last executing test programs: 11m16.921191852s ago: executing program 32 (id=512): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) prlimit64(0x0, 0x8, &(0x7f00000017c0)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001c40)=[{{&(0x7f0000000480)=@qipcrtr, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000500)=""/133, 0x85}, {&(0x7f00000005c0)=""/69, 0x45}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/98, 0x62}, {&(0x7f00000016c0)=""/214, 0xd6}, {&(0x7f0000001d00)=""/209, 0x45}], 0x6, &(0x7f0000001940)=""/125, 0x7d}, 0x3}, {{&(0x7f00000019c0)=@ll, 0x80, &(0x7f0000001c00)=[{&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000001e00)=""/256, 0xf4}, {&(0x7f0000001cc0)=""/23, 0x17}, {&(0x7f0000001b40)=""/136, 0x88}], 0x4}, 0x7}], 0x2, 0x2, 0x0) ptrace$setregset(0x4205, r0, 0x4, &(0x7f00000000c0)={&(0x7f0000000400)="a24e4d40c3f340bee7a45f2398f6808d5614b13d27dd556fabeff46beb06167377953cbe8cc8e058b68b66268b1e851391d7092491d7a68c69e43d2a7e61c7c06609527f61f0c8b99b5f8be14e268959ab656aafc591ae59c58d7074ef5ff3f4fcd82665fdaaf4e63a93c531b04693435425d1e8ac64d37e0cf022", 0x7b}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x35000, 0x1800}, 0x20) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r5, r3, 0x8, 0x0, &(0x7f0000000180), 0x8b, 0x4, 0x15c2, 0x40, 0x3, 0x0, 0x1, 'syz0\x00'}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) pselect6(0x40, &(0x7f0000000240)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000002060101000018a10000000000000000050004000000000015000300686173683a69702c706f72742c6e6574001500000900020073797a3000000000050004000000000004000780"], 0x4c}, 0x1, 0x0, 0x0, 0x480c1}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x8000000000000001, 0xec48d728d29e1d31) dup(r7) 10m51.930880431s ago: executing program 3 (id=572): syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x9, 0x0, "000080f100df00000000000000000009f600"}) (async) r1 = syz_open_pts(0xffffffffffffffff, 0x801) r2 = dup3(r1, r0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) listen(r3, 0x100) (async) fanotify_init(0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='schedstat\x00') (async) socket$l2tp(0x2, 0x2, 0x73) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000240)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000680)="b1", 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r4], 0x1000f) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) (async) r8 = syz_open_dev$vim2m(&(0x7f0000000680), 0x1b, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000000)=0x1) (async) ppoll(&(0x7f00000001c0)=[{r8, 0x440}, {r8, 0x439}], 0x2, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000040)={r7, 0x2}, 0x8) (async) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={r7, 0x4018}, 0x8) 10m51.797132884s ago: executing program 3 (id=573): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x88000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000001c0)) personality(0x4100001) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="af742ed3ccb6bcf9bf8e24ac329e90e7bb9025044c0fd57de49d7e3d2247ecfd0953df2309764cfe3021930331cdc1eb8be30f03eff11a2f01a92b0b03a614f623c5dcc359b191e67150995dd7673cd7cdcb1b78ad83903026756998d2e2", 0x5e}, {&(0x7f00000002c0)="ef15eb7a3f717731b261f387472eea5a0cd149991949880569042cfd4447fc3880da68da36e777d79f84b8c8750ab7a07e06928f2e", 0x35}], 0x2, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0xe}], 0x18, 0x10000804}, 0x404c000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="6b24b3c2302236ac00000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x1, 0x1ff}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r4, 0x6, 0x0, @val=@tracing}, 0x40) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$netlink(0x10, 0x3, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x2d, 0x0, &(0x7f0000000040)="313432190004c7c6c67f150782bca16adf3655c4f04a7890592814e7e559832a2568201a9ba4dfa9a9bed1ec03", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) socket$kcm(0x11, 0x3, 0x0) 10m50.671084174s ago: executing program 3 (id=575): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x2000000}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 10m50.37364894s ago: executing program 3 (id=577): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xc942d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@deltaction={0xcc, 0x31, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2810}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xffffffffffffffab, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0xcc}, 0x1, 0xf0ffffffffffff}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="009200"/20, @ANYRES32, @ANYBLOB="ff0300"/20, @ANYRES32, @ANYRES32, @ANYBLOB="0500000002000000020000000300"/28], 0x50) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x7040, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) 10m49.223710548s ago: executing program 3 (id=581): unshare(0x20020000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x402, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x40000001) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000008c0)=[{0x16}]}) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffb) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xba0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0xa}, @main=@item_012={0x2, 0x0, 0xc, '\a\x00'}, @main=@item_012={0x2, 0x0, 0x9, "91ac"}]}}, 0x0}, 0x0) 10m47.2118737s ago: executing program 5 (id=514): r0 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000680)=ANY=[@ANYBLOB='\t s'], 0x8) r3 = fsmount(r0, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 10m42.624236694s ago: executing program 3 (id=584): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0, 0x0, 0x200000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000026, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)='vxfs\x00', 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) pwritev2(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r5, 0x40096102, &(0x7f0000000500)={{}, 0xe7}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0x0) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x88c00, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r8, 0x541c, &(0x7f00000002c0)) 10m42.557710782s ago: executing program 5 (id=585): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) (async) socket$kcm(0xa, 0x3, 0x3a) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffff4, 0x1}, 0x20) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000800000010b810141e159d0102030109021b0001040000000904ea02019b22b60009050102100000fa00"], 0x0) 10m29.560371443s ago: executing program 33 (id=574): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000004c0)=0xe120) (async) sched_setscheduler(0x0, 0x5, &(0x7f00000004c0)=0xe120) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) (async) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x10001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f00000000c0)=""/190, 0xbe}, {&(0x7f0000000200)=""/134, 0x86}, {&(0x7f0000000340)=""/190, 0xbe}, {&(0x7f00000007c0)=""/4082, 0xff2}], 0x5}, 0x4}], 0x1, 0x40000000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 10m17.098260176s ago: executing program 34 (id=582): r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905899b"], 0x0) (async) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905899b"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x44}}, 0x4000090) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) 10m16.295548668s ago: executing program 35 (id=583): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r8, 0x1, {0x0, 0xf0, 0x4}}, 0x18) sendmsg$can_j1939(r9, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r10, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2b3d95ef9254fd574583aeca60c0047d55ba5841bc7a0f8886ed70c6143a1bdb36dd16500621221ef577a494bc15540882adb63e30", @ANYRES16=r3, @ANYBLOB="00010000000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008e0001000000"], 0x4c}}, 0x8041) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) 10m16.102998109s ago: executing program 36 (id=585): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) (async) socket$kcm(0xa, 0x3, 0x3a) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffff4, 0x1}, 0x20) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000800000010b810141e159d0102030109021b0001040000000904ea02019b22b60009050102100000fa00"], 0x0) 10m15.734965465s ago: executing program 37 (id=584): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0, 0x0, 0x200000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000026, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)='vxfs\x00', 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) pwritev2(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r5, 0x40096102, &(0x7f0000000500)={{}, 0xe7}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0x0) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x88c00, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r8, 0x541c, &(0x7f00000002c0)) 6m34.063383159s ago: executing program 7 (id=1141): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000640000000000800084000000000050005000a0000000500010006feff000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r2, r2, 0x0, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000060000002c0012800e00010269703665727356616e0000001800028008000c000500000006000e00030000000400120078389418c2821b7cbe3db40485325aa3de4c43ff2a044fcbf412857358592459a474ce3aa6103bdb7110de2f4cb8721470574870f49b1d2d195eb7cac376ddd2b8deb4624c5bd777bc44"], 0x4c}, 0x1, 0x0, 0x0, 0x885}, 0x4) set_mempolicy(0x5, &(0x7f0000000080)=0x3, 0x961) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000380)=0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x4aa000, 0x0) write$dsp(r6, &(0x7f0000000200)="47c3a01b69e187320035a53dbe73a058ef6c5ad1a7a22e78387e7ce4f7fa05cc706e890c58269fadda857d541dbad33262d77621568db7c07af235654e4bec2e7b1690f7bc52d9a81c4a4c277b6ee2a592383b8dbae27d959a6132227c5d3627c8d3ea0e5ebf418a8a78501420", 0x6d) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1000) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0xd413, 0x3, 0x6, 0x4}, {0x7f, 0x3, 0x4, 0x3}]}, 0x10) 6m31.675138386s ago: executing program 7 (id=1145): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r0], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rename(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES16=r2, @ANYRES16=r1, @ANYBLOB="46bb6f4378eaee8835497533c876967fcc77eb245f773894ac715a692636708de0237e81ea843da0f6f5eb14da23b51f50bef6dfbd4880bcf4d833da2818fc0a3c960b42f82514fe650bf3dca283c6fab850e3e109a0639aab7620506f59946e9809b8000000000000", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@ifindex=r9, 0x32, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, r10, r11, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=""/116, 0x74) 6m30.083149706s ago: executing program 7 (id=1146): syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x2, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time_for_children\x00') sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010b4e876dc415cce2000254e30008000700", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000"], 0x2c}}, 0x890) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file1\x00'}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r8, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000300)={0xa, @pix_mp={0x0, 0x0, 0x33565348, 0x0, 0x0, [], 0x7}}) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600015a25b505240000000d240f0100000000000000000006241a00000005240100000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) 6m27.989266158s ago: executing program 7 (id=1151): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x108, &(0x7f0000000000)=0xa, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r1, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 6m27.573046323s ago: executing program 7 (id=1154): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) getrusage(0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000002500)='net/rt_acct\x00') socket(0x10, 0x5, 0xfffffffc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0xfe, 0x0, 0x0, r1, 0x0}]) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000bc0), 0x26200, 0x0) 6m26.088531383s ago: executing program 7 (id=1157): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x3d, 0x701, 0x0, 0x0, {0x3}, [@nested={0x10, 0xcc, 0x0, 0x1, [@nested={0xc, 0xa, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @fd=r0}]}]}]}, 0x24}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x3d, 0x701, 0x0, 0x0, {0x3}, [@nested={0x10, 0xcc, 0x0, 0x1, [@nested={0xc, 0xa, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @fd=r0}]}]}]}, 0x24}}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) memfd_create(0x0, 0x2) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r2) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) write$UHID_INPUT(r3, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) (async) 6m24.31555589s ago: executing program 9 (id=1162): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0xffffffff, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x2}}}, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vcsu(&(0x7f0000000040), 0x6, 0x40000) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000680)={0x13, 0x10, 0xfa00, {&(0x7f0000000740), r2, 0x2}}, 0x18) 6m23.115550019s ago: executing program 9 (id=1165): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x20000000}) 6m22.705336712s ago: executing program 9 (id=1167): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7d, 0x7d, 0x4, [@float={0x2, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x5, 0x7}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x1}, @restrict={0x1, 0x0, 0x0, 0xb, 0x5}, @datasec={0xc, 0x5, 0x0, 0xf, 0x1, [{0x5, 0x6}, {0x5, 0x4, 0x6}, {0x3, 0x10, 0xfffffffe}, {0x1, 0x5, 0x3e4e}, {0x2, 0x40, 0x6}], '\v'}]}, {0x0, [0x2e, 0x51]}}, &(0x7f0000000580)=""/132, 0x9c, 0x84, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000001000000200000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r8, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x1c, 0x76, 0x4, 0x0, 0x2, {0x3}, [@NHA_FDB={0x58}]}, 0x1c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r10, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001000010800010000fddbdf2500000000c92a4c074598e9f70d3dfbc3093776e4e2f72c28f23819676ca5649471a58a5c29eb13248ad355f8773f3d54624a37324caf992ffa298dca6f", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r3, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 6m21.726603383s ago: executing program 9 (id=1168): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20) setxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000440)=ANY=[@ANYBLOB="04014495994910e26264c1f7bfc1e75ef3c5fe346d"], 0x2, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000300)={0x3}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x4) close(r3) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0], 0x6, 0x2, 0x1, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lsetxattr$security_capability(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), &(0x7f00000005c0)=@v1={0x1000000, [{0x49b1, 0x6}]}, 0xc, 0x2) remap_file_pages(&(0x7f00000a1000/0x2000)=nil, 0x2000, 0x0, 0xc685, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001200), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) chdir(&(0x7f0000000080)='./file0\x00') pwrite64(r2, &(0x7f0000000280)='+', 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 6m19.031285652s ago: executing program 9 (id=1176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) (async) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@mcast1, @in6=@private2, 0x4e22, 0x0, 0x1, 0xfff4, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc}, {0x0, 0x0, 0x2, 0x6}, 0x2253, 0x6e6bb0}, {{@in6=@local, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x2}}, 0xe8) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) r8 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d8c, 0x0, 0x1, 0x250}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x2000}) io_uring_enter(r8, 0x8aa, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 6m18.055338446s ago: executing program 9 (id=1179): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000540), 0x7f41, 0x400000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000580)=0x21) r2 = syz_clone3(&(0x7f00000004c0)={0x8000, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x22}, &(0x7f0000000340)=""/231, 0xe7, &(0x7f0000000440)=""/77, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) sched_setscheduler(r2, 0x6, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peeksig(0x4209, r6, &(0x7f0000000580)={0x1, 0x1, 0x1}, &(0x7f0000000480)=[{}]) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000005c0)='nfsd\x00', 0x808041, &(0x7f0000000300)='%!*]:\'@\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x6) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f000013b000/0x4000)=nil, &(0x7f0000ac8000/0x2000)=nil, 0x44, 0x0, 0x0, 0x1, 0x4, 0x4, 0x43, 0x9}) 6m11.436139656s ago: executing program 38 (id=1157): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x3d, 0x701, 0x0, 0x0, {0x3}, [@nested={0x10, 0xcc, 0x0, 0x1, [@nested={0xc, 0xa, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @fd=r0}]}]}]}, 0x24}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x3d, 0x701, 0x0, 0x0, {0x3}, [@nested={0x10, 0xcc, 0x0, 0x1, [@nested={0xc, 0xa, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @fd=r0}]}]}]}, 0x24}}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) memfd_create(0x0, 0x2) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r2) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) write$UHID_INPUT(r3, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) (async) 6m3.551182086s ago: executing program 39 (id=1179): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000540), 0x7f41, 0x400000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000580)=0x21) r2 = syz_clone3(&(0x7f00000004c0)={0x8000, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x22}, &(0x7f0000000340)=""/231, 0xe7, &(0x7f0000000440)=""/77, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) sched_setscheduler(r2, 0x6, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peeksig(0x4209, r6, &(0x7f0000000580)={0x1, 0x1, 0x1}, &(0x7f0000000480)=[{}]) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000005c0)='nfsd\x00', 0x808041, &(0x7f0000000300)='%!*]:\'@\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x6) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f000013b000/0x4000)=nil, &(0x7f0000ac8000/0x2000)=nil, 0x44, 0x0, 0x0, 0x1, 0x4, 0x4, 0x43, 0x9}) 2m33.123751715s ago: executing program 1 (id=1802): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x20, 0x2) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x9, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000001c0)={0x80000, "340b7832ceefdad118cf501922d6974a270000c50f0000002ddc7d00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r5, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r4}, {r6}], 0x2, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008031, 0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f00000057c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000300)=@nullb, r7, &(0x7f0000000340)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r9}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000) kcmp(0x0, 0x0, 0x3, r8, r8) r10 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_TIMESTAMP(r12, 0x1, 0x4b, 0x0, &(0x7f00000001c0)=0x49) syz_usb_control_io(r10, 0x0, 0x0) r13 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r13, 0x0, 0x0) syz_usb_control_io$hid(r13, 0x0, 0x0) 2m32.405849175s ago: executing program 1 (id=1807): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@userptr={0x1, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x6, 0xf, "b9cc0100"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)=@userptr={0xfffffffe, 0x0, 0x4, 0x400, 0x2000017, {0x77359400}, {0x5, 0x2, 0x0, 0xd, 0x49, 0x8, "0a5ccf21"}, 0x8, 0x2, {&(0x7f0000000040)}, 0xff, 0x0, r0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x18}, 0x18) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x36ea}}, './file0\x00'}) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0xc038563c, &(0x7f0000000640)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@remote, @in6=@local}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x48, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000004d7e8404c7e02dfcf60000000061122c00000000009500000000000000e02a30273f191779001b7ef3aed2772b57b04b60e935cf8ad80004f026000000004cdc1d17a75edd220bc90c5df95e7ec392bd506fac102c98fa6c0cdbe19c38a1b269207f901e013bd4ffce707a23ff2729047e9274e1c454424ac129f3364f8daa066f8c181343b5f40fed62514f10d936e0a408f0abda4328e4b3fbc7d96353d5a4788034870801904a064d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f0000000240)=""/139, &(0x7f0000000300)=0x8b) sendto$inet6(r4, &(0x7f00000004c0)='\x00', 0x1, 0x8000, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0xffffffffffffff86) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f00000003c0)={0x0, 0x0}) r9 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "5161dc20", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc2b02) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80) 2m31.352928772s ago: executing program 1 (id=1808): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"f06cad21e0fd02661b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f360068090890e0878f0efcc5e7049b3b452c416b23240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07720936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b4a5f3090000000000000075271b060029d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f33491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146784078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34a1c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9b05000bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48ca2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a35595f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e205ef4a7c43b42aae501b20f7694a035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd6700800000082ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd2ea9762639ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359deea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e150600d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b2c2fc5d5f0da42c0456ec015f08e5247d33ae2d35623ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e938ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a893664ac70297dc8d62700000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x1000}}, 0x1006) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x1f}]}}}}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3, 0xc9, @none, 0x1, 0x6, 0xf, 0xfff, 0x6, 0xc4}}}, 0x14) (async) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0xffffe8e4}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001640)={'team0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) (async, rerun: 32) sendto$packet(r3, 0x0, 0x0, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (rerun: 32) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000002040)={0x55c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x60}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5f7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x217a, 0x8, 0xb8}, {0x200, 0x4, 0x7f, 0x7}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r2}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb7}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x845}}}]}}]}, 0x55c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) (async, rerun: 64) r5 = accept4$unix(0xffffffffffffffff, &(0x7f00000010c0), &(0x7f0000001140)=0x6e, 0x0) connect$unix(r5, &(0x7f0000001180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_PAGE_SCAN_TYPE}}, 0x7) (async, rerun: 64) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x810, r6, 0x2b41b000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 2m31.030431744s ago: executing program 1 (id=1811): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xac, 0x9b, 0xcc, 0x20, 0x18d1, 0x1eaf, 0x5abb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x0, 0x80, 0xb, [{{0x9, 0x4, 0xbb, 0x6, 0x2, 0x3a, 0xe5, 0x4, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x3b3, 0xf, 0x2, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x75, 0x1, 0x2}}]}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000a00)={0x40, 0xd, 0x3, "def0ad"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb04}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = epoll_create1(0x0) r3 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040)={0x20000006}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44804}, 0x20044801) 2m28.57392945s ago: executing program 1 (id=1827): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') syz_open_dev$video4linux(0x0, 0x0, 0x0) r0 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'batadv_slave_1\x00', {}, 0x1}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000008c0)={0x0, 'bond0\x00', {0x10000003}, 0x2}) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="400e290000002922b34493ad846e6315bd8ceb828bdb1995db13e9779753fc52c64a5b3d34359c72dc3b3428599243c5968c0e8ad5242b5fca73a99f93965147232a73db4e1959b0189bcfb82b684610ab53831cc02475395617bec3c6dc10880a9de60fda18a2b20ee807768fb934be8eb81d107374295d9ed70b2b6649698eda7b5f65315da46698ae676f076d2bd10d143042fd9d94fde527c8ee08bdeaa86d109414ea0dc795388e18396fb8000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x28, 0x0, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x4}, @CTA_SYNPROXY={0x4}, @CTA_TUPLE_MASTER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x8001) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000300)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000001c0)="186bf7ffffffffffffffef0a32", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3dc, 0x9, 0x1, 0x6940000, 0x80, 0x9, 0x77}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$tcp_congestion(r6, &(0x7f0000000140)='htcp\x00', 0x5) 2m26.660558457s ago: executing program 1 (id=1833): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000540)=""/253, 0xfd, 0x0, &(0x7f0000000640)=""/234, 0xea}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r6, 0xaeee9fa2d63adc8e, 0x70bd29, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf9, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x101202, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000000300)=0x1) r9 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r9, 0xc008561b, &(0x7f0000000000)={0x98f905, 0x8}) r10 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) write$smackfs_access(r10, 0x0, 0x34) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) getpid() sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xd8f5) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYBLOB="282c651336f4b115aab0a08fca92ceeebf379551e3d99328f6dce868c3ceee3d39b0ea4a1806f5dcbdc5c8533377f6c57f50ff73e39e12c871cb5640b28312c02d16e55dc67b98a04ac1def5ef4760f9fe332f9efdb9f587d543487eecf4f6259d4c4800f9f052ea315489b88d1b6884ef5697fbd3ac0b88f295f343b07ff111d84b703f38", @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x4000004) 2m12.186852548s ago: executing program 40 (id=1833): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000540)=""/253, 0xfd, 0x0, &(0x7f0000000640)=""/234, 0xea}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r6, 0xaeee9fa2d63adc8e, 0x70bd29, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf9, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x101202, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000000300)=0x1) r9 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r9, 0xc008561b, &(0x7f0000000000)={0x98f905, 0x8}) r10 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) write$smackfs_access(r10, 0x0, 0x34) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) getpid() sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xd8f5) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYBLOB="282c651336f4b115aab0a08fca92ceeebf379551e3d99328f6dce868c3ceee3d39b0ea4a1806f5dcbdc5c8533377f6c57f50ff73e39e12c871cb5640b28312c02d16e55dc67b98a04ac1def5ef4760f9fe332f9efdb9f587d543487eecf4f6259d4c4800f9f052ea315489b88d1b6884ef5697fbd3ac0b88f295f343b07ff111d84b703f38", @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x4000004) 16.054724421s ago: executing program 0 (id=2245): socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x50}, 0x1, 0xba01}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x1e0, 0x30, 0x2, 0x70b52d, 0x25dfdbff, {}, [{0x1cc, 0x1, [@m_skbmod={0xe8, 0x1f, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x81}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0x56, 0x6, "f35b172d7baa6650224966c3f64eab2c30518026962cf5e57280dcc6e0b661da29afad601525508fce3d07af5dbb2381b08ccd78556c2f647620132671db1d7c309ebf6ed9bc2f6b34c06c478c617dcc6317"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x48, 0xe, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x26a}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x98, 0x11, 0x0, 0x0, {{0xc}, {0x4}, {0x69, 0x6, "2d3226d2e3c57ead557080202f648bcdfedc8d7821b2facbf465d9f7be2aa1e8f71e4d6e3358561c91cc59b3e412fff5eebfc75d3f6b2f7b38f6c6ae34cb709f2cc9bcc18fdc130c26ecec8584ee187dd61ac669e1360f3594d45ae4e3bad23daf0d6783c1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1e0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x68}}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000010000000000", 0x58}], 0x1) r5 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0xb, 0x200) (async, rerun: 64) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) setsockopt$inet6_udp_int(r7, 0x11, 0x65, &(0x7f0000000040)=0x3, 0x4) (async) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) (async) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r5, 0x40044104, &(0x7f0000000100)=0x200) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x6a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x4c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @random=0x3632, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x4c}}, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) 15.827054554s ago: executing program 0 (id=2247): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x8000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(0xffffffffffffffff, 0x565, 0x48000000, 0xffffffffffffffff, 0x0) dup2(r4, r6) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f00000000c0)=0x1) r8 = dup2(r4, r7) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000540)={0x1, 0xcc, 0xd, 0x9, 0x6, 0x7f, 0x8, 0x45, 0x7, 0x1, 0x1000, 0x1}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xd1, &(0x7f0000000600)=""/209, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) io_setup(0x7, &(0x7f0000000280)) 12.635754066s ago: executing program 0 (id=2254): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x15) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 9.661041687s ago: executing program 0 (id=2258): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @random="4803219e00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1f3d, &(0x7f0000000300), &(0x7f0000000080)=0x0, &(0x7f0000000240)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="0ff55e81d5227ddccdaac2844b7b8288f6b3005094cec6199c8920af7bd73a5b954811e9636991af0f4e1fc03db9e397b97fc3240ac6a63eb504966dd0f2b3451fef8fdf430e1293e12c36ec49370c2536ab96712dc13afd6a666e88e4c056363c59b6b3ad84a58777b6f585990b8b2aa76a0ea73f9d1838a183a394058a439f91a8f3ed673247e866486b26c6029e2cc7be7349290314f25a0dc63c49f8e1b2120471e5"], 0x8) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x77359400}, 0x1, 0x4}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1b, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffff7d}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ee311a0, @void, @value}, 0x94) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r7 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 9.37828805s ago: executing program 8 (id=2260): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0x184, {0xffffffffffffffff}, {0xee00}, 0x1, 0xfff}) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) landlock_restrict_self(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) sched_setscheduler(r0, 0x6, &(0x7f0000000080)=0x4f5e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYRESHEX=r3, @ANYBLOB="02"], 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r8, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0}, 0x40) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES64=r3], 0xd8}}, 0x0) 9.137656964s ago: executing program 6 (id=2261): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205000000358d462cf5341c7c93d337dbd7a9da1f9b"], 0x0}, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) syz_usb_control_io(r0, 0x0, 0x0) 8.167967841s ago: executing program 8 (id=2264): socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x6791, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x0, 0xfffffffe}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x65) connect$inet(r7, &(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r7, &(0x7f0000000040)="df", 0x1, 0x2000c004, 0x0, 0x0) recvmmsg(r7, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)=""/80, 0x50}], 0x1}, 0x6}], 0x1, 0x40010002, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 8.101039802s ago: executing program 8 (id=2265): r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x10001, r0, 0x3, {0x1, 0x6d1}, 0xf0}, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 7.964464488s ago: executing program 2 (id=2266): r0 = syz_usb_connect$uac1(0x5, 0xdd, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0x40, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1}, [@processing_unit={0x7, 0x24, 0x7, 0x2, 0x0, 0xe}, @extension_unit={0x7, 0x24, 0x8, 0x1, 0x5, 0x5}, @feature_unit={0xf, 0x24, 0x6, 0x5, 0x1, 0x4, [0x9, 0x3, 0x4, 0x5], 0x5}, @mixer_unit={0xa, 0x24, 0x4, 0x5, 0x0, "c51eef10cd"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x304, 0x2, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xfa, 0x1, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0x17d0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x5, 0x3, 0x6, 0x8, "11c333", "aa4894"}, @as_header={0x7, 0x24, 0x1, 0xcc, 0x2, 0x4}, @as_header={0x7, 0x24, 0x1, 0x5, 0x4, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xa6, 0x0, 0x93, 0xf7, 'L'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0x9, 0x3b, "bfe86c"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x2, 0x9, "c61e08c8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0x4, 0x8, {0x7, 0x25, 0x1, 0x0, 0x1, 0x400}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x10, 0x2a, 0x0, 0xff, 0x5}, 0xaa, &(0x7f0000000140)={0x5, 0xf, 0xaa, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xae, 0x1, 0x8, 0xd0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xfa, 0x10, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xba, 0x0, 0xe7b}, @generic={0x4c, 0x10, 0x4, "f590901b82abfa5c3c083b37bdda6da1bbc4b8a3a0a2d57ddb037831d26d742eb7650ae2dc4765ff58f11fb2d2fab84349c31edb194a06e992f76c87a9cf4095c34763a4c19f036be3"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x9, 0x8707, 0x5, [0xf, 0xf, 0xff0030, 0xc0]}, @generic={0x1e, 0x10, 0x3, "3f65ecfab6b2ba34e3cc20c55f22bcd61af4292f4e50d38dc1ca9d"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x404}}]}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x2, 'sed\x00'}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x20, 0x2f, 0x7, {0x7, 0x3, "ccbe191264"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}, &(0x7f0000000300)={0x0, 0xf, 0x25, {0x5, 0xf, 0x25, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0x72, 0x0, 0x6, 0xf000, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x39, 0x7, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xe, 0x9, 0x6}, @ptm_cap={0x3}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x16, 0x60, 0x1, 0xa, "c60578c2", "d3600b5d"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfa, 0x8, 0x1, 0x9, 0x40, 0xff, 0xba06}}}, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x20, 0xc, 0x3e, "0cb82ac95d703e66c2ffc29299bf437ba6072c0c37878ab0e287f56d727999440e908c857fcf1dbe51b6dc0e4247b373196ea1c268f0aca4602d878eb25c"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x200, 0x1}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000006c0)={0x40, 0xb, 0x2, 'R\v'}, &(0x7f0000000700)={0x40, 0xf, 0x2}, &(0x7f0000000740)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000780)={0x40, 0x17, 0x6}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "107f"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x9}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000a40)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000a80)=r2) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000009c0)={@mcast2}, &(0x7f0000000a00)=0x14) (async) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000009c0)={@mcast2}, &(0x7f0000000a00)=0x14) syz_usb_connect(0x0, 0x4f, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0xf9, 0xcd, 0x5a, 0x20, 0x7c0, 0x1503, 0xb8b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x7, 0x10, 0x40, 0x5, [{{0x9, 0x4, 0xb4, 0x9, 0x1, 0x5c, 0x31, 0xae, 0x8, [], [{{0x9, 0x5, 0x6, 0x1, 0x10, 0x1, 0x63, 0x3}}]}}, {{0x9, 0x4, 0x39, 0x8, 0x2, 0x65, 0xb0, 0xb4, 0xe, [], [{{0x9, 0x5, 0x6, 0x2, 0x8, 0x8, 0x1}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x3, 0x6, 0x0, [@generic={0x7, 0x5, "a9dfba6edc"}]}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 7.887483455s ago: executing program 4 (id=2267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010048000000000040000008500000027000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 6.706365571s ago: executing program 0 (id=2268): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)={0x1c, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xd}]}, 0x1c}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)='J', 0x1}], 0x1) socket$alg(0x26, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x2a8, 0x98, 0x2a8, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1e8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x4e23}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) gettid() 5.802907397s ago: executing program 6 (id=2269): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x24}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000007000046009d40edce82cd28e1e1edab51", @ANYRES8, @ANYBLOB='Nd'], 0x53) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) (async) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 5.428521393s ago: executing program 6 (id=2270): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x15, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/252, 0xfc}], 0x1}}], 0x1, 0x0, 0x0) 5.418448257s ago: executing program 4 (id=2271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="12000000000000001e8a6dfa1329c6bf9b203738079333ee7eae1beba9c427e7cced75a7ebc756768b0a7e113cd4f5462e6506bcac00000000000000000000000a00"/75, @ANYRESDEC=0x0, @ANYRES16], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x8}, {{&(0x7f0000000680)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)=""/181, 0xb5}, {&(0x7f00000052c0)=""/4110, 0x1000}, {&(0x7f0000000040)}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f0000004280)=""/4109, 0x100d}, {&(0x7f0000000700)=""/133, 0x85}, {&(0x7f0000001840)=""/235, 0xeb}], 0x7, &(0x7f00000007c0)=""/77, 0x12}, 0xfffffff8}], 0x2, 0x4, &(0x7f0000001f40)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x11, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002200)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000002240)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x15) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0x15) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000002040)={@ll={0x11, 0x18, r0, 0x1, 0xc4, 0x6, @broadcast}, {&(0x7f0000001f80)=""/117, 0x75}, &(0x7f0000002000), 0x1}, 0xa0) finit_module(r8, &(0x7f00000021c0)=']%-&)%[)![\x00', 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae0e000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r11}, 0x10) getuid() 5.026958822s ago: executing program 6 (id=2272): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000400)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0x6, 0x5}], 0x10, 0x36, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x3, &(0x7f0000000200)=0x10001) mmap(&(0x7f00006cb000/0x4000)=nil, 0x4000, 0xb635773f05ebbee7, 0x10, r0, 0x4e373000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0x5d, 0xa, &(0x7f00000002c0)="76c45e42dcef68274e67180a6509db9dc14631d0b5e65320b5d343af0ba93ce0d79e9112c3a7a1ed04eee68bb67d63051a87a351fd80fca4995712557ec27fdc44e3c4c9def01b39458b11ba4359d380fbad52a7aab78747d5caef40c2", &(0x7f00000000c0)=""/10, 0x338, 0x0, 0xfe, 0x5c, &(0x7f0000000680)="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", &(0x7f00000004c0)="af9781be8b882448c7aef6efe1060e90c58f3ef2a03b65ba7e8f0c9a88f3807c09638f4cd38b60a99b4782f1f2388385be5fcb7cbe0c1901145fbb6dfd419f77443129f04463bd8deef6cecb7774d63a7af24b076d54efdef0b0c942", 0x0, 0x0, 0x5}, 0x50) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a0000000000000000070000a1", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r10 = syz_open_dev$video(&(0x7f0000000580), 0x81, 0x0) ioctl$VIDIOC_G_PARM(r10, 0xc0cc5615, &(0x7f0000000140)={0xd, @output={0x1000, 0x0, {0x3, 0x6}, 0x9, 0x3}}) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) 4.912675636s ago: executing program 4 (id=2273): r0 = landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x1}, 0x10, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) (async) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x17) close(r2) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="ab4b794355cda2830cbd3d60a0"]) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYRES32=r2], &(0x7f00000005c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r6, 0x20, &(0x7f00000000c0)={&(0x7f0000000240)=""/71, 0x47, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000002100000000050000000000000095c333d4c0a3ecdd69086b8e4c36439a8808b90ea579cdf8bd475a470064827701f4169ebebecb5bba94f06f020fb64e5594a86f5f00000000000008c7533dc98a94008d7d2a7d2c23bc3f4cc1992aebd29fd21e95b3c7c49de340c24cb6ba1a33740825c424ecd87a3b02ae7840be900964b6948074a8f2ed867fd6601b0ca02215f4c2a5157135575fa1903abe92246853cb7cb868a3b2524a92bfa8aaeaf3ff3f08fb97ec0c126bfea903ef567bdf48aecb23342c8102732b7257f65b1f7d82adec836fd77d2f5c6e6c18ae428531d9e4d906b0a19827bffab9ced1e24e8f063d44"], 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0x25, 0x3, @val=@target_btf_id=r7}, 0x14) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async) prlimit64(0x0, 0xd, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)) (async) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) (async) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x1}) (async) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset(0x0, &(0x7f0000000280)={0x5, 0x4e, 0x8, 0x2e1, 0x7, 0x101}) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f00000001c0)={0x140, 0x10, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, {}, {0xfffffffc}, {0xfffffffe, 0x0, 0xffffffff}, 0x0, 0x3f0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0xd}) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000640)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r12, @ANYRES16=r11, @ANYRES8=r11], 0x0) 4.848776424s ago: executing program 2 (id=2274): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0x184, {0xffffffffffffffff}, {0xee00}, 0x1, 0xfff}) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) landlock_restrict_self(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) sched_setscheduler(r0, 0x6, &(0x7f0000000080)=0x4f5e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYRESHEX=r3, @ANYBLOB="02"], 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r8, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0}, 0x40) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES64=r3], 0xd8}}, 0x0) 4.54005634s ago: executing program 8 (id=2275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x44, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x904}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x4004) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) (async) r7 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58004"]) 4.471959016s ago: executing program 4 (id=2276): socket$netlink(0x10, 0x3, 0xf) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd2(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = getpid() prlimit64(r3, 0xf, &(0x7f0000000040)={0x6, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x900, 0x12) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"88ba8a8087b219bf6b87e7f7c46ab59bf82717a52ab0b8ccdf0f5bd2320b01c5"}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000008, 0x8031, 0xffffffffffffffff, 0x587ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05000000000000006985060000000c00f8ffd05bc5", @ANYRES32=r9, @ANYBLOB="0800050002000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="19000000", @ANYRES16=r8, @ANYBLOB="0500ffffffff080000002e00000008000300", @ANYRES32=r9, @ANYBLOB="050034008b00000005001801270000000400fa00"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x880) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000500)=""/173, 0xad}, {&(0x7f0000000680)=""/191, 0xbf}], 0x2, &(0x7f0000000740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x20) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) 4.386694971s ago: executing program 4 (id=2277): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r2, 0x34, 0x1, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000140)=[0x0], 0x0}, 0x40) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200121504000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000300"/28], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB='.