last executing test programs: 12m15.888257379s ago: executing program 0 (id=65): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001a006da800000000000000001c00"], 0x24}}, 0x0) 12m15.014791501s ago: executing program 0 (id=68): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0, @ANYRES16], 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000380)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) prlimit64(0x0, 0x4, &(0x7f0000000280)={0x4008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x9) prlimit64(0x0, 0xd, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3a, 0x2000000000000017, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000005880)={0x2020}, 0xfffffffffffffe82) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001804000000000000000000000000000001000093026400000500000000000000000000000061000000613e00"], 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140), 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r7}) getrlimit(0x1, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000031c0)=ANY=[@ANYRESOCT=r3], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r7, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x51e}) close(r6) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x0) socket$inet(0x2, 0x80000, 0x1) 12m11.35894671s ago: executing program 0 (id=83): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = epoll_create1(0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setresuid(0x0, 0xee00, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r8 = gettid() r9 = syz_open_procfs(r8, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') fchdir(r9) 12m10.209281911s ago: executing program 0 (id=87): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000060000000405000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=0x0], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)="7eb6ff00ab4affda86fe54d319c5d9df74209d30ee764db568c1fb3486e32faf7a29fada5df2fdccdd78b64fba6d016387e1044d808abfddf2b7f2d97983f4e5e271a5ee6c8a1afb7b978c2b033ae564363e9a857d9b27ed45355c2924d003e4dcc1d4ed000185a348eb5edcf41d2900daba2b70e5f2fbb9e8411f2222520e1e34901c58e38eb3620671f26ef8f1d2309e13f7d2c8a6d4b730efec96b25cfc7a8dd723fa6b36ce8dcf5719f0c78bf1722f43274b08e91a8d624ecadd968be79b61fbca2e02f98b167ab0d5973965bae197000000000000000000", &(0x7f0000000200), 0xc, r0}, 0x38) socket$inet(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xbc1880, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100000600bd"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) 12m9.080228996s ago: executing program 0 (id=88): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c0400000000001000"], 0x0, 0x0, 0x0}, &(0x7f0000000a40)={0x84, 0x0, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @broadcast}, 0x0, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x8}, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}}) socket(0x21, 0x2, 0x1000e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005480)={&(0x7f00000053c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x1}]}]}, {0x0, [0x2e, 0x5f]}}, 0x0, 0x30, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x20) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0) r2 = open$dir(0x0, 0x10500, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x4000000c, r2, 0x0) r3 = socket(0x2, 0x80802, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4010}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f00000000c0)={0x2001}) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000001, 0x0, 0x0) close(r5) shutdown(r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) 12m7.953023262s ago: executing program 0 (id=94): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505331, &(0x7f0000000300)={0x200bf03, 0xfffffffb, 0x2d, 0x0, 0x0, 0x101}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 12m7.735676038s ago: executing program 32 (id=94): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505331, &(0x7f0000000300)={0x200bf03, 0xfffffffb, 0x2d, 0x0, 0x0, 0x101}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 9m46.900727195s ago: executing program 5 (id=437): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = getpid() kcmp(r7, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) timer_settime(0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f0000000140), 0x2, 0x0) sendfile(r9, r9, 0x0, 0x9) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r10, 0x1, 0x20000000, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) io_setup(0x7, &(0x7f00000000c0)) 9m45.474468879s ago: executing program 5 (id=442): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000000240), 0x0) socket$key(0xf, 0x3, 0x2) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000003280)=[{{&(0x7f0000000180)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f0000000440)=""/108, 0x6c}, {&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f00000004c0)=""/212, 0xd4}, {&(0x7f00000005c0)=""/96, 0x60}], 0x4}, 0x9}, {{&(0x7f0000000680)=@generic, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000700)=""/39, 0x27}, 0xf}, {{&(0x7f0000000a80)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/72, 0x48}, {&(0x7f0000000bc0)=""/52, 0x34}], 0x3}, 0xa}, {{&(0x7f0000000c40)=@can, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000cc0)=""/55, 0x37}, {&(0x7f0000000d00)=""/86, 0x56}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)}], 0x4, &(0x7f0000001e00)=""/4083, 0xff3}, 0xfffffffb}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002e00)=""/249, 0xf9}, {&(0x7f00000033c0)=""/147, 0x93}, {&(0x7f0000003000)=""/157, 0x9d}, {&(0x7f00000030c0)=""/65, 0x41}, {&(0x7f0000003140)=""/78, 0x4e}, {&(0x7f00000031c0)}], 0x6}, 0x400}], 0x5, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x11, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000fffffec00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e00010077697265677503"], 0x38}}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000500", 0x33fe0}], 0x1}, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2\x00', 0x1ff) memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x8, 0xfffffffffffffffe, &(0x7f0000000040)=0x28) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) 9m43.781381387s ago: executing program 5 (id=446): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x1000000) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, @phonet={0x23, 0xb4, 0x86, 0x5}, @llc={0x1a, 0x2, 0x4, 0x4, 0x2, 0x0, @random="c13eb3baf241"}, @isdn={0x22, 0x7f, 0x4, 0x7, 0x7}, 0xff80, 0x0, 0x0, 0x0, 0x7ff, &(0x7f00000000c0)='bond0\x00', 0x3, 0x7f, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='btrfs_sync_file\x00', r5, 0x0, 0x2000000000000000}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0400", 0x28, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @mcast2}}}}}}, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000), 0x10) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) close(r8) 9m41.177535357s ago: executing program 5 (id=458): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = getpid() kcmp(r7, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) timer_settime(0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f0000000140), 0x2, 0x0) sendfile(r9, r9, 0x0, 0x9) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r10, 0x1, 0x20000000, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) io_setup(0x7, &(0x7f00000000c0)) 9m40.092069205s ago: executing program 5 (id=464): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8003}, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x8915, 0x0) r2 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x2, 0x7, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x7}, 0x1c) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0'}, 0xfda6) 9m39.984414109s ago: executing program 5 (id=467): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x0, 0x1}) clock_getres(0x5d2d578ddb601e47, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) setgroups(0x3fffffffffffffd1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0]) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) 9m24.7957609s ago: executing program 33 (id=467): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x0, 0x1}) clock_getres(0x5d2d578ddb601e47, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) setgroups(0x3fffffffffffffd1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0]) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) 9m21.319960912s ago: executing program 4 (id=518): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89f3, &(0x7f0000000040)={'bond0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f4", 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00"/19, @ANYRES32, @ANYBLOB='5'], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = creat(0x0, 0x0) pwritev(r8, &(0x7f0000000280)=[{&(0x7f0000000300)="8a", 0x1}], 0x1, 0x451, 0x6) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r9 = syz_genetlink_get_family_id$nl80211(0x0, r8) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r9, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x4}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xff, 0x452], 0x0, 0x0, 0x2, 0x1}}, 0x40) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x0) getsockname(r2, &(0x7f0000000040)=@l2tp, &(0x7f00000000c0)=0x80) r10 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r10, 0xc0109207, &(0x7f0000000100)={0x0, 0x0, 0x2}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x5a) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) fsopen(&(0x7f0000000000)='udf\x00', 0x0) 9m20.844056339s ago: executing program 4 (id=521): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x46) r3 = socket$packet(0x11, 0x3, 0x300) get_robust_list(r0, &(0x7f0000000500)=&(0x7f0000000440)={&(0x7f0000000300), 0x0, &(0x7f0000000400)={&(0x7f0000000240)}}, 0x0) setsockopt$packet_int(r3, 0x107, 0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2c00000000000800, 0x0, 0x6, 0x1, 0x0, "ef359f413b171534a6d2a48fafddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0e39c2eb09000000e677df701905b9aafab4afaaf755a3f6000400", "036c47c6780820d1cbf79bb0566f249fa3f6bd9bffbcdb692ded71036951ca171ce1a311ef54ec32031e14efbcc097fce47d85272036dc78388e3dc177e9b496", "b732676c181ce6bb0100ce21aa4500000000006c8000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000004000000000000000000071120a00000000009500000000000000badcbc88713282f69d1a30c1f6b781e49608049842a688b7c43c374dcf5042e59314a384d927194feb2cdd66d4a88f38f79e69cee256977d141591"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.stat\x00', 0x275a, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x2000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000380)={0x4, "a901d699301d6043de9c03e96a7e02000000000000041a92b0000000000800", 0xffffffffffffffff}) socket$isdn_base(0x22, 0x3, 0x0) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", r8, 0xffffffffffffffff}) dup(r9) close_range(r5, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) 9m20.174269019s ago: executing program 4 (id=522): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0xc, 0x1}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) shutdown(r0, 0x0) 9m19.939053085s ago: executing program 4 (id=523): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002ac1b5405d219eca9b9d60005001b000600000008001900", @ANYRES32], 0x2c}}, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887822, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000000)) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, r5, 0x5) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) shutdown(r1, 0x1) syz_usb_connect(0x5, 0x248, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xff, 0xd, 0x3, 0x8, 0x1}, 0x5, &(0x7f00000005c0)=ANY=[], 0x1, [{0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="4e03c4103583d6f28ec51314bed9fa9f95e685812704e4cd4ed7854131ee7ac2f92bcdd1662989d463d00940c829a187e90310b5caef82ca28411e4719b6bae0d3adc7312e70345200f52d7a65d365e659842bc41378"]}]}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x1f, 0x1a, 0x144, &(0x7f0000000840)="2b880dfbf25691bff53ebf1069de660146c9ff82779603cfe79473a990d738d2c70109ed71a821dc249d47f6e0ba1c5c22f672f191ea2a11c23cc784e680dc9328f70d63d0470a525498f7375982e655b144e4eb65f37aa7d5ce30b6f606102176659b727fe71c3fdae0e7af694e1280d51c6d6656265d156184065ec30c2fdf102d94f0fc5feb7466a9403361f05028dc17d534a7c7b6e3426e229350982f69db99103fcc83005cb53ff06830c88f57450de58ad80a9d7b70e9445991b5b3d213ef7c5ef217e8fd2697614b72283a5629178d3cd975353259c61e9fa23cc0dff55531e9c5b48404d7cc9a3e1cc66c83af32947203e9d82b825fda81b0325152903731222eeab3e23359862e8ee780793ff053bb38fc2d3f736b59f9073593f805297c1b0c5c0808d7441ae42ea783ecc900cd2b39452f0e5694a1f50dac6968163bca54d8698f35c7e9167960acee97f85fd8bf2962d6bc6183100b205ce53682b6c7c4d1ce34d12d3c92b4212ec5a2627b2115aab5a4134a77574d4c4edd0ac55738237807929e570091724460a9328cfa35f1c5900de9da6004b2b85547aac7acfbc55761af3eee4607f5cc8adc4313386dabfe1b733b52509a79f9a8c98356a182fad803d0fa2425c9aadc56c6e856e9e20a23052ca7d72037f632f8a9625a0ee5dc135fb66720d48918cb700d26087f291aecd5694ff45997c3803a0d853a6a126720cb1b079cb6b2db77ddadb725f61d8aa659aec65b0c6abb2c88af3adc0ff99383619eb53c243cd9bf38892f8d6e8293af789fec633641f3868fa582dd8763efbccfd0c0aeb7b37ff426d039f9407e3f7d19e9a1906fdb57e8a6171a20065acb16ba21ccfa219379e9875d2b0082383e5ad59e1c65a0e5238c5a008da36b6993bdcb92c9b0926e370868aaff013849ca0da21954db1f8578f221f4d12a995e0638cfe36182d2985e349eabf9eeac9861b9d208850c1ffdfefcddac53a8afaaec921a5a4e1b39ff03c70b299f9fc408d9203518317f2b848db70c35d715ebd9de6a0e799250185499e7822086792f428ca3ca43f8d64267d9b1fbd9e9c019bef59eed311f8fe5c1c78b0f92539320f5eb72be468bf0e00f43912ab0c0a6a15410a28e56d45ebc58dce367ded9516a4cd309b894f87b5bc4df167f187e84be574747347d76b8fe745dbaf21355b472fa66d894fb5320893963b2467861702b62ac2930fc1dfb179e693f6820560a73c193c843fa9437541a9bae7d7f62557d9d459b63dd75607f8414ca1046ca8d7097a2d8eddae85e51887ce371d1c03bcb8c22339cd7e13df298e524e1b8ed31025987680f8b44e592ddb9bb19d52eafb6706930eea335c19fd31e2cc17f0ecfc9c454a2372ea5c673874b51a416eff6d8e780e1b2d47032109dc9ee613ec1d24bdc9e6f77f854f355ca0cee2e2ce7"}) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/12, 0xc}}], 0x1, 0x2302, 0x0) 9m17.846742252s ago: executing program 4 (id=528): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x1000000) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, @phonet={0x23, 0xb4, 0x86, 0x5}, @llc={0x1a, 0x2, 0x4, 0x4, 0x2, 0x0, @random="c13eb3baf241"}, @isdn={0x22, 0x7f, 0x4, 0x7, 0x7}, 0xff80, 0x0, 0x0, 0x0, 0x7ff, &(0x7f00000000c0)='bond0\x00', 0x3, 0x7f, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='btrfs_sync_file\x00', r5, 0x0, 0x2000000000000000}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0400", 0x28, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @mcast2}}}}}}, 0x0) listen(r3, 0x8) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000), 0x10) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) close(r8) 9m17.175443604s ago: executing program 4 (id=530): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') (fail_nth: 11) 9m16.642415933s ago: executing program 34 (id=530): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') (fail_nth: 11) 8m24.582363317s ago: executing program 7 (id=673): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000280)={0x20000000, 0x4000000000003, 0x2}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r4, &(0x7f0000002140)=""/245, 0xf5) 8m22.882655888s ago: executing program 7 (id=675): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/199, 0xc7}, {0x0}, {0x0}, {0x0}, {&(0x7f00000005c0)=""/187, 0xbb}], 0x5}, 0x60) sendmmsg$unix(r2, &(0x7f0000000680), 0x4924924924925c6, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = socket$inet6(0xa, 0x6, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000240)={0x0, 0x48}}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 8m20.900534175s ago: executing program 7 (id=679): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0x44) syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[@ANYBLOB="856b934629faaaaaaaaa"], 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000060000000804000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) ioprio_get$uid(0x3, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa, 0x5, 0x0, @SEQ_CONTROLLER=0xfe, 0x2, 0x7f, 0x7f}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500"], 0x48}}, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r9, 0x542f, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) ioctl$EXT4_IOC_GETSTATE(r10, 0x4028af11, &(0x7f0000000040)) 8m18.500784966s ago: executing program 7 (id=681): socket(0xa, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r0, 0x47ba, 0xe0, 0x0, 0x0, 0x0) 8m17.516041944s ago: executing program 7 (id=685): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/199, 0xc7}, {0x0}, {0x0}, {0x0}, {&(0x7f00000005c0)=""/187, 0xbb}], 0x5}, 0x60) sendmmsg$unix(r3, &(0x7f0000000680), 0x4924924924925c6, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = socket$inet6(0xa, 0x6, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000240)={0x0, 0x48}}, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 8m16.182005774s ago: executing program 7 (id=688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) 8m0.977878754s ago: executing program 35 (id=688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) 2m51.519615351s ago: executing program 6 (id=1539): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) getpid() timer_settime(0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r8, 0x1, 0x20000000, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) io_setup(0x7, &(0x7f00000000c0)) 2m49.540837746s ago: executing program 6 (id=1545): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1458c2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xe860c42ced148432) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x2, {0x1, 0x1, 0x4, 0x1, 0xabac}, 0x20}) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x10902, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x1) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$revoke(0x3, r6) r7 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r7, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x15) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000262c61756469742c61756469742c66756e633d4d4d41505f434845434b2c6f626a5e6d6dbd"]) 2m45.132893962s ago: executing program 6 (id=1552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x1, 0x0, &(0x7f0000000000)) unshare(0x48040400) r3 = epoll_create1(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYRES8=r2, @ANYRESDEC=r5, @ANYRES32=r4, @ANYBLOB="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", @ANYRES8=r0, @ANYRES8=r1, @ANYRESOCT=r1, @ANYBLOB="3eb4e2f0370da41c7d58b29060756f6f02b1cc63ac"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x0, 0x5, 0x10, 0x8}], 0x10, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x12) sendfile(r6, 0xffffffffffffffff, 0x0, 0xf03a0005) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth1_macvtap\x00', 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000dc0)="d0b4163e96457321d877d01a892f", 0xe, 0x48001, &(0x7f00000001c0)={0x11, 0x9, r8, 0x1, 0x70, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) 2m44.154873914s ago: executing program 6 (id=1554): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m42.797138117s ago: executing program 6 (id=1557): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x44) syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[@ANYBLOB="856b934629faaaaaaaaa"], 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000060000000804000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) ioprio_get$uid(0x3, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa, 0x5, 0x0, @SEQ_CONTROLLER=0xfe, 0x2, 0x7f, 0x7f}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500"], 0x48}}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r8, 0x542f, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) ioctl$EXT4_IOC_GETSTATE(r9, 0x4028af11, &(0x7f0000000040)) 2m41.475528205s ago: executing program 6 (id=1561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x1, 0x0, &(0x7f0000000000)) unshare(0x48040400) r3 = epoll_create1(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYRES8=r2, @ANYRESDEC, @ANYRES32=r4, @ANYBLOB="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", @ANYRES8=r0, @ANYRES8=r1, @ANYRESOCT=r1, @ANYBLOB="3eb4e2f0370da41c7d58b29060756f6f02b1cc63ac"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x0, 0x5, 0x10, 0x8}], 0x10, 0x0, @void, @value}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03a0005) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth1_macvtap\x00', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'macvlan0\x00'}) socket$packet(0x11, 