T43] libceph: connect (1)[c::]:6789 error -101 [ 337.388573][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 337.601566][ T7974] : entered promiscuous mode [ 337.679992][ T10] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 337.812439][ T10] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 337.930194][ T7971] netlink: 16 bytes leftover after parsing attributes in process `syz.5.457'. [ 338.012996][ T10] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 338.524895][ T10] usb 2-1: USB disconnect, device number 18 [ 339.920150][ T7998] netlink: 16 bytes leftover after parsing attributes in process `syz.5.461'. [ 340.672166][ T7980] delete_channel: no stack [ 342.950645][ T8016] syz_tun: entered allmulticast mode [ 343.049324][ T8016] ieee802154 phy0 wpan0: encryption failed: -22 [ 343.154080][ T8015] syz_tun: left allmulticast mode [ 343.182669][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 343.692681][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 343.726605][ T10] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 343.736795][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.757938][ T10] usb 2-1: Product: syz [ 343.762195][ T10] usb 2-1: Manufacturer: syz [ 343.792378][ T10] usb 2-1: SerialNumber: syz [ 343.803327][ T10] usb 2-1: config 0 descriptor?? [ 345.723161][ T5845] libceph: connect (1)[c::]:6789 error -101 [ 345.729518][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 345.961725][ T8028] ceph: No mds server is up or the cluster is laggy [ 346.162459][ T5845] libceph: connect (1)[c::]:6789 error -101 [ 346.169091][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 346.867338][ T10] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 346.903058][ T10] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 347.023276][ T10] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 347.050192][ T10] usb 2-1: USB disconnect, device number 19 [ 347.989696][ T8060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.476'. [ 348.625773][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 349.910217][ T8077] netlink: 'syz.3.481': attribute type 4 has an invalid length. [ 349.918081][ T8077] netlink: 152 bytes leftover after parsing attributes in process `syz.3.481'. [ 350.362502][ T5845] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 350.792387][ T5845] usb 2-1: Using ep0 maxpacket: 16 [ 350.812836][ T5845] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 350.821076][ T5845] usb 2-1: config 1 has no interface number 0 [ 350.853195][ T5845] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 350.910776][ T5845] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 350.935535][ T5845] usb 2-1: config 1 interface 105 has no altsetting 0 [ 351.002924][ T5845] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 351.079142][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.110861][ T5845] usb 2-1: Product: syz [ 352.012484][ T5845] usb 2-1: Manufacturer: syz [ 352.017170][ T5845] usb 2-1: SerialNumber: syz [ 352.328602][ T5845] usb 2-1: can't set config #1, error -71 [ 352.337125][ T5845] usb 2-1: USB disconnect, device number 20 [ 355.008592][ T8096] delete_channel: no stack [ 358.143696][ T8138] netlink: 'syz.1.499': attribute type 6 has an invalid length. [ 358.238341][ T8138] bridge4: entered promiscuous mode [ 358.244577][ T8138] bridge4: entered allmulticast mode [ 362.560008][ T8149] delete_channel: no stack [ 362.614419][ T8160] netlink: 12 bytes leftover after parsing attributes in process `syz.5.507'. [ 362.779190][ T8164] ======================================================= [ 362.779190][ T8164] WARNING: The mand mount option has been deprecated and [ 362.779190][ T8164] and is ignored by this kernel. Remove the mand [ 362.779190][ T8164] option from the mount to silence this warning. [ 362.779190][ T8164] ======================================================= [ 363.693295][ T1208] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 365.738742][ T1208] usb 2-1: Using ep0 maxpacket: 8 [ 366.712387][ T1208] usb 2-1: device descriptor read/all, error -71 [ 372.878746][ T8212] delete_channel: no stack [ 378.054641][ T8228] delete_channel: no stack [ 378.302895][ T5845] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 378.650776][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.661661][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.718155][ T8250] syz.0.529(8250): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 378.762347][ T5845] usb 4-1: Using ep0 maxpacket: 8 [ 378.990302][ T5845] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 379.134459][ T5845] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 379.177155][ T5845] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 379.188616][ T8258] netlink: 'syz.1.531': attribute type 2 has an invalid length. [ 379.254205][ T5845] usb 4-1: Product: syz [ 379.366829][ T5845] usb 4-1: Manufacturer: syz [ 379.566131][ T5845] usb 4-1: SerialNumber: syz [ 379.641267][ T8258] : entered promiscuous mode [ 380.144989][ T5845] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 380.199201][ T5845] visor 4-1:1.0: probe with driver visor failed with error -110 [ 381.170148][ T8272] delete_channel: no stack [ 381.245001][ T1208] usb 4-1: USB disconnect, device number 7 [ 381.543062][ T8285] netlink: 'syz.3.539': attribute type 6 has an invalid length. [ 382.934662][ T8294] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 383.730762][ T8303] FAULT_INJECTION: forcing a failure. [ 383.730762][ T8303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.762890][ T8303] CPU: 0 UID: 0 PID: 8303 Comm: syz.3.544 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 383.762918][ T8303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.762938][ T8303] Call Trace: [ 383.762954][ T8303] [ 383.762964][ T8303] dump_stack_lvl+0x189/0x250 [ 383.762993][ T8303] ? __pfx____ratelimit+0x10/0x10 [ 383.763014][ T8303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.763036][ T8303] ? __pfx__printk+0x10/0x10 [ 383.763076][ T8303] should_fail_ex+0x414/0x560 [ 383.763103][ T8303] _copy_from_user+0x2d/0xb0 [ 383.763132][ T8303] __copy_msghdr+0x3c5/0x5b0 [ 383.763168][ T8303] ___sys_sendmsg+0x1a5/0x2a0 [ 383.763202][ T8303] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.763273][ T8303] ? __fget_files+0x2a/0x420 [ 383.763296][ T8303] ? __fget_files+0x3a0/0x420 [ 383.763329][ T8303] __x64_sys_sendmsg+0x19b/0x260 [ 383.763364][ T8303] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.763409][ T8303] ? rcu_is_watching+0x15/0xb0 [ 383.763432][ T8303] ? trace_sys_enter+0x25/0x120 [ 383.763457][ T8303] do_syscall_64+0xfa/0x3b0 [ 383.763478][ T8303] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.763499][ T8303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.763519][ T8303] ? clear_bhb_loop+0x60/0xb0 [ 383.763543][ T8303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.763562][ T8303] RIP: 0033:0x7f6de858ebe9 [ 383.763580][ T8303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.763597][ T8303] RSP: 002b:00007f6de9327038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.763625][ T8303] RAX: ffffffffffffffda RBX: 00007f6de87b5fa0 RCX: 00007f6de858ebe9 [ 383.763639][ T8303] RDX: 0000000000008085 RSI: 00002000000000c0 RDI: 0000000000000003 [ 383.763651][ T8303] RBP: 00007f6de9327090 R08: 0000000000000000 R09: 0000000000000000 [ 383.763663][ T8303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.763674][ T8303] R13: 00007f6de87b6038 R14: 00007f6de87b5fa0 R15: 00007ffec33a9268 [ 383.763707][ T8303] [ 386.395284][ T1208] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 387.145020][ T8337] netlink: 'syz.1.552': attribute type 6 has an invalid length. [ 387.612424][ T1208] usb 4-1: Using ep0 maxpacket: 8 [ 387.796217][ T1208] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 387.822968][ T1208] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 387.832419][ T1208] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 387.891199][ T8341] netlink: 36 bytes leftover after parsing attributes in process `syz.5.553'. [ 388.232317][ T1208] usb 4-1: Product: syz [ 388.236560][ T1208] usb 4-1: Manufacturer: syz [ 388.241197][ T1208] usb 4-1: SerialNumber: syz [ 388.359027][ T1208] usb 4-1: palm_os_3_probe - error -71 getting connection information [ 388.449587][ T1208] visor 4-1:1.0: probe with driver visor failed with error -71 [ 388.576376][ T1208] usb 4-1: USB disconnect, device number 8 [ 388.609105][ T8345] netlink: 'syz.0.554': attribute type 7 has an invalid length. [ 390.299107][ T8360] netlink: 'syz.4.559': attribute type 6 has an invalid length. [ 390.370522][ T8360] bridge4: entered promiscuous mode [ 390.378100][ T8360] bridge4: entered allmulticast mode [ 391.734200][ T1208] libceph: connect (1)[c::]:6789 error -101 [ 391.740361][ T1208] libceph: mon0 (1)[c::]:6789 connect error [ 392.002687][ T1208] libceph: connect (1)[c::]:6789 error -101 [ 392.019803][ T1208] libceph: mon0 (1)[c::]:6789 connect error [ 392.868955][ T1208] libceph: connect (1)[c::]:6789 error -101 [ 392.882548][ T1208] libceph: mon0 (1)[c::]:6789 connect error [ 393.777729][ T1208] libceph: connect (1)[c::]:6789 error -101 [ 393.803104][ T1208] libceph: mon0 (1)[c::]:6789 connect error [ 394.253813][ T8371] ceph: No mds server is up or the cluster is laggy [ 394.595797][ T1208] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 395.058135][ T1208] usb 6-1: Using ep0 maxpacket: 8 [ 395.073025][ T1208] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 395.088000][ T1208] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 395.119143][ T1208] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 395.167829][ T1208] usb 6-1: Product: syz [ 395.190906][ T1208] usb 6-1: Manufacturer: syz [ 395.238018][ T1208] usb 6-1: SerialNumber: syz [ 395.377038][ T1208] usb 6-1: can't set config #1, error -71 [ 395.411311][ T1208] usb 6-1: USB disconnect, device number 5 [ 399.520532][ T5834] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 399.550870][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.581'. [ 399.772337][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 399.926906][ T5834] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 399.935398][ T5834] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 399.944105][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.954307][ T5834] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 399.965528][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 399.983398][ T5834] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 400.702281][ T5834] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 400.751950][ T5834] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 400.761116][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.774003][ T5834] usb 2-1: config 0 descriptor?? [ 401.190172][ T5916] usb 2-1: USB disconnect, device number 23 [ 402.651267][ T5916] libceph: connect (1)[c::]:6789 error -101 [ 402.679929][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 402.997282][ T5916] libceph: connect (1)[c::]:6789 error -101 [ 403.317751][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 403.385964][ T8479] ceph: No mds server is up or the cluster is laggy [ 403.933302][ T5916] libceph: connect (1)[c::]:6789 error -101 [ 403.939381][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 408.140223][ T1208] libceph: connect (1)[c::]:6789 error -101 [ 409.331594][ T1208] libceph: mon0 (1)[c::]:6789 connect error [ 411.175361][ T8550] ceph: No mds server is up or the cluster is laggy [ 411.432774][ T10] libceph: connect (1)[c::]:6789 error -101 [ 411.438910][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 415.573294][ T8591] delete_channel: no stack [ 416.840549][ T5834] IPVS: starting estimator thread 0... [ 416.956725][ T8609] IPVS: using max 28 ests per chain, 67200 per kthread [ 422.490182][ T8646] xt_hashlimit: max too large, truncated to 1048576 [ 424.171182][ T8644] delete_channel: no stack [ 424.755519][ T8662] netlink: 32 bytes leftover after parsing attributes in process `syz.1.642'. [ 430.212143][ T8695] netlink: 'syz.1.651': attribute type 2 has an invalid length. [ 430.384609][ T8695] netlink: 119 bytes leftover after parsing attributes in process `syz.1.651'. [ 432.829306][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.651'. [ 437.868224][ T5846] Bluetooth: hci1: unexpected event for opcode 0x200d [ 438.642620][ T8762] trusted_key: encrypted_key: insufficient parameters specified [ 439.993310][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.999744][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.055748][ T8768] bridge2: entered promiscuous mode [ 440.518730][ T8768] bridge2: entered allmulticast mode [ 441.104188][ T1208] hid-generic C990:0003:007F.0006: unknown main item tag 0x0 [ 441.177980][ T1208] hid-generic C990:0003:007F.0006: unknown main item tag 0x0 [ 441.215255][ T1208] hid-generic C990:0003:007F.0006: unknown main item tag 0x0 [ 441.992650][ T5846] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 442.001235][ T5846] Bluetooth: hci1: Injecting HCI hardware error event [ 442.011451][ T5839] Bluetooth: hci1: hardware error 0x00 [ 442.082299][ T1208] hid-generic C990:0003:007F.0006: unknown main item tag 0x0 [ 442.168378][ T1208] hid-generic C990:0003:007F.0006: unknown main item tag 0x0 [ 442.540818][ T1208] hid-generic C990:0003:007F.0006: unknown main item tag 0x0 [ 442.548384][ T1208] hid-generic C990:0003:007F.0006: unknown main item tag 0x0 [ 442.557144][ T1208] hid-generic C990:0003:007F.0006: unknown main item tag 0x0 [ 442.564612][ T1208] hid-generic C990:0003:007F.0006: unknown main item tag 0x0 [ 442.572075][ T1208] hid-generic C990:0003:007F.0006: unknown main item tag 0x0 [ 442.579687][ T1208] hid-generic C990:0003:007F.0006: unknown main item tag 0x0 [ 442.587146][ T1208] hid-generic C990:0003:007F.0006: unknown main item tag 0x0 [ 442.594611][ T1208] hid-generic C990:0003:007F.0006: unknown main item tag 0x0 [ 442.602023][ T1208] hid-generic C990:0003:007F.0006: unknown main item tag 0x0 [ 442.609526][ T1208] hid-generic C990:0003:007F.0006: unknown main item tag 0x0 [ 442.631632][ T1208] hid-generic C990:0003:007F.0006: unknown main item tag 0x0 [ 442.665036][ T1208] hid-generic C990:0003:007F.0006: unknown main item tag 0x0 [ 442.710511][ T1208] hid-generic C990:0003:007F.