\x00\x00\x00?\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="f957f112", @ANYRES32=0x0, @ANYRES64=r4], 0x20) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="43877060", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r8) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000001a000000000000000095"], &(0x7f0000004780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)="e892d09d976a79e713ff508ffb7dc1b13d2314a5c2bc00d7"}, 0x50) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60ff843500180600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000003030000ede4c66c9f7e2302c8229fe260356915a5fb3b0e0000000e6f7d8ebeb9a95a12f10071e1228b64e95ffd2b037997589b85f733051fc5d3dcce1b1a8e728fe48d2059f95f491325fc4264898c10fb581c4b9532329887155d53d51c02d42368daf94b17a90578b471d6fc84eab01d7c195e2fc076ea6f974338ee472f91ff567ee16d747220be19ebba7650f23b66d4372f68cfa9fe04391505fe96099a92a1e50531785b4b66be2c1ccb5597f256e62f532f8778528237202b50118ae080b79cc6f66cae612dc3aa37ae2aa05fd08e221abb26b214c9da54eb63f3a88481745b39c4b5124701a17a10e9cd"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) pipe(&(0x7f0000000080)) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r2, 0x34, 0x1, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000140)=[0x0]}, 0x40) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200121504000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000300"/28], 0x50) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB='.\x00\x00\x00?\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="f957f112", @ANYRES32=0x0, @ANYRES64=r4], 0x20) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="43877060", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r8) (async) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000001a000000000000000095"], &(0x7f0000004780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)="e892d09d976a79e713ff508ffb7dc1b13d2314a5c2bc00d7"}, 0x50) (async) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60ff843500180600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000003030000ede4c66c9f7e2302c8229fe260356915a5fb3b0e0000000e6f7d8ebeb9a95a12f10071e1228b64e95ffd2b037997589b85f733051fc5d3dcce1b1a8e728fe48d2059f95f491325fc4264898c10fb581c4b9532329887155d53d51c02d42368daf94b17a90578b471d6fc84eab01d7c195e2fc076ea6f974338ee472f91ff567ee16d747220be19ebba7650f23b66d4372f68cfa9fe04391505fe96099a92a1e50531785b4b66be2c1ccb5597f256e62f532f8778528237202b50118ae080b79cc6f66cae612dc3aa37ae2aa05fd08e221abb26b214c9da54eb63f3a88481745b39c4b5124701a17a10e9cd"], 0x0) (async) 4.26923205s ago: executing program 4 (id=2278): socket$netlink(0x10, 0x3, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = syz_open_dev$vivid(&(0x7f00000002c0), 0x2, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x40088, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4001, @rand_addr=0x64010100}, 0x10, 0x0}, 0x300048c1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000340)={0x80, 0x9, 0x0, "5c1e860a2d6a9d1b8055aa62c5b169f5ecabc3f085b84adabb01381615538442", 0x39565559}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) clock_gettime(0x6, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {r8, r9+60000000}}, 0x0) 3.305947118s ago: executing program 6 (id=2279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x28, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, &(0x7f00000000c0)="f30fa90fa8d163000f9bae598f0f01c2f3ad6d66b9800000c00f326635010000000f3065819af9007a9dbaf80c66b80cee7c8366efbafc0c66ed", 0x3a}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40345410, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r9, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}]}, 0x24}}, 0x0) 3.24304429s ago: executing program 2 (id=2280): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f0000000080), 0x264000000000, 0x0) unshare(0x480) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, @call]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x26, &(0x7f00000001c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r0, @ANYBLOB="0c0099"], 0x64}}, 0x0) 3.242582778s ago: executing program 8 (id=2281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010048000000000040000008500000027000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3.113984022s ago: executing program 0 (id=2282): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x2, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0x0, 0x0, 0x1]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x37}}, {@multicast2}, {@private=0xa010104}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x30, r3, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) (async) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r5, r5, 0x0, 0x0, 0x0, 0x4, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES16=r1, @ANYRES8=r5, @ANYRESHEX=r1, @ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6, 0x0, 0x1200}, 0x10) r7 = socket$inet6(0xa, 0x3, 0x4) sendmmsg$inet6(r7, &(0x7f0000000180), 0x0, 0x85) (async) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) (async) r9 = dup(r8) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x50}}, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) shutdown(r9, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r11, 0xae9a) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) write$UHID_CREATE2(r9, &(0x7f0000000940)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0xf9, 0xfc00, 0x2, 0x4, 0x3, 0x1, "6f8130764c8c89f7ec70ee1abc83bc07d869ac9d69b6a20ce428348e46c3606d72748765cbaeecfb8b415c497c018aeea3b8467b6af18a3af9d39ecc3a950feeb8d9b7b29916b87519ed8a889b23ee413501dd9ba9b4f3e70dbab22de6a17f0f51d6095c2ba16033da649056eee9bae9f9ae53904ffede4cdca41d585ef263bf1eaa0ab29efd3168cd0110a24e371d85e94d2acf203ee565712b82d08a183cd695de00286a420a41ed4e70a2bf667595f5238e7f87ad24f44bd09cf6db59452ed60597891dbd8e34858bdc96d4b43fde046c41b93324b9b960301e27419d3c90ec206886b43a9988181d2846ffd60f3f35c0ac11fe7d530373"}}, 0x211) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9f00800000000000000000001800000018040000020000000000000000000802020000000d00000000000010080000000000"], &(0x7f0000001f40)=""/4089, 0x32, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28) 1.813662069s ago: executing program 2 (id=2283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) (rerun: 32) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r2, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x40080) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x54, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8011}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket(0x10, 0x803, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x8970, &(0x7f0000000080)={'sit0\x00', 0x0}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) pipe2$9p(&(0x7f00000000c0), 0x0) (async) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r12 = eventfd(0x0) r13 = eventfd2(0x6, 0x800) ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f0000000000)={r12, 0x7, 0x3, r13}) 1.506821136s ago: executing program 2 (id=2284): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) (async) socket(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x3, 0x2}, &(0x7f0000000240)) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (async) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmmsg(r6, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000780)=""/242, 0xf2}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000002ac0)=""/113, 0x71}, {&(0x7f0000001880)=""/22, 0x16}, {&(0x7f00000018c0)=""/174, 0xae}], 0x7}, 0x60}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x42, 0x0) fcntl$setpipe(r6, 0x407, 0x6) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (rerun: 32) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x4, 0x7}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000480)={0x1b, 0x1, 0x0, "43e191a176f79697a7746cf24b0f1367a7b9e58729635fc4ea66a59a0cd611a6", 0x3136564e}) (async, rerun: 32) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64], 0x138) ioctl$VIDIOC_SUBDEV_G_EDID(r10, 0xc0285628, &(0x7f0000000040)={0x0, 0x79, 0x8}) (async, rerun: 64) syz_fuse_handle_req(r1, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_fuse_handle_req(r1, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x50, 0x0, 0x0, [{0x1, 0xdfc, 0x1, 0x4, '['}, {0x3, 0x8, 0x2, 0xff, 'fd'}]}, 0x0, 0x0, 0x0, 0x0}) (async) getdents(r7, &(0x7f0000000700)=""/90, 0x5a) 1.142178573s ago: executing program 2 (id=2285): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xa2902) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) (async) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) socket(0x10, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="130000000800000008"], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=0x0, @ANYRESHEX=r2], 0x20) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x30000008}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x2, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaedf, 0x0, 0xffffffff, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x8041, &(0x7f0000000280)={0x2, 0x0, @rand_addr=0x64010100, 0x4}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r8}, 0x57) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x8, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000020, 0x1, {0x2}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.013742199s ago: executing program 6 (id=2286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 0s ago: executing program 8 (id=2287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000070a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003803100010076657468305f746f5f687372000000005c000000200a0101000b000000000000010000000900020073797a30000084000900010073797a30"], 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x0) kernel console output (not intermixed with test programs): get: couldn't find an available UDC or it's busy [ 732.259792][T13881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.259920][ T8527] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 732.417745][T13881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.436103][T13881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.683479][ T8527] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 732.739467][ T5868] usb 2-1: USB disconnect, device number 82 [ 732.779812][ T8527] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 732.822160][ T8527] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 732.865751][ T8527] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 732.890634][ T8527] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.943707][ T8527] usb 9-1: config 0 descriptor?? [ 734.263696][ T8527] usbhid 9-1:0.0: can't add hid device: -71 [ 734.270168][ T8527] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 734.450272][ T8527] usb 9-1: USB disconnect, device number 37 [ 734.721293][T13942] overlay: filesystem on ./bus not supported as upperdir [ 735.449496][ T8527] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 735.876892][ T5868] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 735.929988][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 735.936481][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 736.877005][ T8527] usb 9-1: device descriptor read/all, error -71 [ 736.887398][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 736.898363][ T5868] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 736.953937][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.991907][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.019000][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 737.059738][ T5868] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 737.091788][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.097867][ T5902] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 737.109397][ T5868] usb 3-1: config 0 descriptor?? [ 737.154914][ T5869] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 737.413674][ T5902] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 737.422179][ T5902] usb 7-1: config 0 has no interface number 0 [ 737.428684][ T5902] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 737.439693][ T5902] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 737.451444][ T5902] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 737.462750][ T5902] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 737.474275][ T5902] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 737.487459][ T5902] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 737.496733][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.514801][ T5902] usb 7-1: config 0 descriptor?? [ 737.522640][T13954] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 737.534130][ T5902] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 737.544910][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 737.553381][ T5869] usb 2-1: not running at top speed; connect to a high speed hub [ 737.562753][ T5869] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.579966][ T5869] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 737.592784][ T5868] kye 0003:0458:0087.0018: report_id 0 is invalid [ 737.600174][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.623586][ T5869] usb 2-1: Product: syz [ 737.627930][ T5869] usb 2-1: Manufacturer: syz [ 737.644616][ T5869] usb 2-1: SerialNumber: syz [ 737.646125][ T5868] kye 0003:0458:0087.0018: item 0 1 1 8 parsing failed [ 737.659323][ T5868] kye 0003:0458:0087.0018: parse failed [ 737.670359][ T5868] kye 0003:0458:0087.0018: probe with driver kye failed with error -22 [ 737.672924][ T5869] usb 2-1: bad CDC descriptors [ 737.797943][T13954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.841791][T13954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.911055][ T8527] usb 2-1: USB disconnect, device number 83 [ 737.915616][ T5868] usb 3-1: USB disconnect, device number 38 [ 738.041855][ T9] usb 7-1: USB disconnect, device number 46 [ 738.058757][ T9] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 738.436683][T14011] netlink: 'syz.2.1629': attribute type 1 has an invalid length. [ 738.474319][T14011] netlink: 'syz.2.1629': attribute type 2 has an invalid length. [ 738.488888][ T9] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 738.834782][T14014] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ümý¼§6°'ßtÿT ð# [ 739.097904][ T5869] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 739.214557][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 739.221762][ T9] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 739.231104][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.262908][ T9] usb 7-1: config 0 descriptor?? [ 739.296950][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 739.647093][T14029] netlink: zone id is out of range [ 739.746763][ T9] gspca_vc032x: reg_r err -71 [ 739.776066][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.812251][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.817896][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.857197][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.869888][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.881054][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.898242][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.903608][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.933873][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 740.383848][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 740.580817][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 740.613919][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 740.626660][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 740.647757][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.102333][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.187035][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.200063][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.207926][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.220161][ T9] gspca_vc032x: Unknown sensor... [ 741.239216][ T9] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 741.280802][ T9] usb 7-1: USB disconnect, device number 47 [ 742.566372][ T5869] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 742.742560][ T5869] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 742.756815][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.783969][ T5869] usb 3-1: config 0 descriptor?? [ 742.802263][ T5869] cp210x 3-1:0.0: cp210x converter detected [ 743.254823][T14097] netlink: zone id is out of range [ 744.439629][ T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 744.701448][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 744.761469][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.916272][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 745.033419][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 745.115694][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.148454][ T9] usb 2-1: config 0 descriptor?? [ 745.182329][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 745.212791][ T5869] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 745.222710][ T5869] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 745.239771][ T5869] usb 3-1: cp210x converter now attached to ttyUSB0 [ 745.273102][ T5869] usb 3-1: USB disconnect, device number 40 [ 745.304783][ T5869] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 745.325067][ T5869] cp210x 3-1:0.0: device disconnected [ 745.392666][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1651'. [ 746.406942][T14137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1651'. [ 746.415893][T14137] netlink: 'syz.1.1651': attribute type 14 has an invalid length. [ 746.435823][T14137] netlink: 'syz.1.1651': attribute type 13 has an invalid length. [ 746.588098][ T9] usb 2-1: USB disconnect, device number 84 [ 747.076763][T14169] tipc: Trying to set illegal importance in message [ 748.268603][ T5869] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 748.348964][T14170] netlink: zone id is out of range [ 748.929556][T14175] can0: slcan on ttyS3. [ 749.050995][T14184] vlan2: entered promiscuous mode [ 749.066643][T14174] can0 (unregistered): slcan off ttyS3. [ 749.075351][T14184] vlan2: entered allmulticast mode [ 749.080534][T14184] hsr_slave_1: entered allmulticast mode [ 749.113257][T14184] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1662'. [ 749.270939][ T9] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 749.295868][T14196] 9pnet_fd: Insufficient options for proto=fd [ 749.390407][T14184] hsr_slave_1 (unregistering): left allmulticast mode [ 749.432578][ T9] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 749.449730][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.474974][ T9] usb 7-1: Product: syz [ 749.483744][T14184] hsr_slave_1 (unregistering): left promiscuous mode [ 749.502013][ T9] usb 7-1: Manufacturer: syz [ 749.519052][ T9] usb 7-1: SerialNumber: syz [ 749.558662][ T9] usb 7-1: config 0 descriptor?? [ 749.769489][ T9] hso 7-1:0.0: Failed to find BULK IN ep [ 749.788106][ T9] usb-storage 7-1:0.0: USB Mass Storage device detected [ 749.832564][T14209] binder: BINDER_SET_CONTEXT_MGR already set [ 749.875986][T14209] binder: 14207:14209 ioctl 4018620d 20000100 returned -16 [ 749.962368][ T9] usb 7-1: USB disconnect, device number 48 [ 750.084966][ T5869] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 750.228394][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 750.239609][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.287605][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.319954][ T5869] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 750.340092][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.379348][ T5869] usb 2-1: config 0 descriptor?? [ 750.742673][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 751.257209][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 751.291569][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.592394][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.602628][T14239] QAT: Stopping all acceleration devices. [ 751.657943][ T9] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 751.717403][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.785138][ T9] usb 3-1: config 0 descriptor?? [ 752.037102][ T9] hid-steam 0003:28DE:1102.0019: unknown main item tag 0x0 [ 752.112856][ T9] hid-steam 0003:28DE:1102.0019: unknown main item tag 0x0 [ 752.156014][T14255] tipc: Started in network mode [ 752.172911][ T9] hid-steam 0003:28DE:1102.0019: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 752.204167][T14255] tipc: Node identity 1, cluster identity 4711 [ 752.236187][T14255] tipc: Node number set to 1 [ 752.328643][ T9] hid-steam 0003:28DE:1102.0019: Steam Controller 'XXXXXXXXXX' connected [ 752.390292][ T9] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0019/input/input89 [ 752.509391][ T9] hid-steam 0003:28DE:1102.001A: unknown main item tag 0x0 [ 752.572262][ T9] hid-steam 0003:28DE:1102.001A: unknown main item tag 0x0 [ 752.658246][ T9] hid-steam 0003:28DE:1102.001A: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 753.220129][ T5905] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 753.248227][ T5869] logitech 0003:046D:CA03.001B: item fetching failed at offset 0/5 [ 753.256964][ T5869] logitech 0003:046D:CA03.001B: parse failed [ 753.263234][ T5869] logitech 0003:046D:CA03.001B: probe with driver logitech failed with error -22 [ 753.275170][ T5869] usb 2-1: USB disconnect, device number 85 [ 753.497047][ T9] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 753.696648][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 753.713320][ T9] usb 9-1: config 0 has an invalid interface number: 38 but max is 0 [ 753.740105][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.756045][ T9] usb 9-1: config 0 has no interface number 0 [ 753.777903][ T9] usb 9-1: config 0 interface 38 altsetting 0 bulk endpoint 0xE has invalid maxpacket 32 [ 753.806005][ T9] usb 9-1: config 0 interface 38 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 753.830128][ T9] usb 9-1: config 0 interface 38 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 753.868150][ T9] usb 9-1: config 0 interface 38 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 753.923431][ T9] usb 9-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=4b.63 [ 753.955355][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.986408][ T9] usb 9-1: Product: syz [ 754.004540][ T9] usb 9-1: Manufacturer: syz [ 754.019873][ T9] usb 9-1: SerialNumber: syz [ 754.054202][ T9] usb 9-1: config 0 descriptor?? [ 754.082720][T14271] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 754.112990][ T9] pn533_usb 9-1:0.38: NFC: Could not find bulk-in or bulk-out endpoint [ 754.219861][ T8527] usb 3-1: USB disconnect, device number 42 [ 754.393509][ T8527] hid-steam 0003:28DE:1102.0019: Steam Controller 'XXXXXXXXXX' disconnected [ 754.724214][ T9] usb 9-1: USB disconnect, device number 40 [ 755.202647][ T5869] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 755.373611][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 755.395675][ T5869] usb 2-1: too many configurations: 249, using maximum allowed: 8 [ 755.432264][ T5869] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 755.449131][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 755.459079][ T5869] usb 2-1: Product: syz [ 755.587979][ T5869] usb 2-1: Manufacturer: syz [ 755.592986][ T5869] usb 2-1: SerialNumber: syz [ 755.620033][ T5869] usb 2-1: config 0 descriptor?? [ 755.829496][ T5869] mdc800 2-1:0.0: probe fails -> wrong Number of Configuration [ 756.033354][T14312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.079431][T14312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.089541][ T8527] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 756.120128][T14312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.135426][T14312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.193376][T14312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.202324][T14312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.274824][ T8527] usb 9-1: Using ep0 maxpacket: 8 [ 756.283956][ T8527] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 756.311803][ T8527] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 756.352513][ T8527] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 756.369664][ T5902] usb 2-1: USB disconnect, device number 86 [ 756.389377][ T8527] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 756.398835][ T8527] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.408465][ T8527] usb 9-1: Product: syz [ 756.439503][ T8527] usb 9-1: Manufacturer: syz [ 756.455416][ T8527] usb 9-1: SerialNumber: syz [ 756.564863][ T5905] usb 7-1: device descriptor read/64, error -71 [ 756.793702][ T5905] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 756.826505][T14315] Process accounting resumed [ 757.013096][ T5905] usb 7-1: Using ep0 maxpacket: 16 [ 757.025304][ T5905] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.051115][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 757.079126][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 757.142510][ T5905] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 757.169567][ T8527] usb 9-1: 0:2 : does not exist [ 757.191362][ T5905] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 757.207713][ T5905] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 757.217188][ T5905] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 757.258518][ T5905] usb 7-1: Manufacturer: syz [ 757.270465][ T8527] usb 9-1: USB disconnect, device number 41 [ 757.294835][ T5905] usb 7-1: config 0 descriptor?? [ 757.306889][T14370] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 757.314610][T14370] overlayfs: failed to set xattr on upper [ 757.321042][T14370] overlayfs: ...falling back to redirect_dir=nofollow. [ 757.596531][ T5905] rc_core: IR keymap rc-hauppauge not found [ 757.602510][ T5905] Registered IR keymap rc-empty [ 757.658062][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 757.696422][T14339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.707697][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 757.727707][T14339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.748070][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 757.760868][T14339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.780561][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input90 [ 757.793153][T14339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.824747][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 757.913185][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 757.956753][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 758.009064][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 758.077994][T14339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.088565][T14339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.103873][T14339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.114909][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 758.165726][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 758.235373][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 758.250781][T14339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.312885][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 758.403918][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 758.442133][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 758.488744][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 758.539833][ T5905] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 758.555892][ T5905] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 758.586145][ T5905] usb 7-1: USB disconnect, device number 50 [ 759.052537][T14425] loop2: detected capacity change from 0 to 1 [ 759.104650][T14425] Dev loop2: unable to read RDB block 1 [ 759.115472][T14425] loop2: unable to read partition table [ 759.140957][T14425] loop2: partition table beyond EOD, truncated [ 759.153502][T14425] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 759.917761][T14425] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1701'. [ 760.149786][ T8527] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz1 [ 760.794013][T14451] serio: Serial port ptm0 [ 760.820983][T14453] netlink: 'syz.8.1706': attribute type 3 has an invalid length. [ 760.861594][T14453] netlink: 'syz.8.1706': attribute type 3 has an invalid length. [ 761.018230][T14457] bridge_slave_0: left allmulticast mode [ 761.109172][T14457] bridge_slave_0: left promiscuous mode [ 761.161029][T14457] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.394722][T14457] bridge_slave_1: left allmulticast mode [ 761.468899][T14457] bridge_slave_1: left promiscuous mode [ 761.556288][T14457] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.643228][T14457] bond0: (slave bond_slave_1): Releasing backup interface [ 761.820316][T14457] team0: Port device team_slave_0 removed [ 761.853750][ T8527] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 761.871120][T14457] team0: Port device team_slave_1 removed [ 761.903072][T14457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.930059][T14457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.953309][T14457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.977601][ T8527] usb 7-1: device descriptor read/64, error -71 [ 761.978041][T14457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.216024][ T8527] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 762.387520][ T8527] usb 7-1: device descriptor read/64, error -71 [ 762.492577][ T8527] usb usb7-port1: attempt power cycle [ 762.504319][T14488] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 762.531874][T14488] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 762.559310][ T5902] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 762.921243][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 762.928554][ T5902] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 762.939954][ T5902] usb 3-1: config 0 has no interface number 0 [ 762.949708][ T8527] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 762.970680][ T5902] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 762.983760][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.994199][ T8527] usb 7-1: device descriptor read/8, error -71 [ 763.001285][ T5902] usb 3-1: Product: syz [ 763.005570][ T5902] usb 3-1: Manufacturer: syz [ 763.010565][ T5902] usb 3-1: SerialNumber: syz [ 763.024885][ T5902] usb 3-1: config 0 descriptor?? [ 763.944950][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 764.020792][ T5902] smsc95xx v2.0.0 [ 764.102551][ T8527] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 764.115927][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.125819][ T8527] usb 7-1: device descriptor read/8, error -71 [ 764.164774][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.174784][ T9] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 764.184020][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.199580][ T9] usb 2-1: config 0 descriptor?? [ 764.237336][ T8527] usb usb7-port1: unable to enumerate USB device [ 764.569432][T10604] usb 9-1: new full-speed USB device number 42 using dummy_hcd [ 764.702737][T10604] usb 9-1: device descriptor read/64, error -71 [ 764.941553][T10604] usb 9-1: new full-speed USB device number 43 using dummy_hcd [ 765.075471][T10604] usb 9-1: device descriptor read/64, error -71 [ 765.143575][ T5902] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 765.154627][ T5902] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 765.166116][ T5902] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 765.189285][ T5902] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 765.208262][T10604] usb usb9-port1: attempt power cycle [ 765.232723][ T5902] usb 3-1: USB disconnect, device number 43 [ 765.598501][T10604] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 765.645822][T10604] usb 9-1: device descriptor read/8, error -71 [ 765.904005][T10604] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 765.924212][T10604] usb 9-1: device descriptor read/8, error -71 [ 766.019487][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 766.039314][T10604] usb usb9-port1: unable to enumerate USB device [ 766.066001][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 766.096531][ T9] usb 2-1: USB disconnect, device number 87 [ 766.543883][ T5902] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 766.734327][ T5902] usb 2-1: config 4 has an invalid interface number: 231 but max is 0 [ 766.756854][ T5902] usb 2-1: config 4 has no interface number 0 [ 766.784853][ T5902] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 766.817254][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.845827][ T5902] usb 2-1: Product: syz [ 766.850315][ T5902] usb 2-1: Manufacturer: syz [ 766.854967][ T5902] usb 2-1: SerialNumber: syz [ 766.891972][ T5902] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 767.285480][ T5902] vp7045: USB control message 'in' went wrong. [ 767.295455][ T8] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 767.304317][ T5902] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 767.339760][ T5902] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 767.376301][ T5902] usb 2-1: USB disconnect, device number 88 [ 767.475921][ T8] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 767.503783][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.521470][T14602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.538985][ T8] usb 3-1: Product: syz [ 767.545868][ T8] usb 3-1: Manufacturer: syz [ 767.550527][ T8] usb 3-1: SerialNumber: syz [ 767.562789][T14602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.577939][T14602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.586576][ T8] usb 3-1: config 0 descriptor?? [ 767.622056][T14602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.752198][ T974] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 767.904868][ T974] usb 9-1: device descriptor read/64, error -71 [ 767.937122][T14612] overlayfs: failed to set uuid (263/file1, err=-1); falling back to uuid=null. [ 767.947669][T14612] overlayfs: failed to verify upper root origin [ 768.171929][T14586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.181222][ T974] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 768.207390][T14586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.410487][ T974] usb 9-1: device descriptor read/64, error -71 [ 768.524550][ T974] usb usb9-port1: attempt power cycle [ 768.577678][ T8] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 768.590481][ T8] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 768.644130][ T8] asix 3-1:0.0: probe with driver asix failed with error -71 [ 768.693802][ T8] usb 3-1: USB disconnect, device number 44 [ 769.515133][ T974] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 769.553703][ T974] usb 9-1: device descriptor read/8, error -71 [ 769.811885][ T974] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 769.840899][ T974] usb 9-1: device descriptor read/8, error -71 [ 769.877517][ T8] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 769.955113][ T974] usb usb9-port1: unable to enumerate USB device [ 770.031911][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 770.082723][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 770.115625][ T5902] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 770.117545][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 770.157948][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 770.185028][ T8] usb 3-1: SerialNumber: syz [ 770.280223][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 770.301930][ T5902] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 770.312951][ T5902] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 770.324909][T14671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1746'. [ 770.340374][ T5902] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 770.361650][ T5902] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 770.388169][ T8] usb 3-1: 0:2 : does not exist [ 770.388520][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.425177][ T5902] usb 2-1: Product: syz [ 770.438195][ T5902] usb 2-1: Manufacturer: syz [ 770.448120][ T5902] usb 2-1: SerialNumber: syz [ 770.453848][ T8] usb 3-1: USB disconnect, device number 45 [ 770.846561][ T5902] usb 2-1: 0:2 : does not exist [ 770.871891][ T5902] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 770.879067][ T974] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 770.906948][ T5902] usb 2-1: USB disconnect, device number 89 [ 770.975177][T14687] FAULT_INJECTION: forcing a failure. [ 770.975177][T14687] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 771.011960][T14687] CPU: 0 UID: 0 PID: 14687 Comm: syz.6.1748 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 771.022806][T14687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 771.032895][T14687] Call Trace: [ 771.036199][T14687] [ 771.039172][T14687] dump_stack_lvl+0x241/0x360 [ 771.043919][T14687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 771.049183][T14687] ? __pfx__printk+0x10/0x10 [ 771.053846][T14687] should_fail_ex+0x3b0/0x4e0 [ 771.058583][T14687] strncpy_from_user+0x36/0x270 [ 771.063519][T14687] getname_flags+0xf1/0x540 [ 771.068081][T14687] do_sys_openat2+0xd2/0x1d0 [ 771.072728][T14687] ? __pfx_do_sys_openat2+0x10/0x10 [ 771.078041][T14687] ? __fget_files+0x2a/0x410 [ 771.082712][T14687] ? __fget_files+0x2a/0x410 [ 771.087359][T14687] __x64_sys_openat+0x247/0x2a0 [ 771.092263][T14687] ? __pfx___x64_sys_openat+0x10/0x10 [ 771.097698][T14687] ? do_syscall_64+0x100/0x230 [ 771.102531][T14687] ? do_syscall_64+0xb6/0x230 [ 771.107282][T14687] do_syscall_64+0xf3/0x230 [ 771.111865][T14687] ? clear_bhb_loop+0x35/0x90 [ 771.116594][T14687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.122557][T14687] RIP: 0033:0x7fa1a0f85d29 [ 771.127035][T14687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.146699][T14687] RSP: 002b:00007fa1a1e1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 771.155189][T14687] RAX: ffffffffffffffda RBX: 00007fa1a1175fa0 RCX: 00007fa1a0f85d29 [ 771.163216][T14687] RDX: 000000000000275a RSI: 0000000020000100 RDI: ffffffffffffff9c [ 771.171240][T14687] RBP: 00007fa1a1e1d090 R08: 0000000000000000 R09: 0000000000000000 [ 771.179274][T14687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.187310][T14687] R13: 0000000000000000 R14: 00007fa1a1175fa0 R15: 00007fff668625e8 [ 771.195350][T14687] [ 771.245451][ T974] usb 9-1: Using ep0 maxpacket: 16 [ 771.297079][ T974] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 771.305519][ T974] usb 9-1: config 0 has no interface number 0 [ 771.349027][ T974] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.378518][ T974] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.440168][ T974] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 771.468814][ T974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.489608][ T974] usb 9-1: config 0 descriptor?? [ 771.925900][ T8] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 772.088408][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 772.099006][ T974] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.001D/input/input91 [ 772.112579][ T8] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 772.125014][ T8] usb 2-1: config 1 has no interface number 1 [ 772.146433][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 772.169395][ T8] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 772.291028][ T974] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.001D/input/input92 [ 772.411766][ T974] uclogic 0003:28BD:0071.001D: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.8-1/input1 [ 772.436680][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 772.497156][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.545072][ T974] usb 9-1: USB disconnect, device number 50 [ 772.573291][ T8] usb 2-1: Product: syz [ 772.613280][ T8] usb 2-1: Manufacturer: syz [ 772.664039][ T8] usb 2-1: SerialNumber: syz [ 772.918962][ T8] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 772.966874][ T8] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 773.013536][T10604] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 773.027883][ T8] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 773.076808][ T8] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 773.118574][ T8] usb 2-1: failed to enable PITCH for EP 0x82 [ 773.196277][ T8] usb 2-1: USB disconnect, device number 90 [ 773.222436][T10604] usb 7-1: Using ep0 maxpacket: 32 [ 773.243009][T10604] usb 7-1: config index 0 descriptor too short (expected 16420, got 36) [ 773.308463][T10604] usb 7-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 773.379157][T10604] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 773.469888][T10604] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 773.546547][T10604] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.614962][T10604] usb 7-1: config 0 descriptor?? [ 773.973824][T10604] usb 7-1: string descriptor 0 read error: -32 [ 773.999315][T10604] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 774.232938][ T8] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 774.405816][ T8] usb 9-1: unable to get BOS descriptor or descriptor too short [ 774.420197][ T8] usb 9-1: config 3 has an invalid interface number: 101 but max is 0 [ 774.429312][ T8] usb 9-1: config 3 has no interface number 0 [ 774.438256][ T8] usb 9-1: config 3 interface 101 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 32 [ 774.448983][T14766] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 774.463305][ T8] usb 9-1: config 3 interface 101 altsetting 9 bulk endpoint 0xC has invalid maxpacket 64 [ 774.490562][ T8] usb 9-1: config 3 interface 101 has no altsetting 0 [ 774.520107][ T8] usb 9-1: string descriptor 0 read error: -22 [ 774.526427][ T8] usb 9-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice=6f.3a [ 774.545934][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.568881][T14772] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 774.579237][T14772] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 774.610120][ T8] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 774.658750][ T8] snd-usb-audio 9-1:3.101: probe with driver snd-usb-audio failed with error -2 [ 774.821502][T14772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.852014][T14772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.882233][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 774.893297][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 774.907275][T14805] bridge0: entered promiscuous mode [ 774.935722][ T5869] usb 9-1: USB disconnect, device number 51 [ 775.698789][ T5869] usb 7-1: USB disconnect, device number 55 [ 775.948748][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 776.109369][ T5869] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 776.192495][T14858] delete_channel: no stack [ 776.433831][ T5869] usb 7-1: Using ep0 maxpacket: 16 [ 776.466645][ T5869] usb 7-1: config 1 has an invalid descriptor of length 178, skipping remainder of the config [ 776.483182][ T5869] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 776.504523][ T5869] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 776.539280][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.512408][ T5869] usb 7-1: Product: syz [ 777.517179][ T5869] usb 7-1: Manufacturer: syz [ 777.522143][ T5869] usb 7-1: SerialNumber: syz [ 777.526359][T14857] delete_channel: no stack [ 778.915567][ T5869] usb 7-1: 0:2 : does not exist [ 778.925881][ T5869] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 778.995663][ T29] audit: type=1326 audit(1736156511.130:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000 [ 779.010849][ T5869] usb 7-1: USB disconnect, device number 56 [ 779.065578][T14882] netlink: 'syz.2.1781': attribute type 12 has an invalid length. [ 779.101995][ T29] audit: type=1326 audit(1736156511.162:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000 [ 779.185119][ T29] audit: type=1326 audit(1736156511.162:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000 [ 779.242367][ T29] audit: type=1326 audit(1736156511.204:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000 [ 779.319880][ T29] audit: type=1326 audit(1736156511.214:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000 [ 779.322255][T14892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.359624][ T8] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 779.367508][ T29] audit: type=1326 audit(1736156511.214:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f64eed7cce7 code=0x7ffc0000 [ 779.438891][T14892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.461093][ T29] audit: type=1326 audit(1736156511.214:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f64eed21f29 code=0x7ffc0000 [ 779.505898][T14509] kernel write not supported for file /1013/setgroups (pid: 14509 comm: kworker/1:1) [ 779.520810][ T5869] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 779.615593][ T29] audit: type=1326 audit(1736156511.214:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000 [ 779.773913][ T29] audit: type=1326 audit(1736156511.214:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f64eed7cce7 code=0x7ffc0000 [ 779.873078][ T29] audit: type=1326 audit(1736156511.214:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f64eed21f29 code=0x7ffc0000 [ 780.301409][T14918] 9pnet_fd: p9_fd_create_unix (14918): problem connecting socket: ./file0: -111 [ 781.259138][T14924] syz.8.1790 (14924): drop_caches: 2 [ 781.997109][T14970] kvm: kvm [14969]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 782.021011][T14970] kvm: kvm [14969]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 784.364591][T14988] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1795'. [ 786.708326][T14911] bond0: (slave bond_slave_0): Releasing backup interface [ 786.735445][T14911] bond0: (slave bond_slave_1): Releasing backup interface [ 786.786053][T14911] team0: Port device team_slave_0 removed [ 786.812731][T14911] team0: Port device team_slave_1 removed [ 786.819317][T14911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.826998][T14911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.843892][T14911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.846941][T14991] input: syz1 as /devices/virtual/input/input93 [ 786.851455][T14911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.950096][T14982] tipc: Failed to obtain node identity [ 786.955867][T14982] tipc: Enabling of bearer rejected, failed to enable media [ 787.300612][T14999] overlayfs: statfs failed on './file0' [ 787.602097][ T5902] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 787.757106][ T5902] usb 9-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 787.769152][ T5902] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.782870][ T5902] usb 9-1: config 0 descriptor?? [ 787.794106][ T5902] gspca_main: spca508-2.14.0 probing 8086:0110 [ 787.991262][ T5902] gspca_spca508: reg_read err -32 [ 788.417500][T15054] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 788.417500][T15054] program syz.2.1806 not setting count and/or reply_len properly [ 788.465610][T15054] loop2: detected capacity change from 0 to 7 [ 788.480128][ T5902] gspca_spca508: reg_read err -110 [ 788.496412][ T5902] gspca_spca508: reg_read err -32 [ 788.574597][T15054] Dev loop2: unable to read RDB block 7 [ 788.580640][T15054] loop2: unable to read partition table [ 788.587671][T15054] loop2: partition table beyond EOD, truncated [ 788.594197][T15054] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 788.944881][ T5902] gspca_spca508: reg_read err -32 [ 788.993210][ T5902] gspca_spca508: reg write: error -32 [ 789.060017][ T5902] spca508 9-1:0.0: probe with driver spca508 failed with error -32 [ 789.115739][ T5902] usb 9-1: USB disconnect, device number 53 [ 789.180372][T15058] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 789.234395][T15061] netlink: 'syz.8.1809': attribute type 27 has an invalid length. [ 789.269267][T15061] netlink: 'syz.8.1809': attribute type 3 has an invalid length. [ 789.279509][T15061] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1809'. [ 789.641555][ T974] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 789.803288][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 789.816571][ T974] usb 2-1: unable to get BOS descriptor or descriptor too short [ 789.838589][ T974] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 789.857356][ T974] usb 2-1: config 7 has no interface number 0 [ 789.867215][ T974] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947 [ 789.898867][ T974] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 789.915218][ T974] usb 2-1: config 7 interface 187 has no altsetting 0 [ 789.949638][ T974] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 789.965112][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.983664][ T974] usb 2-1: Product: syz [ 789.988772][ T974] usb 2-1: Manufacturer: syz [ 789.993429][ T974] usb 2-1: SerialNumber: syz [ 790.010978][T15070] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 790.026771][T15070] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 790.250861][ T974] usb 2-1: Limiting number of CPorts to U8_MAX [ 790.275313][ T974] usb 2-1: Unused bulk OUT endpoint found: 0x03 [ 790.291667][ T974] usb 2-1: Not enough endpoints found in device, aborting! [ 790.542734][T15129] netlink: zone id is out of range [ 791.143893][ T974] usb 2-1: USB disconnect, device number 91 [ 791.467274][T15139] netlink: 'syz.0.1823': attribute type 11 has an invalid length. [ 791.517515][T15139] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1823'. [ 792.210160][ T974] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 792.218013][ T8] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 792.387058][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.398305][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 792.414286][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.433304][ T974] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 792.448801][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 792.466599][ T974] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 792.480608][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 792.505312][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.518897][ T8] usb 3-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 792.534071][ T974] usb 2-1: config 0 descriptor?? [ 792.564418][ T8] usb 3-1: config 1 interface 0 has no altsetting 0 [ 792.591712][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 792.610987][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.632958][ T8] usb 3-1: Product: syz [ 792.643876][ T8] usb 3-1: Manufacturer: syz [ 792.658716][ T8] usb 3-1: SerialNumber: syz [ 792.931932][ T8] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input95 [ 792.945807][ T974] elecom 0003:056E:010C.001E: unknown main item tag 0x1 [ 792.972905][ T974] elecom 0003:056E:010C.001E: item fetching failed at offset 24/41 [ 793.010559][ T5182] bcm5974 3-1:1.0: could not read from device [ 793.032355][ T974] elecom 0003:056E:010C.001E: probe with driver elecom failed with error -22 [ 793.051353][ T8] usb 3-1: USB disconnect, device number 47 [ 793.059783][ T5182] bcm5974 3-1:1.0: could not read from device [ 793.147269][ T974] usb 2-1: USB disconnect, device number 92 [ 793.439273][T15201] Cannot find del_set index 0 as target [ 793.681339][ T974] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 793.834265][ T974] usb 9-1: Using ep0 maxpacket: 16 [ 793.856861][ T974] usb 9-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 793.896291][ T974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.922041][ T974] usb 9-1: Product: syz [ 793.927146][ T974] usb 9-1: Manufacturer: syz [ 793.935360][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 793.935415][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 794.876427][ T974] usb 9-1: SerialNumber: syz [ 794.883249][ T974] usb 9-1: config 0 descriptor?? [ 794.893397][ T974] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 795.037549][T15169] block nbd0: shutting down sockets [ 795.102786][ T974] pwc: Failed to set LED on/off time (-71) [ 795.124486][ T974] pwc: send_video_command error -71 [ 795.129761][ T974] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 796.108216][ T974] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 796.119787][ T974] usb 9-1: USB disconnect, device number 54 [ 799.559762][T15260] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1838'. [ 800.270722][T15272] block nbd2: shutting down sockets [ 804.122011][T15334] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1852'. [ 805.278609][T14509] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 805.440343][T14509] usb 9-1: device descriptor read/64, error -71 [ 805.669127][T14509] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 805.841399][T14509] usb 9-1: device descriptor read/64, error -71 [ 805.947263][T14509] usb usb9-port1: attempt power cycle [ 806.307932][T14509] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 806.435896][T14509] usb 9-1: device descriptor read/8, error -71 [ 806.701841][T14509] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 807.067140][T14509] usb 9-1: device descriptor read/8, error -71 [ 807.085594][T15394] netlink: 8365 bytes leftover after parsing attributes in process `syz.0.1861'. [ 807.115369][T15394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.175357][T14509] usb usb9-port1: unable to enumerate USB device [ 807.595115][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 807.595136][ T29] audit: type=1326 audit(1736156541.038:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000 [ 807.647416][ T29] audit: type=1326 audit(1736156541.038:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000 [ 807.709911][ T29] audit: type=1326 audit(1736156541.038:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000 [ 807.786210][ T29] audit: type=1326 audit(1736156541.038:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000 [ 807.813284][ T9] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 807.857784][ T29] audit: type=1326 audit(1736156541.038:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000 [ 807.892416][T15397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.939830][ T29] audit: type=1326 audit(1736156541.038:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000 [ 808.013262][ T29] audit: type=1326 audit(1736156541.038:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000 [ 808.057913][ T9] usb 3-1: config 0 has an invalid interface number: 140 but max is 0 [ 808.074777][ T9] usb 3-1: config 0 has no interface number 0 [ 808.103911][ T29] audit: type=1326 audit(1736156541.038:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000 [ 808.222946][ T29] audit: type=1326 audit(1736156541.038:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000 [ 808.273430][ T29] audit: type=1326 audit(1736156541.038:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000 [ 808.312383][ T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=71.01 [ 808.326348][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.364966][ T9] usb 3-1: Product: syz [ 808.386716][ T9] usb 3-1: Manufacturer: syz [ 808.423000][ T9] usb 3-1: SerialNumber: syz [ 808.451231][ T9] usb 3-1: config 0 descriptor?? [ 810.061602][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 810.083799][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 810.154467][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 810.192431][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 810.208513][ T5826] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 810.216235][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 810.371713][ T9] as10x_usb: device has been detected [ 810.388726][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 810.462659][T15432] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.507383][ T9] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 810.634827][ T9] as10x_usb: error during firmware upload part1 [ 810.641628][ T9] Registered device Elgato EyeTV DTT Deluxe [ 810.663138][ T9] usb 3-1: USB disconnect, device number 48 [ 810.715087][ T9] Unregistered device Elgato EyeTV DTT Deluxe [ 810.720322][ T9] as10x_usb: device has been disconnected [ 811.527001][T15432] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.793105][T15460] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 811.835972][T15460] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 811.839728][T15464] can0: slcan on ttyS3. [ 812.016521][T15466] can0 (unregistered): slcan off ttyS3. [ 812.138854][T15432] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.150026][ T5826] Bluetooth: hci3: command tx timeout [ 812.977127][T15480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1875'. [ 812.990355][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1875'. [ 812.997798][T15432] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.564234][T15490] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 813.715349][T15498] bond0: entered promiscuous mode [ 813.744529][T15498] bond_slave_0: entered promiscuous mode [ 813.760238][T15498] bond_slave_1: entered promiscuous mode [ 813.775817][T15498] batadv0: entered promiscuous mode [ 813.790407][T15498] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 814.151421][T15513] FAULT_INJECTION: forcing a failure. [ 814.151421][T15513] name failslab, interval 1, probability 0, space 0, times 0 [ 814.164294][T15513] CPU: 0 UID: 0 PID: 15513 Comm: syz.2.1879 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 814.175099][T15513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 814.185198][T15513] Call Trace: [ 814.188532][T15513] [ 814.191508][T15513] dump_stack_lvl+0x241/0x360 [ 814.196233][T15513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 814.201485][T15513] ? __pfx__printk+0x10/0x10 [ 814.206119][T15513] ? fs_reclaim_acquire+0x93/0x130 [ 814.211273][T15513] ? __pfx___might_resched+0x10/0x10 [ 814.216612][T15513] should_fail_ex+0x3b0/0x4e0 [ 814.221331][T15513] should_failslab+0xac/0x100 [ 814.226055][T15513] __kmalloc_noprof+0xdd/0x4c0 [ 814.230858][T15513] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 814.236626][T15513] tomoyo_realpath_from_path+0xcf/0x5e0 [ 814.242227][T15513] tomoyo_path_number_perm+0x236/0x860 [ 814.247721][T15513] ? __lock_acquire+0x1397/0x2100 [ 814.252784][T15513] ? tomoyo_path_number_perm+0x206/0x860 [ 814.258457][T15513] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 814.264521][T15513] ? __fget_files+0x2a/0x410 [ 814.269160][T15513] ? __fget_files+0x2a/0x410 [ 814.273788][T15513] security_file_ioctl+0xc6/0x2a0 [ 814.278853][T15513] __se_sys_ioctl+0x46/0x170 [ 814.283497][T15513] do_syscall_64+0xf3/0x230 [ 814.288051][T15513] ? clear_bhb_loop+0x35/0x90 [ 814.292763][T15513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.298699][T15513] RIP: 0033:0x7f64eed85d29 [ 814.303154][T15513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.322800][T15513] RSP: 002b:00007f64efc3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.331257][T15513] RAX: ffffffffffffffda RBX: 00007f64eef76160 RCX: 00007f64eed85d29 [ 814.339261][T15513] RDX: 0000000020000000 RSI: 00000000804c4700 RDI: 0000000000000006 [ 814.347262][T15513] RBP: 00007f64efc3d090 R08: 0000000000000000 R09: 0000000000000000 [ 814.355265][T15513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.363265][T15513] R13: 0000000000000000 R14: 00007f64eef76160 R15: 00007fff9dbeb608 [ 814.371290][T15513] [ 814.375260][T15513] ERROR: Out of memory at tomoyo_realpath_from_path. [ 814.385979][ T5826] Bluetooth: hci3: command tx timeout [ 814.469903][T15432] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.203512][T15432] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.346080][T15436] chnl_net:caif_netlink_parms(): no params data found [ 815.442012][T15432] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.537737][T15432] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.830285][T15541] 8021q: VLANs not supported on ipvlan0 [ 815.860424][T15548] loop9: detected capacity change from 0 to 6 [ 815.872015][T15436] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.893982][T15436] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.901477][T15548] Dev loop9: unable to read RDB block 6 [ 815.919526][T15548] loop9: unable to read partition table [ 815.928964][T15436] bridge_slave_0: entered allmulticast mode [ 815.946412][T15548] loop9: partition table beyond EOD, truncated [ 815.955943][T15436] bridge_slave_0: entered promiscuous mode [ 815.965450][T15436] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.968092][T15548] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 815.968092][T15548] ) failed (rc=-5) [ 815.999120][T15436] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.020821][T15436] bridge_slave_1: entered allmulticast mode [ 816.067335][T15436] bridge_slave_1: entered promiscuous mode [ 816.239827][T15436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.252140][T15436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.342394][ T5826] Bluetooth: hci3: command tx timeout [ 816.407350][T15436] team0: Port device team_slave_0 added [ 816.473304][T15436] team0: Port device team_slave_1 added [ 816.651705][T15436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.683562][T15436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 816.725548][T15436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.738798][T15436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.746690][T15436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 816.773315][T15436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.243399][T15436] hsr_slave_0: entered promiscuous mode [ 818.309014][T15436] hsr_slave_1: entered promiscuous mode [ 818.325918][ T5826] Bluetooth: hci3: command tx timeout [ 818.336282][T15436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 818.344412][T15436] Cannot create hsr debugfs directory [ 818.379544][T15588] trusted_key: encrypted_key: insufficient parameters specified [ 818.389754][T15588] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1891'. [ 820.210604][T15651] netlink: 'syz.6.1905': attribute type 1 has an invalid length. [ 820.223650][T15651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1905'. [ 820.277897][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 820.451855][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 820.471233][ T9] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 820.573317][ T9] usb 3-1: config 0 has no interface number 0 [ 820.589027][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 820.598787][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.611874][ T9] usb 3-1: Product: syz [ 820.616485][ T9] usb 3-1: Manufacturer: syz [ 820.621749][ T9] usb 3-1: SerialNumber: syz [ 820.636254][ T9] usb 3-1: config 0 descriptor?? [ 820.822605][ T9] msi2500 3-1:0.246: Registered as swradio24 [ 820.849401][ T9] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 821.040842][ T9] usb 3-1: USB disconnect, device number 49 [ 821.098376][T15669] ptrace attach of "./syz-executor exec"[11659] was attempted by " [ 821.394974][T15436] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 821.567198][T15436] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 821.624968][T15436] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 821.658383][T15436] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 821.742048][T15436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.758923][T15436] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.795234][T15436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 821.805728][T15436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 