0x3, 0x300) 2m26.17802777s ago: executing program 36 (id=1561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x1, 0x0, &(0x7f0000000000)) unshare(0x48040400) r3 = epoll_create1(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYRES8=r2, @ANYRESDEC, @ANYRES32=r4, @ANYBLOB="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", @ANYRES8=r0, @ANYRES8=r1, @ANYRESOCT=r1, @ANYBLOB="3eb4e2f0370da41c7d58b29060756f6f02b1cc63ac"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x0, 0x5, 0x10, 0x8}], 0x10, 0x0, @void, @value}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03a0005) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth1_macvtap\x00', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'macvlan0\x00'}) socket$packet(0x11, 0x3, 0x300) 24.615068019s ago: executing program 3 (id=1958): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)="17000000020001000003be8c5e687a8a6a003200020100ecff3f0000000300000a0001", 0x23) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000140)=0x3, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000099318988b771e253d54d000000fae42d4cd6633c09e10dbb68e02aa50d5ccb2d21a67fe6c607c907354f76757c4edd8ae8001ec29eaeec1f2a4a961f143cd11e0848730d185e3badb4dd951c881e4eecaeb60c5680f16837ca5f464f8d13f88b3c8be92c13494df1d703cff84f23b33d782a4fbc9413f452ce27cd4585d5aa0ed912f45c7720d90c64caa10b2e626ad994cec5dfe73023f58645eb49f1637e816c92e2b624ee35", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000cc0)={{r3}, "f6bfc52720029c6d3f1d70deaa3df2ce9e0818470323e967ca2ba542d7806389d6e9d2e383dd88f7d88417ec954020e9e1a85f85a5cba1781b598e597e917fdc815e1fe397f30d0733b1da73afff06ab8f898e3623baef2a65fe64ea18b0dd4f6e125d70fe5be7d3b7fc0b90e70193dae07941b355854a124e8e6464e8af129a0722ba9f9fb1b8ddd203ac478651f041d90ca98e4febdfe02832278f88a4846a75aff4cfda4fb7bb45e68f99dc73638fe8b8e645aced885c34eacb351911012eb31873d92a37b67dcbb2e42c487c6e80d926e2ba5f90bad64f547a22c38e9bffd54e2b3a555af597a3d39d6b5a3d10168b45a26debd2436fe96bf7e6a474fe4ce0956c710f7cd578ffcf9e4d0cd8bd90d98277b6b799734df7c77c7d719a830744f4a45de78ff8044be135fe32f6acbc9e1dc86ef84ee83a6ccc0bfb9e6b20d37f6860209940296702f4a146b3597cb2e0561288a46e7bdc4a381d77c35df19cd7135797082a9613c4df59eac90744988bc419baf13488fcbdd42fce1676d77403f84e92ff79b1fa8e1e884892358576d61003c85b0891e383df607774a7f870289f137395843a5656a580051a71a5a32d145de0ef04994dda592261b8e4bbd79d001722f260ca1d78bc091a22c8c70e85330adb10f496fdcc59c6dcb7840757aded7030ac36948ace9f782d603cb9eabc6961208c2481c3dc28a84779344f047202657b79509ce57a18ce61bf3943c32cc7a78f6695c1c1c2f1331dce796ba047fe70acc9cfbcf1da4635260ced7c66237ca04728c1fb76f02d7c8c5080507e3e2490058ac477a4cc7452ea872e8f5753868f29ad2b1b06add8ddec1cc2637371a67d328b41dbbbf9ba17c8b4b52c8fa5f05b5bbaf191603f6922316a2d901b825da89d977a2b6081d5c1c40f3760b81c627df35ea0f1cd541d7707da111106d5f6f49bbb680fc5945d5310777b5388f9b6d5372d84afa054bb8f99b5f7c114b58a845b3bd6d85149e5ea0a634bbf9c50dfb46da83c7318abdd21f1c93462ce303fd3a98dc9d2690179a04d2ea8c6e164567bbf1b8b17bcbcf62f01d1e5a72f99b0383c7044dfc6a96cc285baddc437bd5947116901acd1d0454de772c168f6dc9fa1d1c71d138d74a61d7b9a3df944c62ab9cf3d83a60c455469f9b5a8ed52b54fb7f5a21d589f4a8e98d7c96096dbc3e1917cd8ce336110c35af75f867b6fecbff79fa682a31ad64b26e9c4d9533cf5e85c34cbff8ed2827637886237bd7184494d42eab3f6dd427468552716ea2e384acca0eb80b4972d8cd160302f0bdf207d8217348708f4c2f5632a6157c4f25ce77f9809364459fdb2d5176e68172a9c504ede61c498737faea559a1f9904cd8cf44768fc4d3962679b300813abfc2949e71b3e65a3701363426b4264fab39df34082eb11eac554962f115f52719ee8078ca104456e16e623dfc49727788d443f69127410a92ba20cccd7a6976b46138d47c3972331f258dd95f6faf3acfed2ae67bb1c65e1be0e63b82d500a295a632365a6506d10d75acbe82c9366f92a9bb1770431923e135c7f3d6120c186509dd295d0acc75b3ae7ade251931a24aa736934e5e356744650c0969f5622f799a3a6594260488f06919b79c4476df9ee1ee24917603e629e70abe01b8d577952953c95056646324810b8076588ebf865e66b0a630424f8db5cc9fe180edc4ca3599d91a0adae5f13d13147b8acd9af8bd1af7ac08cff325d7dda2df1087311412a9806cdcf0bb25546be83ec338e1f2dc241292d054d8278b1fae3c00c63856802fd3d0c396c1e441b39c72689048af12a556aff895f4f63529f2d7b140338b3e5fc752ccfe195bdb9f0ad630c528130541ec412576e54bcb02aeca29a41208002dfd8f087b98c71c5a8788b07dc783f9fdadf676f01d8eca6bdbbf54afdd9e2c5af353e088f9ea8aa18a7890efd0502262253bc60c784683f4c7c598db99982647d865167b48f5b80b298504325c7440c5f335d1a9aa9536bd82b152ec63315331a51a33945c857375a396ca196c52590ae445292598c434446577d6df0a2e731d5d4f4db3e56a6301f289a5594000bf1df60ee60968b773b44b9dddc28a0b7c06683a96bbc6d1684b45f7072771604d5c7620575ca55252e03c486ef243c01359a729c6575dccea8083d99d588a2bb268ae6cdafada1ae1f488b4e0d1a8724b63f43410bc2e6876e3ce4b78abd17f630da33de291d2af8255530b576a85eaa8a3b39f287faee782ff2863f1784f4be834352b412727ee107e4b9c7dd797b60372c7be3bccd18bf008672431cb37b2e123eb1b94ea1ab30b576f04e107a43288f7df5fadf92b9ed45c543775d2ab86c30cc2892b749729dbf38efe85a6c803a6771f593ba3b71f41f4404ce7c17f0ded6aa1e9345675914d674bb5a2e37e75308268ef119ed9473e136a7fa97829b265066cbb85b4f74b766c6be8ecd4d3db3b25b11c126ef9d2d02b509013bd606cf9a197de3d7de5addb274dfecd7ebc9ab316adcc85bb81265ed25795d72d79a126c400d76c16e41299896203c66122bfc48c82b946bfec182ef56f12817bc9658d430ffc0404e2054518c3dfd3aac0e329e47a802e9db6261b6a931643395d610fba3683f400a73907303b292929ced07bbb05f9c2020b68a1adf1b42dc686a95c5921c05430c307b5e2e0196565567511a876b81aae45f653152da0c90a1aa973743804d69345f6a183277ddc87dbabb4c09cca05c43bb383627c3e7c4c29c201546d96495931828b1cb394fbc55fac68e1be81712e410033d7dfdca57334a0d856be2efc8ae55d3b06d9025a42114ff93d6b8237ceaab0579ff26f1a484913a02f5a83c6bc032f9053dca27d76efb49e9ebcca729a0259237fbd181739d116a5985bd6f21e7fb56bc34a2d74e15cecbf84134d8b528048148c13075d0762e2dcba9b68c2af775fcc79924dd40c87456bf57da6b8cad54a518b0fca06440a0e409f05d1ddd3ef080757b2010987f971bab7e4fdda51cd91ba8a0ad981b35481382928dff39d1dec5c2a61d285d539d20d508e327d82983aea832e58c537e5ba83b5e65849ec5ec74ba621850a4ef4c24d26146183847bc8f6cae618f52cd3c3e0e9ecdef22cb24b32cffffa1613032c34c913a9631be5228bf341e55f337741cf53fc526c8be14c57a2dbc0e44aa6bc97b7b56c282728b9ba8f3e4ed505c9d45cbbc797f6cef785a4e59e7715e34cef8ac08896277edc4524d09fc464fc84dc1f3f88f021e82b50c06e3560fb95af02990d886d74cc65bec8d543f3a69e93c1f22c409902829df6b57f74ffdc30e29e088ed6add7bc81488b1d0aa60a357880e703d4bb249e78b1719e89dd49c3dfbd24ed6c8a8c5efa4dda5fed892f82292035ba8e5013bf64661b1d8ed03ba472190ebbe26e9edfb54be2cb3ce24d4e3bc6151d4c92365f88de52ad630103861a0e9efd3514f500137932debd65be68b0047d83aa09622abe82f932f30f42c4fc4e7ee5e3aee1fd9454f823832dc09cbd5f86558967d927229a056b0ca74bb5a888e9450c1700b28134618442a5cafef31931d0bb8bff6e1ec93ce10c1ad6b0b17d94f986cc5b32827be820231bc43ea54d44f857d2ef58006762d7649b89c3a9ecbdddc1f91e62e85e279f4bdad32f368758573b84f75a29a0c5a1d89e35b7ee8cff5eaf7867ac32f496a7ee8f48254483cd62129d6adbeb119b68c0871dfaea161fa3ce475526f79b302fb6a1161ad9845680c45ea80c146611248d616a8b6ee9a5490819a2930878f22e24ebd89e864fd3a924a51e163f82c5751811eed494a7bc92c4055d0baada69627769460d945baea3cf12e8e5081bd1e4dfc6ecb8da6abb6181845b2fbc790c030b75c397463578a7c4d74bfeeaf17e5af60802f96fcbaf148806ea72610c1e34c4d2de306f2b3dd09e56035e7accdb830a4df4bfc1414045313f107a36149323fa0246a973916781d879f80e7db54ae81a392fc76bd91657a1baedd47b8b5aa3bdc3ce00047840ba302e8400ae3f0103602f2479ecce3f0dc364ab2013e33003f0ada3ff8b4b48c6f6a6475e32d6d9341f04729415cf4456f8391b46200fe23b2c2483a1d60956a794ef2f8176b80a658fb236c61d7391deed392a0ecbdd3c551833fffe4d6115e5e20a9c408abdf8672e011cba3c8edeaa57fb61a05ecba0cf1b234767557baa914de8a3d5bc1c78f33fc02c25cbb9491a2d5c70e233e37abe6d0f4915d9102549b29444bf96d7969bd4471a35b054f05b1563b6014acdbdba3c43573dbf84e8fca6be667250b4ba8136c759f93e0e2873e4935616d8acab99e8c9b6a4c33fc5ea4f936acefd2f4787323cc743f8f2764a2fb9778d6276d9ce15dad6ec27f12fa0be7be20f6e80f7674b09797789eebe4dd130e0063510c443a92b2d18931d9efb99c3d2cae950c53c1ec75e557c2044cf9351d8cada1af7fd4fe34318e159c79b28e8921cae82e746d6b6e82d8e94e718a1b35117df9e58554063e26d4e75cacd62e59354af917f14f34deaed8a4cc0c45e49b6cf342065e7f67627603e09f1f047c2d64cb2f9336157381d317d751e78d8a20f9b70ed4b2f9456db06a9213a0d79d66885494508071fd89ab8ff7e5a2d6354284c388806bb86ace5a08584fe14003479f6841042d6cc2b18ebe47c16ad0103ca104cba1632ea7cd4ed54edb1f885cd795f32a9908a60d481910f7ea1466faac32648093353fdf5d40d7870993b217bb7617fe0d0cfd718d445b8d606b7a6a8ed431c8cb4bb392939e8a2c7be5ca3d58f5ad31093ce919debef5ad463d03aaa3e08df7d73c03f6471d1e6e4a11d488c60567f250311377eabaef2f8b0695616bc0da80826a509a5b7eda6cf4f174626b30056e1a2b98465ddcf3b8d838e310e05a738df956fc2974d7538d313b66aa5a8e9a60e5584eb680a3d308260ea296308f75c94346086dbdaf43bd41db268072485537a53dbe2cb1cf9793bff2746a4e53462859a203a1fd6e81914643c370094b20a30ef34bda367212f632f551061d5d7c125e05efa13926e678f0d6495a5d9862cc5ad56f317a19fa79e07df54f6b0ac42ac67fe99a9ea5ba134c853dbb46a59fedea4089a172b846269cbaf9fd87d022f3d9b0d132e5694c9a1d3ad760c1b3df7d60eea82932378f7cb3aa3f0f9eb67067ea97b984742af2f1fbfb264a4783b382605a6fd06a769c45d2fd1d6c01ac2cc58f318ec0d6bd3a021986fe438252b8d9f6f71ae821c40dc641c2047262ce8101a254be4b27e71ecda881d5204d8eff7fe1bb33620ecca967da3a708436f82039d0ba4682f81ec97f81e88d2bb7fb77944da0b176e08688822ecbe66b91e0424accf933ec5386a6e4408610dd9f894c5e1998e6e250d6135dad9c386eecfc9d36f18e6abe404a52b21537717e6ae87d1f5863796174510e48608e507a440497478f542adce1e4bc0e1ab81b6bd7bf9f24bb487d63461e9dafb612ca80301a2e2049a2bb47fb8b009607dcce418cf0112711368382b1a3b10e04ed4b1401d67f80e09f86657807765a8c4c07069591d109709094f1ad8512ed0662e5d28cbc1456c7a029cd11420da5e99514d8e2199a39d27ca30c15323aaa6d93f18d27c42b8415aa99be86bbf079bc1bff5d78000f9a3e9b6e9d0a1d84550abc3c7900db76c6bbe5b18a8f2d3ae389bec336899efa707af422314dd73e54761759e8fc927bfa0e9e4b1ce5cae37d73932e519b975e5c665"}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0x168, 0x2d, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @local, [], [], 'tunl0\x00', 'macvlan1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0x69) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x4e4, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x498, 0x8, 0x0, 0x1, [{0x17c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x108, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast2, 0x6}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x2c4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba98df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_ALLOWEDIPS={0x8c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0xf}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x1bc, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file1', [], 0xa, "0a345f27458881110800033c3eedafebd12f8ebb4f0803"}, 0x22) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000500)) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904"], 0x0) 24.528020182s ago: executing program 2 (id=1959): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = io_uring_setup(0x6719, &(0x7f0000000340)={0x0, 0x4, 0x80, 0x4, 0x403b6}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000140)=""/68, 0x44}], 0x1) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) dup(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$cgroup_devices(r5, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYRES8=r2, @ANYRESOCT=r0], 0x15) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',\x00']) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x28, 0x0, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) 24.285778816s ago: executing program 2 (id=1961): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) tkill(r0, 0x13) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11) r1 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000540)='./file0\x00', 0x6400083c) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x4, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="130100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff010000072401"], 0x0) syz_usb_connect$uac1(0x0, 0xb4, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902a200030195b5b12504000000010100000a24010000000201020c240703000000ed129e8410eb2308000000000924030000000302000904010000010200000904010101010200000824020100000000090501090000000310072501800101010904020000010300000904020101010200000f"], 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000f80)=0x19) r4 = dup(r3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0x48b, 0x1000, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfc000000, 0x7, 0x4, 0xfffffffd}, @multicast1, @empty, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 23.046628882s ago: executing program 3 (id=1969): r0 = syz_open_dev$media(&(0x7f0000000000), 0x3ff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x5f9, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x23, &(0x7f0000000040)=""/36, &(0x7f0000000200)=0x24) 22.970221903s ago: executing program 3 (id=1970): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000540)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600c885dbc24000ffff17ce000084000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@void, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @void, {@can={0xc, {{0x3}, 0x0, 0x2, 0x0, 0x0, "cf4b1686dd170311"}}}}}, 0x1e) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) 22.703258061s ago: executing program 8 (id=1972): syz_usb_connect$uac1(0x0, 0x95, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902830003010000000904000000010100000a2401000000020102072407000000000724040000a78f090401000001020000090401010101ffffffffffffff7f0210090501090000000000072501000000000904020000010200000904020101010200000824020100000000072401000007000905820940"], 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x160, r1, 0x282, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x160}, 0x1, 0x0, 0x0, 0x44000}, 0x1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000080)=0x5, 0x4) write(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001400000000904"], 0x0) syz_usb_connect$uac1(0x0, 0x95, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902830003010000000904000000010100000a2401000000020102072407000000000724040000a78f090401000001020000090401010101ffffffffffffff7f0210090501090000000000072501000000000904020000010200000904020101010200000824020100000000072401000007000905820940"], 0x0) (async) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x160, r1, 0x282, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x160}, 0x1, 0x0, 0x0, 0x44000}, 0x1) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000080)=0x5, 0x4) (async) write(r2, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001400000000904"], 0x0) (async) 22.697148795s ago: executing program 9 (id=1973): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x4000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 22.254751693s ago: executing program 2 (id=1975): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002000)=@delchain={0x740, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x70c, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3f5}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x6e4, 0x7, [@m_mirred={0x22c, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0xffff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x8, 0x8, 0x401}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x0, 0x2eca, 0x5}, 0x3}}]}, {0x19d, 0x6, "71558f82c797ed40aa96cae0561caac80e37421fbe6b5847795e9152419bd6e36082801f37e53ccbea50d8b4e7d6d4cd06cec76ec462499bdf122811144a51b56146738d4d25cbd285f2e729dbbe3c6137f7cd123b784cfddefd732ecc306f6cd0dc9c82fffc866125185fd50c16a59b8228811ffa42a3fc06ae6c491841f2d3b022b410d20071f23972ad211e8d088570180a0b72ec30b207b439e9499530f5ed3add294c6979c4716758179993cb396d1a9e8371981dc62a436962aa697442d2123e008f091efa1ef638699bfa515b2f8e8182f537922211fa711a0b90202c20959954153db5eb13434b461bdb0d47bccf788abdfbbb90bcdcf81c1ef88393157e92a012f4129c596fdff06c0e372f876eadf8d1ab948ecf911339360bd7397dd676bb397c48ddc2777a28568f16291cd6355de8be422740a52fb6797cc37888b05947add3148349d06808548a886600f292c029d8b6112b8f3fed914d7804ae2b5181dbede9f109d62e00d6c7fb8bcf9cafe47b6cf6de2f3c3049abc7139424a9d55d90505e650312c934a382be7b513a92ce9a12f38028"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x64, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x35, 0x6, "becc0dfba237e62806d749b491e4df74a2edaae87448c525c394a1cd2b702d5bf5d0417b2f2d65c8e351d44c338dd81ad3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xb4, 0x15, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x7}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffe}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x29, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5a3c78451fb35e595b70d04ef5495ca4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x19, 0x6, "3b8dd99ff628f0e136ea03ee3bb7e4eb97a588c1fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x90, 0x1f, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x7}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_ACTION={0x6, 0x3, 0x21}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0600be9e48e760ba6779831df0129d79"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e7011bcc7a6b8ee870edb3e1d4364f94"}, @TCA_CT_ACTION={0x6, 0x3, 0x34}, @TCA_CT_LABELS={0x14, 0x7, "d84f053b22a32e873e2676b45f4a0ad9"}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x6c, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x2d, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c4759e03eb68fe380f18d158dfeeec5a54f2e4d1b78"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0xd8, 0x13, 0x0, 0x0, {{0xa}, {0x4}, {0xa9, 0x6, "13095aa19e3ff97ff1475cc7f6d44e64023e0f07f5503ec93c537ec467da66e10c0670c5424185a4211b985fbb71c90e943fd5ba6989123f51adc29f4d098a5853a725f727bd15293ea587519524ef80fd8af80f756cfebcef3980870a5ae562474c9ec51aaff99d80483e5889203fa14a5bdb050b4f8c23a709ea648f0083bafcaefd2dfdc6e9fd21bd1230b100d95fdedd566e96c84f3a440023eb3e68c8f4ce4718278e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x184, 0x2, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_ACTION={0x6, 0x3, 0x22}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}, @TCA_CT_ZONE={0x6, 0x4, 0x40}]}, {0xf5, 0x6, "a1f2a4ce007ddd8790543600a2420ec559f8c649a2a9f3d420934096de08ac63d9c315e8dded6fb2508c68041b7a0aaceed27574893969cda1525b9c8934a0e1e629652c69b92b0c6af575f0df47a043720f08c20d25a11fd3d0a1a33bb49821dd083349fa0d176cd4a307e71c04cd22f512591403a4b3bf2f517e65c5c9da8db780c47af490bf4f5a3657faefcdd5726a3328052df3f62a23cdddee72c32714d8e6fe2a05fbf6e706ce8982979ef8f4a0b551d14b2f93f6166542955dc5bce3689be9fe95626bbded9b18f97ec2efe958898f5beb20933796e6b3c7209a4c6a7ab7fcfcac6e41ee18e29999441f513130"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_CHAIN={0x8}]}, 0x740}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r0 = socket(0x10, 0x803, 0x0) iopl(0x3) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$IPC_RMID(r1, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 22.062615184s ago: executing program 2 (id=1976): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) getpid() timer_settime(0x0, 0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r9, 0x1, 0x20000000, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) io_setup(0x7, &(0x7f00000000c0)) 21.607018509s ago: executing program 9 (id=1978): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$binfmt_script(r1, 0x0, 0xb) splice(r0, 0x0, r3, 0x0, 0x80, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x502}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0x2e]}, 0x8) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040), 0xc) socket$qrtr(0x2a, 0x2, 0x0) read(r5, &(0x7f0000000400)=""/168, 0xa8) ioctl$sock_qrtr_TIOCINQ(r5, 0x8917, 0x0) syz_io_uring_setup(0x2aff, &(0x7f0000000280)={0x0, 0xfffffffd, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1b3f, &(0x7f0000000300), &(0x7f0000000080)=0x0, &(0x7f0000000040)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x0}) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r8, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000380)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) io_uring_setup(0xdac, &(0x7f0000000180)={0x0, 0x1cbf, 0x2000, 0x0, 0xfffffffe}) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x74) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet(r10, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r10, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) socket(0x15, 0x5, 0x0) 21.51527366s ago: executing program 8 (id=1979): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040)) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_BT_SECURITY(r3, 0x29, 0x31, 0x0, 0x20000000) clock_adjtime(0x0, &(0x7f0000000000)={0x3fe, 0x6000000000, 0x0, 0x8, 0x5, 0x0, 0x8000000000000, 0x0, 0x80000000, 0xfff, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000000}) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 