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 444.092320][ T5839] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 444.843587][ T1208] libceph: connect (1)[c::]:6789 error -101 [ 445.003013][ T1208] libceph: mon0 (1)[c::]:6789 connect error [ 445.377784][ T1208] libceph: connect (1)[c::]:6789 error -101 [ 445.407218][ T1208] libceph: mon0 (1)[c::]:6789 connect error [ 445.874285][ T8818] ceph: No mds server is up or the cluster is laggy [ 445.964530][ T5960] libceph: connect (1)[c::]:6789 error -101 [ 446.103406][ T5960] libceph: mon0 (1)[c::]:6789 connect error [ 449.641851][ T8858] bridge5: entered promiscuous mode [ 449.647441][ T8858] bridge5: entered allmulticast mode [ 451.763433][ T5960] libceph: connect (1)[c::]:6789 error -101 [ 451.892394][ T5960] libceph: mon0 (1)[c::]:6789 connect error [ 452.251705][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 452.262646][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 452.332989][ T5960] libceph: connect (1)[c::]:6789 error -101 [ 452.369549][ T5960] libceph: mon0 (1)[c::]:6789 connect error [ 452.452553][ T1208] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 452.482472][ T8874] ceph: No mds server is up or the cluster is laggy [ 452.705880][ T1208] usb 6-1: config 0 has an invalid descriptor of length 151, skipping remainder of the config [ 452.980588][ T1208] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 453.192359][ T1208] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.212681][ T1208] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.226983][ T1208] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 455.562308][ T1208] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 33774, setting to 64 [ 455.582394][ T1208] usb 6-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 455.602560][ T1208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.619781][ T1208] usb 6-1: Product: syz [ 455.624547][ T1208] usb 6-1: Manufacturer: syz [ 455.629708][ T1208] usb 6-1: SerialNumber: syz [ 455.744117][ T1208] usb 6-1: config 0 descriptor?? [ 455.785381][ T1208] usb 6-1: can't set config #0, error -71 [ 455.821552][ T1208] usb 6-1: USB disconnect, device number 6 [ 459.073526][ T8915] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 459.960361][ T8923] can: request_module (can-proto-0) failed. [ 463.101274][ T10] libceph: connect (1)[c::]:6789 error -101 [ 463.112269][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 463.382807][ T1208] libceph: connect (1)[c::]:6789 error -101 [ 463.388953][ T1208] libceph: mon0 (1)[c::]:6789 connect error [ 463.465964][ T8949] ceph: No mds server is up or the cluster is laggy [ 463.707939][ T8957] vivid-000: disconnect [ 464.494232][ T8955] vivid-000: reconnect [ 471.972402][ T8983] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 471.981826][ T8983] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 471.991454][ T8983] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 472.085983][ T30] audit: type=1800 audit(1755777987.329:3): pid=8983 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.725" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 474.666063][ T8996] bridge5: entered promiscuous mode [ 474.671375][ T8996] bridge5: entered allmulticast mode [ 475.706672][ T9000] ceph: No mds server is up or the cluster is laggy [ 476.432509][ T9015] netlink: 'syz.5.735': attribute type 21 has an invalid length. [ 476.440425][ T9015] IPv6: NLM_F_CREATE should be specified when creating new route [ 477.178669][ T9021] vivid-000: disconnect [ 477.189391][ T9021] vivid-000: reconnect [ 477.342808][ T9023] FAULT_INJECTION: forcing a failure. [ 477.342808][ T9023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.356424][ T9023] CPU: 0 UID: 0 PID: 9023 Comm: syz.4.737 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 477.356452][ T9023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 477.356465][ T9023] Call Trace: [ 477.356476][ T9023] [ 477.356486][ T9023] dump_stack_lvl+0x189/0x250 [ 477.356512][ T9023] ? __pfx____ratelimit+0x10/0x10 [ 477.356528][ T9023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.356545][ T9023] ? __pfx__printk+0x10/0x10 [ 477.356564][ T9023] ? __might_fault+0xb0/0x130 [ 477.356589][ T9023] should_fail_ex+0x414/0x560 [ 477.356609][ T9023] _copy_from_user+0x2d/0xb0 [ 477.356631][ T9023] kstrtouint_from_user+0xc4/0x170 [ 477.356651][ T9023] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 477.356683][ T9023] proc_fail_nth_write+0x88/0x240 [ 477.356702][ T9023] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 477.356725][ T9023] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 477.356744][ T9023] vfs_write+0x27e/0xa90 [ 477.356766][ T9023] ? __pfx_vfs_write+0x10/0x10 [ 477.356781][ T9023] ? __fget_files+0x2a/0x420 [ 477.356802][ T9023] ? __fget_files+0x3a0/0x420 [ 477.356818][ T9023] ? __fget_files+0x2a/0x420 [ 477.356861][ T9023] ksys_write+0x145/0x250 [ 477.356878][ T9023] ? __pfx_ksys_write+0x10/0x10 [ 477.356892][ T9023] ? rcu_is_watching+0x15/0xb0 [ 477.356910][ T9023] ? trace_sys_enter+0x25/0x120 [ 477.356941][ T9023] do_syscall_64+0xfa/0x3b0 [ 477.356960][ T9023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.356974][ T9023] ? asm_sysvec_call_function_single+0x1a/0x20 [ 477.356988][ T9023] ? clear_bhb_loop+0x60/0xb0 [ 477.357014][ T9023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.357028][ T9023] RIP: 0033:0x7efd12b8d69f [ 477.357042][ T9023] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 477.357054][ T9023] RSP: 002b:00007efd10dd5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 477.357070][ T9023] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efd12b8d69f [ 477.357080][ T9023] RDX: 0000000000000001 RSI: 00007efd10dd50a0 RDI: 000000000000000c [ 477.357089][ T9023] RBP: 00007efd10dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 477.357098][ T9023] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 477.357106][ T9023] R13: 00007efd12db6128 R14: 00007efd12db6090 R15: 00007ffe6ea39668 [ 477.357131][ T9023] [ 482.646251][ T9049] bridge4: entered promiscuous mode [ 482.651518][ T9049] bridge4: entered allmulticast mode [ 484.226747][ T9067] netlink: 32 bytes leftover after parsing attributes in process `syz.0.749'. [ 485.492164][ T9077] ceph: No mds server is up or the cluster is laggy [ 489.598829][ T9114] bridge5: entered promiscuous mode [ 489.604178][ T9114] bridge5: entered allmulticast mode [ 489.628334][ T9112] netlink: 'syz.5.761': attribute type 10 has an invalid length. [ 489.839000][ T9112] geneve0: entered promiscuous mode [ 489.947008][ T9112] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 490.736851][ T9131] netlink: 'syz.5.766': attribute type 3 has an invalid length. [ 490.836835][ T9131] netlink: 60 bytes leftover after parsing attributes in process `syz.5.766'. [ 490.846608][ T9131] netlink: 28 bytes leftover after parsing attributes in process `syz.5.766'. [ 491.059025][ T9130] syz.3.765: attempt to access beyond end of device [ 491.059025][ T9130] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 491.078395][ T9130] EXT4-fs (nbd3): unable to read superblock [ 491.098164][ T9135] No control pipe specified [ 492.382352][ T9141] syz.1.769 (9141) used greatest stack depth: 17992 bytes left [ 494.055553][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 494.172088][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 494.209817][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 494.218923][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 494.464921][ T9161] ceph: No mds server is up or the cluster is laggy [ 494.503327][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 494.530734][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 495.082761][ T24] libceph: connect (1)[c::]:6789 error -101 [ 495.098859][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 495.115427][ T9172] bridge6: entered promiscuous mode [ 495.120735][ T9172] bridge6: entered allmulticast mode [ 495.798667][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.778'. [ 501.870945][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.877395][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.307194][ T9217] @: renamed from vlan0 (while UP) [ 502.500239][ T9219] bridge6: entered promiscuous mode [ 502.537732][ T9219] bridge6: entered allmulticast mode [ 503.222137][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 503.486405][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 503.527446][ T10] usb 5-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xCD, changing to 0x8D [ 503.560740][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 11971, setting to 1024 [ 503.592550][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024 [ 503.612413][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 503.733675][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.922082][ T9217] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 504.161093][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 504.189974][ T10] usb 5-1: invalid MIDI out EP 0 [ 504.612469][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 504.723041][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 504.917798][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 504.928264][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 504.952398][ T10] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 505.198287][ T9225] delete_channel: no stack [ 505.205471][ T9227] ceph: No mds server is up or the cluster is laggy [ 505.205868][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 505.228060][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 505.276240][ T10] usb 5-1: USB disconnect, device number 5 [ 507.706108][ T9260] kvm: apic: phys broadcast and lowest prio [ 510.386047][ T9273] bridge6: entered promiscuous mode [ 510.559326][ T9273] bridge6: entered allmulticast mode [ 511.721307][ T9281] ceph: No mds server is up or the cluster is laggy [ 512.866087][ T9290] trusted_key: syz.0.804 sent an empty control message without MSG_MORE. [ 515.567853][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'. [ 515.608506][ T9298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.719536][ T9298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.140714][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 518.445214][ T10] usb 6-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config [ 518.463167][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 518.509524][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 518.530398][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 518.556402][ T10] usb 6-1: SerialNumber: syz [ 519.478043][ T10] usb 6-1: can't set config #1, error -71 [ 519.529675][ T10] usb 6-1: USB disconnect, device number 7 [ 519.614942][ T9325] bridge7: entered promiscuous mode [ 519.620427][ T9325] bridge7: entered allmulticast mode [ 520.163124][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 520.442446][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 520.478637][ T24] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 520.499959][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.521043][ T24] usb 6-1: Product: syz [ 520.532890][ T24] usb 6-1: Manufacturer: syz [ 520.559000][ T24] usb 6-1: SerialNumber: syz [ 520.575225][ T24] usb 6-1: config 0 descriptor?? [ 520.831282][ T9328] delete_channel: no stack [ 521.005282][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.811'. [ 521.030300][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.811'. [ 521.083269][ T9336] netlink: 'syz.0.811': attribute type 5 has an invalid length. [ 521.091034][ T9336] netlink: 'syz.0.811': attribute type 6 has an invalid length. [ 521.210009][ T9337] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 521.549776][ T24] peak_usb 6-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 521.562494][ T24] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 521.569447][ T24] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 521.654548][ T24] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 521.774483][ T5960] usb 6-1: USB disconnect, device number 8 [ 523.612385][ T2152] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 523.901040][ T2152] usb 4-1: config 1 has an invalid interface number: 224 but max is 0 [ 524.144431][ T2152] usb 4-1: config 1 has no interface number 0 [ 524.151217][ T2152] usb 4-1: config 1 interface 224 has no altsetting 0 [ 524.219690][ T2152] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0620, bcdDevice=2c.26 [ 524.275272][ T2152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.312312][ T2152] usb 4-1: Product: syz [ 524.325532][ T2152] usb 4-1: Manufacturer: syz [ 524.330207][ T2152] usb 4-1: SerialNumber: syz [ 524.822814][ T2152] qmi_wwan 4-1:1.224: probe with driver qmi_wwan failed with error -22 [ 525.317453][ T9383] bridge5: entered promiscuous mode [ 525.323069][ T9383] bridge5: entered allmulticast mode [ 525.664863][ T2152] usb 4-1: USB disconnect, device number 9 [ 528.037496][ T9407] team_slave_1: mtu greater than device maximum [ 528.056009][ T9407] team0: Device team_slave_1 failed to change mtu [ 528.255417][ T30] audit: type=1326 audit(1755778043.609:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9413 comm="syz.3.837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6de858ebe9 code=0x0 [ 531.459151][ T9441] bridge8: entered promiscuous mode [ 531.466080][ T9441] bridge8: entered allmulticast mode [ 535.392393][ T1208] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 535.535112][ T1208] usb 2-1: device descriptor read/64, error -71 [ 535.792338][ T1208] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 537.213481][ T1208] usb 2-1: device descriptor read/64, error -71 [ 537.336208][ T1208] usb usb2-port1: attempt power cycle [ 537.978843][ T9472] netlink: 16 bytes leftover after parsing attributes in process `syz.3.851'. [ 540.712854][ T9488] bridge8: entered promiscuous mode [ 540.718261][ T9488] bridge8: entered allmulticast mode [ 541.361890][ T9493] netlink: 'syz.0.858': attribute type 49 has an invalid length. [ 541.480537][ T9493] netlink: 'syz.0.858': attribute type 49 has an invalid length. [ 543.387055][ T9494] delete_channel: no stack [ 545.089020][ T9524] tmpfs: Unknown parameter 'usrquota_block' [ 551.835627][ T9545] bridge7: entered promiscuous mode [ 551.842542][ T9545] bridge7: entered allmulticast mode [ 552.423850][ T9555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.871'. [ 553.101147][ T9570] lo speed is unknown, defaulting to 1000 [ 553.138433][ T9571] netlink: 'syz.3.879': attribute type 8 has an invalid length. [ 554.842591][ T5845] hid-generic C990:0003:007F.0007: unknown main item tag 0x0 [ 555.185379][ T5845] hid-generic C990:0003:007F.0007: unknown main item tag 0x0 [ 555.199127][ T5845] hid-generic C990:0003:007F.0007: unknown main item tag 0x0 [ 555.885455][ T5845] hid-generic C990:0003:007F.0007: unknown main item tag 0x0 [ 555.893238][ T5845] hid-generic C990:0003:007F.0007: unknown main item tag 0x0 [ 555.900977][ T5845] hid-generic C990:0003:007F.0007: unknown main item tag 0x0 [ 555.908814][ T5845] hid-generic C990:0003:007F.0007: unknown main item tag 0x0 [ 555.916854][ T5845] hid-generic C990:0003:007F.0007: unknown main item tag 0x0 [ 556.065164][ T5845] hid-generic C990:0003:007F.0007: unknown main item tag 0x0 [ 556.087249][ T5845] hid-generic C990:0003:007F.0007: unknown main item tag 0x0 [ 556.212502][ T5845] hid-generic C990:0003:007F.0007: unknown main item tag 0x0 [ 556.486656][ T5845] hid-generic C990:0003:007F.0007: unknown main item tag 0x0 [ 556.496768][ T5845] hid-generic C990:0003:007F.0007: unknown main item tag 0x0 [ 556.504628][ T5845] hid-generic C990:0003:007F.0007: unknown main item tag 0x0 [ 556.512361][ T5845] hid-generic C990:0003:007F.0007: unknown main item tag 0x0 [ 556.520084][ T5845] hid-generic C990:0003:007F.0007: unknown main item tag 0x0 [ 556.889931][ T5845] hid-generic C990:0003:007F.0007: unknown main item tag 0x0 [ 556.961650][ T5845] hid-generic C990:0003:007F.