821.825041][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.832239][ T6452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.851655][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.858822][ T6452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.262991][T15436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.394124][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 822.565727][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 822.585832][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 822.602754][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.610821][ T9] usb 3-1: Product: syz [ 822.651756][ T9] usb 3-1: Manufacturer: syz [ 822.656437][ T9] usb 3-1: SerialNumber: syz [ 822.695578][ T9] usb 3-1: config 0 descriptor?? [ 822.866742][T15436] veth0_vlan: entered promiscuous mode [ 822.916645][ T9] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 822.925741][ T9] 00 00 00 00 00 00 00 00 [ 822.930466][ T9] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 822.944025][T15436] veth1_vlan: entered promiscuous mode [ 823.039443][T15436] veth0_macvtap: entered promiscuous mode [ 823.076830][T15436] veth1_macvtap: entered promiscuous mode [ 823.108476][ T9] usb 3-1: USB disconnect, device number 50 [ 823.138756][ T9537] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 823.164648][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.200482][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.250917][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.278285][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.289525][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.300626][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.311916][T15436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.326709][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.337546][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.347769][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.358617][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.368708][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.381396][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.397627][T15436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.856020][T15436] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.917756][T15436] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.965795][T15436] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.974570][T15436] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.087497][T15736] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 824.476186][T15744] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1923'. [ 824.603669][T15746] FAULT_INJECTION: forcing a failure. [ 824.603669][T15746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 824.617603][T15746] CPU: 1 UID: 0 PID: 15746 Comm: syz.2.1924 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 824.628407][T15746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 824.638496][T15746] Call Trace: [ 824.641809][T15746] [ 824.644858][T15746] dump_stack_lvl+0x241/0x360 [ 824.649589][T15746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 824.654836][T15746] ? __pfx__printk+0x10/0x10 [ 824.659483][T15746] should_fail_ex+0x3b0/0x4e0 [ 824.664205][T15746] _copy_to_user+0x31/0xb0 [ 824.668783][T15746] simple_read_from_buffer+0xca/0x150 [ 824.674221][T15746] proc_fail_nth_read+0x1e9/0x250 [ 824.679302][T15746] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 824.684901][T15746] ? rw_verify_area+0x55e/0x6f0 [ 824.689800][T15746] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 824.695395][T15746] vfs_read+0x1fc/0xb70 [ 824.699635][T15746] ? __pfx___mutex_lock+0x10/0x10 [ 824.704711][T15746] ? __pfx_vfs_read+0x10/0x10 [ 824.709430][T15746] ? __fget_files+0x2a/0x410 [ 824.714054][T15746] ? __fget_files+0x395/0x410 [ 824.718766][T15746] ? __fget_files+0x2a/0x410 [ 824.723402][T15746] ksys_read+0x18f/0x2b0 [ 824.727690][T15746] ? __pfx_ksys_read+0x10/0x10 [ 824.732494][T15746] ? do_syscall_64+0x100/0x230 [ 824.737304][T15746] ? do_syscall_64+0xb6/0x230 [ 824.742024][T15746] do_syscall_64+0xf3/0x230 [ 824.746577][T15746] ? clear_bhb_loop+0x35/0x90 [ 824.751291][T15746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.757232][T15746] RIP: 0033:0x7f64eed8473c [ 824.761680][T15746] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 824.781336][T15746] RSP: 002b:00007f64efc3d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 824.789801][T15746] RAX: ffffffffffffffda RBX: 00007f64eef76160 RCX: 00007f64eed8473c [ 824.797811][T15746] RDX: 000000000000000f RSI: 00007f64efc3d0a0 RDI: 0000000000000007 [ 824.805816][T15746] RBP: 00007f64efc3d090 R08: 0000000000000000 R09: 0000000000000000 [ 824.813820][T15746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.821845][T15746] R13: 0000000000000000 R14: 00007f64eef76160 R15: 00007fff9dbeb608 [ 824.829869][T15746] [ 825.768321][T15752] netlink: 'syz.0.1926': attribute type 64 has an invalid length. [ 825.824834][ T9537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.832939][ T9537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.877358][ T7208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.885922][ T7208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.986157][ T974] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 826.157257][ T974] usb 9-1: Using ep0 maxpacket: 16 [ 826.166231][ T974] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 826.176066][ T974] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 826.184195][ T974] usb 9-1: Product: syz [ 826.204648][ T5867] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 826.215956][ T974] usb 9-1: Manufacturer: syz [ 826.220614][ T974] usb 9-1: SerialNumber: syz [ 826.239032][ T974] usb 9-1: config 0 descriptor?? [ 826.357464][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 826.366121][ T5867] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.377947][ T8528] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 826.386268][ T5867] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.397551][ T5867] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 826.411474][ T5867] usb 3-1: config 0 interface 0 has no altsetting 0 [ 826.418378][ T5867] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 826.427551][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.437821][ T5867] usb 3-1: config 0 descriptor?? [ 826.447696][ T25] usb 9-1: USB disconnect, device number 59 [ 826.538053][ T8528] usb 5-1: Using ep0 maxpacket: 8 [ 826.545362][ T8528] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.558137][ T8528] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.568249][ T8528] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 826.579909][ T8528] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.600170][ T8528] usb 5-1: config 0 descriptor?? [ 827.056090][T15779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.066273][T15779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.383705][ T8528] saitek 0003:06A3:0CCD.001F: unknown main item tag 0x0 [ 827.483881][ T8528] saitek 0003:06A3:0CCD.001F: unknown main item tag 0x0 [ 827.536754][ T8528] saitek 0003:06A3:0CCD.001F: item fetching failed at offset 2/11 [ 827.555457][ T8528] saitek 0003:06A3:0CCD.001F: parse failed [ 827.571687][ T8528] saitek 0003:06A3:0CCD.001F: probe with driver saitek failed with error -22 [ 827.622111][ T8528] usb 5-1: USB disconnect, device number 28 [ 829.597794][ T5867] usbhid 3-1:0.0: can't add hid device: -71 [ 829.606975][ T5867] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 829.684881][ T5867] usb 3-1: USB disconnect, device number 51 [ 829.845599][T15811] vlan3: entered promiscuous mode [ 829.862563][T15811] vlan3: entered allmulticast mode [ 829.883319][T15811] hsr_slave_1: entered allmulticast mode [ 830.277988][T15823] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1941'. [ 830.630001][T15826] ubi0: attaching mtd0 [ 830.634594][T15826] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 830.690338][T15826] x_tables: ip_tables: osf match: only valid for protocol 6 [ 831.788714][ T8] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 831.877809][T15829] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 831.951389][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 831.958458][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.980406][ T8] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 831.996958][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.007976][ T8] usb 5-1: Product: syz [ 832.012220][ T8] usb 5-1: Manufacturer: syz [ 832.017089][ T8] usb 5-1: SerialNumber: syz [ 832.038260][ T8] usb 5-1: config 0 descriptor?? [ 832.053838][ T8] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 832.163282][ T974] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 832.323197][ T8] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 832.332467][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 832.357437][ T8] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 832.369428][ T974] usb 3-1: no configurations [ 832.376817][ T974] usb 3-1: can't read configurations, error -22 [ 832.392474][ T8] usb 5-1: USB disconnect, device number 29 [ 832.531654][ T974] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 832.684989][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 832.692752][ T974] usb 3-1: no configurations [ 832.698832][ T974] usb 3-1: can't read configurations, error -22 [ 832.714882][ T974] usb usb3-port1: attempt power cycle [ 833.046658][ T974] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 833.075978][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 833.082391][ T974] usb 3-1: no configurations [ 833.097249][ T974] usb 3-1: can't read configurations, error -22 [ 833.237335][ T974] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 833.267005][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 833.272833][ T974] usb 3-1: no configurations [ 833.277843][ T8] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 833.286020][ T974] usb 3-1: can't read configurations, error -22 [ 833.294224][ T974] usb usb3-port1: unable to enumerate USB device [ 833.441403][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 833.451048][ T8] usb 5-1: not running at top speed; connect to a high speed hub [ 833.460246][ T8] usb 5-1: config 253 has an invalid interface number: 202 but max is 0 [ 833.469017][ T8] usb 5-1: config 253 has no interface number 0 [ 833.477967][ T8] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 833.487397][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.496039][ T8] usb 5-1: Product: syz [ 833.500470][ T8] usb 5-1: Manufacturer: syz [ 833.505554][ T8] usb 5-1: SerialNumber: syz [ 835.264401][ T8] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 835.284874][ T7202] usb 5-1: Failed to submit usb control message: -71 [ 835.307150][ T7202] usb 5-1: unable to send the bmi data to the device: -71 [ 835.402819][ T7202] usb 5-1: unable to get target info from device [ 835.430674][ T8] usb 5-1: USB disconnect, device number 30 [ 835.480100][ T7202] usb 5-1: could not get target info (-71) [ 835.502109][ T7202] usb 5-1: could not probe fw (-71) [ 836.549247][T15899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1960'. [ 836.571293][T15899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1960'. [ 836.863287][T15888] syz.6.1957: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 836.882941][ T8528] usb 9-1: new full-speed USB device number 60 using dummy_hcd [ 836.902507][T15888] CPU: 1 UID: 0 PID: 15888 Comm: syz.6.1957 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 836.913381][T15888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 836.923479][T15888] Call Trace: [ 836.926790][T15888] [ 836.929755][T15888] dump_stack_lvl+0x241/0x360 [ 836.934487][T15888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 836.939783][T15888] ? __pfx__printk+0x10/0x10 [ 836.944443][T15888] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 836.950915][T15888] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 836.957484][T15888] warn_alloc+0x278/0x410 [ 836.961955][T15888] ? __pfx_warn_alloc+0x10/0x10 [ 836.966865][T15888] ? hash_netport4_resize+0x23b/0x1bb0 [ 836.972377][T15888] ? __get_vm_area_node+0x1c8/0x2d0 [ 836.977631][T15888] ? __get_vm_area_node+0x25c/0x2d0 [ 836.982887][T15888] __vmalloc_node_range_noprof+0x62f/0x1380 [ 836.988825][T15888] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 836.994618][T15888] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 837.001026][T15888] ? rcu_is_watching+0x15/0xb0 [ 837.005836][T15888] ? trace_kmalloc+0x1f/0xd0 [ 837.010466][T15888] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 837.015962][T15888] ? __kvmalloc_node_noprof+0x72/0x190 [ 837.021495][T15888] __kvmalloc_node_noprof+0x142/0x190 [ 837.026923][T15888] ? hash_netport4_resize+0x23b/0x1bb0 [ 837.032440][T15888] hash_netport4_resize+0x23b/0x1bb0 [ 837.037792][T15888] ? __pfx_hash_netport4_add+0x10/0x10 [ 837.043323][T15888] ? __local_bh_enable_ip+0x168/0x200 [ 837.048748][T15888] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 837.054492][T15888] ? call_ad+0x182/0xa70 [ 837.058752][T15888] call_ad+0x38b/0xa70 [ 837.062836][T15888] ? __pfx_call_ad+0x10/0x10 [ 837.067442][T15888] ? __nla_parse+0x40/0x60 [ 837.071873][T15888] ip_set_ad+0x7e0/0x990 [ 837.076131][T15888] ? __pfx_ip_set_ad+0x10/0x10 [ 837.080901][T15888] ? trace_contention_end+0x3c/0x120 [ 837.086225][T15888] ? nfnetlink_rcv_msg+0x225/0x1180 [ 837.091458][T15888] nfnetlink_rcv_msg+0xbec/0x1180 [ 837.096539][T15888] ? nfnetlink_rcv_msg+0x225/0x1180 [ 837.101768][T15888] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 837.107235][T15888] ? stack_trace_save+0x118/0x1d0 [ 837.112290][T15888] ? dev_hard_start_xmit+0x27a/0x7d0 [ 837.117593][T15888] ? __dev_queue_xmit+0x1b73/0x3f50 [ 837.122818][T15888] ? __netlink_deliver_tap+0x56b/0x7f0 [ 837.128285][T15888] ? netlink_deliver_tap+0x19d/0x1b0 [ 837.133577][T15888] ? netlink_unicast+0x7c4/0x990 [ 837.138535][T15888] ? netlink_sendmsg+0x8e4/0xcb0 [ 837.143524][T15888] ? __sock_sendmsg+0x221/0x270 [ 837.148390][T15888] ? ____sys_sendmsg+0x52a/0x7e0 [ 837.153358][T15888] ? __sys_sendmsg+0x269/0x350 [ 837.158145][T15888] netlink_rcv_skb+0x1e3/0x430 [ 837.162919][T15888] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 837.168394][T15888] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 837.173728][T15888] ? cap_capable+0x1b4/0x250 [ 837.178333][T15888] ? safesetid_security_capable+0xb2/0x1d0 [ 837.184155][T15888] ? bpf_lsm_capable+0x9/0x10 [ 837.188839][T15888] ? security_capable+0x7e/0x2d0 [ 837.193814][T15888] nfnetlink_rcv+0x297/0x2ab0 [ 837.198507][T15888] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 837.204245][T15888] ? __dev_queue_xmit+0x2f4/0x3f50 [ 837.209368][T15888] ? __dev_queue_xmit+0x1775/0x3f50 [ 837.214575][T15888] ? kasan_save_track+0x51/0x80 [ 837.219445][T15888] ? ____sys_sendmsg+0x52a/0x7e0 [ 837.224394][T15888] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 837.229519][T15888] ? __dev_queue_xmit+0x2f4/0x3f50 [ 837.234670][T15888] ? __pfx___dev_queue_xmit+0x10/0x10 [ 837.240107][T15888] ? ref_tracker_free+0x643/0x7e0 [ 837.245147][T15888] ? __asan_memcpy+0x40/0x70 [ 837.249751][T15888] ? __pfx_ref_tracker_free+0x10/0x10 [ 837.255142][T15888] ? netlink_deliver_tap+0x2e/0x1b0 [ 837.260345][T15888] ? skb_clone+0x240/0x390 [ 837.264773][T15888] ? __pfx_lock_release+0x10/0x10 [ 837.269830][T15888] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 837.275326][T15888] ? netlink_deliver_tap+0x2e/0x1b0 [ 837.280535][T15888] netlink_unicast+0x7f6/0x990 [ 837.285322][T15888] ? __pfx_netlink_unicast+0x10/0x10 [ 837.290623][T15888] ? __virt_addr_valid+0x45f/0x530 [ 837.295745][T15888] ? __phys_addr_symbol+0x2f/0x70 [ 837.300777][T15888] ? __check_object_size+0x47a/0x730 [ 837.306080][T15888] netlink_sendmsg+0x8e4/0xcb0 [ 837.310867][T15888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 837.316189][T15888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 837.321481][T15888] __sock_sendmsg+0x221/0x270 [ 837.326179][T15888] ____sys_sendmsg+0x52a/0x7e0 [ 837.330969][T15888] ? __pfx_____sys_sendmsg+0x10/0x10 [ 837.336275][T15888] ? __fget_files+0x2a/0x410 [ 837.340893][T15888] ? __fget_files+0x2a/0x410 [ 837.345495][T15888] __sys_sendmsg+0x269/0x350 [ 837.350101][T15888] ? __pfx___sys_sendmsg+0x10/0x10 [ 837.355250][T15888] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 837.361587][T15888] ? do_syscall_64+0x100/0x230 [ 837.366367][T15888] ? do_syscall_64+0xb6/0x230 [ 837.371076][T15888] do_syscall_64+0xf3/0x230 [ 837.375598][T15888] ? clear_bhb_loop+0x35/0x90 [ 837.380301][T15888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.386213][T15888] RIP: 0033:0x7fa1a0f85d29 [ 837.390634][T15888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.410273][T15888] RSP: 002b:00007fa1a1e1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.418705][T15888] RAX: ffffffffffffffda RBX: 00007fa1a1175fa0 RCX: 00007fa1a0f85d29 [ 837.426778][T15888] RDX: 0000000000000080 RSI: 00000000200002c0 RDI: 0000000000000007 [ 837.434766][T15888] RBP: 00007fa1a1001b08 R08: 0000000000000000 R09: 0000000000000000 [ 837.442766][T15888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.450743][T15888] R13: 0000000000000000 R14: 00007fa1a1175fa0 R15: 00007fff668625e8 [ 837.458754][T15888] [ 837.489723][T15888] Mem-Info: [ 837.493016][T15888] active_anon:392 inactive_anon:9526 isolated_anon:0 [ 837.493016][T15888] active_file:17446 inactive_file:41222 isolated_file:0 [ 837.493016][T15888] unevictable:768 dirty:86 writeback:0 [ 837.493016][T15888] slab_reclaimable:6540 slab_unreclaimable:107587 [ 837.493016][T15888] mapped:34214 shmem:4363 pagetables:1119 [ 837.493016][T15888] sec_pagetables:0 bounce:0 [ 837.493016][T15888] kernel_misc_reclaimable:0 [ 837.493016][T15888] free:1306141 free_pcp:1387 free_cma:0 [ 837.539449][T15888] Node 0 active_anon:1568kB inactive_anon:38104kB active_file:69708kB inactive_file:164888kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136856kB dirty:340kB writeback:0kB shmem:15916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12712kB pagetables:4576kB sec_pagetables:0kB all_unreclaimable? no [ 838.160188][T15888] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 838.193307][T15888] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 838.221970][T15888] lowmem_reserve[]: 0 2465 2466 0 0 [ 838.227376][T15888] Node 0 DMA32 free:1306580kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:8164kB inactive_anon:26568kB active_file:68936kB inactive_file:164836kB unevictable:1536kB writepending:340kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:5728kB local_pcp:192kB free_cma:0kB [ 838.309734][ T8528] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.320527][T15888] lowmem_reserve[]: 0 0 0 0 0 [ 838.325731][T15888] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:780kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 838.337268][ T8528] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 838.362343][ T8528] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.370563][ T8528] usb 9-1: Product: syz [ 838.374968][ T8528] usb 9-1: Manufacturer: syz [ 838.379603][ T8528] usb 9-1: SerialNumber: syz [ 838.394558][ T8528] usb 9-1: config 0 descriptor?? [ 838.430780][ T8528] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 838.451886][T15888] lowmem_reserve[]: 0 0 0 0 0 [ 838.456723][T15888] Node 1 Normal free:3907876kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 838.486583][T15888] lowmem_reserve[]: 0 0 0 0 0 [ 838.491612][T15888] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 838.506115][T15888] Node 0 DMA32: 317*4kB (UM) 1087*8kB (UME) 727*16kB (UME) 409*32kB (UME) 342*64kB (UME) 92*128kB (UME) 110*256kB (UME) 141*512kB (UME) 41*1024kB (UME) 6*2048kB (ME) 267*4096kB (UM) = 1316604kB [ 838.534635][T15888] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 838.546928][T15888] Node 1 Normal: 225*4kB (UME) 66*8kB (UME) 49*16kB (UME) 206*32kB (UME) 89*64kB (UME) 37*128kB (UME) 12*256kB (UME) 9*512kB (UME) 4*1024kB (UME) 1*2048kB (U) 946*4096kB (M) = 3907876kB [ 838.568020][T15888] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 838.578123][T15888] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 838.583404][ T5867] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 838.588595][T15888] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 838.597801][T15925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.623683][ T8528] usb 9-1: USB disconnect, device number 60 [ 838.623945][T15888] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 838.639844][T15925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.655522][T15888] 60183 total pagecache pages [ 838.669510][T15888] 0 pages in swap cache [ 838.673833][T15888] Free swap = 124540kB [ 838.678035][T15888] Total swap = 124996kB [ 838.689558][T15888] 2097051 pages RAM [ 838.693436][T15888] 0 pages HighMem/MovableOnly [ 838.704607][T15888] 427005 pages reserved [ 838.713994][T15888] 0 pages cma reserved [ 838.916929][ T5869] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 839.210941][ T5869] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.290683][ T5869] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 839.395753][ T5869] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 839.405649][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 839.413950][ T5869] usb 5-1: SerialNumber: syz [ 839.701648][ T5869] usb 5-1: 0:2 : does not exist [ 839.714507][ T5869] usb 5-1: USB disconnect, device number 31 [ 842.059402][T15973] sg_write: data in/out 393216/1 bytes for SCSI command 0xf2-- guessing data in; [ 842.059402][T15973] program syz.6.1982 not setting count and/or reply_len properly [ 842.113560][T15975] netlink: 'syz.4.1981': attribute type 10 has an invalid length. [ 842.138640][T15975] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1981'. [ 842.169414][T15975] team0: entered promiscuous mode [ 842.174674][T15975] team_slave_0: entered promiscuous mode [ 842.203245][T15975] team_slave_1: entered promiscuous mode [ 842.238325][T15975] team0: entered allmulticast mode [ 842.279484][T15975] team_slave_0: entered allmulticast mode [ 842.303533][T15975] team_slave_1: entered allmulticast mode [ 842.358534][T15975] bridge0: port 3(team0) entered blocking state [ 842.413821][T15975] bridge0: port 3(team0) entered disabled state [ 842.478495][T15975] bridge0: port 3(team0) entered blocking state [ 842.485082][T15975] bridge0: port 3(team0) entered forwarding state [ 844.133042][T16000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.157186][T16000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.236007][T16002] lo: entered promiscuous mode [ 844.246899][T16002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 844.268228][T16005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 844.275614][T16005] IPv6: NLM_F_CREATE should be set when creating new route [ 844.282946][T16005] IPv6: NLM_F_CREATE should be set when creating new route [ 846.129203][ T8] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 846.238981][T16027] openvswitch: netlink: Tunnel attr 54 out of range max 16 [ 846.999346][ T8] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 847.008613][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.019154][ T8] usb 5-1: config 0 descriptor?? [ 847.030385][ T8] cp210x 5-1:0.0: cp210x converter detected [ 847.150948][T16030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1998'. [ 847.274626][ T8] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 847.318242][ T8] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 847.336960][ T8] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 847.401939][ T8] usb 5-1: cp210x converter now attached to ttyUSB0 [ 847.426796][ T8] usb 5-1: USB disconnect, device number 32 [ 847.452789][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 847.468551][T16043] xt_hashlimit: invalid rate [ 847.471114][ T8] cp210x 5-1:0.0: device disconnected [ 847.817250][T16049] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2000'. [ 847.966365][T16053] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2002'. [ 848.028219][T16051] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2002'. [ 848.175960][T16051] 9pnet_fd: Insufficient options for proto=fd [ 848.446754][T16056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2003'. [ 852.480147][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 852.496509][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 853.463483][T16128] netfs: Couldn't get user pages (rc=-14) [ 854.074056][T16141] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2027'. [ 854.086201][T16141] netlink: 'syz.2.2027': attribute type 1 has an invalid length. [ 854.278344][ T8] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 854.792846][ T8] usb 9-1: Using ep0 maxpacket: 16 [ 854.805483][ T8] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice= 6.8a [ 854.814672][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.828346][ T8] usb 9-1: Product: syz [ 854.832635][ T8] usb 9-1: Manufacturer: syz [ 854.837284][ T8] usb 9-1: SerialNumber: syz [ 854.845632][ T8] usb 9-1: config 0 descriptor?? [ 854.856397][ T8] mcba_usb 9-1:0.0: Can't find endpoints [ 855.070120][ T8] usb 9-1: USB disconnect, device number 61 [ 857.617354][T16190] kvm: kvm [16189]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 857.650992][T16190] kvm: kvm [16189]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 857.855032][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2041'. [ 857.933103][T16198] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2042'. [ 858.833293][T16216] overlayfs: failed to resolve './file1': -2 [ 860.232183][T16240] binder_alloc: 16239: binder_alloc_buf, no vma [ 860.472255][ T25] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 860.655716][ T25] usb 9-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 860.672136][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.689354][ T25] usb 9-1: config 0 descriptor?? [ 860.929264][ T25] kaweth 9-1:0.0: Firmware present in device. [ 861.114954][ T25] kaweth 9-1:0.0: Statistics collection: 0 [ 861.134475][ T25] kaweth 9-1:0.0: Multicast filter limit: 0 [ 861.151877][ T25] kaweth 9-1:0.0: MTU: 0 [ 861.156209][ T25] kaweth 9-1:0.0: Read MAC address 00:00:00:00:00:00 [ 861.656180][T16273] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 861.723244][ T25] kaweth 9-1:0.0: Error setting receive filter [ 861.731331][ T25] kaweth 9-1:0.0: probe with driver kaweth failed with error -5 [ 861.742913][ T25] usb 9-1: USB disconnect, device number 62 [ 861.891812][ T5867] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 862.034776][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 862.047394][ T5867] usb 3-1: config index 0 descriptor too short (expected 2852, got 36) [ 862.064779][ T5867] usb 3-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 862.108808][ T5867] usb 3-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 862.164404][ T5867] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 33 [ 862.208629][ T5867] usb 3-1: New USB device found, idVendor=006a, idProduct=032c, bcdDevice= 0.00 [ 862.288644][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.651707][ T5867] usb 3-1: config 0 descriptor?? [ 864.379162][ T5869] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 864.569955][ T5869] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 864.665952][ T5869] usb 9-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 864.765401][ T5869] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.193033][ T974] usb 3-1: USB disconnect, device number 57 [ 865.200574][ T5869] usb 9-1: config 0 descriptor?? [ 865.309237][T16314] netlink: 'syz.6.2073': attribute type 1 has an invalid length. [ 865.337200][T16314] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2073'. [ 866.510863][ T5869] aquacomputer_d5next 0003:0C70:F001.0020: hidraw0: USB HID vdd.33 Device [HID 0c70:f001] on usb-dummy_hcd.8-1/input0 [ 866.928172][T16334] netlink: zone id is out of range [ 867.809682][ T974] usb 9-1: USB disconnect, device number 63 [ 867.921631][ T8] kernel write not supported for file bpf-prog (pid: 8 comm: kworker/0:0) [ 867.938136][ T8] kernel write not supported for file bpf-prog (pid: 8 comm: kworker/0:0) [ 869.035559][T16346] netlink: 'syz.2.2081': attribute type 21 has an invalid length. [ 869.060559][T16352] sctp: [Deprecated]: syz.8.2083 (pid 16352) Use of struct sctp_assoc_value in delayed_ack socket option. [ 869.060559][T16352] Use struct sctp_sack_info instead [ 869.077656][T16346] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2081'. [ 869.367356][T16358] kvm: kvm [16356]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 869.422757][T16358] kvm: kvm [16356]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 870.530216][T16381] netlink: zone id is out of range [ 872.281102][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2093'. [ 872.441916][T16406] program syz.4.2096 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 873.167868][T16418] binder: 16417:16418 ioctl 400c620e 0 returned -14 [ 873.393838][ T5867] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 873.582162][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.594150][ T5867] usb 3-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 873.612965][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.632774][ T5867] usb 3-1: config 0 descriptor?? [ 873.653365][ T5867] option 3-1:0.0: GSM modem (1-port) converter detected [ 876.369407][ T974] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 876.747121][T16453] overlay: Unknown parameter 'euid>00000000000000000000' [ 877.139771][T16451] cgroup: Unknown subsys name 'fsuuid' [ 877.739644][ T974] usb 9-1: Using ep0 maxpacket: 16 [ 877.858903][ T974] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 877.867668][ T974] usb 9-1: can't read configurations, error -71 [ 877.935513][T16459] netfs: Couldn't get user pages (rc=-14) [ 877.973879][T16465] Invalid logical block size (-1) [ 879.130484][T16484] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2120'. [ 879.230365][T16484] vlan2: entered promiscuous mode [ 879.266034][T16484] team0: entered promiscuous mode [ 879.559435][T16484] team0: left promiscuous mode [ 884.235911][ T5826] Bluetooth: hci3: command tx timeout [ 885.393699][T16528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.447663][T16528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.663128][ C0] Unknown status report in ack skb [ 885.952159][T16536] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 886.005432][T16538] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2135'. [ 886.033406][T16536] batman_adv: batadv0: Adding interface: ip6gretap1 [ 886.143942][T16536] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.656886][ T5820] kworker/0:3 (5820) used greatest stack depth: 14040 bytes left [ 886.856424][T16536] batman_adv: batadv0: Interface activated: ip6gretap1 [ 886.890568][T16538] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 886.945525][T16538] batman_adv: batadv0: Removing interface: ip6gretap1 [ 887.992479][T16552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2138'. [ 888.224731][T16557] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2139'. [ 889.834990][T16571] fuseblk: Unknown parameter 'measure' [ 889.957604][ T974] usb 3-1: USB disconnect, device number 58 [ 889.964227][ T974] option 3-1:0.0: device disconnected [ 890.313249][T16572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.023772][T16572] bond0: (slave rose0): Enslaving as an active interface with an up link [ 891.047753][T16581] libceph: resolve '0.' (ret=-3): failed [ 891.386893][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 891.386915][ T29] audit: type=1326 audit(1736156629.083:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16591 comm="syz.8.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e3d85d29 code=0x7ffc0000 [ 891.415187][ C1] vkms_vblank_simulate: vblank timer overrun [ 891.436747][ T29] audit: type=1326 audit(1736156629.083:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16591 comm="syz.8.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e3d85d29 code=0x7ffc0000 [ 894.589361][T16622] /dev/sg0: Can't lookup blockdev [ 894.847692][ T5867] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 895.444166][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 895.454321][ T5867] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 895.462557][ T5867] usb 5-1: config 0 has no interface number 0 [ 895.477550][ T5867] usb 5-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice=e8.e1 [ 895.506051][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.536371][ T5867] usb 5-1: Product: syz [ 895.542090][ T5867] usb 5-1: Manufacturer: syz [ 895.546750][ T5867] usb 5-1: SerialNumber: syz [ 895.570180][ T5867] usb 5-1: config 0 descriptor?? [ 895.593383][ T5867] usb 5-1: can't set first interface for hiFace device. [ 895.634838][ T5867] snd-usb-hiface 5-1:0.253: probe with driver snd-usb-hiface failed with error -5 [ 895.792357][T16618] usb usb7: usbfs: process 16618 (syz.4.2159) did not claim interface 0 before use [ 895.802167][T16618] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 895.819379][T16618] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2159'. [ 895.861904][T16618] PKCS8: Unsupported PKCS#8 version [ 896.005016][ T5867] usb 5-1: USB disconnect, device number 33 [ 896.456467][T16648] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 896.472999][T16648] binder: 16647:16648 ioctl 400c620e 200001c0 returned -22 [ 896.483163][T16648] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2168'. [ 896.576247][T16655] futex_wake_op: syz.4.2170 tries to shift op by -1; fix this program [ 898.072221][T16663] Bluetooth: hci5: Frame reassembly failed (-84) [ 899.192780][T16666] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2173'. [ 900.561363][ T5826] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 902.212308][ T5867] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 904.731816][T16727] netlink: zone id is out of range [ 904.770830][T14509] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 904.784648][ T5867] usb 5-1: device descriptor read/all, error -71 [ 904.935473][T14509] usb 9-1: Using ep0 maxpacket: 32 [ 904.942854][T14509] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 904.959503][T14509] usb 9-1: config 0 has no interface number 0 [ 905.184033][T14509] usb 9-1: config 0 interface 184 has no altsetting 0 [ 905.192123][T14509] usb 9-1: string descriptor 0 read error: -71 [ 905.198478][T14509] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 905.207859][T14509] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.220134][T14509] usb 9-1: config 0 descriptor?? [ 905.258156][T14509] usb 9-1: can't set config #0, error -71 [ 905.467816][T14509] usb 9-1: USB disconnect, device number 66 [ 907.189412][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 907.194927][T16751] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2201'. [ 907.518327][ T25] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 907.752937][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.831625][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 907.954981][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 908.175685][ T974] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 908.494698][T16774] syz.8.2207: attempt to access beyond end of device [ 908.494698][T16774] nbd8: rw=0, sector=64, nr_sectors = 1 limit=0 [ 908.566008][ T974] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 908.591098][T16774] syz.8.2207: attempt to access beyond end of device [ 908.591098][T16774] nbd8: rw=0, sector=256, nr_sectors = 1 limit=0 [ 908.604633][ T974] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 908.637039][ T974] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 908.658394][T16774] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 908.688148][ T974] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 908.708314][T16774] syz.8.2207: attempt to access beyond end of device [ 908.708314][T16774] nbd8: rw=0, sector=512, nr_sectors = 1 limit=0 [ 908.743066][ T974] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 908.760232][T16774] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 908.797415][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.815961][T16774] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 908.836067][T16774] UDF-fs: Scanning with blocksize 512 failed [ 908.863506][T16774] syz.8.2207: attempt to access beyond end of device [ 908.863506][T16774] nbd8: rw=0, sector=64, nr_sectors = 2 limit=0 [ 908.913012][T16774] syz.8.2207: attempt to access beyond end of device [ 908.913012][T16774] nbd8: rw=0, sector=512, nr_sectors = 2 limit=0 [ 908.929764][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 908.938964][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.966211][T16774] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 908.967125][ T25] usb 3-1: config 0 descriptor?? [ 908.976344][T16774] syz.8.2207: attempt to access beyond end of device [ 908.976344][T16774] nbd8: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 908.994282][T16774] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 909.004805][T16774] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 909.012520][T16774] UDF-fs: Scanning with blocksize 1024 failed [ 909.020365][T16774] syz.8.2207: attempt to access beyond end of device [ 909.020365][T16774] nbd8: rw=0, sector=64, nr_sectors = 4 limit=0 [ 909.036383][T16774] syz.8.2207: attempt to access beyond end of device [ 909.036383][T16774] nbd8: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 909.050102][T16774] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 909.060947][T16774] syz.8.2207: attempt to access beyond end of device [ 909.060947][T16774] nbd8: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 909.123520][T16774] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 909.157371][T16774] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 909.202023][T16774] UDF-fs: Scanning with blocksize 2048 failed [ 909.222915][T16774] syz.8.2207: attempt to access beyond end of device [ 909.222915][T16774] nbd8: rw=0, sector=64, nr_sectors = 8 limit=0 [ 909.278685][T16774] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 909.323151][T16774] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 909.356770][T16774] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 909.383458][T16774] UDF-fs: Scanning with blocksize 4096 failed [ 909.413996][T16774] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 909.885401][ T974] ath6kl: Failed to submit usb control message: -110 [ 909.894873][ T974] ath6kl: unable to send the bmi data to the device: -110 [ 909.916903][ T974] ath6kl: Unable to send get target info: -110 [ 909.961486][ T974] ath6kl: Failed to init ath6kl core: -110 [ 910.001601][ T974] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 910.153066][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 910.161583][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 910.171992][ T25] usb 3-1: USB disconnect, device number 59 [ 910.285304][ T974] usb 5-1: USB disconnect, device number 36 [ 910.573201][T16789] openvswitch: netlink: Flow actions attr not present in new flow. [ 910.644697][T16789] netlink: 'syz.8.2208': attribute type 3 has an invalid length. [ 911.269145][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 911.278712][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 911.316236][T16790] netlink: zone id is out of range [ 911.858803][T16802] erofs (device erofs): cannot read erofs superblock [ 912.344579][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2219'. [ 913.435872][ T25] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 913.619677][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 913.648454][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 913.769974][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 917.766636][ T25] usb 3-1: string descriptor 0 read error: -71 [ 917.773280][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 917.792372][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.813104][T16832] xt_l2tp: v2 doesn't support IP mode [ 917.837721][ T25] usb 3-1: can't set config #1, error -71 [ 917.876465][ T25] usb 3-1: USB disconnect, device number 60 [ 918.005699][T16839] netlink: zone id is out of range [ 918.033044][T16841] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2227'. [ 918.105623][T16841] binder: BINDER_SET_CONTEXT_MGR already set [ 918.122880][T16841] binder: 16840:16841 ioctl 4018620d 200001c0 returned -16 [ 918.257522][ T25] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 918.457710][ T25] usb 3-1: device descriptor read/64, error -71 [ 918.721678][ T25] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 918.857732][ T25] usb 3-1: device descriptor read/64, error -71 [ 919.063850][ T25] usb usb3-port1: attempt power cycle [ 919.178434][T16850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2229'. [ 919.429353][ T25] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 919.451038][ T25] usb 3-1: device descriptor read/8, error -71 [ 919.964560][ T25] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 920.265424][ T25] usb 3-1: device descriptor read/8, error -71 [ 920.519096][ T25] usb usb3-port1: unable to enumerate USB device [ 922.183165][T16878] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 922.595829][T16881] fuse: Unknown parameter '000000000000000000000030x00000000000000040000000000000000000000300000000000000000000' [ 922.704152][T16883] cgroup: none used incorrectly [ 922.817243][T16881] nbd: must specify at least one socket [ 922.992523][T16883] orangefs_mount: mount request failed with -4 [ 923.110621][T16889] netlink: zone id is out of range [ 923.755953][T10604] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 923.908200][T10604] usb 3-1: Using ep0 maxpacket: 8 [ 923.927484][T10604] usb 3-1: unable to get BOS descriptor or descriptor too short [ 923.949372][T10604] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 923.966281][T10604] usb 3-1: config 1 has no interface number 1 [ 923.982883][T10604] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 924.001701][T10604] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 924.013421][T10604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.021521][T10604] usb 3-1: Product: syz [ 924.036102][T10604] usb 3-1: Manufacturer: syz [ 924.045917][T10604] usb 3-1: SerialNumber: syz [ 924.313512][T10604] usb 3-1: 2:1 : sample bitwidth 128 in over sample bytes 1 [ 924.347230][T10604] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 924.376678][T10604] usb 3-1: USB disconnect, device number 65 [ 925.918834][T10604] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 926.123548][T10604] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.177153][T10604] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 926.221621][T10604] usb 9-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 926.249285][T10604] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.275117][T10604] usb 9-1: config 0 descriptor?? [ 926.366012][T16934] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 927.971647][T10604] usb 9-1: string descriptor 0 read error: -71 [ 928.034071][T10604] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 928.150086][T10604] usb 9-1: USB disconnect, device number 67 [ 930.747626][T16959] pim6reg: entered allmulticast mode [ 932.128295][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2262'. [ 932.294875][T16983] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 933.628256][ T25] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 933.718315][T16986] warn_alloc: 1 callbacks suppressed [ 933.718339][T16986] syz.8.2265: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 