20.69624093s ago: executing program 1 (id=1980): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x79, 0x1801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x87, 0xf0, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x0, 0x3, 0x1, 0x3, 0xd, {0x9, 0x21, 0x9, 0xd7, 0x1, {0x22, 0xca6}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7f, 0x7, 0xd7}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x40, 0x4, 0x40, 0xff, 0xb0}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x3, &(0x7f0000000300)=@string={0x3, 0x3, "0f"}}, {0xb7, &(0x7f0000000340)=@string={0xb7, 0x3, "18bc668b76f96b325e6026b4bec43528698f1a4efa72356363f763c04b65f2a051a5379ad328d777f9b8921e916f9a5e1ae8a0a1d6b9f5521f3209d27831e3d84455f232629079f9e072f67a22e1b8ecd863ca3bb699e69fd7564bae6d11f879834723db8c81b2894d3006adadd6f5fb4c5531fb46afa3545762b69e24273fe47b118dbff91b438fa48a2ba197148baf55443241ffe0e0a8d8721d1611e27645d3242de6a383c92b1e0583fdb227c772557f55099f"}}]}) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x4) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x82c02, 0x40) 20.642317318s ago: executing program 2 (id=1981): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff}, [@tail_call]}, &(0x7f0000000400)='syzkaller\x00', 0x83ba, 0xaa, &(0x7f00000005c0)=""/170, 0x41000, 0x12210e9ab1c2cbf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0xb, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = inotify_init1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0xa8882) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180), 0x2001888, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) openat$qrtrtun(0xffffff9c, &(0x7f0000000140), 0x30b241) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0x10d}], 0x1, 0x4b5, 0x0) r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x1c, 0x0, &(0x7f0000cab000)) write$vga_arbiter(r3, &(0x7f0000000000)=@other={'lock', ' ', 'io'}, 0x8) write$vga_arbiter(r3, &(0x7f00000001c0)=@other={'decodes', ' ', 'none'}, 0xd) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) io_uring_enter(0xffffffffffffffff, 0x37f5, 0xb5c7, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, 0x0, 0x12000021) read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020}, 0x18b5) 20.445441179s ago: executing program 8 (id=1982): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4, @ANYBLOB="08001f0004"], 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 20.219649991s ago: executing program 9 (id=1983): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffff"], 0x34}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="14000000100001000000d018000000000000000a7c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000050000480280001800a00010071756f74610000001800028008000240000000000c0001400000000000000008240001800b0001006f626a7265660000140002800800034000000002080005"], 0xa4}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) write$dsp(r3, &(0x7f0000000280)="3f3ebf96496a790c1a90be2dc1f4f354874823223d84a059c0965274226d8615ef6db50148787dea82a0d6ceafba54d8a1bb4c021dae906675370cb828fb2b39d793815a60315f1a2c516b44fe84da111f9a24a265148ee0b345a915d7d651736563e62863e45a0ada9d51cf88eae940d2770cc5892be40bde7cb251be69ed71fc48f9df1574b43fd4b8782fc9c9512f34a1df4cf795c4df2145a82d24733685caa2c47a7f191d4dfdb6d16cdddfb3183687b4e8800895566e1e90a21b3d24a382c617104bf4bcdab75edd04d849680d079bed2daa190c23489bcb8f705fdd2195f6abe775ea3f8d280c5875afd303816fbedc65b9859964b6ffbb7fc4f702abeb03adc885e85752144a76ba9504848be70f4d7cd865dfe7495345791ed721c93f9d17b4a78a9b3e3f467adabf03efac22dd1d78151e4845dacceffc1cb1b42f4482f2d251649a9d5af02697b7a1b0abb808f6cb75c22f7bcfd92668672e75c1edf39ca05737def4d603abd0358e4e129af84062fd64401530f00304e6ec889507aeec17a5311e3aa426f805a8a92518176dfd0a32297cda2a7fb693c81bfc5cdcae8ea131d1411144308106666e5be8f56ea8b3ff8c28b09e9773c8085c5392a4750cced5202228261bc00765c30f0b5caf4438a3157764c3d3bbeb82c5265dd82f40a95b33d08e569cc79465e85e8c8bf15952ac6493147e007d19d79935a44061621f73aca555d2e142dcd6f356c86e70b8b577c81c93acc0509819dbe268e579761e9155fe74a969d14197ac7b552307acaa547d967685546530b7c6ad617c8e12d46e8bb281442de856e02b965c41cf1c9479ccee57b694aa531ad505efea789f3f36eecf490b8d06e75d5b83fc091116da24f7909f8a2877ce3dbba33e804ff988da7a4ec3b506beb2bf3ac52a5153b10ac636979472b1df2100d3e3fcab98c85e3b9143a82c95c3b517a32c1cf60150f4b6c0b1f557ed4659dcb8e2c14bdb960b985996024ef067fcb3f29c2609b03a95faba2c01a5d86d7f7152340c54568e5aac57554b1d3c0385b4d3f45afeb77b373e2012f2d3ffcaec079b6e282f506cd96bcab291ca506c5bf88bb26c2cf449e2270902147462835d19fb96d98e858003aa33a3d3f28ac428e182e8e903d2a621389d78470f75f942a175cd104cceef2295930bbf83deca1403bb471c1f59f4cc5a07ef6980ffacad4de3d7825fef97a27dd01e02a12c4e3f589f61edff38f577a515d6189d500724bf7f25c39921c6be65c036d0e5050237d12d68c61c9ec80fa722bf288fa503da63746a0aac4326026e61d3f185984896c2b07f9c04a2643d216b0c128152fe2be48d641a1093a2a82b94b488f802bd7ce72bcb7db98b3e9470d96ec6f352f54de83b87a3d5f6c8e0c619f5d0279edd1629966b4c795160c08329327fcad3cfcca0b12fd1098d58ad09803257235505305a63846397d7036b65937a50283e1874b74c1d57e238c31e034931292f346ae8212906f388d3be2319219767a7ad7547ee07e0c119437b0254092bcfe4d70a5f2bff015901a6219c8629a88abf01f7a1ae3960877d82796878ff5dc14ac3db83a0a3ac45f217a40e6b9964cbc2f2c5681b3a074666755786cca48980826f929ed03ad448ca46cb1a3cfb37bb254a35bafd7e8ee5552e72369a5aa4035677fbe405fad0abd9c9d89fce5cb88a862fec636cc8a06915a4e19a2cf1b517a0883a5c8667896d2b276dc6a0bc333fb070d0fb388b6a4bcdb314190ebe9c24cdb105b487ae65d8f786008e175ead678207bfdee90c9316e541b09b51c6d25e148d89e76fcdcd26d259820e6dba7589446aafe2e93c24d03f2de39cc5fc96c9418f3acc67537327071dcdbdd92f4bd7019db4dc3b56355b49172d6a7b6e6cb4a3aa322a1be262df78947bba2367fbffceaec411fb992831a96d7f8d6638ba72da2c5cf02c61a58c7cc765a0717b13d124ce21f57e367c3acb721b4f420f6d5755871ba7ea04240a190d968f2345eb99f67cb133139e4a2017ba6861ae48bbbb99ef5f3976459aae3e49facd3e89c32503032548c7dc7c309a706c5670ed5f5ab7d56f4502ceb69fa20a1b87b002095268a8acf9dbab2a238ff2e5d287d68d1944b3a7a128a05186e995c2bb3ccee72bc9d08b6929f2b9111c1d886ff0ea503200ca9d828f69a897b9497ed1075ed953b113b86d74d4e7deba7501ada321436d8c02e6970db5bade5c7ec1547534c3891b36dd2307eef6481dcffd94d7ce007375dfb3dd73a6a2aeaca9d8b094aeed37887376d3dc4bb46b6cd142843a56be1f55d4df1e747ffdbf08add9e520e089e3b1f3a1143d4ab887c43fe668eaa3a443068fb6421e8529050d89963570da761404cbcf09aecac53d4d9510eb984f14cf7100dbdc3315f84cc63956ef8a56d27bbc91910d72d6cc1831b7b273cc9b4b0ee8df86c5ec73226e483f7fd7efd5b8214c7c3d8a7f09151d14f990e82b3a838cc2fa467d34aff4f5695b0d22cebf92b2647a6ea520b785a7b45ccb5d15e0d13ea3c5b49163fa9e92dbf4bd56cca975d662ec2d0a4a2fd2bd3c9ae4abc2bc757adceb6f3fd5fe421305273ba26ad761f4de5dfd1f22780087917097d0131158903b20eb65d26dc7edcf1d5e14f38435827a35be9de906bd87ef5d452a77660d02c5115be6a0aa7287c5eee0af3fafe0038904b6c85b994f3dedec499ee1b7aaca73ebbf0867b072bfa492fdbf98357aa6e0bb6bf29954e0731c3bf412a3dd8f1abf37f6eaec11aa3dd2c94f3452944ee37e3511d6765b46a1ba46c6bc2845c9ada71981bd6e176348e0965824efdf6d6fdc09d404fc69aeede1648ec2e65d2d0ea96823288ea4132e2aab89b32d17d47909732e5a1c7fd00cb0d2bcbb6b897a2ca1c4b3e4eaba66c4f1af2909e6d905d441c80e7c6ee02a3903474b2e432b032cacd2322fd800ce75c7582195adcc0fdd2288e54bea0021d105eaf9c378f7f1a5a786fe26bf74feea1c542bd39efa3d2260c68914578b7fe30b578c4fff43b7364d18b74d06929e76d16e2e4c8851babf157e7fd0bb88882cfcc79c84d1821d6c056f9bc47d1577abbbaf40bed2a441c500500fc6f75ef98f8fa226d48e99a8ef869498de983b028d1cf5eb88c19115188d350ad235a07c160f144d8a8a10b3a3b75d548656741a4f4f932be79db1287aa0482dbe08279e2888c6ff42c7942274fe934cf38a266fbc767899ff9c5d7132d97871d2f353e261c33b97210342e74679e450617014cb974506c247123e0437bd32d125bbb7d3977ca323f6a532e7eeb4c78efbef904f7378831f3a04fc4c50a8e95db138ee1de36e58404dcf3159d1d869061afbdff58b2c120dc7830aa9551f152c1fdd451bb347e7b241b37038e1e81558ed0ef51d5ad8c9ae59f8741a1a237a22027cd950da11b619f109fdcc96aa85bd54cefd9c8d533869065b3276fcc9038ebe3c7e9d091c537f53d02b357ce6ecb6e133be4cc8adeeb61959c31b2324443182e555c3f2ea611f63eece94da2ae91cab7ca7274105efc48c3a6a133ca86e26b020a6b2083c98310d9f477b9c665f51946f7ae643ba85869878413a032f6a85e6476a998cf76a8a3ddd2c773069d0625de39d91b52a136fe9b65126657c8bbbc7bdb6b686de0cc3ea8ddbebab503ff0403c1f00b32ed4c712d513a1c4f788cc8b659e7d31d807450697310af6b8cb12ec564c1c488ff70c6d64a3aa624507c32399cbeba55ee9ce7951fd364b19d3fa16d944090c6271f1981ab94579aaf691c6ce392e21a223f7f284fca0c6ed55aafb024b4e1832324bc7bd18dbef1f90d0a854f0cfa2784dfce1fe4cd81e83c8294e323b69b95e48261e4e0d4e95436f000d6cb2a157203a3db65d11fa693bdc91371583cb956119aea7b5a88daa59a9b9d73404d32408a273950f58d719ac4332a4c698526eb77d5704b2e00d7ced752648f3690a76e5e15a14312131c197c8491d224af8b681e3f24bcff244056674a298fe5fb4a0ca779dfafa69f5ddc2d012123bd706051a09f3609bb6558bf47dfef967db47887a2e178fa6f887a057447c56b1d45af4a97207e2630963e46e2a9e054038addf8426190fb04cea244795683338656330ac2030e0b75534f47eebf8b6ceaddc85b0866796cb02a7f94138f281561eada7a5c15efbeed14c49b04a07e3e9202ebc7072801bf817eab45825aacb874a7cfbb586157feca8a2f834afe707934eeeb1a11089da8f87ef36ab9b5d0f038a0d7a21ce93362b782b1de35dde0e10655edc4c7b0ab7a5813e382f17fd87d4d092265c71a8cfc88655a01c3b016f2363a26ec137d0272fe75df369a35659063f31b8659cfab3d84d445606c84a2e73e53ce218a046e11a63cd6eee83201e3f26a1b9908e04d8640ea69d4ce98132b8eee0439e4c1792a81752bcea45126d744e1f020e00c68fd1e1fbb70add2bc4c04b61515e33b0e40fdb3acdb4d18781a3d1eed8f3f30fcf60d6b166af035c25eaeeeb413d6f0bbdbba20185336f2c35d5ce610a5a77993daa6cc69f820dc3571fd44f85afeac7f62df8c70515c2375d2f0669beb47ce0e5bfa3792fbb1c49449772efdae483ff667d22f4bccb2ec6c14c9d5b512392a9a493d401992d3d612c4932abaf9e18c01832cc3e19738e59e1595f7d900f9742c8d081715dc900c05278a3720a745853a71ba1a4d868468a34aa8c1d00b6e7551f357d7da06369b0c30ca89752f3a25358c5d2b68032970060b23f7b9dfcc648fc89a80d2617a75a5423134aaa5b042414313b2752e17f8d47cb0b5c97c0f550c973b5943f31108d05d77fc504e36814f8b102a3937f53fa4d0eb901e234517f7fd653e0a142576985e15772b84f91ee0a3856b47437c21598fdf1f4064b30cfa773112df502316994111d57db3971073f36310c1de4ff63752c79c8f8f7b7cd2b0090dd362fb3c87796dde5ede4cd8b9131a9c7c1c5245081a9fba39cfb1564b6bcb11772a7c3e4946e28220bd78a2974a73ace42d21fbeb84af6d95070fc14aee97e15ef637a724301881bed0390b33be0bb35ca8373cc479cf59f279089d73f4fbd99d888504d1d82993ebe1140c1e4a624b3283cc079b34d1a22b82087d87ed0f1f09ade10a610c5101cc719077eed7ec8e03d3e152f2f24b63aa61b04d3ed9a86dc438ee2efb0ab6d7a1dce911c7fb0d1a8fde2886a934509372aa1de1cec45f658a95bca826e334b9c19837b3299e3a3c2cf246276a9ac8211034654695318dff4005db8f5ce87dd34925262c377bec6cd183b159fdde3301f65dbff01d82132e917fb0fc324c08dcb262ca79bdd063a5d9207b7346b4985b5d9e1f49cec67e21077c4224a3b70953ce00b06d31f58bd374ae2d4f9ba63cf337d8370c8d3e16dd951509677de8c997c893b38f241a7b0842ab29ad8a2496b46d06ae47572df59ebf1e6ccb863ba8ccf84aa8ff05462437965074e1199bbddea6151bbe555b9a8bee1659decc2e6f9c9c0d1e19f0b4a0f0a632937f1ff6f42a12c5f5cd04f6eef26a93dfe68a8d396c0aeff6facee8e3f5f45891816993dc86e310524b052fd2d710b67934b773cdd5b2bcdf436e1bffc768b415b2a34aeaee998e0cb77bc41f1cada767eb699bcf62c6c076b699b8f3f32d57feb00c0d9e375f488a22c372d5305ff28c81b765ca83502cdf0f8b3dac5c5686bf55cd2ddc170ff78ab277231e7db9fe9703d15c3bc3d056acffed5431b57473ad9ba482c649b8811dbad473186b33a7c4b680ad7baab6c", 0x1000) r4 = syz_usb_connect_ath9k(0x3, 0x17, &(0x7f0000001400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e43d, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x3}}}}}}]}}, 0x7fe782539b0b) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x48, 0x0, 0x9, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x80) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x7b, &(0x7f0000000200)=@generic={0x1, 0x2, 0x73, "b4e8c458", "2e5566006a0931118fa3617a83d8b1e330f7cd86e796c3890675dfc0a014715739c9aa0c0da9c22f2244bcfee05cbf561ac117426697ed41d4114788dca414e90147e8a94df09b55db3fc3e7822ce7235e10a87f73f602a0088b1e01498c46c9ff3557a8457137cfcce3d475dbcc58cabab02a"}) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "25601ce5", {0x3, 0x4, 0x0, 0x18, 0xa9e8, 0xb, 0xa}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x12dc01, 0x0) write$FUSE_WRITE(r5, &(0x7f00000000c0)={0x18}, 0x18) write$char_usb(r5, &(0x7f0000000100)="85fa69492073264ed805b98dc83915bfd2a4f3a5013b907771e7f8d9c16737c3ca0f48ca8ee2b121c077a41c8d3cf602ffcf409c0cb61bee1bfe918acfc078d2d67ec30ba5c49df908d7c2fe67ac6bf5c57ac6254ce6e2c3eb2ffbb2be0be4a8837b5525c25f5ea6f8e67dd0eda877a23523bae5998d2cbf0144b2c898c7f274f7334ea3bc978dfb51a331ef8c6eda6157fbe5864d0b6dbff496a65721d803936b21dbdb933ea839b587363cfdcf00b871972c21786b3116f70b657e2107a27cb58df9577138ff06a33dde129921ac78f0134cc749", 0xd5) syz_open_dev$char_usb(0xc, 0xb4, 0x2) 20.125263s ago: executing program 8 (id=1984): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4f, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x22, 0x4, 0x0, 0x0, 0x88, 0x67, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x6]}, @timestamp_prespec={0x44, 0x4, 0xc0, 0x3, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@loopback}, {@remote, 0xfffffffd}, {@multicast2, 0xb}, {@private=0xa010100}, {@multicast1}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @timestamp={0x44, 0x18, 0xec, 0x0, 0xb, [0x4, 0x5, 0x1, 0x101, 0x6]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000905000000000000000008004300ff030000a90000002b0e13e735a3184f123d6da2d1acfac0ee2dd2b184b1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce68715f282d0000"], 0xe0}], 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x1100080, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x204080, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x380000f, 0x100010, r6, 0x0) r7 = dup(r3) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x40, r10, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x40}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 20.021724167s ago: executing program 1 (id=1985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x612300, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x6, 0x3e, &(0x7f00000001c0)=""/62, 0x1f00, 0x1, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0x10, 0x96d}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r2, r3, r4], 0x0, 0x10, 0x80000000, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) r7 = socket(0x22, 0x2, 0x21) io_uring_setup(0x7056, &(0x7f0000000040)) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r8, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x40000000802) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r9 = io_uring_setup(0x1694, &(0x7f00000004c0)={0x0, 0x1, 0x8}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000400)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, 'pim6reg0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r10, 0x4008b100, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x2) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32], 0x88}}, 0x20050800) 19.705607693s ago: executing program 1 (id=1986): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000580)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r2, r2) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000003c0)=0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000200)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000040)={r12}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x17, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000711206000000000095", @ANYRES64=r0, @ANYRESOCT=0x0, @ANYRES64=r3], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0x22205) 19.626947533s ago: executing program 3 (id=1987): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000006dc0), 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x6, 0x1, @empty, 0x7ff}, @in={0x2, 0x4e20, @rand_addr=0x64010100}], 0x2c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ID={0x8, 0x6, 0xfffffff0}, @NHA_OIF={0x8}]}, 0x28}}, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b40000000000000071118d000000000016b6ffffff0000b038a459c9da035b8556d618baee009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4d) r9 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r9}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0xf000, 0x0, 0x8, r9, 0xb}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x5, 0x0, 0x0, r1, 0x2}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) 19.270770436s ago: executing program 1 (id=1988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000002000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) (async, rerun: 32) r4 = socket(0x10, 0x400000000080803, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) (async) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000600), 0x3, 0x30000) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) (async) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='kfree\x00', r9}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a00a6ea35bdfaf6"}, 0xd8) 18.049571509s ago: executing program 8 (id=1989): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) iopl(0x3) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x1, 0x1ff}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, &(0x7f0000000380)=0x6) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x8031, r1, 0xfffff000) socketpair$unix(0x1, 0x59c1b293bdff4203, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/6}, {&(0x7f00000004c0)=""/167}], 0x0, &(0x7f0000000680)=""/229}, 0xc}], 0x605, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05d22f15378615112011a95555945c7ba6ac5d92465435b9911d1a233e19d2f21b01fc6b80ef0240ef2eb92d88b9df017153aa51df56fd4253e39304803524faeaad29978ad81d462dcb12291d6e1b392ee8d7ad5ac46c2e8dd9d125d1a2d56555f654816f1c38997722c7dc6db9001874250891f1c27a299f079b4663aa5db0"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x77) sendfile(r2, 0xffffffffffffffff, 0x0, 0x25) syz_open_procfs(r3, &(0x7f00000001c0)='comm\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f041}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) ptrace(0x10, r0) 18.048401889s ago: executing program 1 (id=1990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r4, &(0x7f0000000040), &(0x7f0000000200)=0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x6455bb3269e54a65, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) creat(&(0x7f0000000340)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYBLOB="0100000075705f69a55b", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000004340)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r8, 0x0, 0x0) 17.818819533s ago: executing program 3 (id=1991): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) getpid() timer_settime(0x0, 0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r9, 0x1, 0x20000000, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) io_setup(0x7, &(0x7f00000000c0)) 17.112662938s ago: executing program 2 (id=1992): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040)) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_BT_SECURITY(r3, 0x29, 0x31, 0x0, 0x20000000) clock_adjtime(0x0, &(0x7f0000000000)={0x3fe, 0x6000000000, 0x0, 0x8, 0x5, 0x0, 0x8000000000000, 0x0, 0x80000000, 0xfff, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000000}) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 17.06387376s ago: executing program 9 (id=1993): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x2c, r0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8001}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) socket$kcm(0x11, 0x200000000000007, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000703afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000030a8cd867f706598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37a01000000050000000026000400"], 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x15, 0x0, 0x1, 0xff}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req3={0x101, 0x0, 0x7fffffff, 0x7760, 0x9, 0x67, 0xffffffff}, 0x1c) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000e00), 0x12) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, 0x0, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x27, @short}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 16.995077542s ago: executing program 8 (id=1994): openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x412800, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) lseek(r0, 0x100000081, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={0x0}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x4000}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x4}}]}]}]}, 0x34}}, 0x0) r6 = memfd_create(&(0x7f0000000100)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0', 0x6) fcntl$addseals(r6, 0x409, 0xc) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) timerfd_settime(r7, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) setregid(0xee00, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}) 16.867643089s ago: executing program 9 (id=1995): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4, @ANYBLOB="08001f0004"], 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 16.797759671s ago: executing program 3 (id=1996): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) ptrace$pokeuser(0x6, 0x0, 0x3ff, 0x2000000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000040)) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, 0x2a, 0x821, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x4, 0xe}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1=0xaac0f00}]}, 0x20}, 0x1, 0x3000000, 0x0, 0x11}, 0x0) 16.056699419s ago: executing program 1 (id=1997): r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x9bea, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x15, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800", 0x20343059}) ioperm(0x0, 0x7, 0x7) clock_settime(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES8=r0], 0x440}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x5) r2 = socket(0xb, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x8910) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = getpid() socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(r4, 0x5, &(0x7f0000000200)=0x7) syz_pidfd_open(r4, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffced) fcntl$setpipe(r5, 0x407, 0x0) write$FUSE_INIT(r5, &(0x7f00000015c0)={0x50, 0x0, 0x0, {0x7, 0x28, 0x4, 0x3240900, 0x0, 0x0, 0xfffffffc, 0x5}}, 0x50) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r5, 0x407, 0x2000000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x120) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000300)={0x50, 0xfffffffffffffff5, r7, {0x7, 0x1f, 0x0, 0x20404, 0xf}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0xfffffffffffffdc7, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15.917413549s ago: executing program 9 (id=1998): get_mempolicy(&(0x7f00000001c0), &(0x7f0000000280), 0x3ff, &(0x7f000002a000/0x3000)=nil, 0x2) unshare(0x28020500) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc700000000000000004cbd302b0000000000fa000000000022", @ANYBLOB='$'], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a00000000000004000000000000000000000021000000000001000000000000"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) (fail_nth: 1) 1.339770549s ago: executing program 37 (id=1992): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040)) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_BT_SECURITY(r3, 0x29, 0x31, 0x0, 0x20000000) clock_adjtime(0x0, &(0x7f0000000000)={0x3fe, 0x6000000000, 0x0, 0x8, 0x5, 0x0, 0x8000000000000, 0x0, 0x80000000, 0xfff, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000000}) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 1.146575825s ago: executing program 38 (id=1996): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) ptrace$pokeuser(0x6, 0x0, 0x3ff, 0x2000000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000040)) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, 0x2a, 0x821, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x4, 0xe}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1=0xaac0f00}]}, 0x20}, 0x1, 0x3000000, 0x0, 0x11}, 0x0) 846.618967ms ago: executing program 39 (id=1994): openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x412800, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) lseek(r0, 0x100000081, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={0x0}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x4000}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x4}}]}]}]}, 0x34}}, 0x0) r6 = memfd_create(&(0x7f0000000100)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0', 0x6) fcntl$addseals(r6, 0x409, 0xc) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) timerfd_settime(r7, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) setregid(0xee00, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}) 665.585255ms ago: executing program 40 (id=1998): get_mempolicy(&(0x7f00000001c0), &(0x7f0000000280), 0x3ff, &(0x7f000002a000/0x3000)=nil, 0x2) unshare(0x28020500) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc700000000000000004cbd302b0000000000fa000000000022", @ANYBLOB='$'], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a00000000000004000000000000000000000021000000000001000000000000"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) (fail_nth: 1) 0s ago: executing program 41 (id=1997): r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x9bea, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x15, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800", 0x20343059}) ioperm(0x0, 0x7, 0x7) clock_settime(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES8=r0], 0x440}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x5) r2 = socket(0xb, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x8910) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = getpid() socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(r4, 0x5, &(0x7f0000000200)=0x7) syz_pidfd_open(r4, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffced) fcntl$setpipe(r5, 0x407, 0x0) write$FUSE_INIT(r5, &(0x7f00000015c0)={0x50, 0x0, 0x0, {0x7, 0x28, 0x4, 0x3240900, 0x0, 0x0, 0xfffffffc, 0x5}}, 0x50) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r5, 0x407, 0x2000000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x120) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000300)={0x50, 0xfffffffffffffff5, r7, {0x7, 0x1f, 0x0, 0x20404, 0xf}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0xfffffffffffffdc7, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): ocation=15977 [ 594.482726][T12272] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16231, location=16231 [ 594.502126][T12272] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=15975, location=15975 [ 594.512100][ T969] usb 2-1: Using ep0 maxpacket: 8 [ 594.513459][ T969] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 594.526430][ T969] usb 2-1: config 0 has no interface number 0 [ 594.540486][T12272] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 594.543623][ T969] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 594.561233][T12272] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 594.609129][ T969] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 594.664133][ T969] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 594.969767][ T969] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 594.984145][ T969] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 594.995110][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.052776][T12294] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1409'. [ 595.054439][ T969] usb 2-1: config 0 descriptor?? [ 595.062152][T12294] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 595.082417][ T969] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 597.561892][ T5913] usb 2-1: USB disconnect, device number 30 [ 597.572244][ T5913] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 597.833234][T12329] netlink: 'syz.6.1418': attribute type 1 has an invalid length. [ 598.327124][ T29] audit: type=1804 audit(1731663957.080:202): pid=12333 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1421" name="/newroot/293/bus/bus" dev="overlay" ino=1588 res=1 errno=0 [ 598.544120][T12335] bond3 (unregistering): Released all slaves [ 598.665411][ T29] audit: type=1326 audit(1731663957.710:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12323 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 598.691018][T12340] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.1424'. [ 598.700445][T12340] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 598.864891][ T29] audit: type=1326 audit(1731663957.710:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12323 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 598.899613][ T29] audit: type=1326 audit(1731663957.710:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12323 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 598.934796][ T29] audit: type=1326 audit(1731663957.710:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12323 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 598.980229][ T29] audit: type=1326 audit(1731663957.710:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12323 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 599.096481][ T29] audit: type=1326 audit(1731663957.710:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12323 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 599.158542][ T29] audit: type=1326 audit(1731663957.710:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12323 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 599.286532][ T29] audit: type=1326 audit(1731663957.710:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12323 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 599.332101][ T8] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 599.724715][ T29] audit: type=1326 audit(1731663957.710:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12323 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 600.052159][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 600.417383][ T8] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 600.439907][ T8] usb 7-1: config 0 has no interface number 0 [ 600.477589][ T8] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 600.508974][ T8] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 600.520802][ T8] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 600.539581][ T8] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 600.572273][ T8] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 600.582076][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.628630][ T8] usb 7-1: config 0 descriptor?? [ 600.637328][ T8] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 600.933068][T12371] binder: 12370:12371 ioctl 541b 0 returned -22 [ 601.034357][T12374] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1436'. [ 601.050876][T12374] netlink: 'syz.3.1436': attribute type 2 has an invalid length. [ 601.059520][T12374] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1436'. [ 601.634051][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1439'. [ 602.460266][ T5913] usb 7-1: USB disconnect, device number 24 [ 602.494751][ T5913] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 602.756190][T12392] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1441'. [ 602.765724][T12392] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 602.852804][T12393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1440'. [ 603.646248][T12400] FAULT_INJECTION: forcing a failure. [ 603.646248][T12400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.751561][T12400] CPU: 0 UID: 0 PID: 12400 Comm: syz.8.1444 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 603.762373][T12400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 603.772438][T12400] Call Trace: [ 603.775722][T12400] [ 603.778656][T12400] dump_stack_lvl+0x241/0x360 [ 603.783335][T12400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 603.788526][T12400] ? __pfx__printk+0x10/0x10 [ 603.793114][T12400] ? __pfx_lock_release+0x10/0x10 [ 603.798138][T12400] should_fail_ex+0x3b0/0x4e0 [ 603.802810][T12400] _copy_from_user+0x2f/0xc0 [ 603.807392][T12400] snd_pcm_oss_write+0xa33/0x11f0 [ 603.812422][T12400] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 603.817903][T12400] ? bpf_lsm_file_permission+0x9/0x10 [ 603.823276][T12400] ? security_file_permission+0x74/0x280 [ 603.828935][T12400] ? rw_verify_area+0x1c3/0x6f0 [ 603.833808][T12400] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 603.839290][T12400] vfs_write+0x2a3/0xd30 [ 603.843557][T12400] ? __pfx_vfs_write+0x10/0x10 [ 603.848327][T12400] ? __fget_files+0x29/0x470 [ 603.852938][T12400] ? __fget_files+0x3f3/0x470 [ 603.857634][T12400] ? __fget_files+0x29/0x470 [ 603.862237][T12400] ? fdget_pos+0x19a/0x320 [ 603.866658][T12400] ksys_write+0x183/0x2b0 [ 603.870995][T12400] ? __pfx_ksys_write+0x10/0x10 [ 603.875851][T12400] ? do_syscall_64+0x100/0x230 [ 603.880616][T12400] ? do_syscall_64+0xb6/0x230 [ 603.885331][T12400] do_syscall_64+0xf3/0x230 [ 603.889844][T12400] ? clear_bhb_loop+0x35/0x90 [ 603.894525][T12400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.900415][T12400] RIP: 0033:0x7f2ad557e719 [ 603.904827][T12400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.924443][T12400] RSP: 002b:00007f2ad62d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 603.932866][T12400] RAX: ffffffffffffffda RBX: 00007f2ad5735f80 RCX: 00007f2ad557e719 [ 603.940832][T12400] RDX: 000000000000fc36 RSI: 0000000020000500 RDI: 0000000000000003 [ 603.948796][T12400] RBP: 00007f2ad62d5090 R08: 0000000000000000 R09: 0000000000000000 [ 603.956764][T12400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.964728][T12400] R13: 0000000000000000 R14: 00007f2ad5735f80 R15: 00007ffc70959848 [ 603.972708][T12400] [ 605.274115][T12417] netlink: zone id is out of range [ 605.280952][T12417] netlink: zone id is out of range [ 605.290844][T12417] netlink: zone id is out of range [ 605.296398][T12417] netlink: zone id is out of range [ 605.301499][T12417] netlink: zone id is out of range [ 605.306678][T12417] netlink: zone id is out of range [ 605.311794][T12417] netlink: zone id is out of range [ 605.316975][T12417] netlink: zone id is out of range [ 605.323808][T12417] netlink: zone id is out of range [ 605.410260][T12419] FAULT_INJECTION: forcing a failure. [ 605.410260][T12419] name failslab, interval 1, probability 0, space 0, times 0 [ 605.423403][T12419] CPU: 1 UID: 0 PID: 12419 Comm: syz.2.1449 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 605.434203][T12419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 605.444276][T12419] Call Trace: [ 605.447570][T12419] [ 605.450521][T12419] dump_stack_lvl+0x241/0x360 [ 605.455231][T12419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.460456][T12419] ? __pfx__printk+0x10/0x10 [ 605.465076][T12419] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 605.470639][T12419] ? __pfx___might_resched+0x10/0x10 [ 605.475933][T12419] should_fail_ex+0x3b0/0x4e0 [ 605.480610][T12419] ? getname_flags+0xb7/0x540 [ 605.485285][T12419] should_failslab+0xac/0x100 [ 605.489957][T12419] ? getname_flags+0xb7/0x540 [ 605.494629][T12419] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 605.499997][T12419] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 605.506336][T12419] getname_flags+0xb7/0x540 [ 605.510837][T12419] __x64_sys_rmdir+0x3a/0x50 [ 605.515428][T12419] do_syscall_64+0xf3/0x230 [ 605.519940][T12419] ? clear_bhb_loop+0x35/0x90 [ 605.524615][T12419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.530506][T12419] RIP: 0033:0x7fa80c57e719 [ 605.534920][T12419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.554521][T12419] RSP: 002b:00007fa80d2b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 605.562931][T12419] RAX: ffffffffffffffda RBX: 00007fa80c735f80 RCX: 00007fa80c57e719 [ 605.570930][T12419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 605.578897][T12419] RBP: 00007fa80d2b9090 R08: 0000000000000000 R09: 0000000000000000 [ 605.586863][T12419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.594826][T12419] R13: 0000000000000000 R14: 00007fa80c735f80 R15: 00007ffd45a09c18 [ 605.602815][T12419] [ 605.742155][ T5830] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 605.915888][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 605.924333][ T5830] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 605.935542][T12430] ip6gretap1: entered allmulticast mode [ 605.941962][ T5830] usb 4-1: config 0 has no interface number 0 [ 605.960820][ T5830] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 606.012931][ T5830] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 606.198078][ T5830] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 606.366262][ T5830] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 606.522921][ T5830] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 606.612382][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.723056][ T5830] usb 4-1: config 0 descriptor?? [ 606.832711][ T5830] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 607.050212][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 607.050251][ T29] audit: type=1326 audit(1731663966.090:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12437 comm="syz.6.1458" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26f437e719 code=0x0 [ 607.877865][ T25] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 608.388603][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 608.406727][ T25] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 608.444950][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.466831][ T25] usb 7-1: config 0 has no interface number 0 [ 608.481866][ T25] usb 7-1: config 0 interface 52 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 608.612146][ T25] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 608.666991][ T25] usb 7-1: config 0 interface 52 has no altsetting 0 [ 608.703013][ T25] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 608.748558][ T25] usb 7-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 608.807972][ T25] usb 7-1: Manufacturer: syz [ 608.871858][ T25] usb 7-1: config 0 descriptor?? [ 610.072946][T12439] vivid-003: disconnect [ 610.537030][ T8] usb 4-1: USB disconnect, device number 30 [ 610.568245][ T8] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 612.125789][T12442] vivid-003: reconnect [ 612.194374][ T25] usb 7-1: Can not set alternate setting to 1, error: -71 [ 612.201541][ T25] synaptics_usb 7-1:0.52: probe with driver synaptics_usb failed with error -71 [ 612.484342][ T25] usb 7-1: USB disconnect, device number 25 [ 615.752463][ T29] audit: type=1800 audit(1731663974.750:220): pid=12514 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1479" name="/" dev="9p" ino=2 res=0 errno=0 [ 617.465365][T12450] net_ratelimit: 2 callbacks suppressed [ 617.465385][T12450] Set syz1 is full, maxelem 65536 reached [ 618.574394][ T29] audit: type=1326 audit(1731663977.550:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12538 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 618.603604][ T29] audit: type=1326 audit(1731663977.550:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12538 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 618.625648][ T29] audit: type=1326 audit(1731663977.550:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12538 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 618.647556][ T29] audit: type=1326 audit(1731663977.550:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12538 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 620.782030][T12567] Cannot find add_set index 0 as target [ 623.242305][T12594] lo speed is unknown, defaulting to 1000 [ 623.632421][ T969] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 623.820148][ T969] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 624.492991][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.499876][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.587769][ T969] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 624.709682][ T969] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 624.766916][ T969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 624.813509][ T969] usb 7-1: SerialNumber: syz [ 624.875554][T12590] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 625.115446][T12584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.124622][T12584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.270828][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 626.427405][ T969] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 626.482344][ T969] usb 7-1: USB disconnect, device number 26 [ 626.543435][T12616] Cannot find add_set index 0 as target [ 627.314596][T12625] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 629.361492][T12654] netlink: 276 bytes leftover after parsing attributes in process `syz.6.1514'. [ 631.227948][T12669] IPVS: stopping backup sync thread 11646 ... [ 631.520783][T12659] IPVS: stopping backup sync thread 12123 ... [ 631.699179][T12653] lo speed is unknown, defaulting to 1000 [ 632.031861][T12661] ALSA: mixer_oss: invalid OSS volume '0' [ 632.037678][T12661] ALSA: mixer_oss: invalid OSS volume 'Shared_Clean:' [ 632.044454][T12661] ALSA: mixer_oss: invalid OSS volume 'Shared_Dirty:' [ 632.051196][T12661] ALSA: mixer_oss: invalid OSS volume 'Private_Clean:' [ 632.058063][T12661] ALSA: mixer_oss: invalid OSS volume 'Private_Dirty:' [ 632.064966][T12661] ALSA: mixer_oss: invalid OSS volume 'Referenced:' [ 632.071734][T12661] ALSA: mixer_oss: invalid OSS volume 'Anonymous:' [ 632.136770][T12659] ALSA: mixer_oss: invalid OSS volume '0' [ 632.142579][T12659] ALSA: mixer_oss: invalid OSS volume 'Shared_Clean:' [ 632.149360][T12659] ALSA: mixer_oss: invalid OSS volume 'Shared_Dirty:' [ 632.156181][T12659] ALSA: mixer_oss: invalid OSS volume 'Private_Clean:' [ 632.163052][T12659] ALSA: mixer_oss: invalid OSS volume 'Private_Dirty:' [ 632.169882][T12659] ALSA: mixer_oss: invalid OSS volume 'Referenced:' [ 632.176628][T12659] ALSA: mixer_oss: invalid OSS volume 'Anonymous:' [ 632.303021][T12661] ALSA: seq fatal error: cannot create timer (-19) [ 632.355404][T12659] ALSA: seq fatal error: cannot create timer (-19) [ 634.308518][ T29] audit: type=1800 audit(1731663993.350:225): pid=12690 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1524" name="/" dev="9p" ino=2 res=0 errno=0 [ 635.417004][ T969] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 637.231628][ T969] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 637.248830][ T969] usb 4-1: can't read configurations, error -71 [ 640.162150][ T29] audit: type=1326 audit(1731663999.130:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12745 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 640.189341][ T29] audit: type=1326 audit(1731663999.130:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12745 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 640.230385][ T29] audit: type=1326 audit(1731663999.150:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12745 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 640.485721][ T29] audit: type=1326 audit(1731663999.160:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12745 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 640.507598][ T29] audit: type=1326 audit(1731663999.160:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12745 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 640.532230][ T29] audit: type=1326 audit(1731663999.200:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12745 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 640.554091][ T29] audit: type=1326 audit(1731663999.260:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12745 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 640.575989][ T29] audit: type=1326 audit(1731663999.260:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12745 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c57e719 code=0x7ffc0000 [ 640.721105][T12754] lo speed is unknown, defaulting to 1000 [ 642.488938][T12763] lo speed is unknown, defaulting to 1000 [ 645.456986][ T29] audit: type=1326 audit(1731664004.500:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f437e719 code=0x7ffc0000 [ 645.676684][ T29] audit: type=1326 audit(1731664004.500:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f437e719 code=0x7ffc0000 [ 645.698710][ T29] audit: type=1326 audit(1731664004.520:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f26f437e719 code=0x7ffc0000 [ 645.720563][ T29] audit: type=1326 audit(1731664004.520:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f437e719 code=0x7ffc0000 [ 646.194648][ T29] audit: type=1326 audit(1731664004.520:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f437e719 code=0x7ffc0000 [ 646.251236][ T29] audit: type=1326 audit(1731664004.520:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f26f437e719 code=0x7ffc0000 [ 646.454721][ T29] audit: type=1326 audit(1731664004.520:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f437e719 code=0x7ffc0000 [ 646.542021][ T29] audit: type=1326 audit(1731664004.520:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f437e719 code=0x7ffc0000 [ 646.802200][ T29] audit: type=1326 audit(1731664004.540:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f26f437e719 code=0x7ffc0000 [ 646.834189][ T29] audit: type=1326 audit(1731664004.540:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f437e719 code=0x7ffc0000 [ 647.692333][T12813] lo speed is unknown, defaulting to 1000 [ 652.310736][T12869] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 652.377274][T12870] IPVS: stopping backup sync thread 12869 ... [ 654.602678][T12886] lo speed is unknown, defaulting to 1000 [ 655.174939][T12895] netlink: 'syz.2.1570': attribute type 1 has an invalid length. [ 655.394975][T12895] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1570'. [ 655.410385][T12895] bond4 (unregistering): Released all slaves [ 656.505254][T12908] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 657.144425][T12912] Error parsing options; rc = [-22] [ 657.330317][T12907] IPVS: stopping backup sync thread 12908 ... [ 658.476280][T12920] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.1575'. [ 658.487672][T12920] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 658.717765][T12927] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 659.528227][T12931] IPVS: stopping backup sync thread 12927 ... [ 660.152665][T12936] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1579'. [ 661.708992][T12952] netlink: 'syz.1.1583': attribute type 1 has an invalid length. [ 663.819746][T12952] bond3 (unregistering): Released all slaves [ 664.356882][T12959] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1583'. [ 664.906306][T12978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.036446][T12978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.774316][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 666.022185][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 666.092657][ T9] usb 9-1: config 0 has an invalid interface number: 232 but max is 0 [ 666.100851][ T9] usb 9-1: config 0 has no interface number 0 [ 666.128518][T12992] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1591'. [ 666.137942][T12992] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 666.182146][ T9] usb 9-1: New USB device found, idVendor=046d, idProduct=0897, bcdDevice=b8.98 [ 666.191215][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.579552][ T9] usb 9-1: config 0 descriptor?? [ 666.727194][ T9] gspca_main: vc032x-2.14.0 probing 046d:0897 [ 666.956926][T13006] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 667.062264][ T9] gspca_vc032x: reg_r err -71 [ 667.068243][T13006] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 667.076722][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 667.084554][T13006] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 667.092448][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 667.097877][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 667.103411][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 667.109312][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 667.116842][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 667.122702][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 667.128363][T13006] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 667.137593][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 667.143235][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 667.148948][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 667.155158][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 667.160701][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 667.166292][T13006] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 667.173563][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 667.179023][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 667.184646][T13006] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 667.191779][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 667.198164][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 667.204109][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 667.210640][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 667.217312][ T9] gspca_vc032x: Unknown sensor... [ 667.223086][ T9] vc032x 9-1:0.232: probe with driver vc032x failed with error -22 [ 667.236741][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 667.243041][ T9] usb 9-1: USB disconnect, device number 9 [ 667.253178][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 667.264978][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 667.533816][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 667.543518][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 667.552848][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 667.586915][T13004] lo speed is unknown, defaulting to 1000 [ 668.531192][T12724] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.691821][T13017] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1598'. [ 669.630042][T12724] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.180264][T13006] Bluetooth: hci1: command tx timeout [ 670.298426][T12724] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.382327][T13025] netlink: 'syz.1.1600': attribute type 1 has an invalid length. [ 670.397729][T13026] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1600'. [ 670.463853][T12724] bond0: (slave netdevsim0): Releasing backup interface [ 670.482678][T12724] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.507806][T13027] bond3 (unregistering): Released all slaves [ 670.602468][ T8] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 670.832306][ T8] usb 9-1: Using ep0 maxpacket: 16 [ 670.857119][ T8] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.876958][ T8] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 670.916249][T13004] chnl_net:caif_netlink_parms(): no params data found [ 671.449628][ T8] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 671.700097][T12724] bridge_slave_1: left allmulticast mode [ 671.724303][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.752994][ T8] usb 9-1: config 0 descriptor?? [ 671.764923][ T8] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 671.779657][T12724] bridge_slave_1: left promiscuous mode [ 671.807381][T12724] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.902610][T12724] bridge_slave_0: left allmulticast mode [ 671.908308][T12724] bridge_slave_0: left promiscuous mode [ 671.973479][T12724] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.999806][T13029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.157829][T13029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.234354][T13006] Bluetooth: hci1: command tx timeout [ 672.698362][T13054] 9pnet_fd: Insufficient options for proto=fd [ 674.992052][T13006] Bluetooth: hci1: command tx timeout [ 675.550226][T13085] ALSA: mixer_oss: invalid OSS volume '0' [ 675.556231][T13085] ALSA: mixer_oss: invalid OSS volume 'Shared_Clean:' [ 675.563397][T13085] ALSA: mixer_oss: invalid OSS volume 'Shared_Dirty:' [ 675.570313][T13085] ALSA: mixer_oss: invalid OSS volume 'Private_Clean:' [ 675.577992][T13085] ALSA: mixer_oss: invalid OSS volume 'Private_Dirty:' [ 675.795198][T13085] ALSA: mixer_oss: invalid OSS volume 'Referenced:' [ 675.802301][T13085] ALSA: mixer_oss: invalid OSS volume 'Anonymous:' [ 676.864024][T13089] ALSA: seq fatal error: cannot create timer (-19) [ 677.133148][T13006] Bluetooth: hci1: command tx timeout [ 677.177262][T13095] overlayfs: disabling nfs_export due to verity=require [ 677.184875][T13095] overlayfs: missing 'lowerdir' [ 677.272499][T12724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.301762][T12724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.313277][T12724] bond0 (unregistering): Released all slaves [ 677.336453][T12724] bond1 (unregistering): Released all slaves [ 677.366218][T12724] bond2 (unregistering): Released all slaves [ 677.564250][T13099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1612'. [ 678.327166][ T1201] usb 9-1: USB disconnect, device number 10 [ 678.502041][ T8] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 678.659271][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.670595][T13004] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.687928][T13004] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.713957][T13004] bridge_slave_0: entered allmulticast mode [ 678.717552][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 678.736436][T13004] bridge_slave_0: entered promiscuous mode [ 678.782688][ T8] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 678.802615][T13004] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.819980][T13004] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.820304][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 678.827393][T13004] bridge_slave_1: entered allmulticast mode [ 678.863080][T13004] bridge_slave_1: entered promiscuous mode [ 678.865351][ T8] usb 4-1: SerialNumber: syz [ 679.046470][T13004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.179690][T13004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.478478][T12724] hsr_slave_0: left promiscuous mode [ 679.697334][T12724] hsr_slave_1: left promiscuous mode [ 679.801303][T12724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.938626][T12724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.058601][T12724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.108714][T12724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.350837][ T8] usb 4-1: 0:2 : does not exist [ 680.363098][ T8] usb 4-1: USB disconnect, device number 34 [ 680.369394][T12724] veth1_macvtap: left promiscuous mode [ 680.409311][T12724] veth0_macvtap: left promiscuous mode [ 680.444380][T12724] veth1_vlan: left promiscuous mode [ 680.452452][T12724] veth0_vlan: left promiscuous mode [ 680.706473][ T6861] udevd[6861]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 682.860149][T13163] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1627'. [ 682.869557][T13163] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 684.060613][T13173] syz.3.1626: attempt to access beyond end of device [ 684.060613][T13173] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 684.076508][T13173] syz.3.1626: attempt to access beyond end of device [ 684.076508][T13173] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 684.091259][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 684.094098][T13172] nbd3: detected capacity change from 0 to 131072 [ 684.136597][T13173] block nbd3: Send control failed (result -89) [ 684.147025][T13173] block nbd3: Request send failed, requeueing [ 684.161541][T13006] block nbd3: Receive control failed (result -32) [ 684.184896][ T1066] block nbd3: Dead connection, failed to find a fallback [ 684.214753][ T1066] block nbd3: shutting down sockets [ 684.219999][ T1066] blk_print_req_error: 83 callbacks suppressed [ 684.220013][ T1066] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 684.236405][ T6988] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 684.247873][ T6988] buffer_io_error: 56 callbacks suppressed [ 684.247888][ T6988] Buffer I/O error on dev nbd3, logical block 0, async page read [ 684.294518][ T6988] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 684.303788][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 684.338975][ T6988] Buffer I/O error on dev nbd3, logical block 1, async page read [ 684.347265][ T6988] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 684.356415][ T6988] Buffer I/O error on dev nbd3, logical block 2, async page read [ 684.364324][ T6988] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 684.373409][ T6988] Buffer I/O error on dev nbd3, logical block 3, async page read [ 684.381255][ T6988] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 684.390394][ T6988] Buffer I/O error on dev nbd3, logical block 0, async page read [ 684.398377][ T6988] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 684.502141][ T6988] Buffer I/O error on dev nbd3, logical block 1, async page read [ 684.533375][T13173] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 684.545971][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 684.555466][ T6988] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 684.573927][T13173] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 684.575414][ T6988] Buffer I/O error on dev nbd3, logical block 2, async page read [ 684.610827][ T6988] Buffer I/O error on dev nbd3, logical block 3, async page read [ 684.629471][ T6988] Buffer I/O error on dev nbd3, logical block 0, async page read [ 684.634858][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 684.653928][ T6988] Buffer I/O error on dev nbd3, logical block 1, async page read [ 684.703016][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 684.713725][ T6988] ldm_validate_partition_table(): Disk read failed. [ 684.725390][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=32767, location=32767 [ 684.811290][ T6988] Dev nbd3: unable to read RDB block 0 [ 684.842862][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=32511, location=32511 [ 684.842961][ T6988] nbd3: unable to read partition table [ 684.867687][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=32766, location=32766 [ 684.906458][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=32510, location=32510 [ 684.925935][ T6988] ldm_validate_partition_table(): Disk read failed. [ 684.938217][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=32765, location=32765 [ 684.953306][ T6988] Dev nbd3: unable to read RDB block 0 [ 684.973508][ T6988] nbd3: unable to read partition table [ 684.978123][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=32509, location=32509 [ 685.007034][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=32617, location=32617 [ 685.038969][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=32361, location=32361 [ 685.104352][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=32615, location=32615 [ 685.126002][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=32359, location=32359 [ 685.148184][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 685.166209][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 685.188924][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16383, location=16383 [ 685.217296][T12724] team0 (unregistering): Port device team_slave_1 removed [ 685.236287][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16127, location=16127 [ 685.254925][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16382, location=16382 [ 685.266100][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16126, location=16126 [ 685.287864][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16381, location=16381 [ 685.310599][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16125, location=16125 [ 685.322076][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16233, location=16233 [ 685.333247][T12724] team0 (unregistering): Port device team_slave_0 removed [ 685.351586][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=15977, location=15977 [ 685.384729][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16231, location=16231 [ 685.403435][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=15975, location=15975 [ 685.413991][T13173] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 685.435527][T13173] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 685.940260][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.946769][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.315544][T13004] team0: Port device team_slave_0 added [ 687.334188][T13004] team0: Port device team_slave_1 added [ 687.364340][T13158] lo speed is unknown, defaulting to 1000 [ 687.495612][T13004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.508932][T13004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.552191][T13004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.564604][T13004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.572070][T13004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.598191][T13004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.674550][T13004] hsr_slave_0: entered promiscuous mode [ 687.687107][T13004] hsr_slave_1: entered promiscuous mode [ 687.702444][T13004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 687.710009][T13004] Cannot create hsr debugfs directory [ 687.741389][T13189] lo speed is unknown, defaulting to 1000 [ 688.126688][T12724] IPVS: stop unused estimator thread 0... [ 688.176097][ T5913] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 688.372172][ T5913] usb 2-1: device descriptor read/64, error -71 [ 688.688570][ T5913] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 688.866708][ T5913] usb 2-1: device descriptor read/64, error -71 [ 688.983319][ T5913] usb usb2-port1: attempt power cycle [ 689.482150][T13004] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 689.530029][T13232] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1639'. [ 689.742173][ T5913] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 689.815400][ T5913] usb 2-1: device descriptor read/8, error -71 [ 689.870512][T13004] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 