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 559.465433][ T9600] input: syz0 as /devices/virtual/input/input27 [ 559.951133][ T9619] rtc_cmos 00:00: Alarms can be up to one day in the future [ 560.551353][ T2152] rtc_cmos 00:00: Alarms can be up to one day in the future [ 560.603948][ T2152] rtc_cmos 00:00: Alarms can be up to one day in the future [ 560.612416][ T2152] rtc_cmos 00:00: Alarms can be up to one day in the future [ 560.648808][ T2152] rtc_cmos 00:00: Alarms can be up to one day in the future [ 560.661467][ T2152] rtc rtc0: __rtc_set_alarm: err=-22 [ 560.923661][ T9625] netlink: 'syz.0.890': attribute type 49 has an invalid length. [ 561.610233][ T9625] netlink: 'syz.0.890': attribute type 49 has an invalid length. [ 562.872873][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.879301][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.196192][ T9655] netlink: 'syz.0.900': attribute type 8 has an invalid length. [ 563.443453][ T9643] delete_channel: no stack [ 563.473542][ T9646] delete_channel: no stack [ 563.733242][ T9662] netlink: 20 bytes leftover after parsing attributes in process `syz.5.901'. [ 563.757059][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.901'. [ 564.128546][ T9672] FAULT_INJECTION: forcing a failure. [ 564.128546][ T9672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.141772][ T9672] CPU: 1 UID: 0 PID: 9672 Comm: syz.4.903 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 564.141800][ T9672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 564.141813][ T9672] Call Trace: [ 564.141823][ T9672] [ 564.141834][ T9672] dump_stack_lvl+0x189/0x250 [ 564.141865][ T9672] ? __pfx____ratelimit+0x10/0x10 [ 564.141890][ T9672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.141915][ T9672] ? __pfx__printk+0x10/0x10 [ 564.141944][ T9672] ? __might_fault+0xb0/0x130 [ 564.141980][ T9672] should_fail_ex+0x414/0x560 [ 564.142010][ T9672] _copy_from_user+0x2d/0xb0 [ 564.142042][ T9672] do_sock_getsockopt+0x17d/0x450 [ 564.142080][ T9672] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 564.142120][ T9672] ? do_sock_getsockopt+0xc/0x450 [ 564.142167][ T9672] __x64_sys_getsockopt+0x1a5/0x250 [ 564.142210][ T9672] do_syscall_64+0xfa/0x3b0 [ 564.142237][ T9672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.142258][ T9672] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 564.142279][ T9672] ? clear_bhb_loop+0x60/0xb0 [ 564.142306][ T9672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.142327][ T9672] RIP: 0033:0x7efd12b8ebe9 [ 564.142346][ T9672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.142365][ T9672] RSP: 002b:00007efd10db4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 564.142388][ T9672] RAX: ffffffffffffffda RBX: 00007efd12db6180 RCX: 00007efd12b8ebe9 [ 564.142404][ T9672] RDX: 0000000000000021 RSI: 0000000000000084 RDI: 0000000000000008 [ 564.142416][ T9672] RBP: 00007efd10db4090 R08: 00002000000001c0 R09: 0000000000000000 [ 564.142431][ T9672] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 564.142444][ T9672] R13: 00007efd12db6218 R14: 00007efd12db6180 R15: 00007ffe6ea39668 [ 564.142480][ T9672] [ 564.802270][ T2152] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 565.043292][ T2152] usb 4-1: device descriptor read/64, error -71 [ 565.899323][ T9679] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 565.942328][ T2152] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 566.882389][ T2152] usb 4-1: device descriptor read/64, error -71 [ 567.043221][ T2152] usb usb4-port1: attempt power cycle [ 567.522861][ T9698] netlink: 'syz.3.911': attribute type 12 has an invalid length. [ 567.534932][ T9698] netlink: 132 bytes leftover after parsing attributes in process `syz.3.911'. [ 567.760057][ T9698] input: syz0 as /devices/virtual/input/input28 [ 567.822500][ T9702] syz.5.910: attempt to access beyond end of device [ 567.822500][ T9702] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 567.891373][ T9703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 570.284474][ T9711] futex_wake_op: syz.5.913 tries to shift op by -1; fix this program [ 570.718089][ T9723] 9pnet_fd: Insufficient options for proto=fd [ 570.789221][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'. [ 572.756659][ T24] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 572.852736][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 573.170036][ T24] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 573.516283][ T9719] delete_channel: no stack [ 573.917775][ T9759] random: crng reseeded on system resumption [ 574.601170][ T9760] delete_channel: no stack [ 575.222801][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 575.272485][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 575.280083][ T24] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 575.652737][ T9771] block nbd5: shutting down sockets [ 576.026526][ T9781] ceph: No mds server is up or the cluster is laggy [ 576.592246][ T9782] ceph: No mds server is up or the cluster is laggy [ 576.625714][ T30] audit: type=1326 audit(1755778091.989:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9795 comm="syz.5.930" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32ca78ebe9 code=0x0 [ 576.672335][ T1208] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 577.372494][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 577.492277][ T1208] usb 4-1: Using ep0 maxpacket: 8 [ 577.624118][ T24] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 577.634854][ T1208] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 577.639643][ T24] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 577.703174][ T1208] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 577.728571][ T1208] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 577.756252][ T1208] usb 4-1: Product: syz [ 577.760498][ T1208] usb 4-1: Manufacturer: syz [ 577.776838][ T1208] usb 4-1: SerialNumber: syz [ 578.439357][ T1208] usb 4-1: palm_os_3_probe - error -71 getting connection information [ 578.459393][ T1208] visor 4-1:1.0: probe with driver visor failed with error -71 [ 578.529255][ T1208] usb 4-1: USB disconnect, device number 13 [ 578.882004][ T9810] netlink: 200 bytes leftover after parsing attributes in process `syz.5.932'. [ 578.991476][ T9811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.016484][ T9817] netlink: 44 bytes leftover after parsing attributes in process `syz.5.932'. [ 579.210770][ T9810] netlink: 'syz.5.932': attribute type 1 has an invalid length. [ 579.252334][ T9810] netlink: 224 bytes leftover after parsing attributes in process `syz.5.932'. [ 579.704918][ T24] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 579.712245][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 579.808217][ T24] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 580.245080][ T9826] bridge8: entered promiscuous mode [ 580.253274][ T9826] bridge8: entered allmulticast mode [ 583.374728][ T9852] ceph: No mds server is up or the cluster is laggy [ 584.098497][ T9860] netlink: 'syz.0.942': attribute type 49 has an invalid length. [ 584.912436][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 586.442293][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 586.450037][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 586.463237][ T10] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 586.492387][ T10] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 586.500530][ T10] usb 2-1: Product: syz [ 586.532275][ T10] usb 2-1: Manufacturer: syz [ 586.537014][ T10] usb 2-1: SerialNumber: syz [ 586.991488][ T10] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 587.002436][ T10] visor 2-1:1.0: probe with driver visor failed with error -110 [ 587.098044][ T10] usb 2-1: USB disconnect, device number 27 [ 589.448274][ T9909] ceph: No mds server is up or the cluster is laggy [ 592.412407][ T1208] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 592.572294][ T1208] usb 4-1: Using ep0 maxpacket: 8 [ 592.582121][ T1208] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 592.599222][ T1208] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 592.645447][ T1208] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 592.677687][ T1208] usb 4-1: Product: syz [ 592.687852][ T1208] usb 4-1: Manufacturer: syz [ 592.694998][ T1208] usb 4-1: SerialNumber: syz [ 593.032584][ T1208] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 593.040974][ T1208] visor 4-1:1.0: probe with driver visor failed with error -110 [ 594.501543][ T9975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.969'. [ 595.062658][ T10] usb 4-1: USB disconnect, device number 14 [ 596.601650][ T43] libceph: connect (1)[c::]:6789 error -101 [ 596.712957][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 596.760726][ T9993] netlink: 'syz.1.974': attribute type 49 has an invalid length. [ 597.045839][ T9984] ceph: No mds server is up or the cluster is laggy [ 597.193957][ T9999] FAULT_INJECTION: forcing a failure. [ 597.193957][ T9999] name failslab, interval 1, probability 0, space 0, times 0 [ 597.225979][ T9999] CPU: 0 UID: 0 PID: 9999 Comm: syz.0.975 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 597.226002][ T9999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 597.226012][ T9999] Call Trace: [ 597.226018][ T9999] [ 597.226025][ T9999] dump_stack_lvl+0x189/0x250 [ 597.226047][ T9999] ? __pfx____ratelimit+0x10/0x10 [ 597.226064][ T9999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.226082][ T9999] ? __pfx__printk+0x10/0x10 [ 597.226104][ T9999] ? __pfx___might_resched+0x10/0x10 [ 597.226122][ T9999] ? fs_reclaim_acquire+0x7d/0x100 [ 597.226146][ T9999] should_fail_ex+0x414/0x560 [ 597.226167][ T9999] should_failslab+0xa8/0x100 [ 597.226185][ T9999] __kmalloc_noprof+0xcb/0x4f0 [ 597.226200][ T9999] ? tomoyo_encode+0x28b/0x550 [ 597.226224][ T9999] tomoyo_encode+0x28b/0x550 [ 597.226249][ T9999] tomoyo_realpath_from_path+0x58d/0x5d0 [ 597.226279][ T9999] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 597.226296][ T9999] tomoyo_path_number_perm+0x1e8/0x5a0 [ 597.226315][ T9999] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 597.226332][ T9999] ? __pfx_bpf_trace_printk+0x10/0x10 [ 597.226351][ T9999] ? bpf_trace_run2+0x186/0x4b0 [ 597.226384][ T9999] ? __lock_acquire+0xab9/0xd20 [ 597.226421][ T9999] ? __fget_files+0x2a/0x420 [ 597.226441][ T9999] ? __fget_files+0x2a/0x420 [ 597.226458][ T9999] ? __fget_files+0x3a0/0x420 [ 597.226474][ T9999] ? __fget_files+0x2a/0x420 [ 597.226495][ T9999] security_file_ioctl+0xcb/0x2d0 [ 597.226515][ T9999] __se_sys_ioctl+0x47/0x170 [ 597.226540][ T9999] do_syscall_64+0xfa/0x3b0 [ 597.226557][ T9999] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.226573][ T9999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.226589][ T9999] ? clear_bhb_loop+0x60/0xb0 [ 597.226608][ T9999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.226623][ T9999] RIP: 0033:0x7fb9bd58ebe9 [ 597.226637][ T9999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.226650][ T9999] RSP: 002b:00007fb9be39a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.226667][ T9999] RAX: ffffffffffffffda RBX: 00007fb9bd7b6180 RCX: 00007fb9bd58ebe9 [ 597.226678][ T9999] RDX: 0000200000000040 RSI: 0000000040045010 RDI: 0000000000000003 [ 597.226689][ T9999] RBP: 00007fb9be39a090 R08: 0000000000000000 R09: 0000000000000000 [ 597.226699][ T9999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.226708][ T9999] R13: 00007fb9bd7b6218 R14: 00007fb9bd7b6180 R15: 00007fffea0ab048 [ 597.226734][ T9999] [ 597.226750][ T9999] ERROR: Out of memory at tomoyo_realpath_from_path. [ 597.322724][ T43] libceph: connect (1)[c::]:6789 error -101 [ 599.597728][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 601.536302][T10010] syz_tun: entered allmulticast mode [ 601.601140][ T2152] hid-generic 0000:0004:0034.0008: unknown main item tag 0x0 [ 601.674208][ T2152] hid-generic 0000:0004:0034.0008: unknown main item tag 0x0 [ 601.683118][ T2152] hid-generic 0000:0004:0034.0008: unknown main item tag 0x0 [ 601.708130][ T2152] hid-generic 0000:0004:0034.0008: hidraw0: HID v0.0e Device [syz0] on syz1 [ 604.573166][T10001] syz_tun: left allmulticast mode [ 609.096897][T10062] delete_channel: no stack [ 609.162263][ T5916] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 609.398577][ T5916] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 609.424368][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.533459][ T5916] usb 4-1: config 0 descriptor?? [ 609.916748][ T2152] libceph: connect (1)[c::]:6789 error -101 [ 609.928419][ T2152] libceph: mon0 (1)[c::]:6789 connect error [ 609.979962][ T2152] libceph: connect (1)[c::]:6789 error -101 [ 610.242283][ T5916] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 610.337149][ T2152] libceph: mon0 (1)[c::]:6789 connect error [ 610.487090][T10080] ceph: No mds server is up or the cluster is laggy [ 610.510917][T10087] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 610.517519][T10087] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 610.527385][T10087] vhci_hcd vhci_hcd.0: Device attached [ 611.364281][ T1208] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 611.543112][T10090] vhci_hcd: connection reset by peer [ 611.549185][ T8985] vhci_hcd: stop threads [ 611.553582][ T8985] vhci_hcd: release socket [ 611.565061][ T8985] vhci_hcd: disconnect device [ 611.809539][ T5916] [drm:udl_init] *ERROR* Selecting channel failed [ 612.017843][ T5916] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 612.036583][ T5916] [drm] Initialized udl on minor 2 [ 612.047486][ T5916] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 612.073787][ T5916] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 612.088820][ T2152] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 612.155753][ T5916] usb 4-1: USB disconnect, device number 15 [ 612.216105][ T2152] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 614.062268][ T5960] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 615.505304][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1000'. [ 615.545863][ T5960] usb 2-1: Using ep0 maxpacket: 16 [ 615.581090][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.626481][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.638341][ T5960] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 615.659498][ T5960] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 615.670173][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.687089][ T5960] usb 2-1: config 0 descriptor?? [ 615.941167][ T5960] usbhid 2-1:0.0: can't add hid device: -71 [ 615.978591][ T5960] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 616.053356][ T5960] usb 2-1: USB disconnect, device number 28 [ 616.548285][ T30] audit: type=1326 audit(1755778131.909:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10143 comm="syz.1.1002" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f216558ebe9 code=0x0 [ 616.644685][T10133] team0 (unregistering): Port device team_slave_0 removed [ 616.652628][ T1208] vhci_hcd: vhci_device speed not set [ 616.690427][T10133] team0 (unregistering): Port device team_slave_1 removed [ 616.722693][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 617.522282][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 617.552522][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 617.586334][ T10] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 617.616956][ T10] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 617.646021][ T10] usb 4-1: Product: syz [ 617.673980][ T10] usb 4-1: Manufacturer: syz [ 617.718631][ T10] usb 4-1: SerialNumber: syz [ 617.962509][ T5916] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 618.120326][ T10] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 618.128788][ T10] visor 4-1:1.0: probe with driver visor failed with error -110 [ 618.863466][ T5916] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 620.002922][ T5916] usb 5-1: config 0 has no interface number 0 [ 620.019511][ T5916] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 622.024266][ T24] usb 4-1: USB disconnect, device number 16 [ 622.184682][ T5916] usb 5-1: string descriptor 0 read error: -71 [ 622.212814][ T5916] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 622.221917][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 622.281655][ T5916] usb 5-1: config 0 descriptor?? [ 622.306349][ T5916] usb 5-1: can't set config #0, error -71 [ 622.341540][ T5916] usb 5-1: USB disconnect, device number 7 [ 623.059113][T10160] ceph: No mds server is up or the cluster is laggy [ 625.166124][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.565022][ T1208] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 625.716314][T10198] syz.3.1013: attempt to access beyond end of device [ 625.716314][T10198] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 625.786737][T10199] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 626.032230][ T1208] usb 5-1: Using ep0 maxpacket: 16 [ 626.044574][ T1208] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 626.102250][ T1208] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 626.217954][ T1208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.272365][ T1208] usb 5-1: config 0 descriptor?? [ 626.297258][ T1208] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 627.040890][T10210] tipc: Enabling of bearer rejected, failed to enable media [ 627.297946][T10211] set match dimension is over the limit! [ 627.392423][ T2152] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 627.590299][ T2152] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 629.322551][ T2152] usb 2-1: config 0 has no interface number 0 [ 629.352668][ T2152] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 629.542461][ T5960] usb 5-1: USB disconnect, device number 8 [ 629.573641][ T2152] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 629.604513][ T2152] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 629.626529][ T2152] usb 2-1: Product: syz [ 629.643981][ T2152] usb 2-1: SerialNumber: syz [ 629.666425][ T2152] usb 2-1: config 0 descriptor?? [ 629.717170][ T2152] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input35 [ 630.392465][ T5960] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 630.515061][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 630.523854][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 630.531156][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 630.538402][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 630.545608][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 630.553111][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 