933.752173][ T25] usb 3-1: device descriptor read/64, error -71 [ 933.759248][T16986] CPU: 0 UID: 0 PID: 16986 Comm: syz.8.2265 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 933.770079][T16986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 933.780177][T16986] Call Trace: [ 933.783528][T16986] [ 933.786492][T16986] dump_stack_lvl+0x241/0x360 [ 933.791220][T16986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 933.796465][T16986] ? __pfx__printk+0x10/0x10 [ 933.801105][T16986] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 933.807572][T16986] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 933.814137][T16986] warn_alloc+0x278/0x410 [ 933.818524][T16986] ? __pfx_warn_alloc+0x10/0x10 [ 933.823427][T16986] ? hash_netport4_resize+0x23b/0x1bb0 [ 933.828936][T16986] ? __get_vm_area_node+0x1c8/0x2d0 [ 933.834176][T16986] ? __get_vm_area_node+0x25c/0x2d0 [ 933.839428][T16986] __vmalloc_node_range_noprof+0x62f/0x1380 [ 933.845411][T16986] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 933.851206][T16986] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 933.857583][T16986] ? rcu_is_watching+0x15/0xb0 [ 933.862395][T16986] ? trace_kmalloc+0x1f/0xd0 [ 933.867025][T16986] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 933.872525][T16986] ? __kvmalloc_node_noprof+0x72/0x190 [ 933.878032][T16986] __kvmalloc_node_noprof+0x142/0x190 [ 933.883450][T16986] ? hash_netport4_resize+0x23b/0x1bb0 [ 933.888961][T16986] hash_netport4_resize+0x23b/0x1bb0 [ 933.894309][T16986] ? __pfx_hash_netport4_add+0x10/0x10 [ 933.900185][T16986] ? __local_bh_enable_ip+0x168/0x200 [ 933.905626][T16986] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 933.911419][T16986] ? call_ad+0x182/0xa70 [ 933.915718][T16986] call_ad+0x38b/0xa70 [ 933.919845][T16986] ? __pfx_call_ad+0x10/0x10 [ 933.924496][T16986] ? __nla_parse+0x40/0x60 [ 933.928964][T16986] ip_set_ad+0x7e0/0x990 [ 933.933255][T16986] ? __pfx_ip_set_ad+0x10/0x10 [ 933.938062][T16986] ? trace_contention_end+0x3c/0x120 [ 933.943460][T16986] ? nfnetlink_rcv_msg+0x225/0x1180 [ 933.948702][T16986] nfnetlink_rcv_msg+0xbec/0x1180 [ 933.953768][T16986] ? nfnetlink_rcv_msg+0x225/0x1180 [ 933.959031][T16986] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 933.964534][T16986] ? stack_trace_save+0x118/0x1d0 [ 933.969673][T16986] ? dev_hard_start_xmit+0x27a/0x7d0 [ 933.975005][T16986] ? __dev_queue_xmit+0x1b73/0x3f50 [ 933.980257][T16986] ? __netlink_deliver_tap+0x56b/0x7f0 [ 933.985760][T16986] ? netlink_deliver_tap+0x19d/0x1b0 [ 933.991091][T16986] ? netlink_unicast+0x7c4/0x990 [ 933.996086][T16986] ? netlink_sendmsg+0x8e4/0xcb0 [ 934.001066][T16986] ? __sock_sendmsg+0x221/0x270 [ 934.006065][T16986] ? ____sys_sendmsg+0x52a/0x7e0 [ 934.011148][T16986] ? __sys_sendmsg+0x269/0x350 [ 934.015968][T16986] netlink_rcv_skb+0x1e3/0x430 [ 934.020848][T16986] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 934.026353][T16986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 934.031695][T16986] ? cap_capable+0x1b4/0x250 [ 934.036332][T16986] ? safesetid_security_capable+0xb2/0x1d0 [ 934.042187][T16986] ? bpf_lsm_capable+0x9/0x10 [ 934.046902][T16986] ? security_capable+0x7e/0x2d0 [ 934.051890][T16986] nfnetlink_rcv+0x297/0x2ab0 [ 934.056616][T16986] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 934.062390][T16986] ? __dev_queue_xmit+0x2f4/0x3f50 [ 934.067550][T16986] ? __dev_queue_xmit+0x1775/0x3f50 [ 934.072790][T16986] ? kasan_save_track+0x51/0x80 [ 934.077689][T16986] ? ____sys_sendmsg+0x52a/0x7e0 [ 934.082690][T16986] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 934.085865][ T25] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 934.087825][T16986] ? __dev_queue_xmit+0x2f4/0x3f50 [ 934.100542][T16986] ? __pfx___dev_queue_xmit+0x10/0x10 [ 934.105977][T16986] ? ref_tracker_free+0x643/0x7e0 [ 934.111042][T16986] ? __asan_memcpy+0x40/0x70 [ 934.115676][T16986] ? __pfx_ref_tracker_free+0x10/0x10 [ 934.121108][T16986] ? netlink_deliver_tap+0x2e/0x1b0 [ 934.126344][T16986] ? skb_clone+0x240/0x390 [ 934.130836][T16986] ? __pfx_lock_release+0x10/0x10 [ 934.135913][T16986] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 934.141428][T16986] ? netlink_deliver_tap+0x2e/0x1b0 [ 934.146672][T16986] netlink_unicast+0x7f6/0x990 [ 934.151493][T16986] ? __pfx_netlink_unicast+0x10/0x10 [ 934.156827][T16986] ? __virt_addr_valid+0x45f/0x530 [ 934.161981][T16986] ? __phys_addr_symbol+0x2f/0x70 [ 934.167044][T16986] ? __check_object_size+0x47a/0x730 [ 934.172388][T16986] netlink_sendmsg+0x8e4/0xcb0 [ 934.177209][T16986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.182550][T16986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.187875][T16986] __sock_sendmsg+0x221/0x270 [ 934.192611][T16986] ____sys_sendmsg+0x52a/0x7e0 [ 934.197431][T16986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 934.203015][T16986] ? __fget_files+0x2a/0x410 [ 934.207643][T16986] ? __fget_files+0x2a/0x410 [ 934.212279][T16986] __sys_sendmsg+0x269/0x350 [ 934.216915][T16986] ? __pfx___sys_sendmsg+0x10/0x10 [ 934.222133][T16986] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 934.228500][T16986] ? do_syscall_64+0x100/0x230 [ 934.233316][T16986] ? do_syscall_64+0xb6/0x230 [ 934.238042][T16986] do_syscall_64+0xf3/0x230 [ 934.242594][T16986] ? clear_bhb_loop+0x35/0x90 [ 934.247310][T16986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.253268][T16986] RIP: 0033:0x7f12e3d85d29 [ 934.257728][T16986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.277373][T16986] RSP: 002b:00007f12e4c89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 934.285830][T16986] RAX: ffffffffffffffda RBX: 00007f12e3f75fa0 RCX: 00007f12e3d85d29 [ 934.293840][T16986] RDX: 0000000000000080 RSI: 00000000200002c0 RDI: 0000000000000007 [ 934.301934][T16986] RBP: 00007f12e3e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 934.309938][T16986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 934.317940][T16986] R13: 0000000000000000 R14: 00007f12e3f75fa0 R15: 00007ffe7443d128 [ 934.325967][T16986] [ 934.329155][ C0] vkms_vblank_simulate: vblank timer overrun [ 934.542973][ T25] usb 3-1: device descriptor read/64, error -71 [ 934.552693][T16986] Mem-Info: [ 934.555856][T16986] active_anon:393 inactive_anon:11352 isolated_anon:0 [ 934.555856][T16986] active_file:21512 inactive_file:37623 isolated_file:0 [ 934.555856][T16986] unevictable:768 dirty:93 writeback:0 [ 934.555856][T16986] slab_reclaimable:6560 slab_unreclaimable:109446 [ 934.555856][T16986] mapped:32425 shmem:2570 pagetables:1159 [ 934.555856][T16986] sec_pagetables:0 bounce:0 [ 934.555856][T16986] kernel_misc_reclaimable:0 [ 934.555856][T16986] free:1299423 free_pcp:1954 free_cma:0 [ 934.695246][T16986] Node 0 active_anon:1572kB inactive_anon:47408kB active_file:85972kB inactive_file:150492kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130800kB dirty:372kB writeback:0kB shmem:9844kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12576kB pagetables:4736kB sec_pagetables:0kB all_unreclaimable? no [ 934.727935][ C0] vkms_vblank_simulate: vblank timer overrun [ 934.780632][T16986] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 934.820596][ C0] vkms_vblank_simulate: vblank timer overrun [ 934.922042][ T25] usb usb3-port1: attempt power cycle [ 934.929256][T16986] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 934.962080][T16986] lowmem_reserve[]: 0 2465 2466 0 0 [ 934.971825][T16986] Node 0 DMA32 free:1270928kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1568kB inactive_anon:33776kB active_file:85192kB inactive_file:150440kB unevictable:1536kB writepending:372kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:22444kB local_pcp:21528kB free_cma:0kB [ 935.024720][T16986] lowmem_reserve[]: 0 0 0 0 0 [ 935.056158][T16986] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:780kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 935.122874][T16986] lowmem_reserve[]: 0 0 0 0 0 [ 935.141450][T16986] Node 1 Normal free:3907876kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 935.233120][T16986] lowmem_reserve[]: 0 0 0 0 0 [ 935.262182][T16986] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 935.276571][ T25] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 935.367479][T17008] ipt_REJECT: ECHOREPLY no longer supported. [ 935.407258][T16986] Node 0 DMA32: 2*4kB (UE) 76*8kB (ME) 179*16kB (UE) 118*32kB (UME) 109*64kB (UE) 39*128kB (UME) 130*256kB (UME) 152*512kB (UME) 45*1024kB (UME) 4*2048kB (ME) 261*4096kB (UM) = 1253656kB [ 935.482208][ T25] usb 3-1: device descriptor read/8, error -71 [ 935.525236][T16986] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 935.543363][T16986] Node 1 Normal: 225*4kB (UME) 66*8kB (UME) 49*16kB (UME) 206*32kB (UME) 89*64kB (UME) 37*128kB (UME) 12*256kB (UME) 9*512kB (UME) 4*1024kB (UME) 1*2048kB (U) 946*4096kB (M) = 3907876kB [ 935.609949][T16986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 935.629072][T16986] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 935.692310][T16986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 935.708092][T16986] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 935.718084][T16986] 63492 total pagecache pages [ 935.722800][T16986] 0 pages in swap cache [ 935.727196][T16986] Free swap = 124540kB [ 935.731389][T16986] Total swap = 124996kB [ 935.735701][T16986] 2097051 pages RAM [ 935.739899][T16986] 0 pages HighMem/MovableOnly [ 935.744674][T16986] 427005 pages reserved [ 935.748861][T16986] 0 pages cma reserved [ 937.209118][T17045] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2280'. [ 1040.403280][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1040.410333][ C1] rcu: 0-...!: (9 ticks this GP) idle=ed14/1/0x4000000000000000 softirq=84159/84170 fqs=1 [ 1040.422454][ C1] rcu: (detected by 1, t=10505 jiffies, g=85605, q=223 ncpus=2) [ 1040.430235][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1040.430276][ C0] NMI backtrace for cpu 0 [ 1040.430293][ C0] CPU: 0 UID: 0 PID: 17073 Comm: syz.4.2278 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 1040.430315][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1040.430327][ C0] RIP: 0010:kasan_check_range+0x8c/0x290 [ 1040.430363][ C0] Code: 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 0f 85 c9 01 00 00 <49> ff c3 48 ff c5 75 ee e9 1e 01 00 00 45 89 dc 41 83 e4 07 0f 84 [ 1040.430387][ C0] RSP: 0018:ffffc900000079d0 EFLAGS: 00000046 [ 1040.430405][ C0] RAX: 0000000000000001 RBX: 1ffffffff2030ad6 RCX: ffffffff817ad690 [ 1040.430419][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901856b0 [ 1040.430432][ C0] RBP: ffffffffffffffff R08: ffffffff901856b7 R09: 1ffffffff2030ad6 [ 1040.430446][ C0] R10: dffffc0000000000 R11: fffffbfff2030ad6 R12: 1ffff92000000f4c [ 1040.430461][ C0] R13: ffffffff84c0bdf7 R14: dffffc0000000001 R15: fffffbfff2030ad7 [ 1040.430491][ C0] FS: 00007fd9513916c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1040.430508][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1040.430521][ C0] CR2: 000000110c3b64f7 CR3: 0000000011af2000 CR4: 00000000003526f0 [ 1040.430538][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1040.430550][ C0] DR3: 000000002735000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1040.430563][ C0] Call Trace: [ 1040.430571][ C0] [ 1040.430581][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1040.430606][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1040.430628][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1040.430650][ C0] ? nmi_handle+0x2a/0x5a0 [ 1040.430679][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1040.430706][ C0] ? nmi_handle+0x14f/0x5a0 [ 1040.430726][ C0] ? nmi_handle+0x2a/0x5a0 [ 1040.430747][ C0] ? kasan_check_range+0x8c/0x290 [ 1040.430774][ C0] ? default_do_nmi+0x63/0x160 [ 1040.430795][ C0] ? exc_nmi+0x123/0x1f0 [ 1040.430815][ C0] ? end_repeat_nmi+0xf/0x53 [ 1040.430833][ C0] ? debug_object_activate+0x3f7/0x580 [ 1040.430863][ C0] ? lock_release+0xb0/0xa30 [ 1040.430883][ C0] ? kasan_check_range+0x8c/0x290 [ 1040.430910][ C0] ? kasan_check_range+0x8c/0x290 [ 1040.430938][ C0] ? kasan_check_range+0x8c/0x290 [ 1040.430965][ C0] [ 1040.430971][ C0] [ 1040.430980][ C0] lock_release+0xb0/0xa30 [ 1040.431003][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 1040.431030][ C0] ? __pfx_lock_release+0x10/0x10 [ 1040.431051][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1040.431083][ C0] _raw_spin_unlock_irqrestore+0x79/0x140 [ 1040.431108][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1040.431138][ C0] debug_object_activate+0x3f7/0x580 [ 1040.431169][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1040.431196][ C0] ? advance_sched+0xa02/0xca0 [ 1040.431221][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 1040.431243][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1040.431269][ C0] enqueue_hrtimer+0x30/0x3c0 [ 1040.431296][ C0] __hrtimer_run_queues+0x6cb/0xd30 [ 1040.431330][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1040.431353][ C0] ? sched_clock+0x4a/0x70 [ 1040.431385][ C0] ? read_tsc+0x9/0x20 [ 1040.431409][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1040.431433][ C0] hrtimer_interrupt+0x403/0xa40 [ 1040.431469][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1040.431492][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1040.431518][ C0] [ 1040.431525][ C0] [ 1040.431532][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1040.431561][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 1040.431585][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8a 38 b7 f5 48 89 df e8 c2 7f b8 f5 e8 ad 90 e3 f5 fb bf 01 00 00 00 e2 e4 a9 f5 65 8b 05 13 37 40 74 85 c0 74 06 5b c3 cc cc cc cc [ 1040.431600][ C0] RSP: 0018:ffffc9000fd1fd00 EFLAGS: 00000286 [ 1040.431617][ C0] RAX: f665b5714fa31f00 RBX: ffff88807a369888 RCX: ffffffff9a378903 [ 1040.431631][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: 0000000000000001 [ 1040.431645][ C0] RBP: 00000000ffffff83 R08: ffffffff901856b7 R09: 1ffffffff2030ad6 [ 1040.431658][ C0] R10: dffffc0000000000 R11: fffffbfff2030ad7 R12: ffff88807a369800 [ 1040.431673][ C0] R13: 7fffffffffffffff R14: 0000000000000003 R15: ffff88807a369880 [ 1040.431695][ C0] do_timerfd_settime+0xccf/0xfb0 [ 1040.431724][ C0] __x64_sys_timerfd_settime+0x16f/0x220 [ 1040.431755][ C0] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 1040.431789][ C0] ? do_syscall_64+0x100/0x230 [ 1040.431817][ C0] ? do_syscall_64+0xb6/0x230 [ 1040.431845][ C0] do_syscall_64+0xf3/0x230 [ 1040.431871][ C0] ? clear_bhb_loop+0x35/0x90 [ 1040.431890][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.431916][ C0] RIP: 0033:0x7fd953985d29 [ 1040.431934][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1040.431949][ C0] RSP: 002b:00007fd951391038 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 1040.431967][ C0] RAX: ffffffffffffffda RBX: 00007fd953b76240 RCX: 00007fd953985d29 [ 1040.431981][ C0] RDX: 0000000020000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1040.431993][ C0] RBP: 00007fd953a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1040.432005][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1040.432016][ C0] R13: 0000000000000000 R14: 00007fd953b76240 R15: 00007ffc64f25748 [ 1040.432038][ C0] [ 1040.432270][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g85605 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1040.982395][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1040.992487][ C1] rcu: RCU grace-period kthread stack dump: [ 1040.998400][ C1] task:rcu_preempt state:R running task stack:26264 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1041.010212][ C1] Call Trace: [ 1041.013527][ C1] [ 1041.016494][ C1] __schedule+0x17fb/0x4be0 [ 1041.021073][ C1] ? __pfx___schedule+0x10/0x10 [ 1041.025973][ C1] ? __pfx_lock_release+0x10/0x10 [ 1041.031048][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1041.037418][ C1] ? schedule+0x90/0x320 [ 1041.041701][ C1] schedule+0x14b/0x320 [ 1041.045918][ C1] schedule_timeout+0x15a/0x290 [ 1041.050832][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1041.056261][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1041.061616][ C1] ? prepare_to_swait_event+0x330/0x350 [ 1041.067210][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 1041.072102][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1041.077454][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1041.083393][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1041.088716][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1041.094659][ C1] ? finish_swait+0xd4/0x1e0 [ 1041.099299][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 1041.103937][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1041.109266][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1041.115210][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1041.120277][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1041.125520][ C1] kthread+0x2f0/0x390 [ 1041.129631][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1041.134873][ C1] ? __pfx_kthread+0x10/0x10 [ 1041.139504][ C1] ret_from_fork+0x4b/0x80 [ 1041.143954][ C1] ? __pfx_kthread+0x10/0x10 [ 1041.148587][ C1] ret_from_fork_asm+0x1a/0x30 [ 1041.153410][ C1] [ 1041.156462][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1041.162822][ C1] CPU: 1 UID: 0 PID: 3503 Comm: kworker/u8:9 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 1041.173707][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1041.183887][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1041.190458][ C1] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2c60 [ 1041.197268][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 56 e9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 e5 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 e4 [ 1041.216933][ C1] RSP: 0018:ffffc9000d08f6e0 EFLAGS: 00000293 [ 1041.223039][ C1] RAX: ffffffff81938eeb RBX: 1ffff110170c8c65 RCX: ffff888032ab5a00 [ 1041.231054][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1041.239061][ C1] RBP: ffffc9000d08f8e0 R08: ffffffff81938eba R09: 1ffffffff284e310 [ 1041.247067][ C1] R10: dffffc0000000000 R11: fffffbfff284e311 R12: dffffc0000000000 [ 1041.255075][ C1] R13: ffff8880b8646328 R14: ffff8880b873f940 R15: 0000000000000000 [ 1041.263083][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1041.272142][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1041.278758][ C1] CR2: 00007f12e3f77bac CR3: 000000000e736000 CR4: 00000000003526f0 [ 1041.286769][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1041.294773][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1041.302778][ C1] Call Trace: [ 1041.306098][ C1] [ 1041.308976][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1041.315355][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 1041.321057][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1041.326933][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1041.333230][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 1041.338658][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1041.344375][ C1] ? update_process_times+0x242/0x2f0 [ 1041.350239][ C1] ? tick_nohz_handler+0x37c/0x500 [ 1041.355432][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1041.361008][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 1041.366463][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1041.372246][ C1] ? handle_softirqs+0x7e0/0x9b0 [ 1041.377264][ C1] ? read_tsc+0x9/0x20 [ 1041.381386][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1041.387515][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 1041.392707][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 1041.398920][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1041.404771][ C1] [ 1041.407743][ C1] [ 1041.410723][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1041.416946][ C1] ? smp_call_function_many_cond+0x19da/0x2c60 [ 1041.423208][ C1] ? smp_call_function_many_cond+0x1a0b/0x2c60 [ 1041.429439][ C1] ? smp_call_function_many_cond+0x19f3/0x2c60 [ 1041.435662][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1041.440759][ C1] ? __pfx___text_poke+0x10/0x10 [ 1041.445858][ C1] ? process_scheduled_works+0x976/0x1840 [ 1041.451646][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1041.458038][ C1] ? __pfx___might_resched+0x10/0x10 [ 1041.463387][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1041.469350][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1041.474438][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1041.479616][ C1] text_poke_bp_batch+0x352/0xb30 [ 1041.484713][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1041.490778][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 1041.496997][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1041.502609][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 1041.508902][ C1] ? process_scheduled_works+0x976/0x1840 [ 1041.514671][ C1] text_poke_finish+0x30/0x50 [ 1041.519388][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1041.525497][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 1041.531431][ C1] static_key_enable+0x1a/0x20 [ 1041.536232][ C1] toggle_allocation_gate+0xbc/0x260 [ 1041.541560][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1041.547499][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1041.553874][ C1] process_scheduled_works+0xa66/0x1840 [ 1041.559495][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1041.565528][ C1] ? assign_work+0x364/0x3d0 [ 1041.570169][ C1] worker_thread+0x870/0xd30 [ 1041.574809][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1041.579874][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1041.585024][ C1] kthread+0x2f0/0x390 [ 1041.589128][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1041.594269][ C1] ? __pfx_kthread+0x10/0x10 [ 1041.598895][ C1] ret_from_fork+0x4b/0x80 [ 1041.603340][ C1] ? __pfx_kthread+0x10/0x10 [ 1041.607979][ C1] ret_from_fork_asm+0x1a/0x30 [ 1041.612817][ C1]