689.960753][T13004] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 689.993229][T13004] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 690.142102][ T5913] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 690.227500][ T5913] usb 2-1: device descriptor read/8, error -71 [ 690.503727][ T5913] usb usb2-port1: unable to enumerate USB device [ 690.875505][T13004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.097648][T13004] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.838809][T13253] xt_limit: Overflow, try lower: 6/2147483648 [ 691.935430][T13004] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 691.962001][T13004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 692.163845][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.170973][ T6341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.303498][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.310626][ T6341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.584014][T13268] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1646'. [ 692.593466][T13268] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 693.431340][T13004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.543105][T13281] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 693.850317][T13291] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 694.525880][T13308] hub 2-0:1.0: USB hub found [ 694.531553][T13308] hub 2-0:1.0: 1 port detected [ 694.662199][T13314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1656'. [ 694.703984][T13314] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1656'. [ 694.761005][T13004] veth0_vlan: entered promiscuous mode [ 694.772642][T13004] veth1_vlan: entered promiscuous mode [ 694.860096][T13004] veth0_macvtap: entered promiscuous mode [ 694.881859][T13004] veth1_macvtap: entered promiscuous mode [ 694.916942][T13004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.940444][T13004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.948665][T13327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 694.961044][T13004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.982591][T13004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.994616][T13004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.004753][T13004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.015405][T13004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.025328][T13004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.036278][T13004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.049241][T13004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.063426][ T5913] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 695.067196][T13004] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.085844][T13004] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.109645][T13004] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.168137][T13004] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.282240][ T5913] usb 3-1: device descriptor read/64, error -71 [ 695.552255][ T5913] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 695.773456][ T5913] usb 3-1: device descriptor read/64, error -71 [ 695.848683][ T8159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.859998][ T8159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.893255][ T5913] usb usb3-port1: attempt power cycle [ 696.147113][T12722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.155397][T12722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.239738][ T5913] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 697.519809][T13359] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 697.581784][ T1201] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 697.706911][ T5913] usb 3-1: device descriptor read/8, error -71 [ 697.892103][ T1201] usb 9-1: Using ep0 maxpacket: 32 [ 697.899774][ T1201] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 697.943440][ T1201] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 697.961577][T13375] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 697.962980][ T1201] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 697.992174][ T8] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 697.994698][T13375] PKCS7: Only support pkcs7_signedData type [ 698.005549][ T1201] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 698.045883][ T1201] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 698.072835][ T1201] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 698.092479][ T1201] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 698.107341][ T1201] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.122146][ T1201] usb 9-1: config 0 descriptor?? [ 698.155219][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 698.183712][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.196766][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 698.284098][ T8] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 698.321036][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.340800][ T1201] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 698.367060][ T8] usb 4-1: config 0 descriptor?? [ 698.384413][ T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 698.413608][ T1201] usb 9-1: USB disconnect, device number 11 [ 698.438083][ T1201] usblp0: removed [ 698.592708][T13365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.622684][T13365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.792657][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1673'. [ 698.846853][T13373] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 698.905148][T13373] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 699.043121][T13402] 9pnet_fd: Insufficient options for proto=fd [ 699.191995][ T1201] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 700.088601][ T1201] usb 9-1: Using ep0 maxpacket: 32 [ 700.110850][ T1201] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 700.148519][ T1201] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 700.192062][ T1201] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 700.211970][ T1201] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 700.232191][ T1201] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 700.251942][ T1201] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 700.273159][ T1201] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 700.282566][ T1201] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.292926][ T1201] usb 9-1: config 0 descriptor?? [ 700.398529][ T1201] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 700.412180][ T1201] usb 9-1: USB disconnect, device number 12 [ 700.441019][T13418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1677'. [ 700.464653][ T1201] usblp0: removed [ 700.520549][T13418] veth1_macvtap: left promiscuous mode [ 700.685382][T13425] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 700.829115][T13418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1677'. [ 701.109802][ T1201] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 701.198977][ T8] usb 4-1: USB disconnect, device number 35 [ 701.283006][ T1201] usb 9-1: device descriptor read/64, error -71 [ 701.562286][ T1201] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 701.720488][ T1201] usb 9-1: device descriptor read/64, error -71 [ 701.832875][ T1201] usb usb9-port1: attempt power cycle [ 702.241285][T13459] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1687'. [ 702.250635][T13459] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 702.472206][ T1201] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 702.557977][ T1201] usb 9-1: device descriptor read/8, error -71 [ 702.802175][ T1201] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 702.971659][ T1201] usb 9-1: device descriptor read/8, error -71 [ 703.022130][ T5913] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 703.172054][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 703.184689][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.394201][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 703.420049][ T1201] usb usb9-port1: unable to enumerate USB device [ 703.439966][ T5913] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 703.484456][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.544642][ T5913] usb 2-1: config 0 descriptor?? [ 703.576109][ T5913] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 703.614860][T13487] program syz.3.1694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 703.792936][T13480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.833072][T13480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.063362][T13500] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 704.550547][T13506] 9pnet_fd: Insufficient options for proto=fd [ 705.746107][T13518] lo speed is unknown, defaulting to 1000 [ 705.787460][T13528] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.1703'. [ 705.796813][T13528] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 706.702690][T13538] netlink: 'syz.1.1706': attribute type 29 has an invalid length. [ 706.711217][T13538] netlink: 'syz.1.1706': attribute type 29 has an invalid length. [ 706.752139][ T25] usb 2-1: USB disconnect, device number 35 [ 706.831792][T13544] Device name cannot be null; rc = [-22] [ 707.218519][T13558] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 707.476217][ T5914] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 707.752214][ T5914] usb 9-1: Using ep0 maxpacket: 8 [ 707.762231][ T5914] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 707.770454][ T5914] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.794926][ T5914] usb 9-1: config 0 has no interface number 0 [ 707.852910][ T5914] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 708.303137][ T5914] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.366239][ T5914] usb 9-1: config 0 descriptor?? [ 708.379999][ T5914] ldusb 9-1:0.55: Interrupt in endpoint not found [ 708.620862][ T5830] usb 9-1: USB disconnect, device number 17 [ 708.668070][T13580] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1715'. [ 708.677505][T13580] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 709.042139][ T5830] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 709.192036][ T5830] usb 4-1: Using ep0 maxpacket: 16 [ 709.270410][ T5830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.329366][ T5830] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 709.343187][ T5830] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 709.357531][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.377500][ T5830] usb 4-1: config 0 descriptor?? [ 709.388904][ T5830] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 709.480906][T13597] 9pnet_fd: Insufficient options for proto=fd [ 709.562267][ T5913] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 709.602819][T13588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.612913][T13588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.346305][ T5913] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 710.377608][ T5913] usb 2-1: can't read configurations, error -61 [ 710.417470][T13606] 9pnet_fd: Insufficient options for proto=fd [ 710.522004][ T5913] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 710.855183][ T5913] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 710.906100][ T5913] usb 2-1: can't read configurations, error -61 [ 710.933404][ T5913] usb usb2-port1: attempt power cycle [ 711.042877][ T969] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 711.227426][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 711.253058][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.344700][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.388990][ T5913] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 711.501577][ T969] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 711.510801][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.525134][ T969] usb 3-1: config 0 descriptor?? [ 711.534192][ T5913] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 711.541993][ T5913] usb 2-1: can't read configurations, error -61 [ 711.548473][ T969] hub 3-1:0.0: USB hub found [ 711.692128][ T5913] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 711.736170][ T5913] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 711.744390][ T5913] usb 2-1: can't read configurations, error -61 [ 711.748345][T13618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.753571][ T5913] usb usb2-port1: unable to enumerate USB device [ 711.765863][T13618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.780035][ T969] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 712.037998][ T5913] usb 4-1: USB disconnect, device number 36 [ 712.883868][T13634] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1730'. [ 712.893267][T13634] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 713.174322][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1727'. [ 713.353416][ T969] usbhid 3-1:0.0: can't add hid device: -71 [ 713.360323][ T969] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 713.382746][ T969] usb 3-1: USB disconnect, device number 24 [ 713.524969][T13639] lo speed is unknown, defaulting to 1000 [ 713.876528][T13650] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 714.416916][T13653] IPVS: stopping backup sync thread 13650 ... [ 716.622671][ T5883] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 716.772021][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 716.779155][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.812549][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 716.955226][T13704] Cannot find add_set index 0 as target [ 717.022243][ T5884] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 717.028007][ T5883] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 717.098012][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.182452][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 717.194824][ T5884] usb 2-1: no configurations [ 717.276570][ T5884] usb 2-1: can't read configurations, error -22 [ 717.342868][ T5883] usb 4-1: config 0 descriptor?? [ 717.374478][ T5883] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 717.426855][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1746'. [ 717.492517][ T5884] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 717.650166][T13675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.723461][T13675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.632300][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 718.644931][ T5884] usb 2-1: no configurations [ 718.649719][ T5884] usb 2-1: can't read configurations, error -22 [ 718.658611][ T5884] usb usb2-port1: attempt power cycle [ 719.088524][T13726] 9pnet_fd: Insufficient options for proto=fd [ 719.172970][ T5884] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 719.205630][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 719.224334][ T5884] usb 2-1: no configurations [ 719.228971][ T5884] usb 2-1: can't read configurations, error -22 [ 719.317964][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 719.317982][ T29] audit: type=1800 audit(1731664078.360:245): pid=13735 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1750" name="/" dev="9p" ino=2 res=0 errno=0 [ 719.382922][ T5884] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 719.451617][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 719.457861][ T5884] usb 2-1: no configurations [ 719.462862][ T5884] usb 2-1: can't read configurations, error -22 [ 719.465892][T13743] FAULT_INJECTION: forcing a failure. [ 719.465892][T13743] name failslab, interval 1, probability 0, space 0, times 0 [ 719.479643][ T5884] usb usb2-port1: unable to enumerate USB device [ 719.483948][T13743] CPU: 0 UID: 0 PID: 13743 Comm: syz.9.1751 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 719.498854][T13743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 719.508949][T13743] Call Trace: [ 719.512227][T13743] [ 719.515146][T13743] dump_stack_lvl+0x241/0x360 [ 719.519828][T13743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 719.525025][T13743] ? __pfx__printk+0x10/0x10 [ 719.529608][T13743] ? __kmalloc_noprof+0xb0/0x400 [ 719.534577][T13743] ? __pfx___might_resched+0x10/0x10 [ 719.539880][T13743] should_fail_ex+0x3b0/0x4e0 [ 719.544563][T13743] ? video_usercopy+0x1f0/0x1180 [ 719.549512][T13743] should_failslab+0xac/0x100 [ 719.554184][T13743] ? video_usercopy+0x1f0/0x1180 [ 719.559119][T13743] __kmalloc_noprof+0xd8/0x400 [ 719.563880][T13743] video_usercopy+0x1f0/0x1180 [ 719.568647][T13743] ? __pfx___video_do_ioctl+0x10/0x10 [ 719.574040][T13743] ? __pfx_video_usercopy+0x10/0x10 [ 719.579231][T13743] ? smack_file_ioctl+0x2f7/0x3a0 [ 719.584272][T13743] ? __fget_files+0x3f3/0x470 [ 719.588980][T13743] v4l2_ioctl+0x189/0x1e0 [ 719.593318][T13743] ? __pfx_v4l2_ioctl+0x10/0x10 [ 719.598177][T13743] __se_sys_ioctl+0xf9/0x170 [ 719.602771][T13743] do_syscall_64+0xf3/0x230 [ 719.607280][T13743] ? clear_bhb_loop+0x35/0x90 [ 719.611991][T13743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.617904][T13743] RIP: 0033:0x7f2333f7e719 [ 719.622321][T13743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.641922][T13743] RSP: 002b:00007f2334cde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 719.650331][T13743] RAX: ffffffffffffffda RBX: 00007f2334135f80 RCX: 00007f2333f7e719 [ 719.658306][T13743] RDX: 0000000020000140 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 719.666269][T13743] RBP: 00007f2334cde090 R08: 0000000000000000 R09: 0000000000000000 [ 719.674243][T13743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.682213][T13743] R13: 0000000000000000 R14: 00007f2334135f80 R15: 00007ffe701f6878 [ 719.690214][T13743] [ 720.617497][ T5884] usb 4-1: USB disconnect, device number 37 [ 721.395253][T13760] fuse: Unknown parameter '0x000000000000000b' [ 721.739677][T13779] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 722.507459][T13778] IPVS: stopping backup sync thread 13779 ... [ 722.662036][T13792] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1766'. [ 722.702428][T13792] nbd: must specify at least one socket [ 722.874933][ T29] audit: type=1800 audit(1731664081.920:246): pid=13797 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1767" name="/" dev="9p" ino=2 res=0 errno=0 [ 722.901979][ T5884] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 723.042100][ T5884] usb 10-1: device descriptor read/64, error -71 [ 723.292269][ T5884] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 723.379853][T13820] 9pnet_virtio: no channels available for device syz [ 723.432036][ T5884] usb 10-1: device descriptor read/64, error -71 [ 723.549711][ T5884] usb usb10-port1: attempt power cycle [ 724.573507][T13839] FAULT_INJECTION: forcing a failure. [ 724.573507][T13839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.643458][T13839] CPU: 0 UID: 0 PID: 13839 Comm: syz.2.1774 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 724.654255][T13839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 724.664323][T13839] Call Trace: [ 724.667621][T13839] [ 724.670560][T13839] dump_stack_lvl+0x241/0x360 [ 724.675267][T13839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 724.680494][T13839] ? __pfx__printk+0x10/0x10 [ 724.685117][T13839] ? snprintf+0xda/0x120 [ 724.689395][T13839] should_fail_ex+0x3b0/0x4e0 [ 724.694129][T13839] _copy_to_user+0x31/0xb0 [ 724.698575][T13839] simple_read_from_buffer+0xca/0x150 [ 724.703979][T13839] proc_fail_nth_read+0x1e9/0x250 [ 724.709035][T13839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 724.714610][T13839] ? rw_verify_area+0x55e/0x6f0 [ 724.719491][T13839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 724.725062][T13839] vfs_read+0x1fc/0xb70 [ 724.729250][T13839] ? fdget_pos+0x24e/0x320 [ 724.733693][T13839] ? __pfx_vfs_read+0x10/0x10 [ 724.738403][T13839] ? __fget_files+0x3f3/0x470 [ 724.743161][T13839] ? fdget_pos+0x24e/0x320 [ 724.747612][T13839] ksys_read+0x183/0x2b0 [ 724.751885][T13839] ? __pfx_ksys_read+0x10/0x10 [ 724.756673][T13839] ? do_syscall_64+0x100/0x230 [ 724.761474][T13839] ? do_syscall_64+0xb6/0x230 [ 724.766179][T13839] do_syscall_64+0xf3/0x230 [ 724.770713][T13839] ? clear_bhb_loop+0x35/0x90 [ 724.775471][T13839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.781410][T13839] RIP: 0033:0x7fa80c57d15c [ 724.785845][T13839] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 724.805466][T13839] RSP: 002b:00007fa80d2b9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 724.813884][T13839] RAX: ffffffffffffffda RBX: 00007fa80c735f80 RCX: 00007fa80c57d15c [ 724.821850][T13839] RDX: 000000000000000f RSI: 00007fa80d2b90a0 RDI: 0000000000000004 [ 724.829870][T13839] RBP: 00007fa80d2b9090 R08: 0000000000000000 