630.561083][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 630.568437][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 630.575711][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 630.583075][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 630.596668][ T2152] usb 2-1: USB disconnect, device number 29 [ 630.602734][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 630.645379][ T2152] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 630.667360][ T5960] usb 5-1: Using ep0 maxpacket: 8 [ 630.675874][ T5960] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 630.700118][ T5960] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 630.867486][ T5960] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 631.022269][ T5960] usb 5-1: Product: syz [ 631.027689][ T5960] usb 5-1: Manufacturer: syz [ 631.043243][ T5960] usb 5-1: SerialNumber: syz [ 631.307717][ T5960] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 631.372511][ T2152] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 631.511369][ T5960] usb 5-1: Handspring Visor / Palm OS: port 163, is for unknown use [ 631.877719][ T2152] usb 6-1: unable to get BOS descriptor or descriptor too short [ 631.905672][ T2152] usb 6-1: too many endpoints for config 1 interface 2 altsetting 128: 242, using maximum allowed: 30 [ 631.907973][ T5960] usb 5-1: Handspring Visor / Palm OS: port 51, is for unknown use [ 631.935136][ T2152] usb 6-1: config 1 interface 2 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 631.996919][ T5960] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 632.010157][ T2152] usb 6-1: config 1 interface 1 has no altsetting 0 [ 632.017660][ T5960] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 632.017740][ T5960] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 632.028560][ T5960] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 632.035444][ T2152] usb 6-1: config 1 interface 2 has no altsetting 1 [ 632.083313][ T2152] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 632.105674][ T2152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.117113][ T2152] usb 6-1: Product: syz [ 632.125566][ T2152] usb 6-1: Manufacturer: syz [ 632.127868][ T5960] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 632.142424][ T2152] usb 6-1: SerialNumber: syz [ 632.193057][ T5960] usb 5-1: USB disconnect, device number 9 [ 632.230170][ T5960] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 634.587612][ T5960] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 634.676102][T10253] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1026'. [ 635.252599][ T5960] visor 5-1:1.0: device disconnected [ 635.542277][ T5845] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 635.834601][ T5845] usb 2-1: Using ep0 maxpacket: 16 [ 636.436952][ T5845] usb 2-1: config 1 has an invalid descriptor of length 254, skipping remainder of the config [ 636.452301][ T5845] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 636.465776][ T5845] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 636.585418][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.610371][ T5845] usb 2-1: Product: syz [ 636.615075][ T5845] usb 2-1: Manufacturer: syz [ 636.622927][ T5845] usb 2-1: SerialNumber: syz [ 637.046060][ T5845] usb 2-1: 0:2 : does not exist [ 637.275919][ T5845] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 637.334720][ T5845] usb 2-1: USB disconnect, device number 30 [ 638.182498][ T2152] usb 6-1: USB disconnect, device number 9 [ 638.215586][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 638.612366][ T2152] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 638.783231][ T2152] usb 6-1: device descriptor read/64, error -71 [ 638.942962][T10289] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1040'. [ 639.022233][ T2152] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 639.202287][ T2152] usb 6-1: device descriptor read/64, error -71 [ 639.453447][ T2152] usb usb6-port1: attempt power cycle [ 640.372968][ T2152] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 640.485328][ T2152] usb 6-1: device descriptor read/8, error -71 [ 646.780405][T10299] delete_channel: no stack [ 650.932915][T10348] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1054'. [ 653.253613][ T1208] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 653.494222][ T1208] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 653.544217][ T1208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.663263][ T1208] usb 6-1: config 0 descriptor?? [ 653.788834][ T1208] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 654.267719][T10361] autofs: Unknown parameter ')ýq¦2•Ø' [ 654.648685][ T1208] gspca_cpia1: usb_control_msg 03, error -71 [ 654.664361][ T1208] gspca_cpia1: usb_control_msg 01, error -71 [ 654.689453][ T1208] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 654.761266][ T1208] usb 6-1: USB disconnect, device number 14 [ 677.584546][T10370] delete_channel: no stack [ 679.165464][T10396] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 679.175219][T10396] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 679.192859][T10396] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 679.216033][T10396] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 679.224990][T10396] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 679.272663][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 679.301506][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 679.322578][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 679.374492][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 679.382769][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 679.497495][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 679.508692][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 679.518993][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 679.563619][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 679.583027][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 680.049091][T10396] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 680.058460][T10396] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 680.069977][T10396] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 680.089972][T10396] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 680.102725][T10396] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 680.378995][ T6295] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.492149][T10393] lo speed is unknown, defaulting to 1000 [ 680.791367][T10396] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 680.816493][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 680.825379][T10405] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 680.834513][T10405] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 680.842457][T10405] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 680.856226][T10405] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 680.877192][T10405] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 680.886425][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 680.895064][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 680.909089][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 680.911352][ T6295] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.982237][T10397] lo speed is unknown, defaulting to 1000 [ 681.008808][T10400] lo speed is unknown, defaulting to 1000 [ 681.135935][ T6295] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.195510][T10402] lo speed is unknown, defaulting to 1000 [ 681.217340][T10403] lo speed is unknown, defaulting to 1000 [ 681.274836][ T6295] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.462374][ T5839] Bluetooth: hci0: command tx timeout [ 681.576941][T10400] chnl_net:caif_netlink_parms(): no params data found [ 681.693066][ T5839] Bluetooth: hci5: command tx timeout [ 681.830013][ T6295] bridge_slave_1: left allmulticast mode [ 681.836019][ T6295] bridge_slave_1: left promiscuous mode [ 681.842753][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.851532][ T6295] bridge_slave_0: left allmulticast mode [ 681.857466][ T6295] bridge_slave_0: left promiscuous mode [ 681.863267][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.252418][ T5839] Bluetooth: hci4: command tx timeout [ 682.595631][ T6295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.607420][ T6295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.617705][ T6295] bond0 (unregistering): Released all slaves [ 682.649418][T10393] chnl_net:caif_netlink_parms(): no params data found [ 682.730244][T10397] chnl_net:caif_netlink_parms(): no params data found [ 682.762587][T10400] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.770089][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.777408][T10400] bridge_slave_0: entered allmulticast mode [ 682.786328][T10400] bridge_slave_0: entered promiscuous mode [ 682.793975][ T6295] : left promiscuous mode [ 682.897674][ T5839] Bluetooth: hci1: command tx timeout [ 682.911979][T10400] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.919595][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.927121][T10400] bridge_slave_1: entered allmulticast mode [ 682.934622][T10400] bridge_slave_1: entered promiscuous mode [ 682.984374][ T5839] Bluetooth: hci6: command tx timeout [ 683.114242][T10400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.144680][T10403] chnl_net:caif_netlink_parms(): no params data found [ 683.157754][T10393] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.165110][T10393] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.173261][T10393] bridge_slave_0: entered allmulticast mode [ 683.180419][T10393] bridge_slave_0: entered promiscuous mode [ 683.190289][T10400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.212758][T10402] chnl_net:caif_netlink_parms(): no params data found [ 683.236924][T10393] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.245060][T10393] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.252425][T10393] bridge_slave_1: entered allmulticast mode [ 683.260818][T10393] bridge_slave_1: entered promiscuous mode [ 683.357827][T10400] team0: Port device team_slave_0 added [ 683.411364][ T6295] hsr_slave_0: left promiscuous mode [ 683.417959][ T6295] hsr_slave_1: left promiscuous mode [ 683.425581][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.433159][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.440968][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.449487][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.469718][ T6295] veth1_macvtap: left promiscuous mode [ 683.475361][ T6295] veth0_macvtap: left promiscuous mode [ 683.480977][ T6295] veth1_vlan: left promiscuous mode [ 683.486610][ T6295] veth0_vlan: left promiscuous mode [ 683.532390][ T5839] Bluetooth: hci0: command tx timeout [ 683.776114][ T5839] Bluetooth: hci5: command tx timeout [ 684.191240][T10400] team0: Port device team_slave_1 added [ 684.211132][T10397] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.218567][T10397] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.226927][T10397] bridge_slave_0: entered allmulticast mode [ 684.243202][T10397] bridge_slave_0: entered promiscuous mode [ 684.251330][T10397] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.259002][T10397] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.266279][T10397] bridge_slave_1: entered allmulticast mode [ 684.273527][T10397] bridge_slave_1: entered promiscuous mode [ 684.294537][T10393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.307265][T10393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.342513][ T5839] Bluetooth: hci4: command tx timeout [ 684.416378][T10400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.423955][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.450274][T10400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.519536][T10400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.532152][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.561846][T10400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.604482][T10397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.614126][T10403] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.621276][T10403] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.629813][T10403] bridge_slave_0: entered allmulticast mode [ 684.638771][T10403] bridge_slave_0: entered promiscuous mode [ 684.649678][T10393] team0: Port device team_slave_0 added [ 684.662947][T10393] team0: Port device team_slave_1 added [ 684.715529][T10397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.745926][T10403] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.754019][T10403] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.761249][T10403] bridge_slave_1: entered allmulticast mode [ 684.768709][T10403] bridge_slave_1: entered promiscuous mode [ 684.803152][T10402] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.810362][T10402] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.818855][T10402] bridge_slave_0: entered allmulticast mode [ 684.826484][T10402] bridge_slave_0: entered promiscuous mode [ 684.889031][T10402] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.900774][T10402] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.908556][T10402] bridge_slave_1: entered allmulticast mode [ 684.918033][T10402] bridge_slave_1: entered promiscuous mode [ 684.930864][T10397] team0: Port device team_slave_0 added [ 684.958257][T10400] hsr_slave_0: entered promiscuous mode [ 684.969579][T10400] hsr_slave_1: entered promiscuous mode [ 684.975267][ T5839] Bluetooth: hci1: command tx timeout [ 684.987860][T10393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.994946][T10393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.021509][T10393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.052258][ T5839] Bluetooth: hci6: command tx timeout [ 685.067245][T10397] team0: Port device team_slave_1 added [ 685.104252][T10403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.117139][T10403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.127909][T10393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.135174][T10393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.161387][T10393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.181887][T10402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.197072][ T6295] IPVS: stop unused estimator thread 0... [ 685.203477][T10402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.219707][T10397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.226756][T10397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.253256][T10397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.267183][T10397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.274322][T10397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.300811][T10397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.345286][T10403] team0: Port device team_slave_0 added [ 685.405084][T10403] team0: Port device team_slave_1 added [ 685.462710][T10402] team0: Port device team_slave_0 added [ 685.493703][T10403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.500689][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.527794][T10403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.540659][T10403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.548129][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.574181][T10403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.589255][T10402] team0: Port device team_slave_1 added [ 685.616500][ T5839] Bluetooth: hci0: command tx timeout [ 685.699089][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.716990][T10393] hsr_slave_0: entered promiscuous mode [ 685.724591][T10393] hsr_slave_1: entered promiscuous mode [ 685.730613][T10393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 685.738467][T10393] Cannot create hsr debugfs directory [ 685.750002][T10397] hsr_slave_0: entered promiscuous mode [ 685.758854][T10397] hsr_slave_1: entered promiscuous mode [ 685.766358][T10397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 685.775518][T10397] Cannot create hsr debugfs directory [ 685.798495][T10402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.807789][T10402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.834251][T10402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.852707][ T5839] Bluetooth: hci5: command tx timeout [ 685.908806][T10403] hsr_slave_0: entered promiscuous mode [ 685.915502][T10403] hsr_slave_1: entered promiscuous mode [ 685.921710][T10403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 685.929973][T10403] Cannot create hsr debugfs directory [ 685.937808][T10402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.950668][T10402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.980959][T10402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.223220][T10402] hsr_slave_0: entered promiscuous mode [ 686.229995][T10402] hsr_slave_1: entered promiscuous mode [ 686.236496][T10402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 686.244245][T10402] Cannot create hsr debugfs directory [ 686.360597][ T6295] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.413361][ T5839] Bluetooth: hci4: command tx timeout [ 686.479157][ T6295] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.579260][ T6295] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.659802][ T6295] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.753688][T10400] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 686.797310][T10400] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 686.826414][T10400] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 686.857484][T10400] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 686.949392][ T6295] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.971847][T10393] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 686.989861][T10393] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 687.036828][ T6295] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.051071][T10393] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 687.063691][ T5839] Bluetooth: hci1: command tx timeout [ 687.079415][T10393] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 687.121589][ T6295] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.142538][ T5839] Bluetooth: hci6: command tx timeout [ 687.249031][T10397] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 687.295059][T10397] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 687.355268][ T6295] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.388423][T10397] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 687.420521][T10397] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 687.633712][T10400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.702833][ T5839] Bluetooth: hci0: command tx timeout [ 687.706280][ T6295] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.792005][T10393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.823434][ T6295] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.849941][T10400] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.887401][T10393] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.929969][ T6295] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.940578][ T5839] Bluetooth: hci5: command tx timeout [ 688.097634][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.104883][ T6070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.127322][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.134563][ T6070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.180416][ T6295] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.213400][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.220596][ T6070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.245242][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.252457][ T6070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.440163][T10397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.492855][ T5839] Bluetooth: hci4: command tx timeout [ 688.541846][T10397] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.617337][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.624570][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.725608][ T6295] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.786177][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.793413][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.991081][ T6295] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.136801][ T5839] Bluetooth: hci1: command tx timeout [ 689.159141][ T6295] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.184800][T10400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.213212][ T5839] Bluetooth: hci6: command tx timeout [ 689.276813][T10393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.398758][ T6295] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.897716][ T6295] bridge_slave_1: left allmulticast mode [ 689.909228][ T6295] bridge_slave_1: left promiscuous mode [ 689.941716][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.964204][ T6295] bridge_slave_0: left allmulticast mode [ 689.969995][ T6295] bridge_slave_0: left promiscuous mode [ 689.986567][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.040652][ T6295] bridge_slave_1: left allmulticast mode [ 690.047486][ T6295] bridge_slave_1: left promiscuous mode [ 690.065016][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.078375][ T6295] bridge_slave_0: left allmulticast mode [ 690.087384][ T6295] bridge_slave_0: left promiscuous mode [ 690.098592][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.135650][ T6295] bridge_slave_1: left allmulticast mode [ 690.141377][ T6295] bridge_slave_1: left promiscuous mode [ 690.148445][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.160556][ T6295] bridge_slave_0: left allmulticast mode [ 690.178130][ T6295] bridge_slave_0: left promiscuous mode [ 690.185622][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.225045][ T6295] bridge_slave_1: left allmulticast mode [ 690.230772][ T6295] bridge_slave_1: left promiscuous mode [ 690.251840][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.269296][ T6295] bridge_slave_0: left allmulticast mode [ 690.275169][ T6295] bridge_slave_0: left promiscuous mode [ 690.280972][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.168085][ T6295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.179389][ T6295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.189689][ T6295] bond0 (unregistering): Released all slaves [ 691.333945][ T6295] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 691.870861][ T6295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.881728][ T6295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.897668][ T6295] bond0 (unregistering): Released all slaves [ 692.638041][ T6295]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.649889][ T6295]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.659567][ T6295]  (unregistering): Released all slaves [ 693.240248][ T6295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.250997][ T6295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.261783][ T6295] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 693.270716][ T6295] bond0 (unregistering): Released all slaves [ 693.438033][T10397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.558368][T10402] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 693.577988][T10402] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 693.600336][ T6295] : left promiscuous mode [ 693.681779][T10402] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 693.730315][ T6295] : left promiscuous mode [ 693.764459][T10402] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 693.857730][T10393] veth0_vlan: entered promiscuous mode [ 693.918464][ T6295] : left promiscuous mode [ 694.030219][T10403] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 694.077911][ T6295] : left promiscuous mode [ 694.121120][T10393] veth1_vlan: entered promiscuous mode [ 694.131284][T10403] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 694.213804][T10403] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 694.311643][T10403] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 694.474523][T10400] veth0_vlan: entered promiscuous mode [ 694.557637][T10400] veth1_vlan: entered promiscuous mode [ 694.580654][T10397] veth0_vlan: entered promiscuous mode [ 694.594598][T10393] veth0_macvtap: entered promiscuous mode [ 694.648519][T10393] veth1_macvtap: entered promiscuous mode [ 694.705874][T10397] veth1_vlan: entered promiscuous mode [ 694.772084][T10393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.794216][T10393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.907766][T10402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.918872][T10393] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.928398][T10393] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.939275][T10393] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.948110][T10393] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.018688][T10397] veth0_macvtap: entered promiscuous mode [ 695.044857][T10397] veth1_macvtap: entered promiscuous mode [ 695.061523][T10400] veth0_macvtap: entered promiscuous mode [ 695.130446][T10400] veth1_macvtap: entered promiscuous mode [ 695.195793][T10402] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.234697][T10397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.280303][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.287492][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.305573][T10397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.340113][T10400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.431927][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.439160][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.471258][T10400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.511965][T10397] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.529650][T10397] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.541696][T10397] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.558694][T10397] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.601428][T10400] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.615988][T10400] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.624901][T10400] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.633967][T10400] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.668147][T10403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.723017][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.730906][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.903000][ T8985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.906575][T10403] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.918390][ T8985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.946130][ T6295] hsr_slave_0: left promiscuous mode [ 695.952038][ T6295] hsr_slave_1: left promiscuous mode [ 695.967374][ T6295] hsr_slave_0: left promiscuous mode [ 695.974725][ T6295] hsr_slave_1: left promiscuous mode [ 695.980503][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.988811][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.997058][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.004896][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.017692][ T6295] hsr_slave_0: left promiscuous mode [ 696.026959][ T6295] hsr_slave_1: left promiscuous mode [ 696.033230][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.040675][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.056555][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.064421][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.072247][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.079662][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.137023][ T6295] veth1_macvtap: left promiscuous mode [ 696.142822][ T6295] veth0_macvtap: left promiscuous mode [ 696.148430][ T6295] veth1_vlan: left promiscuous mode [ 696.153834][ T6295] veth0_vlan: left promiscuous mode [ 696.160369][ T6295] veth1_macvtap: left promiscuous mode [ 696.166009][ T6295] veth0_macvtap: left promiscuous mode [ 696.171696][ T6295] veth1_vlan: left promiscuous mode [ 696.177933][ T6295] veth0_vlan: left promiscuous mode [ 696.188968][ T6295] veth1_macvtap: left promiscuous mode [ 696.194580][ T6295] veth0_macvtap: left promiscuous mode [ 696.200325][ T6295] veth1_vlan: left promiscuous mode [ 696.206126][ T6295] veth0_vlan: left promiscuous mode [ 696.214653][ T6295] veth1_macvtap: left promiscuous mode [ 696.220181][ T6295] veth0_macvtap: left promiscuous mode [ 696.228042][ T6295] veth1_vlan: left promiscuous mode [ 696.233461][ T6295] veth0_vlan: left promiscuous mode [ 696.851637][ T6295] team0 (unregistering): Port device team_slave_1 removed [ 696.900678][ T6295] team0 (unregistering): Port device team_slave_0 removed [ 697.660341][ T6295] team0 (unregistering): Port device team_slave_1 removed [ 697.705292][ T6295] team0 (unregistering): Port device team_slave_0 removed [ 698.400551][ T6295] team0 (unregistering): Port device team_slave_1 removed [ 698.444024][ T6295] team0 (unregistering): Port device team_slave_0 removed [ 699.159034][ T6295] team0 (unregistering): Port device team_slave_1 removed [ 699.198494][ T6295] team0 (unregistering): Port device team_slave_0 removed [ 699.640321][ T24] lo speed is unknown, defaulting to 1000 [ 699.653807][ T24] infiniband s: ib_query_port failed (-19) [ 699.694368][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.701650][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.724893][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.732133][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.872863][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.880779][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.961596][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.015116][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.079465][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.116876][T10596] libceph: connect (1)[c::]:6789 error -101 [ 700.126484][T10596] libceph: mon0 (1)[c::]:6789 connect error [ 700.132713][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.152639][T10596] libceph: connect (1)[c::]:6789 error -101 [ 700.159532][T10596] libceph: mon0 (1)[c::]:6789 connect error [ 700.180421][T10403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 700.287726][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.350622][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.443368][ T1208] libceph: connect (1)[c::]:6789 error -101 [ 700.450628][ T1208] libceph: mon0 (1)[c::]:6789 connect error [ 700.941257][T10402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.992658][ T5960] libceph: connect (1)[c::]:6789 error -101 [ 701.036517][ T5960] libceph: mon0 (1)[c::]:6789 connect error [ 701.177388][T10597] ceph: No mds server is up or the cluster is laggy [ 701.350631][T10403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.134944][T10403] veth0_vlan: entered promiscuous mode [ 704.546484][T10403] veth1_vlan: entered promiscuous mode [ 704.786170][T10403] veth0_macvtap: entered promiscuous mode [ 704.836127][T10403] veth1_macvtap: entered promiscuous mode [ 705.026896][T10403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.151451][T10403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.271181][T10403] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.305880][T10403] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.325740][T10403] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.352171][T10403] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.627373][T10650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 705.654764][T10402] veth0_vlan: entered promiscuous mode [ 706.045011][T10402] veth1_vlan: entered promiscuous mode [ 706.411233][ T5939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.423776][ T5939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.546388][T10402] veth0_macvtap: entered promiscuous mode [ 706.555450][T10402] veth1_macvtap: entered promiscuous mode [ 706.563215][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1073'. [ 706.597467][T10402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.608665][T10402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.079437][T10402] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.117697][T10402] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.206330][T10402] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.215411][T10402] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.231570][ T6295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.272496][ T6295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.509060][ T6070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.540589][ T6070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.749514][T10671] FAULT_INJECTION: forcing a failure. [ 707.749514][T10671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.814459][ T6295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.846293][T10671] CPU: 0 UID: 0 PID: 10671 Comm: syz.2.1070 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 707.846323][T10671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 707.846336][T10671] Call Trace: [ 707.846345][T10671] [ 707.846355][T10671] dump_stack_lvl+0x189/0x250 [ 707.846385][T10671] ? __pfx____ratelimit+0x10/0x10 [ 707.846408][T10671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 707.846431][T10671] ? __pfx__printk+0x10/0x10 [ 707.846470][T10671] should_fail_ex+0x414/0x560 [ 707.846498][T10671] strncpy_from_user+0x36/0x290 [ 707.846536][T10671] getname_flags+0xf3/0x540 [ 707.846566][T10671] user_path_at+0x24/0x60 [ 707.846597][T10671] do_fchownat+0x105/0x270 [ 707.846625][T10671] ? __pfx_do_fchownat+0x10/0x10 [ 707.846650][T10671] ? __pfx_ksys_write+0x10/0x10 [ 707.846667][T10671] ? rcu_is_watching+0x15/0xb0 [ 707.846699][T10671] __x64_sys_chown+0x82/0xa0 [ 707.846726][T10671] do_syscall_64+0xfa/0x3b0 [ 707.846748][T10671] ? lockdep_hardirqs_on+0x9c/0x150 [ 707.846769][T10671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.846789][T10671] ? clear_bhb_loop+0x60/0xb0 [ 707.846815][T10671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.846835][T10671] RIP: 0033:0x7fef0378ebe9 [ 707.846853][T10671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.846871][T10671] RSP: 002b:00007fef045d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 707.846894][T10671] RAX: ffffffffffffffda RBX: 00007fef039b6090 RCX: 00007fef0378ebe9 [ 707.846910][T10671] RDX: ffffffffffffffff RSI: 000000000000ee01 RDI: 0000200000000280 [ 707.846924][T10671] RBP: 00007fef045d6090 R08: 0000000000000000 R09: 0000000000000000 [ 707.846937][T10671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.846950][T10671] R13: 00007fef039b6128 R14: 00007fef039b6090 R15: 00007ffff9f20ec8 [ 707.846983][T10671] [ 707.859795][ T6295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.317759][T10677] FAULT_INJECTION: forcing a failure. [ 708.317759][T10677] name failslab, interval 1, probability 0, space 0, times 0 [ 708.391351][T10677] CPU: 0 UID: 0 PID: 10677 Comm: syz.2.1077 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 708.391383][T10677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 708.391396][T10677] Call Trace: [ 708.391405][T10677] [ 708.391414][T10677] dump_stack_lvl+0x189/0x250 [ 708.391443][T10677] ? __pfx____ratelimit+0x10/0x10 [ 708.391467][T10677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 708.391490][T10677] ? __pfx__printk+0x10/0x10 [ 708.391533][T10677] ? __pfx___might_resched+0x10/0x10 [ 708.391554][T10677] ? fs_reclaim_acquire+0x7d/0x100 [ 708.391583][T10677] should_fail_ex+0x414/0x560 [ 708.391609][T10677] should_failslab+0xa8/0x100 [ 708.391632][T10677] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 708.391653][T10677] ? smack_sb_eat_lsm_opts+0x4b3/0x710 [ 708.391688][T10677] kmemdup_nul+0x36/0xf0 [ 708.391716][T10677] smack_sb_eat_lsm_opts+0x4b3/0x710 [ 708.391750][T10677] security_sb_eat_lsm_opts+0x93/0x290 [ 708.391780][T10677] vfs_parse_monolithic_sep+0xac/0x310 [ 708.391803][T10677] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 708.391825][T10677] ? cgroup_init_fs_context+0x58/0x3f0 [ 708.391844][T10677] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 708.391870][T10677] ? cgroup_init_fs_context+0x32c/0x3f0 [ 708.391894][T10677] ? alloc_fs_context+0x665/0x7d0 [ 708.391925][T10677] do_new_mount+0x21a/0xa40 [ 708.391956][T10677] __se_sys_mount+0x317/0x410 [ 708.391996][T10677] ? __pfx___se_sys_mount+0x10/0x10 [ 708.392016][T10677] ? rcu_is_watching+0x15/0xb0 [ 708.392043][T10677] ? do_syscall_64+0xbe/0x3b0 [ 708.392063][T10677] ? __x64_sys_mount+0x20/0xc0 [ 708.392091][T10677] do_syscall_64+0xfa/0x3b0 [ 708.392111][T10677] ? lockdep_hardirqs_on+0x9c/0x150 [ 708.392131][T10677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.392150][T10677] ? clear_bhb_loop+0x60/0xb0 [ 708.392174][T10677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.392193][T10677] RIP: 0033:0x7fef0378ebe9 [ 708.392211][T10677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.392228][T10677] RSP: 002b:00007fef045f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 708.392249][T10677] RAX: ffffffffffffffda RBX: 00007fef039b5fa0 RCX: 00007fef0378ebe9 [ 708.392263][T10677] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 708.392276][T10677] RBP: 00007fef045f7090 R08: 0000200000000480 R09: 0000000000000000 [ 708.392289][T10677] R10: 0000000002010042 R11: 0000000000000246 R12: 0000000000000002 [ 708.392301][T10677] R13: 00007fef039b6038 R14: 00007fef039b5fa0 R15: 00007ffff9f20ec8 [ 708.392332][T10677] [ 709.142842][ T24] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 710.157463][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 710.212908][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 710.220458][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.273233][ T24] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 710.292293][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.314484][ T24] usb 7-1: config 0 descriptor?? [ 710.362451][ T10] usb 9-1: device descriptor read/64, error -71 [ 710.604736][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 710.739133][ T24] bigben 0003:146B:0902.0009: unexpected rdesc, please submit for review [ 710.782273][ T10] usb 9-1: device descriptor read/64, error -71 [ 710.815194][ T24] bigben 0003:146B:0902.0009: item fetching failed at offset 3/5 [ 710.910259][ T24] bigben 0003:146B:0902.0009: parse failed [ 710.968126][ T24] bigben 0003:146B:0902.0009: probe with driver bigben failed with error -22 [ 711.013781][T10682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.172510][T10682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.486382][ T10] usb usb9-port1: attempt power cycle [ 713.488620][ T24] usb 7-1: USB disconnect, device number 2 [ 714.530970][T10728] netlink: 'syz.6.1088': attribute type 6 has an invalid length. [ 714.782771][T10728] bridge1: entered promiscuous mode [ 714.788253][T10728] bridge1: entered allmulticast mode [ 716.257569][T10744] 9pnet_fd: Insufficient options for proto=fd [ 718.506888][T10762] netlink: 'syz.2.1096': attribute type 7 has an invalid length. [ 718.994446][T10762] : entered promiscuous mode [ 719.329270][T10760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1096'. [ 719.555276][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'. [ 722.794787][T10817] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 723.393883][ T5916] IPVS: starting estimator thread 0... [ 723.498818][T10820] FAULT_INJECTION: forcing a failure. [ 723.498818][T10820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.564299][T10818] IPVS: using max 36 ests per chain, 86400 per kthread [ 723.672000][T10820] CPU: 1 UID: 0 PID: 10820 Comm: syz.6.1105 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 723.672030][T10820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 723.672044][T10820] Call Trace: [ 723.672052][T10820] [ 723.672062][T10820] dump_stack_lvl+0x189/0x250 [ 723.672095][T10820] ? __pfx____ratelimit+0x10/0x10 [ 723.672117][T10820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 723.672139][T10820] ? __pfx__printk+0x10/0x10 [ 723.672176][T10820] should_fail_ex+0x414/0x560 [ 723.672203][T10820] _copy_to_user+0x31/0xb0 [ 723.672234][T10820] simple_read_from_buffer+0xe1/0x170 [ 723.672261][T10820] proc_fail_nth_read+0x1df/0x250 [ 723.672289][T10820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 723.672316][T10820] ? rw_verify_area+0x258/0x650 [ 723.672347][T10820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 723.672373][T10820] vfs_read+0x200/0x980 [ 723.672441][T10820] ? __pfx___mutex_lock+0x10/0x10 [ 723.672464][T10820] ? __pfx_vfs_read+0x10/0x10 [ 723.672496][T10820] ? __fget_files+0x2a/0x420 [ 723.672524][T10820] ? __fget_files+0x3a0/0x420 [ 723.672545][T10820] ? __fget_files+0x2a/0x420 [ 723.672577][T10820] ksys_read+0x145/0x250 [ 723.672598][T10820] ? __pfx_ksys_read+0x10/0x10 [ 723.672622][T10820] ? do_syscall_64+0xbe/0x3b0 [ 723.672650][T10820] do_syscall_64+0xfa/0x3b0 [ 723.672670][T10820] ? lockdep_hardirqs_on+0x9c/0x150 [ 723.672690][T10820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.672711][T10820] ? clear_bhb_loop+0x60/0xb0 [ 723.672735][T10820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.672761][T10820] RIP: 0033:0x7fbef418d5fc [ 723.672779][T10820] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 723.672797][T10820] RSP: 002b:00007fbef5007030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 723.672818][T10820] RAX: ffffffffffffffda RBX: 00007fbef43b5fa0 RCX: 00007fbef418d5fc [ 723.672833][T10820] RDX: 000000000000000f RSI: 00007fbef50070a0 RDI: 0000000000000003 [ 723.672844][T10820] RBP: 00007fbef5007090 R08: 0000000000000000 R09: 0000000000000000 [ 723.672856][T10820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.672868][T10820] R13: 00007fbef43b6038 R14: 00007fbef43b5fa0 R15: 00007fff007311f8 [ 723.672900][T10820] [ 724.271761][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1107'. [ 724.380862][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1107'. [ 725.748813][T10848] Cannot find add_set index 0 as target [ 728.109381][ T5916] libceph: connect (1)[c::]:6789 error -101 [ 728.133035][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 728.996372][ T5916] libceph: connect (1)[c::]:6789 error -101 [ 729.780056][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 730.182394][T10877] ceph: No mds server is up or the cluster is laggy [ 730.960405][T10914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 734.579371][T10939] FAULT_INJECTION: forcing a failure. [ 734.579371][T10939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.592940][T10939] CPU: 0 UID: 0 PID: 10939 Comm: syz.2.1129 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 734.592967][T10939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 734.592979][T10939] Call Trace: [ 734.592987][T10939] [ 734.592997][T10939] dump_stack_lvl+0x189/0x250 [ 734.593024][T10939] ? __pfx____ratelimit+0x10/0x10 [ 734.593047][T10939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.593070][T10939] ? __pfx__printk+0x10/0x10 [ 734.593096][T10939] ? __might_fault+0xb0/0x130 [ 734.593127][T10939] should_fail_ex+0x414/0x560 [ 734.593153][T10939] _copy_from_user+0x2d/0xb0 [ 734.593181][T10939] ___sys_sendmsg+0x158/0x2a0 [ 734.593216][T10939] ? __pfx____sys_sendmsg+0x10/0x10 [ 734.593284][T10939] ? __fget_files+0x2a/0x420 [ 734.593306][T10939] ? __fget_files+0x3a0/0x420 [ 734.593339][T10939] __x64_sys_sendmsg+0x19b/0x260 [ 734.593373][T10939] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 734.593414][T10939] ? __pfx_ksys_write+0x10/0x10 [ 734.593431][T10939] ? rcu_is_watching+0x15/0xb0 [ 734.593458][T10939] ? do_syscall_64+0xbe/0x3b0 [ 734.593485][T10939] do_syscall_64+0xfa/0x3b0 [ 734.593506][T10939] ? lockdep_hardirqs_on+0x9c/0x150 [ 734.593526][T10939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.593554][T10939] ? clear_bhb_loop+0x60/0xb0 [ 734.593579][T10939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.593599][T10939] RIP: 0033:0x7fef0378ebe9 [ 734.593634][T10939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.593653][T10939] RSP: 002b:00007fef045f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.593675][T10939] RAX: ffffffffffffffda RBX: 00007fef039b5fa0 RCX: 00007fef0378ebe9 [ 734.593691][T10939] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 734.593705][T10939] RBP: 00007fef045f7090 R08: 0000000000000000 R09: 0000000000000000 [ 734.593718][T10939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.593731][T10939] R13: 00007fef039b6038 R14: 00007fef039b5fa0 R15: 00007ffff9f20ec8 [ 734.593765][T10939] [ 735.607022][ T5916] libceph: connect (1)[c::]:6789 error -101 [ 735.615642][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 735.882846][ T5916] libceph: connect (1)[c::]:6789 error -101 [ 735.892353][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 736.391208][T10952] ceph: No mds server is up or the cluster is laggy [ 736.422750][ T24] libceph: connect (1)[c::]:6789 error -101 [ 736.430068][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 736.634288][T10970] netlink: 'syz.6.1133': attribute type 49 has an invalid length. [ 737.935795][T10981] netlink: 'syz.6.1137': attribute type 2 has an invalid length. [ 738.024656][T10981] netlink: 119 bytes leftover after parsing attributes in process `syz.6.1137'. [ 740.387830][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1137'. [ 743.308826][T11002] xt_bpf: check failed: parse error [ 743.316050][T11002] overlayfs: failed to resolve './file1/file0': -2 [ 747.138810][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.593103][T11063] netlink: 'syz.7.1152': attribute type 2 has an invalid length. [ 747.611380][T11063] netlink: 119 bytes leftover after parsing attributes in process `syz.7.1152'. [ 748.555572][T11063] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1152'. [ 755.841125][T11097] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1158'. [ 758.108221][T11154] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1170'. [ 758.280503][T11156] Bluetooth: MGMT ver 1.23 [ 758.368381][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1170'. [ 760.463933][T11167] fuse: Bad value for 'fd' [ 764.072273][T11207] fuse: Bad value for 'fd' [ 765.318014][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1183'. [ 767.508188][T11221] netlink: 'syz.9.1185': attribute type 49 has an invalid length. [ 770.440019][T11241] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1188'. [ 771.909502][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1186'. [ 772.361167][ T5834] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 772.542198][ T5834] usb 7-1: Using ep0 maxpacket: 32 [ 773.653642][ T5834] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 775.175887][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.185484][ T5834] usb 7-1: Product: syz [ 775.189703][ T5834] usb 7-1: Manufacturer: syz [ 775.194383][ T5834] usb 7-1: SerialNumber: syz [ 775.202566][ T5834] usb 7-1: config 0 descriptor?? [ 775.724009][T10145] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 775.772044][ T5834] usb 7-1: can't set config #0, error -71 [ 775.790336][ T5834] usb 7-1: USB disconnect, device number 3 [ 776.032513][T10145] usb 3-1: Using ep0 maxpacket: 8 [ 776.046364][T10145] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 776.329988][T10145] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 776.352120][T10145] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 776.482177][T10145] usb 3-1: Product: syz [ 776.489755][T10145] usb 3-1: Manufacturer: syz [ 776.505887][T10145] usb 3-1: SerialNumber: syz [ 776.739325][T10145] usb 3-1: palm_os_3_probe - error -71 getting connection information [ 776.764554][T10145] visor 3-1:1.0: probe with driver visor failed with error -71 [ 776.830325][T10145] usb 3-1: USB disconnect, device number 6 [ 780.709006][T11291] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1201'. [ 781.262206][T10145] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 782.112315][T10145] usb 3-1: Using ep0 maxpacket: 16 [ 782.128399][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1207'. [ 782.153218][T10145] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 782.169729][T10145] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 782.175704][T11323] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1207'. [ 782.188509][T10145] usb 3-1: Product: syz [ 782.193478][T10145] usb 3-1: Manufacturer: syz [ 782.198811][T10145] usb 3-1: SerialNumber: syz [ 783.444510][T10145] usb 3-1: config 0 descriptor?? [ 784.277295][T11322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 784.573644][T10145] usb 3-1: USB disconnect, device number 7 [ 784.736623][T11349] misc userio: Invalid payload size [ 784.812346][T10596] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 786.572173][T10596] usb 10-1: Using ep0 maxpacket: 8 [ 787.785963][T10596] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 787.802198][T10596] usb 10-1: can't read configurations, error -71 [ 789.175631][T11389] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1216'. [ 790.767404][T11401] netlink: 4268 bytes leftover after parsing attributes in process `syz.7.1221'. [ 790.777474][T11401] netlink: 4268 bytes leftover after parsing attributes in process `syz.7.1221'. [ 791.777767][T11411] netlink: 'syz.7.1225': attribute type 2 has an invalid length. [ 791.800643][T11411] netlink: 119 bytes leftover after parsing attributes in process `syz.7.1225'. [ 793.454480][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1225'. [ 797.229189][T11436] netlink: 'syz.8.1233': attribute type 1 has an invalid length. [ 797.281492][T11436] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1233'. [ 798.185216][T11455] fuse: Bad value for 'fd' [ 799.980595][T11461] pimreg: entered allmulticast mode [ 800.212151][ T5834] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 800.349190][T11471] netlink: 'syz.2.1242': attribute type 4 has an invalid length. [ 800.372117][ T5834] usb 10-1: Using ep0 maxpacket: 32 [ 800.384586][T11471] netlink: 'syz.2.1242': attribute type 4 has an invalid length. [ 800.419321][ T5834] usb 10-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 800.446645][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.502285][ T5834] usb 10-1: Product: syz [ 800.524733][ T5834] usb 10-1: Manufacturer: syz [ 800.545952][ T5834] usb 10-1: SerialNumber: syz [ 800.578798][ T5834] usb 10-1: config 0 descriptor?? [ 800.695068][T11475] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1241'. [ 801.298652][T11484] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 801.321802][T11484] PKCS7: Only support pkcs7_signedData type [ 802.681787][T11499] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1247'. [ 803.431364][ T5834] peak_usb 10-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 803.663075][ T5834] peak_usb 10-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 804.464973][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 804.502752][ T5834] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -71 [ 804.741104][ T5834] usb 10-1: USB disconnect, device number 4 [ 805.356763][T11535] FAULT_INJECTION: forcing a failure. [ 805.356763][T11535] name failslab, interval 1, probability 0, space 0, times 0 [ 805.372311][T11535] CPU: 1 UID: 0 PID: 11535 Comm: syz.8.1256 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 805.372340][T11535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 805.372354][T11535] Call Trace: [ 805.372361][T11535] [ 805.372369][T11535] dump_stack_lvl+0x189/0x250 [ 805.372398][T11535] ? __pfx____ratelimit+0x10/0x10 [ 805.372420][T11535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 805.372442][T11535] ? __pfx__printk+0x10/0x10 [ 805.372474][T11535] ? __pfx___might_resched+0x10/0x10 [ 805.372495][T11535] ? fs_reclaim_acquire+0x7d/0x100 [ 805.372524][T11535] should_fail_ex+0x414/0x560 [ 805.372550][T11535] should_failslab+0xa8/0x100 [ 805.372574][T11535] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 805.372594][T11535] ? __alloc_skb+0x112/0x2d0 [ 805.372626][T11535] __alloc_skb+0x112/0x2d0 [ 805.372658][T11535] netlink_ack+0x146/0xa50 [ 805.372683][T11535] ? __pfx_genl_rcv_msg+0x10/0x10 [ 805.372723][T11535] netlink_rcv_skb+0x28c/0x470 [ 805.372751][T11535] ? __pfx_genl_rcv_msg+0x10/0x10 [ 805.372774][T11535] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 805.372820][T11535] ? down_read+0x1ad/0x2e0 [ 805.372847][T11535] genl_rcv+0x28/0x40 [ 805.372865][T11535] netlink_unicast+0x75c/0x8e0 [ 805.372902][T11535] netlink_sendmsg+0x805/0xb30 [ 805.372931][T11535] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 805.372958][T11535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.372996][T11535] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 805.373015][T11535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.373044][T11535] __sock_sendmsg+0x21c/0x270 [ 805.373071][T11535] ____sys_sendmsg+0x505/0x830 [ 805.373118][T11535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 805.373159][T11535] ? import_iovec+0x74/0xa0 [ 805.373191][T11535] ___sys_sendmsg+0x21f/0x2a0 [ 805.373224][T11535] ? __pfx____sys_sendmsg+0x10/0x10 [ 805.373295][T11535] ? __fget_files+0x2a/0x420 [ 805.373317][T11535] ? __fget_files+0x3a0/0x420 [ 805.373350][T11535] __x64_sys_sendmsg+0x19b/0x260 [ 805.373384][T11535] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 805.373429][T11535] ? rcu_is_watching+0x15/0xb0 [ 805.373452][T11535] ? trace_sys_enter+0x25/0x120 [ 805.373476][T11535] do_syscall_64+0xfa/0x3b0 [ 805.373497][T11535] ? lockdep_hardirqs_on+0x9c/0x150 [ 805.373517][T11535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.373537][T11535] ? clear_bhb_loop+0x60/0xb0 [ 805.373561][T11535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.373581][T11535] RIP: 0033:0x7f2f2338ebe9 [ 805.373598][T11535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 805.373616][T11535] RSP: 002b:00007f2f241ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 805.373638][T11535] RAX: ffffffffffffffda RBX: 00007f2f235b5fa0 RCX: 00007f2f2338ebe9 [ 805.373652][T11535] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 805.373664][T11535] RBP: 00007f2f241ae090 R08: 0000000000000000 R09: 0000000000000000 [ 805.373676][T11535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.373688][T11535] R13: 00007f2f235b6038 R14: 00007f2f235b5fa0 R15: 00007ffcb07326d8 [ 805.373720][T11535] [ 805.688789][T11506] Bluetooth: hci0: command 0x0406 tx timeout [ 805.694925][T11506] Bluetooth: hci4: command 0x0406 tx timeout [ 805.702229][T11506] Bluetooth: hci5: command 0x0406 tx timeout [ 805.708318][T11506] Bluetooth: hci1: command 0x0406 tx timeout [ 805.722414][T11506] Bluetooth: hci6: command 0x0406 tx timeout [ 807.115815][T11552] random: crng reseeded on system resumption [ 807.272698][T10145] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 807.461369][T10145] usb 7-1: Using ep0 maxpacket: 32 [ 807.561387][T10145] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 807.627043][T10145] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.695213][T10145] usb 7-1: Product: syz [ 807.723417][T10145] usb 7-1: Manufacturer: syz [ 807.753386][T10145] usb 7-1: SerialNumber: syz [ 807.908391][T10145] usb 7-1: config 0 descriptor?? [ 808.587464][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.242935][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1266'. [ 809.251907][T11567] netlink: 'syz.7.1266': attribute type 6 has an invalid length. [ 810.317202][T11574] netlink: 'syz.2.1268': attribute type 49 has an invalid length. [ 810.632013][T10145] peak_usb 7-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 810.640656][T10145] peak_usb 7-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 810.977762][T11592] block nbd6: NBD_DISCONNECT [ 810.986695][T11592] block nbd6: Send disconnect failed -22 [ 810.993893][T11589] block nbd6: Disconnected due to user request. [ 811.001053][T11589] block nbd6: shutting down sockets [ 811.030921][T10145] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -71 [ 811.042726][T10145] usb 7-1: USB disconnect, device number 4 [ 812.464067][T11618] netlink: 'syz.6.1281': attribute type 49 has an invalid length. [ 813.231190][T10596] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 813.422209][T10596] usb 10-1: Using ep0 maxpacket: 32 [ 813.481644][T10596] usb 10-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 813.491969][T10596] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.503024][T10596] usb 10-1: Product: syz [ 813.507613][T10596] usb 10-1: Manufacturer: syz [ 813.516280][T10596] usb 10-1: SerialNumber: syz [ 813.545350][T10596] usb 10-1: config 0 descriptor?? [ 814.157907][ T43] libceph: connect (1)[c::]:6789 error -101 [ 814.303965][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 814.489438][T11629] ceph: No mds server is up or the cluster is laggy [ 817.303881][T10596] peak_usb 10-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 817.341989][T10596] peak_usb 10-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 818.773242][T10596] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -71 [ 818.792475][T10596] usb 10-1: USB disconnect, device number 5 [ 822.042509][T10145] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 822.204909][T10145] usb 7-1: Using ep0 maxpacket: 32 [ 822.214320][T10145] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 822.232328][T10145] usb 7-1: config 0 has no interface number 0 [ 822.252197][T10145] usb 7-1: config 0 interface 12 has no altsetting 0 [ 822.272200][T10145] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 822.291763][T10145] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.321887][T10145] usb 7-1: Product: syz [ 822.329303][T10145] usb 7-1: Manufacturer: syz [ 822.345911][T10145] usb 7-1: SerialNumber: syz [ 822.355093][T10145] usb 7-1: config 0 descriptor?? [ 822.599729][T11717] netlink: 'syz.9.1308': attribute type 6 has an invalid length. [ 823.672245][ T30] audit: type=1400 audit(1755778339.029:7): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=11726 comm="syz.2.1310" name="tty4" dev="devtmpfs" ino=23 [ 823.719082][ T30] audit: type=1400 audit(1755778339.029:8): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=11726 comm="syz.2.1310" name="raw-gadget" dev="devtmpfs" ino=820 [ 823.759711][ T30] audit: type=1400 audit(1755778339.029:9): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=11726 comm="syz.2.1310" name="57" dev="tmpfs" ino=313 [ 824.001827][T10145] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 824.027630][T10145] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 824.037671][T11734] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1313'. [ 824.064028][T10145] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 824.082140][T10145] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 824.187313][T10145] usb 7-1: USB disconnect, device number 5 [ 824.794065][T11743] FAULT_INJECTION: forcing a failure. [ 824.794065][T11743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 824.795662][T11743] [ 824.795670][T11743] ====================================================== [ 824.795678][T11743] WARNING: possible circular locking dependency detected [ 824.795692][T11743] 6.16.0-syzkaller #0 Not tainted [ 824.795703][T11743] ------------------------------------------------------ [ 824.795711][T11743] syz.9.1315/11743 is trying to acquire lock: [ 824.795721][T11743] ffffffff8e133300 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 824.795782][T11743] [ 824.795782][T11743] but task is already holding lock: [ 824.795788][T11743] ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 824.795831][T11743] [ 824.795831][T11743] which lock already depends on the new lock. [ 824.795831][T11743] [ 824.795838][T11743] [ 824.795838][T11743] the existing dependency chain (in reverse order) is: [ 824.795845][T11743] [ 824.795845][T11743] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 824.795870][T11743] lock_acquire+0x120/0x360 [ 824.795886][T11743] _raw_spin_lock_nested+0x32/0x50 [ 824.795922][T11743] raw_spin_rq_lock_nested+0x2a/0x140 [ 824.795942][T11743] task_rq_lock+0xbc/0x470 [ 824.795959][T11743] cgroup_move_task+0x9a/0x590 [ 824.795982][T11743] css_set_move_task+0x658/0x9e0 [ 824.796005][T11743] cgroup_post_fork+0x1ef/0x790 [ 824.796028][T11743] copy_process+0x37e6/0x3b80 [ 824.796049][T11743] kernel_clone+0x224/0x7f0 [ 824.796072][T11743] user_mode_thread+0xdd/0x140 [ 824.796095][T11743] rest_init+0x23/0x300 [ 824.796119][T11743] start_kernel+0x47d/0x500 [ 824.796140][T11743] x86_64_start_reservations+0x24/0x30 [ 824.796168][T11743] x86_64_start_kernel+0x143/0x1c0 [ 824.796195][T11743] common_startup_64+0x13e/0x147 [ 824.796221][T11743] [ 824.796221][T11743] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 824.796248][T11743] lock_acquire+0x120/0x360 [ 824.796264][T11743] _raw_spin_lock_irqsave+0xa7/0xf0 [ 824.796295][T11743] try_to_wake_up+0x6e/0x1290 [ 824.796320][T11743] __wake_up_common_lock+0x137/0x1f0 [ 824.796356][T11743] tty_port_default_wakeup+0xa2/0xf0 [ 824.796387][T11743] serial8250_tx_chars+0x72e/0x970 [ 824.796415][T11743] serial8250_handle_irq+0x633/0xbb0 [ 824.796441][T11743] serial8250_default_handle_irq+0xbf/0x1b0 [ 824.796460][T11743] serial8250_interrupt+0xa2/0x1d0 [ 824.796482][T11743] __handle_irq_event_percpu+0x289/0x980 [ 824.796508][T11743] handle_irq_event+0x8b/0x1e0 [ 824.796533][T11743] handle_edge_irq+0x267/0x9c0 [ 824.796555][T11743] __common_interrupt+0x140/0x250 [ 824.796584][T11743] common_interrupt+0xb6/0xe0 [ 824.796609][T11743] asm_common_interrupt+0x26/0x40 [ 824.796628][T11743] pv_native_safe_halt+0x13/0x20 [ 824.796646][T11743] default_idle+0x13/0x20 [ 824.796669][T11743] default_idle_call+0x74/0xb0 [ 824.796692][T11743] do_idle+0x1e8/0x510 [ 824.796711][T11743] cpu_startup_entry+0x44/0x60 [ 824.796732][T11743] rest_init+0x2de/0x300 [ 824.796756][T11743] start_kernel+0x47d/0x500 [ 824.796776][T11743] x86_64_start_reservations+0x24/0x30 [ 824.796803][T11743] x86_64_start_kernel+0x143/0x1c0 [ 824.796830][T11743] common_startup_64+0x13e/0x147 [ 824.796856][T11743] [ 824.796856][T11743] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 824.796884][T11743] lock_acquire+0x120/0x360 [ 824.796900][T11743] _raw_spin_lock_irqsave+0xa7/0xf0 [ 824.796930][T11743] __wake_up_common_lock+0x2f/0x1f0 [ 824.796957][T11743] tty_port_default_wakeup+0xa2/0xf0 [ 824.796987][T11743] serial8250_tx_chars+0x72e/0x970 [ 824.797012][T11743] serial8250_handle_irq+0x633/0xbb0 [ 824.797037][T11743] serial8250_default_handle_irq+0xbf/0x1b0 [ 824.797055][T11743] serial8250_interrupt+0xa2/0x1d0 [ 824.797077][T11743] __handle_irq_event_percpu+0x289/0x980 [ 824.797103][T11743] handle_irq_event+0x8b/0x1e0 [ 824.797128][T11743] handle_edge_irq+0x267/0x9c0 [ 824.797150][T11743] __common_interrupt+0x140/0x250 [ 824.797178][T11743] common_interrupt+0xb6/0xe0 [ 824.797211][T11743] asm_common_interrupt+0x26/0x40 [ 824.797229][T11743] pv_native_safe_halt+0x13/0x20 [ 824.797247][T11743] default_idle+0x13/0x20 [ 824.797270][T11743] default_idle_call+0x74/0xb0 [ 824.797293][T11743] do_idle+0x1e8/0x510 [ 824.797312][T11743] cpu_startup_entry+0x44/0x60 [ 824.797333][T11743] rest_init+0x2de/0x300 [ 824.797366][T11743] start_kernel+0x47d/0x500 [ 824.797386][T11743] x86_64_start_reservations+0x24/0x30 [ 824.797414][T11743] x86_64_start_kernel+0x143/0x1c0 [ 824.797441][T11743] common_startup_64+0x13e/0x147 [ 824.797466][T11743] [ 824.797466][T11743] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 824.797493][T11743] lock_acquire+0x120/0x360 [ 824.797510][T11743] _raw_spin_lock_irqsave+0xa7/0xf0 [ 824.797539][T11743] serial8250_console_write+0x17e/0x1ba0 [ 824.797568][T11743] console_flush_all+0x728/0xc40 [ 824.797593][T11743] console_unlock+0xc4/0x270 [ 824.797614][T11743] vprintk_emit+0x5b7/0x7a0 [ 824.797635][T11743] _printk+0xcf/0x120 [ 824.797658][T11743] register_console+0xa8b/0xf90 [ 824.797683][T11743] univ8250_console_init+0x52/0x90 [ 824.797707][T11743] console_init+0x1a1/0x670 [ 824.797731][T11743] start_kernel+0x2cc/0x500 [ 824.797751][T11743] x86_64_start_reservations+0x24/0x30 [ 824.797779][T11743] x86_64_start_kernel+0x143/0x1c0 [ 824.797806][T11743] common_startup_64+0x13e/0x147 [ 824.797831][T11743] [ 824.797831][T11743] -> #0 (console_owner){-.-.}-{0:0}: [ 824.797859][T11743] validate_chain+0xb9b/0x2140 [ 824.797880][T11743] __lock_acquire+0xab9/0xd20 [ 824.797897][T11743] lock_acquire+0x120/0x360 [ 824.797913][T11743] console_flush_all+0x6d2/0xc40 [ 824.797937][T11743] console_unlock+0xc4/0x270 [ 824.797958][T11743] vprintk_emit+0x5b7/0x7a0 [ 824.797978][T11743] _printk+0xcf/0x120 [ 824.798001][T11743] should_fail_ex+0x3f5/0x560 [ 824.798018][T11743] strncpy_from_user+0x36/0x290 [ 824.798049][T11743] strncpy_from_user_nofault+0x72/0x150 [ 824.798070][T11743] bpf_bprintf_prepare+0xb9b/0x1410 [ 824.798097][T11743] bpf_trace_printk+0xdb/0x190 [ 824.798116][T11743] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 824.798133][T11743] bpf_trace_run2+0x284/0x4b0 [ 824.798158][T11743] __bpf_trace_contention_begin+0xdc/0x130 [ 824.798181][T11743] __traceiter_contention_begin+0x77/0xb0 [ 824.798202][T11743] trace_contention_begin+0x114/0x140 [ 824.798238][T11743] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 824.798258][T11743] queued_spin_lock_slowpath+0x43/0x50 [ 824.798283][T11743] do_raw_spin_lock+0x21f/0x290 [ 824.798306][T11743] raw_spin_rq_lock_nested+0xad/0x140 [ 824.798324][T11743] __schedule+0x330/0x4c90 [ 824.798345][T11743] preempt_schedule_irq+0xb5/0x150 [ 824.798363][T11743] irqentry_exit+0x6f/0x90 [ 824.798380][T11743] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 824.798399][T11743] [ 824.798399][T11743] other info that might help us debug this: [ 824.798399][T11743] [ 824.798406][T11743] Chain exists of: [ 824.798406][T11743] console_owner --> &p->pi_lock --> &rq->__lock [ 824.798406][T11743] [ 824.798436][T11743] Possible unsafe locking scenario: [ 824.798436][T11743] [ 824.798442][T11743] CPU0 CPU1 [ 824.798448][T11743] ---- ---- [ 824.798454][T11743] lock(&rq->__lock); [ 824.798467][T11743] lock(&p->pi_lock); [ 824.798480][T11743] lock(&rq->__lock); [ 824.798494][T11743] lock(console_owner); [ 824.798507][T11743] [ 824.798507][T11743] *** DEADLOCK *** [ 824.798507][T11743] [ 824.798512][T11743] 7 locks held by syz.9.1315/11743: [ 824.798523][T11743] #0: ffffffff8f5701f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 824.798568][T11743] #1: ffffffff8f570008 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 824.798613][T11743] #2: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_compat_doit+0x1fd/0x5f0 [ 824.798668][T11743] #3: ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 824.798713][T11743] #4: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 824.798763][T11743] #5: ffffffff8e133360 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 824.798811][T11743] #6: ffffffff8e01ac30 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 824.798861][T11743] [ 824.798861][T11743] stack backtrace: [ 824.798871][T11743] CPU: 1 UID: 0 PID: 11743 Comm: syz.9.1315 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 824.798893][T11743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 824.798905][T11743] Call Trace: [ 824.798912][T11743] [ 824.798920][T11743] dump_stack_lvl+0x189/0x250 [ 824.798945][T11743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 824.798967][T11743] ? __pfx__printk+0x10/0x10 [ 824.798992][T11743] ? print_lock_name+0xde/0x100 [ 824.799018][T11743] print_circular_bug+0x2ee/0x310 [ 824.799043][T11743] check_noncircular+0x134/0x160 [ 824.799070][T11743] validate_chain+0xb9b/0x2140 [ 824.799104][T11743] __lock_acquire+0xab9/0xd20 [ 824.799125][T11743] ? console_flush_all+0x13a/0xc40 [ 824.799149][T11743] lock_acquire+0x120/0x360 [ 824.799166][T11743] ? console_flush_all+0x13a/0xc40 [ 824.799195][T11743] ? do_raw_spin_unlock+0x122/0x240 [ 824.799220][T11743] ? console_flush_all+0x13a/0xc40 [ 824.799247][T11743] console_flush_all+0x6d2/0xc40 [ 824.799270][T11743] ? console_flush_all+0x13a/0xc40 [ 824.799297][T11743] ? console_flush_all+0x13a/0xc40 [ 824.799325][T11743] ? __pfx_console_flush_all+0x10/0x10 [ 824.799357][T11743] ? bpf_trace_run2+0x186/0x4b0 [ 824.799384][T11743] ? is_printk_cpu_sync_owner+0x32/0x40 [ 824.799415][T11743] console_unlock+0xc4/0x270 [ 824.799438][T11743] ? __pfx_console_unlock+0x10/0x10 [ 824.799462][T11743] ? is_printk_cpu_sync_owner+0x32/0x40 [ 824.799493][T11743] vprintk_emit+0x5b7/0x7a0 [ 824.799517][T11743] ? __pfx_vprintk_emit+0x10/0x10 [ 824.799549][T11743] _printk+0xcf/0x120 [ 824.799572][T11743] ? __pfx____ratelimit+0x10/0x10 [ 824.799594][T11743] ? __pfx__printk+0x10/0x10 [ 824.799624][T11743] should_fail_ex+0x3f5/0x560 [ 824.799646][T11743] strncpy_from_user+0x36/0x290 [ 824.799678][T11743] strncpy_from_user_nofault+0x72/0x150 [ 824.799701][T11743] bpf_bprintf_prepare+0xb9b/0x1410 [ 824.799733][T11743] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 824.799763][T11743] ? bpf_trace_printk+0xc1/0x190 [ 824.799785][T11743] bpf_trace_printk+0xdb/0x190 [ 824.799804][T11743] ? __lock_acquire+0xab9/0xd20 [ 824.799822][T11743] ? __pfx_bpf_trace_printk+0x10/0x10 [ 824.799843][T11743] ? bpf_trace_run2+0x186/0x4b0 [ 824.799876][T11743] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 824.799893][T11743] bpf_trace_run2+0x284/0x4b0 [ 824.799919][T11743] ? bpf_trace_run2+0x186/0x4b0 [ 824.799945][T11743] ? __pfx_bpf_trace_run2+0x10/0x10 [ 824.799973][T11743] ? __bpf_trace_contention_begin+0xcd/0x130 [ 824.799999][T11743] __bpf_trace_contention_begin+0xdc/0x130 [ 824.800022][T11743] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 824.800048][T11743] ? trace_event_buffer_commit+0x264/0x7f0 [ 824.800073][T11743] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 824.800097][T11743] __traceiter_contention_begin+0x77/0xb0 [ 824.800120][T11743] trace_contention_begin+0x114/0x140 [ 824.800146][T11743] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 824.800168][T11743] ? rcu_qs+0xc4/0x170 [ 824.800187][T11743] ? __pfx_rcu_qs+0x10/0x10 [ 824.800208][T11743] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 824.800238][T11743] queued_spin_lock_slowpath+0x43/0x50 [ 824.800266][T11743] do_raw_spin_lock+0x21f/0x290 [ 824.800292][T11743] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 824.800323][T11743] raw_spin_rq_lock_nested+0xad/0x140 [ 824.800351][T11743] __schedule+0x330/0x4c90 [ 824.800372][T11743] ? kasan_save_track+0x3e/0x80 [ 824.800401][T11743] ? __bpf_trace_contention_begin+0xcd/0x130 [ 824.800427][T11743] ? __bpf_trace_contention_begin+0xdc/0x130 [ 824.800449][T11743] ? preempt_schedule_irq+0xb5/0x150 [ 824.800470][T11743] ? __pfx___schedule+0x10/0x10 [ 824.800488][T11743] ? __mutex_trylock_common+0x153/0x260 [ 824.800514][T11743] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 824.800542][T11743] ? preempt_schedule_irq+0xaa/0x150 [ 824.800563][T11743] preempt_schedule_irq+0xb5/0x150 [ 824.800582][T11743] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 824.800601][T11743] ? __alloc_skb+0x142/0x2d0 [ 824.800631][T11743] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 824.800654][T11743] irqentry_exit+0x6f/0x90 [ 824.800673][T11743] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 824.800693][T11743] RIP: 0010:0xffffffffa0024aec [ 824.800709][T11743] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 41 ff e3 cc 41 ff e3 cc 41 ff e3 cc <41> ff e3 cc 41 ff e3 cc 41 ff e3 cc 41 ff e3 cc 41 ff e3 cc cc cc [ 824.800727][T11743] RSP: 0018:ffffc90004d47178 EFLAGS: 00000246 [ 824.800743][T11743] RAX: 1ffff920009a8e6d RBX: dffffc0000000000 RCX: ffffc90004d47360 [ 824.800759][T11743] RDX: ffffc90004d47380 RSI: ffff88802ee6f140 RDI: ffffc90004d47360 [ 824.800774][T11743] RBP: ffffc90004d472d0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 824.800789][T11743] R10: dffffc0000000000 R11: ffffffff8b04c510 R12: ffff888142ab2380 [ 824.800804][T11743] R13: ffffc90004d47380 R14: 1ffff920009a8e38 R15: ffff88802ee6f140 [ 824.800822][T11743] ? __pfx_tipc_nl_compat_link_set+0x10/0x10 [ 824.800858][T11743] ? tipc_nl_compat_doit+0x230/0x5f0 [ 824.800887][T11743] ? preempt_schedule_common+0x83/0xd0 [ 824.800908][T11743] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 824.800943][T11743] ? bpf_lsm_capable+0x9/0x20 [ 824.800968][T11743] ? security_capable+0x7e/0x2e0 [ 824.800997][T11743] ? tipc_nl_compat_recv+0x83c/0xbe0 [ 824.801026][T11743] ? preempt_schedule_common+0x83/0xd0 [ 824.801045][T11743] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 824.801073][T11743] ? preempt_schedule+0xae/0xc0 [ 824.801091][T11743] ? __mutex_trylock_common+0x153/0x260 [ 824.801115][T11743] ? __pfx_tipc_nl_node_set_link+0x10/0x10 [ 824.801137][T11743] ? __pfx_tipc_nl_compat_link_set+0x10/0x10 [ 824.801167][T11743] ? __pfx___mutex_trylock_common+0x10/0x10 [ 824.801199][T11743] ? genl_family_rcv_msg_doit+0x215/0x300 [ 824.801224][T11743] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 824.801250][T11743] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 824.801287][T11743] ? genl_rcv_msg+0x60e/0x790 [ 824.801310][T11743] ? __pfx_genl_rcv_msg+0x10/0x10 [ 824.801329][T11743] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 824.801371][T11743] ? netlink_rcv_skb+0x205/0x470 [ 824.801397][T11743] ? __pfx_genl_rcv_msg+0x10/0x10 [ 824.801418][T11743] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 824.801453][T11743] ? down_read+0x1ad/0x2e0 [ 824.801477][T11743] ? genl_rcv+0x28/0x40 [ 824.801494][T11743] ? netlink_unicast+0x75c/0x8e0 [ 824.801524][T11743] ? netlink_sendmsg+0x805/0xb30 [ 824.801560][T11743] ? rcu_is_watching+0x15/0xb0 [ 824.801583][T11743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.801630][T11743] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 824.801649][T11743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.801677][T11743] ? __sock_sendmsg+0x21c/0x270 [ 824.801701][T11743] ? ____sys_sendmsg+0x505/0x830 [ 824.801733][T11743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 824.801767][T11743] ? import_iovec+0x74/0xa0 [ 824.801796][T11743] ? ___sys_sendmsg+0x21f/0x2a0 [ 824.801826][T11743] ? __pfx____sys_sendmsg+0x10/0x10 [ 824.801874][T11743] ? __fget_files+0x2a/0x420 [ 824.801895][T11743] ? __fget_files+0x3a0/0x420 [ 824.801919][T11743] ? __x64_sys_sendmsg+0x19b/0x260 [ 824.801951][T11743] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 824.801987][T11743] ? rcu_is_watching+0x15/0xb0 [ 824.802008][T11743] ? trace_sys_enter+0x25/0x120 [ 824.802028][T11743] ? do_syscall_64+0xfa/0x3b0 [ 824.802049][T11743] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.802067][T11743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.802086][T11743] ? clear_bhb_loop+0x60/0xb0 [ 824.802108][T11743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.802135][T11743] [ 826.355907][T11743] CPU: 1 UID: 0 PID: 11743 Comm: syz.9.1315 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 826.355952][T11743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 826.355965][T11743] Call Trace: [ 826.355976][T11743] [ 826.355986][T11743] dump_stack_lvl+0x189/0x250 [ 826.356015][T11743] ? __pfx____ratelimit+0x10/0x10 [ 826.356038][T11743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 826.356062][T11743] ? __pfx__printk+0x10/0x10 [ 826.356096][T11743] should_fail_ex+0x414/0x560 [ 826.356121][T11743] strncpy_from_user+0x36/0x290 [ 826.356158][T11743] strncpy_from_user_nofault+0x72/0x150 [ 826.356184][T11743] bpf_bprintf_prepare+0xb9b/0x1410 [ 826.356222][T11743] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 826.356254][T11743] ? bpf_trace_printk+0xc1/0x190 [ 826.356278][T11743] bpf_trace_printk+0xdb/0x190 [ 826.356299][T11743] ? __lock_acquire+0xab9/0xd20 [ 826.356319][T11743] ? __pfx_bpf_trace_printk+0x10/0x10 [ 826.356342][T11743] ? bpf_trace_run2+0x186/0x4b0 [ 826.356380][T11743] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 826.356406][T11743] bpf_trace_run2+0x284/0x4b0 [ 826.356434][T11743] ? bpf_trace_run2+0x186/0x4b0 [ 826.356463][T11743] ? __pfx_bpf_trace_run2+0x10/0x10 [ 826.356494][T11743] ? __bpf_trace_contention_begin+0xcd/0x130 [ 826.356524][T11743] __bpf_trace_contention_begin+0xdc/0x130 [ 826.356550][T11743] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 826.356580][T11743] ? trace_event_buffer_commit+0x264/0x7f0 [ 826.356607][T11743] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 826.356634][T11743] __traceiter_contention_begin+0x77/0xb0 [ 826.356660][T11743] trace_contention_begin+0x114/0x140 [ 826.356689][T11743] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 826.356715][T11743] ? rcu_qs+0xc4/0x170 [ 826.356735][T11743] ? __pfx_rcu_qs+0x10/0x10 [ 826.356757][T11743] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 826.356790][T11743] queued_spin_lock_slowpath+0x43/0x50 [ 826.356820][T11743] do_raw_spin_lock+0x21f/0x290 [ 826.356851][T11743] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 826.356885][T11743] raw_spin_rq_lock_nested+0xad/0x140 [ 826.356910][T11743] __schedule+0x330/0x4c90 [ 826.356933][T11743] ? kasan_save_track+0x3e/0x80 [ 826.356965][T11743] ? __bpf_trace_contention_begin+0xcd/0x130 [ 826.356994][T11743] ? __bpf_trace_contention_begin+0xdc/0x130 [ 826.357017][T11743] ? preempt_schedule_irq+0xb5/0x150 [ 826.357041][T11743] ? __pfx___schedule+0x10/0x10 [ 826.357060][T11743] ? __mutex_trylock_common+0x153/0x260 [ 826.357089][T11743] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 826.357130][T11743] ? preempt_schedule_irq+0xaa/0x150 [ 826.357160][T11743] preempt_schedule_irq+0xb5/0x150 [ 826.357180][T11743] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 826.357201][T11743] ? __alloc_skb+0x142/0x2d0 [ 826.357233][T11743] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 826.357258][T11743] irqentry_exit+0x6f/0x90 [ 826.357278][T11743] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 826.357300][T11743] RIP: 0010:0xffffffffa0024aec [ 826.357318][T11743] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 41 ff e3 cc 41 ff e3 cc 41 ff e3 cc <41> ff e3 cc 41 ff e3 cc 41 ff e3 cc 41 ff e3 cc 41 ff e3 cc cc cc [ 826.357337][T11743] RSP: 0018:ffffc90004d47178 EFLAGS: 00000246 [ 826.357356][T11743] RAX: 1ffff920009a8e6d RBX: dffffc0000000000 RCX: ffffc90004d47360 [ 826.357372][T11743] RDX: ffffc90004d47380 RSI: ffff88802ee6f140 RDI: ffffc90004d47360 [ 826.357394][T11743] RBP: ffffc90004d472d0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 826.357410][T11743] R10: dffffc0000000000 R11: ffffffff8b04c510 R12: ffff888142ab2380 [ 826.357426][T11743] R13: ffffc90004d47380 R14: 1ffff920009a8e38 R15: ffff88802ee6f140 [ 826.357446][T11743] ? __pfx_tipc_nl_compat_link_set+0x10/0x10 [ 826.357496][T11743] ? tipc_nl_compat_doit+0x230/0x5f0 [ 826.357527][T11743] ? preempt_schedule_common+0x83/0xd0 [ 826.357547][T11743] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 826.357583][T11743] ? bpf_lsm_capable+0x9/0x20 [ 826.357608][T11743] ? security_capable+0x7e/0x2e0 [ 826.357637][T11743] ? tipc_nl_compat_recv+0x83c/0xbe0 [ 826.357667][T11743] ? preempt_schedule_common+0x83/0xd0 [ 826.357686][T11743] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 826.357715][T11743] ? preempt_schedule+0xae/0xc0 [ 826.357733][T11743] ? __mutex_trylock_common+0x153/0x260 [ 826.357757][T11743] ? __pfx_tipc_nl_node_set_link+0x10/0x10 [ 826.357780][T11743] ? __pfx_tipc_nl_compat_link_set+0x10/0x10 [ 826.357810][T11743] ? __pfx___mutex_trylock_common+0x10/0x10 [ 826.357842][T11743] ? genl_family_rcv_msg_doit+0x215/0x300 [ 826.357867][T11743] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 826.357893][T11743] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 826.357930][T11743] ? genl_rcv_msg+0x60e/0x790 [ 826.357953][T11743] ? __pfx_genl_rcv_msg+0x10/0x10 [ 826.357972][T11743] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 826.358008][T11743] ? netlink_rcv_skb+0x205/0x470 [ 826.358035][T11743] ? __pfx_genl_rcv_msg+0x10/0x10 [ 826.358055][T11743] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 826.358090][T11743] ? down_read+0x1ad/0x2e0 [ 826.358114][T11743] ? genl_rcv+0x28/0x40 [ 826.358131][T11743] ? netlink_unicast+0x75c/0x8e0 [ 826.358160][T11743] ? netlink_sendmsg+0x805/0xb30 [ 826.358185][T11743] ? rcu_is_watching+0x15/0xb0 [ 826.358210][T11743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 826.358242][T11743] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 826.358261][T11743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 826.358289][T11743] ? __sock_sendmsg+0x21c/0x270 [ 826.358313][T11743] ? ____sys_sendmsg+0x505/0x830 [ 826.358344][T11743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 826.358379][T11743] ? import_iovec+0x74/0xa0 [ 826.358414][T11743] ? ___sys_sendmsg+0x21f/0x2a0 [ 826.358444][T11743] ? __pfx____sys_sendmsg+0x10/0x10 [ 826.358491][T11743] ? __fget_files+0x2a/0x420 [ 826.358513][T11743] ? __fget_files+0x3a0/0x420 [ 826.358539][T11743] ? __x64_sys_sendmsg+0x19b/0x260 [ 826.358570][T11743] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 826.358606][T11743] ? rcu_is_watching+0x15/0xb0 [ 826.358627][T11743] ? trace_sys_enter+0x25/0x120 [ 826.358647][T11743] ? do_syscall_64+0xfa/0x3b0 [ 826.358685][T11743] ? lockdep_hardirqs_on+0x9c/0x150 [ 826.358706][T11743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.358727][T11743] ? clear_bhb_loop+0x60/0xb0 [ 826.358750][T11743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.358779][T11743]