R09: 0000000000000000 [ 724.837839][T13839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.845801][T13839] R13: 0000000000000000 R14: 00007fa80c735f80 R15: 00007ffd45a09c18 [ 724.853783][T13839] [ 724.922008][ T5884] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 724.942512][ T5884] usb 10-1: device descriptor read/8, error -71 [ 725.162571][T13851] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 725.171395][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 725.270538][ T5884] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 725.327140][ T5884] usb 10-1: device descriptor read/8, error -71 [ 725.443210][ T5884] usb usb10-port1: unable to enumerate USB device [ 725.519583][T13848] IPVS: stopping backup sync thread 13851 ... [ 725.910931][T13863] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1779'. [ 725.920133][T13863] netlink: 'syz.3.1779': attribute type 1 has an invalid length. [ 725.928149][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 725.937478][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 725.950966][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 725.960368][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.968697][ T9] usb 2-1: Product: syz [ 725.975369][ T9] usb 2-1: Manufacturer: syz [ 725.984575][ T9] usb 2-1: SerialNumber: syz [ 726.056366][ T9] usb 2-1: config 0 descriptor?? [ 726.068676][T13840] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 726.079637][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 727.860508][T13893] FAULT_INJECTION: forcing a failure. [ 727.860508][T13893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.878942][T13893] CPU: 0 UID: 0 PID: 13893 Comm: syz.3.1784 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 727.889739][T13893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 727.899803][T13893] Call Trace: [ 727.903088][T13893] [ 727.906016][T13893] dump_stack_lvl+0x241/0x360 [ 727.910688][T13893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.915875][T13893] ? __pfx__printk+0x10/0x10 [ 727.920469][T13893] ? __pfx_lock_release+0x10/0x10 [ 727.925492][T13893] ? vfs_write+0x730/0xd30 [ 727.929932][T13893] should_fail_ex+0x3b0/0x4e0 [ 727.934692][T13893] _copy_from_user+0x2f/0xc0 [ 727.939268][T13893] get_timespec64+0x97/0x280 [ 727.943846][T13893] ? __fget_files+0x3f3/0x470 [ 727.948512][T13893] ? __pfx_get_timespec64+0x10/0x10 [ 727.953705][T13893] __x64_sys_clock_settime+0x1c6/0x280 [ 727.959179][T13893] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 727.965147][T13893] ? do_syscall_64+0x100/0x230 [ 727.969907][T13893] ? do_syscall_64+0xb6/0x230 [ 727.974573][T13893] do_syscall_64+0xf3/0x230 [ 727.979061][T13893] ? clear_bhb_loop+0x35/0x90 [ 727.983729][T13893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.989610][T13893] RIP: 0033:0x7febdf37e719 [ 727.994010][T13893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.013635][T13893] RSP: 002b:00007febe022a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 728.022069][T13893] RAX: ffffffffffffffda RBX: 00007febdf536058 RCX: 00007febdf37e719 [ 728.030035][T13893] RDX: 0000000000000000 RSI: 0000000020009ac0 RDI: 0000000000000000 [ 728.038001][T13893] RBP: 00007febe022a090 R08: 0000000000000000 R09: 0000000000000000 [ 728.045965][T13893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.053920][T13893] R13: 0000000000000000 R14: 00007febdf536058 R15: 00007ffd6f655898 [ 728.061899][T13893] [ 728.652448][ T8] usb 2-1: USB disconnect, device number 44 [ 729.055165][T13929] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 729.138006][T13928] IPVS: stopping backup sync thread 13929 ... [ 729.247686][T13939] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 729.319793][T13940] IPVS: stopping backup sync thread 13939 ... [ 729.442281][T13940] ALSA: mixer_oss: invalid OSS volume '0' [ 729.457054][T13940] ALSA: mixer_oss: invalid OSS volume 'Shared_Clean:' [ 729.464633][T13940] ALSA: mixer_oss: invalid OSS volume 'Shared_Dirty:' [ 729.478271][T13940] ALSA: mixer_oss: invalid OSS volume 'Private_Clean:' [ 729.487442][T13940] ALSA: mixer_oss: invalid OSS volume 'Private_Dirty:' [ 729.495903][T13940] ALSA: mixer_oss: invalid OSS volume 'Referenced:' [ 729.526407][T13940] ALSA: mixer_oss: invalid OSS volume 'Anonymous:' [ 729.764099][T13946] ALSA: seq fatal error: cannot create timer (-19) [ 731.502426][ T5830] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 731.827102][ T29] audit: type=1326 audit(1731664090.870:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13961 comm="syz.9.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2333f7e719 code=0x7ffc0000 [ 732.029473][ T29] audit: type=1326 audit(1731664090.870:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13961 comm="syz.9.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f2333f7e719 code=0x7ffc0000 [ 732.051482][ T29] audit: type=1326 audit(1731664090.870:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13961 comm="syz.9.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2333f7e719 code=0x7ffc0000 [ 732.077690][ T29] audit: type=1326 audit(1731664090.870:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13961 comm="syz.9.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2333f7e719 code=0x7ffc0000 [ 732.099577][ T29] audit: type=1326 audit(1731664090.870:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13961 comm="syz.9.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2333f7e719 code=0x7ffc0000 [ 732.121445][ T29] audit: type=1326 audit(1731664090.870:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13961 comm="syz.9.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2333f7e719 code=0x7ffc0000 [ 732.143871][ T29] audit: type=1326 audit(1731664090.870:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13961 comm="syz.9.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2333f7e719 code=0x7ffc0000 [ 732.165736][ T29] audit: type=1326 audit(1731664090.870:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13961 comm="syz.9.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2333f7e719 code=0x7ffc0000 [ 732.188220][ T5830] usb 4-1: too many configurations: 241, using maximum allowed: 8 [ 732.428148][T13979] netlink: 'syz.2.1799': attribute type 2 has an invalid length. [ 732.435928][T13979] netlink: 'syz.2.1799': attribute type 7 has an invalid length. [ 732.443709][T13979] netlink: 13022 bytes leftover after parsing attributes in process `syz.2.1799'. [ 732.452963][T13979] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1799'. [ 732.462281][T13979] netlink: 'syz.2.1799': attribute type 2 has an invalid length. [ 732.470015][T13979] netlink: 'syz.2.1799': attribute type 7 has an invalid length. [ 732.477859][T13979] netlink: 13022 bytes leftover after parsing attributes in process `syz.2.1799'. [ 732.670714][T13993] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 732.737890][T13992] IPVS: stopping backup sync thread 13993 ... [ 732.774063][T13994] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1802'. [ 733.442889][ T5830] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 733.460898][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.476053][ T5830] usb 4-1: Product: syz [ 733.480251][ T5830] usb 4-1: Manufacturer: syz [ 733.514427][ T5830] usb 4-1: SerialNumber: syz [ 733.536330][ T5830] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 733.558144][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 733.612217][ T8] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 733.772157][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 733.784670][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 733.811762][ T8] usb 2-1: config index 0 descriptor too short (expected 1316, got 36) [ 733.833114][ T8] usb 2-1: config 232 has an invalid interface number: 254 but max is 0 [ 733.872965][ T8] usb 2-1: config 232 has an invalid descriptor of length 0, skipping remainder of the config [ 734.023530][ T8] usb 2-1: config 232 has no interface number 0 [ 734.030142][ T8] usb 2-1: config 232 interface 254 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 734.044643][ T8] usb 2-1: config 232 interface 254 has no altsetting 0 [ 734.057038][ T8] usb 2-1: New USB device found, idVendor=10cf, idProduct=5500, bcdDevice=c9.c6 [ 734.057068][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.057090][ T8] usb 2-1: Product: syz [ 734.057107][ T8] usb 2-1: Manufacturer: syz [ 734.057171][ T8] usb 2-1: SerialNumber: syz [ 734.646377][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 734.647426][ T9] ath9k_htc: Failed to initialize the device [ 734.673338][ T8] vmk80xx 2-1:232.254: driver 'vmk80xx' failed to auto-configure device. [ 734.686750][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 734.693694][ T8] usb 2-1: USB disconnect, device number 45 [ 735.154366][T14018] 9pnet_virtio: no channels available for device syz [ 735.722730][ T8] usb 4-1: USB disconnect, device number 38 [ 740.114675][ T5884] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 740.635443][T14084] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 740.778376][T14085] IPVS: stopping backup sync thread 14084 ... [ 740.824275][T14085] ALSA: mixer_oss: invalid OSS volume '0' [ 740.830164][T14085] ALSA: mixer_oss: invalid OSS volume 'Shared_Clean:' [ 740.838397][T14085] ALSA: mixer_oss: invalid OSS volume 'Shared_Dirty:' [ 740.956786][ T5884] usb 9-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 740.968260][ T5884] usb 9-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 740.969247][T14085] ALSA: mixer_oss: invalid OSS volume 'Private_Clean:' [ 740.979950][ T5884] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 740.997972][ T5884] usb 9-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 741.011346][ T5884] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 741.020600][ T5884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.065386][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 741.518382][ T5842] Bluetooth: hci1: command 0x0405 tx timeout [ 741.634354][T14085] ALSA: mixer_oss: invalid OSS volume 'Private_Dirty:' [ 741.711923][T14089] ALSA: seq fatal error: cannot create timer (-19) [ 741.719638][T14085] ALSA: mixer_oss: invalid OSS volume 'Referenced:' [ 741.727375][T14085] ALSA: mixer_oss: invalid OSS volume 'Anonymous:' [ 741.988308][ T5884] ath6kl: Failed to submit usb control message: -71 [ 741.988346][ T5884] ath6kl: unable to send the bmi data to the device: -71 [ 741.988363][ T5884] ath6kl: Unable to send get target info: -71 [ 741.989247][ T5884] ath6kl: Failed to init ath6kl core: -71 [ 742.150638][ T5884] ath6kl_usb 9-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 742.174557][ T5884] usb 9-1: USB disconnect, device number 18 [ 743.155633][T14114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 743.785801][ T29] audit: type=1800 audit(1731664102.090:255): pid=14116 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1831" name="/" dev="fuse" ino=1 res=0 errno=0 [ 744.205669][T14119] ipvlan2: entered promiscuous mode [ 744.422095][T14122] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1835'. [ 744.762371][T14127] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1834'. [ 745.747845][T14136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.021962][ T5884] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 746.089678][ T29] audit: type=1326 audit(1731664105.130:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.1.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d8f7e719 code=0x7ffc0000 [ 746.175520][ T29] audit: type=1326 audit(1731664105.160:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.1.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d8f7e719 code=0x7ffc0000 [ 746.199304][ T5884] usb 9-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 746.227075][ T5884] usb 9-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 746.283527][ T5884] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 746.295595][ T29] audit: type=1326 audit(1731664105.180:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.1.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fb3d8f7e719 code=0x7ffc0000 [ 746.346950][ T5884] usb 9-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 746.392454][ T5884] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 746.401501][ T5884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.422427][ T29] audit: type=1326 audit(1731664105.230:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.1.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d8f7e719 code=0x7ffc0000 [ 746.672149][ T29] audit: type=1326 audit(1731664105.230:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.1.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d8f7e719 code=0x7ffc0000 [ 746.716348][ T29] audit: type=1326 audit(1731664105.240:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.1.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb3d8f7e719 code=0x7ffc0000 [ 746.741934][ T29] audit: type=1326 audit(1731664105.270:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.1.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d8f7e719 code=0x7ffc0000 [ 747.363803][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.647319][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.701479][ T29] audit: type=1326 audit(1731664105.270:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.1.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d8f7e719 code=0x7ffc0000 [ 747.723329][ T29] audit: type=1326 audit(1731664105.330:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.1.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb3d8f7e719 code=0x7ffc0000 [ 747.746930][ T5884] ath6kl: Failed to submit usb control message: -110 [ 747.754549][ T5884] ath6kl: unable to send the bmi data to the device: -110 [ 747.762181][ T5884] ath6kl: Unable to send get target info: -110 [ 747.813602][ T5884] ath6kl: Failed to init ath6kl core: -110 [ 747.822870][ T5884] ath6kl_usb 9-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 747.831442][ T5842] Bluetooth: hci1: command 0x0405 tx timeout [ 748.391966][T13475] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 748.542030][T13475] usb 10-1: Using ep0 maxpacket: 8 [ 748.558615][T13475] usb 10-1: config 0 has an invalid interface number: 52 but max is 0 [ 748.599137][T13475] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.623934][ T9] usb 9-1: USB disconnect, device number 19 [ 748.658276][T13475] usb 10-1: config 0 has no interface number 0 [ 748.683782][T13475] usb 10-1: config 0 interface 52 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 748.706449][T13475] usb 10-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 748.737873][T13475] usb 10-1: config 0 interface 52 has no altsetting 0 [ 748.765915][T13475] usb 10-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 748.802168][T13475] usb 10-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 748.817608][T13475] usb 10-1: Manufacturer: syz [ 748.846052][T13475] usb 10-1: config 0 descriptor?? [ 749.067620][T14146] vivid-004: disconnect [ 749.532029][ T8] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 749.722605][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 749.737336][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.795177][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.805804][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 749.819504][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.841293][ T8] usb 4-1: config 0 descriptor?? [ 749.861025][ T8] hub 4-1:0.0: USB hub found [ 750.074148][T14157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.107779][T14148] vivid-004: reconnect [ 750.113542][T13475] usb 10-1: Can not set alternate setting to 1, error: -71 [ 750.120781][T13475] synaptics_usb 10-1:0.52: probe with driver synaptics_usb failed with error -71 [ 750.218375][T13475] usb 10-1: USB disconnect, device number 6 [ 750.245938][T14157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.350522][ T8] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 751.015182][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1843'. [ 751.168351][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 751.174600][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 751.233380][ T8] usb 4-1: USB disconnect, device number 39 [ 752.307148][T14181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.325448][T14181] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1847'. [ 752.343741][T14181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 753.471811][T14194] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 754.605056][ T969] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 755.941956][ T969] usb 4-1: Using ep0 maxpacket: 32 [ 755.949192][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.960698][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.971153][ T969] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 755.980682][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.039391][ T969] usb 4-1: config 0 descriptor?? [ 756.060368][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 756.060383][ T29] audit: type=1326 audit(1731668209.288:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14213 comm="syz.9.1854" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2333f7e719 code=0x0 [ 756.087965][ T5884] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 756.118424][ T969] hub 4-1:0.0: USB hub found [ 756.268276][T14224] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 756.285164][ T5884] usb 9-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 756.292232][ T8] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 756.326359][T14202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.343491][T14225] IPVS: stopping backup sync thread 14224 ... [ 756.378360][T14202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.386460][ T5884] usb 9-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 756.426635][ T969] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 756.443977][ T5884] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 756.471384][ T5884] usb 9-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 756.488114][ T5842] Bluetooth: hci1: command 0x0405 tx timeout [ 756.515311][ T8] usb 10-1: Using ep0 maxpacket: 8 [ 756.527454][T14225] ALSA: mixer_oss: invalid OSS volume '0' [ 756.527791][ T5884] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 756.543483][T14225] ALSA: mixer_oss: invalid OSS volume 'Shared_Clean:' [ 756.557998][T14225] ALSA: mixer_oss: invalid OSS volume 'Shared_Dirty:' [ 756.565382][T14225] ALSA: mixer_oss: invalid OSS volume 'Private_Clean:' [ 756.569565][ T5884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.581983][ T8] usb 10-1: config 0 has an invalid interface number: 52 but max is 0 [ 756.594561][T14225] ALSA: mixer_oss: invalid OSS volume 'Private_Dirty:' [ 756.612675][T14225] ALSA: mixer_oss: invalid OSS volume 'Referenced:' [ 756.619612][T14225] ALSA: mixer_oss: invalid OSS volume 'Anonymous:' [ 756.661202][ T8] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.662118][T14226] ALSA: seq fatal error: cannot create timer (-19) [ 756.694218][ T8] usb 10-1: config 0 has no interface number 0 [ 756.721665][ T8] usb 10-1: config 0 interface 52 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 756.769567][ T8] usb 10-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 756.996646][ T8] usb 10-1: config 0 interface 52 has no altsetting 0 [ 757.022618][ T8] usb 10-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 757.032634][ T8] usb 10-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 757.041273][ T8] usb 10-1: Manufacturer: syz [ 757.073270][ T8] usb 10-1: config 0 descriptor?? [ 757.074096][T14232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1852'. [ 757.284489][T14216] vivid-004: disconnect [ 757.379199][ T969] usbhid 4-1:0.0: can't add hid device: -71 [ 757.404797][ T969] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 757.497580][ T969] usb 4-1: USB disconnect, device number 40 [ 757.672227][ T5884] ath6kl: Failed to submit usb control message: -110 [ 757.700961][ T5884] ath6kl: unable to send the bmi data to the device: -110 [ 757.730093][ T5884] ath6kl: Unable to send get target info: -110 [ 757.766696][ T5884] ath6kl: Failed to init ath6kl core: -110 [ 757.789050][ T5884] ath6kl_usb 9-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 758.077462][ T969] usb 9-1: USB disconnect, device number 20 [ 758.324487][T14218] vivid-004: reconnect [ 758.358517][ T8] usb 10-1: Can not set alternate setting to 1, error: -71 [ 758.366084][ T8] synaptics_usb 10-1:0.52: probe with driver synaptics_usb failed with error -71 [ 758.384843][ T8] usb 10-1: USB disconnect, device number 7 [ 758.851788][T14246] xt_TCPMSS: Only works on TCP SYN packets [ 760.328854][ T5884] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 760.522210][ T5884] usb 9-1: device descriptor read/64, error -71 [ 760.812315][ T5884] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 761.271983][ T5884] usb 9-1: device descriptor read/64, error -71 [ 761.408398][ T5884] usb usb9-port1: attempt power cycle [ 762.563539][ T5884] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 762.582489][ T5884] usb 9-1: device descriptor read/8, error -71 [ 762.681934][T13594] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 762.761189][T14282] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1872'. [ 762.776157][T14282] vlan2: entered promiscuous mode [ 762.781294][T14282] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 762.882206][ T5884] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 762.902255][ T5830] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 762.911160][ T5884] usb 9-1: device descriptor read/8, error -71 [ 762.918696][T13594] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.941991][T13594] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 762.963302][T13594] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 762.967664][T14289] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1875'. [ 762.982104][T13594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.000291][T13594] usb 2-1: Product: syz [ 763.016081][T13594] usb 2-1: Manufacturer: syz [ 763.030907][T13594] usb 2-1: SerialNumber: syz [ 763.059872][T13594] usb 2-1: config 0 descriptor?? [ 763.063592][ T5830] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 763.065502][ T5884] usb usb9-port1: unable to enumerate USB device [ 763.095212][ T5830] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 763.133133][ T5830] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 763.163455][ T5830] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 763.190950][ T5830] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 763.199483][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1877'. [ 763.220412][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.397957][ T5830] ath6kl: Failed to submit usb control message: -110 [ 764.405416][ T5830] ath6kl: unable to send the bmi data to the device: -110 [ 764.413321][ T5830] ath6kl: Unable to send get target info: -110 [ 764.425088][ T5830] ath6kl: Failed to init ath6kl core: -110 [ 764.431693][ T5830] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 764.661639][T13006] Bluetooth: hci1: command 0x0405 tx timeout [ 764.783012][T14314] FAULT_INJECTION: forcing a failure. [ 764.783012][T14314] name failslab, interval 1, probability 0, space 0, times 0 [ 764.800296][T14314] CPU: 0 UID: 0 PID: 14314 Comm: syz.2.1883 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 764.811100][T14314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 764.821173][T14314] Call Trace: [ 764.824480][T14314] [ 764.827428][T14314] dump_stack_lvl+0x241/0x360 [ 764.832134][T14314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.837355][T14314] ? __pfx__printk+0x10/0x10 [ 764.841968][T14314] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 764.847973][T14314] ? __pfx___might_resched+0x10/0x10 [ 764.853293][T14314] should_fail_ex+0x3b0/0x4e0 [ 764.858003][T14314] should_failslab+0xac/0x100 [ 764.862716][T14314] ? __alloc_skb+0x1c3/0x440 [ 764.867340][T14314] kmem_cache_alloc_node_noprof+0x71/0x320 [ 764.873174][T14314] __alloc_skb+0x1c3/0x440 [ 764.877662][T14314] ? rtnl_is_locked+0x15/0x20 [ 764.882363][T14314] ? netdev_master_upper_dev_get+0xb6/0x120 [ 764.888304][T14314] ? __pfx___alloc_skb+0x10/0x10 [ 764.893276][T14314] ? netlink_ack_tlv_len+0x6e/0x200 [ 764.898504][T14314] netlink_ack+0x13f/0xa30 [ 764.903000][T14314] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 764.908502][T14314] netlink_rcv_skb+0x262/0x430 [ 764.913286][T14314] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 764.918780][T14314] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 764.924124][T14314] ? netlink_deliver_tap+0x2e/0x1b0 [ 764.929348][T14314] netlink_unicast+0x7f6/0x990 [ 764.934140][T14314] ? __pfx_netlink_unicast+0x10/0x10 [ 764.939446][T14314] ? __virt_addr_valid+0x183/0x530 [ 764.944578][T14314] ? __check_object_size+0x48e/0x900 [ 764.949865][T14314] netlink_sendmsg+0x8e4/0xcb0 [ 764.954646][T14314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.959990][T14314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.965277][T14314] __sock_sendmsg+0x221/0x270 [ 764.969953][T14314] ____sys_sendmsg+0x52a/0x7e0 [ 764.974721][T14314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 764.980033][T14314] __sys_sendmsg+0x292/0x380 [ 764.984624][T14314] ? __pfx___sys_sendmsg+0x10/0x10 [ 764.989761][T14314] ? __pfx_vfs_write+0x10/0x10 [ 764.994549][T14314] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 765.000878][T14314] ? do_syscall_64+0x100/0x230 [ 765.005647][T14314] ? do_syscall_64+0xb6/0x230 [ 765.010324][T14314] do_syscall_64+0xf3/0x230 [ 765.014843][T14314] ? clear_bhb_loop+0x35/0x90 [ 765.019521][T14314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.025422][T14314] RIP: 0033:0x7fa80c57e719 [ 765.029847][T14314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.049455][T14314] RSP: 002b:00007fa80d2b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.057879][T14314] RAX: ffffffffffffffda RBX: 00007fa80c735f80 RCX: 00007fa80c57e719 [ 765.065854][T14314] RDX: 0000000000000000 RSI: 0000000020000d40 RDI: 0000000000000003 [ 765.073836][T14314] RBP: 00007fa80d2b9090 R08: 0000000000000000 R09: 0000000000000000 [ 765.081849][T14314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.089820][T14314] R13: 0000000000000000 R14: 00007fa80c735f80 R15: 00007ffd45a09c18 [ 765.097800][T14314] [ 765.416910][T13594] usb 2-1: USB disconnect, device number 46 [ 765.483833][T13475] usb 4-1: USB disconnect, device number 41 [ 765.887218][T14331] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1889'. [ 765.920536][T14332] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1888'. [ 766.062176][T14320] nbd2: detected capacity change from 0 to 131072 [ 766.129034][ T6861] block nbd2: Send control failed (result -89) [ 766.144280][ T6861] block nbd2: Request send failed, requeueing [ 766.307663][ T26] block nbd2: Dead connection, failed to find a fallback [ 766.319610][ T26] block nbd2: shutting down sockets [ 766.325394][ T26] blk_print_req_error: 92 callbacks suppressed [ 766.325433][ T26] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 766.342381][ T26] buffer_io_error: 62 callbacks suppressed [ 766.342421][ T26] Buffer I/O error on dev nbd2, logical block 0, async page read [ 766.385028][ T6861] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 766.622027][ T6861] Buffer I/O error on dev nbd2, logical block 0, async page read [ 766.629965][ T6861] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 766.699191][ T6861] Buffer I/O error on dev nbd2, logical block 0, async page read [ 766.717564][ T6861] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 766.729331][ T6861] Buffer I/O error on dev nbd2, logical block 0, async page read [ 766.755416][ T6861] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 766.785148][ T6861] Buffer I/O error on dev nbd2, logical block 0, async page read [ 766.830410][ T6861] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 766.853586][ T6861] Buffer I/O error on dev nbd2, logical block 0, async page read [ 766.880614][ T6861] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 766.899944][ T6861] Buffer I/O error on dev nbd2, logical block 0, async page read [ 766.919989][ T6861] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 766.939860][ T6861] Buffer I/O error on dev nbd2, logical block 0, async page read [ 766.958226][ T6861] ldm_validate_partition_table(): Disk read failed. [ 766.972127][ T6861] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 766.989366][ T6861] Buffer I/O error on dev nbd2, logical block 0, async page read [ 767.036690][ T6861] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 767.075363][ T6861] Buffer I/O error on dev nbd2, logical block 0, async page read [ 767.108758][ T6861] Dev nbd2: unable to read RDB block 0 [ 767.165520][ T6861] nbd2: unable to read partition table [ 767.191203][ T6861] ldm_validate_partition_table(): Disk read failed. [ 767.296653][T14350] kAFS: No cell specified [ 767.307958][ T969] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 767.559827][ T6861] Dev nbd2: unable to read RDB block 0 [ 767.668102][ T969] usb 10-1: config index 0 descriptor too short (expected 21002, got 36) [ 767.862369][ T6861] nbd2: unable to read partition table [ 767.938150][ T969] usb 10-1: config 26 has too many interfaces: 207, using maximum allowed: 32 [ 767.947138][ T969] usb 10-1: config 26 has an invalid descriptor of length 125, skipping remainder of the config [ 767.957923][ T969] usb 10-1: config 26 has 0 interfaces, different from the descriptor's value: 207 [ 767.999572][ T969] usb 10-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 768.009697][ T969] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.041678][ T969] usb 10-1: Product: syz [ 768.050610][ T969] usb 10-1: Manufacturer: syz [ 768.055469][ T969] usb 10-1: SerialNumber: syz [ 768.270646][ T29] audit: type=1326 audit(1731668222.308:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14354 comm="syz.1.1897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3d8f7e719 code=0x0 [ 768.391811][T14366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 768.797969][ T29] audit: type=1326 audit(1731668222.838:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14368 comm="syz.3.1899" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febdf37e719 code=0x0 [ 769.355402][T13475] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 769.673089][T13475] usb 4-1: Using ep0 maxpacket: 8 [ 769.698438][T13475] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 769.720785][T13475] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.741956][T14386] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1900'. [ 769.751753][T13475] usb 4-1: config 0 has no interface number 0 [ 769.767496][T13475] usb 4-1: config 0 interface 52 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 769.788960][T13475] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 769.846140][ T969] usb 10-1: USB disconnect, device number 8 [ 769.893550][T13475] usb 4-1: config 0 interface 52 has no altsetting 0 [ 770.581568][T13475] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 770.661958][T13475] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 770.691973][T13475] usb 4-1: Manufacturer: syz [ 770.728926][T13475] usb 4-1: config 0 descriptor?? [ 770.870024][T14396] FAULT_INJECTION: forcing a failure. [ 770.870024][T14396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.909062][T14396] CPU: 1 UID: 0 PID: 14396 Comm: syz.1.1904 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 770.919870][T14396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 770.929942][T14396] Call Trace: [ 770.933238][T14396] [ 770.936192][T14396] dump_stack_lvl+0x241/0x360 [ 770.940904][T14396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 770.946132][T14396] ? __pfx__printk+0x10/0x10 [ 770.950761][T14396] ? __pfx_lock_release+0x10/0x10 [ 770.955819][T14396] should_fail_ex+0x3b0/0x4e0 [ 770.960524][T14396] _copy_from_user+0x2f/0xc0 [ 770.965141][T14396] copy_msghdr_from_user+0xae/0x680 [ 770.970375][T14396] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 770.976218][T14396] __sys_sendmmsg+0x36d/0x730 [ 770.980928][T14396] ? __pfx___sys_sendmmsg+0x10/0x10 [ 770.986158][T14396] ? __pfx_lock_release+0x10/0x10 [ 770.991216][T14396] ? kstrtouint_from_user+0x128/0x190 [ 770.996631][T14396] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 771.002526][T14396] ? ksys_write+0x229/0x2b0 [ 771.007050][T14396] ? __pfx_lock_release+0x10/0x10 [ 771.012093][T14396] ? vfs_write+0x730/0xd30 [ 771.016517][T14396] ? __mutex_unlock_slowpath+0x21d/0x750 [ 771.022155][T14396] ? __fget_files+0x3f3/0x470 [ 771.026850][T14396] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 771.032849][T14396] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 771.039184][T14396] ? do_syscall_64+0x100/0x230 [ 771.043957][T14396] __x64_sys_sendmmsg+0xa0/0xb0 [ 771.048813][T14396] do_syscall_64+0xf3/0x230 [ 771.053319][T14396] ? clear_bhb_loop+0x35/0x90 [ 771.058027][T14396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.063946][T14396] RIP: 0033:0x7fb3d8f7e719 [ 771.068359][T14396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.087966][T14396] RSP: 002b:00007fb3d9db7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 771.096379][T14396] RAX: ffffffffffffffda RBX: 00007fb3d9135f80 RCX: 00007fb3d8f7e719 [ 771.104352][T14396] RDX: 00000000000003ef RSI: 0000000020000180 RDI: 0000000000000003 [ 771.112323][T14396] RBP: 00007fb3d9db7090 R08: 0000000000000000 R09: 0000000000000000 [ 771.120289][T14396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.128255][T14396] R13: 0000000000000000 R14: 00007fb3d9135f80 R15: 00007fff0cb8a398 [ 771.136235][T14396] [ 771.144834][T14375] vivid-002: disconnect [ 771.279391][T14399] delete_channel: no stack [ 772.267551][T14378] vivid-002: reconnect [ 772.325708][T13475] usb 4-1: Can not set alternate setting to 1, error: -71 [ 772.333386][T13475] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71 [ 772.358368][T13475] usb 4-1: USB disconnect, device number 42 [ 772.568202][T14422] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 772.842272][T14427] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1912'. [ 773.977322][T14419] IPVS: stopping backup sync thread 14422 ... [ 776.874967][ T29] audit: type=1326 audit(1731668230.168:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14453 comm="syz.9.1920" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2333f7e719 code=0x0 [ 776.961436][T14465] delete_channel: no stack [ 777.001397][T14463] nfs: Unknown parameter '> [ 777.001397][T14463] ' [ 777.172771][T13594] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 777.232076][T10241] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 777.246947][T14471] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1925'. [ 777.482046][T13594] usb 10-1: Using ep0 maxpacket: 8 [ 777.492647][T13594] usb 10-1: config 0 has an invalid interface number: 52 but max is 0 [ 777.501491][T13594] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.519138][T13594] usb 10-1: config 0 has no interface number 0 [ 777.552023][T10241] usb 9-1: Using ep0 maxpacket: 8 [ 777.656274][T10241] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 778.364425][T10241] usb 9-1: config 0 has no interface number 0 [ 778.370780][T10241] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 778.381703][T13594] usb 10-1: config 0 interface 52 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 778.392664][T13594] usb 10-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 778.406049][T10241] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 778.417040][T13594] usb 10-1: config 0 interface 52 has no altsetting 0 [ 778.423881][T10241] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 778.436998][T10241] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 778.446179][T10241] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.465198][T10241] usb 9-1: config 0 descriptor?? [ 778.479909][T13594] usb 10-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 778.489560][T13594] usb 10-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 778.498334][T13594] usb 10-1: Manufacturer: syz [ 778.510096][T10241] ldusb 9-1:0.55: Interrupt in endpoint not found [ 778.633953][T13594] usb 10-1: config 0 descriptor?? [ 778.678085][ T8] usb 9-1: USB disconnect, device number 25 [ 778.731242][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1927'. [ 778.834530][T13594] usb 10-1: Can not set alternate setting to 1, error: -71 [ 778.841903][T13594] synaptics_usb 10-1:0.52: probe with driver synaptics_usb failed with error -71 [ 778.904319][T14484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 778.914725][T14483] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 778.920215][T13594] usb 10-1: USB disconnect, device number 9 [ 779.012172][T13475] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 779.173257][T13475] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 779.181586][T13475] usb 2-1: config 0 has no interface number 0 [ 779.197317][T13475] usb 2-1: config 0 interface 156 has no altsetting 0 [ 779.221570][T13475] usb 2-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 779.242718][T13475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.277021][T13475] usb 2-1: config 0 descriptor?? [ 779.321556][T13475] hub 2-1:0.156: bad descriptor, ignoring hub [ 779.329071][T13475] hub 2-1:0.156: probe with driver hub failed with error -5 [ 779.341779][T13475] option 2-1:0.156: GSM modem (1-port) converter detected [ 779.531513][T14480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1927'. [ 779.546298][T14480] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 779.808123][T10241] usb 2-1: USB disconnect, device number 47 [ 780.249647][T10241] option 2-1:0.156: device disconnected [ 780.321977][T13475] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 780.503497][T13475] usb 10-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 780.514951][T13475] usb 10-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 780.545660][T13475] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 780.562376][T14503] lo speed is unknown, defaulting to 1000 [ 780.569594][T13475] usb 10-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 780.610014][T14508] delete_channel: no stack [ 780.631695][T13475] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 780.657775][T13475] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.927342][T13475] ath6kl: Failed to submit usb control message: -71 [ 780.934369][T13475] ath6kl: unable to send the bmi data to the device: -71 [ 780.941437][T13475] ath6kl: Unable to send get target info: -71 [ 780.970461][T13475] ath6kl: Failed to init ath6kl core: -71 [ 780.977025][T13475] ath6kl_usb 10-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 781.132458][T13475] usb 10-1: USB disconnect, device number 10 [ 782.158954][ T5842] Bluetooth: hci1: command 0x0405 tx timeout [ 782.546131][T14523] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 782.911953][T13475] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 783.082500][T13475] usb 2-1: Using ep0 maxpacket: 8 [ 783.107288][T13475] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 783.122203][T13475] usb 2-1: config 0 has no interface number 0 [ 783.131413][T13475] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 783.163095][T13475] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 783.175703][T13475] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 783.189610][T13475] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 783.222000][ T8] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 783.941065][T13475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.951532][T13475] usb 2-1: config 0 descriptor?? [ 783.958997][T13475] ldusb 2-1:0.55: Interrupt in endpoint not found [ 784.080412][T14551] netlink: 'syz.9.1951': attribute type 1 has an invalid length. [ 784.103567][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.114680][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.126773][ T8] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 784.137302][T14554] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 784.145553][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.159032][ T8] usb 4-1: config 0 descriptor?? [ 784.175874][T13594] usb 2-1: USB disconnect, device number 48 [ 784.190163][T14551] bond1 (unregistering): Released all slaves [ 784.706271][ T5842] Bluetooth: hci1: command 0x0405 tx timeout [ 787.171085][T14582] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 787.446468][T14580] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 787.590937][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 787.619709][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 787.687027][ T8] usb 4-1: USB disconnect, device number 43 [ 788.062081][ T8] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 788.135372][T14600] bond0: option resend_igmp: invalid value (7540) [ 788.142491][T14600] bond0: option resend_igmp: allowed values 0 - 255 [ 788.213586][ T8] usb 4-1: config 0 has an invalid interface number: 142 but max is 0 [ 788.223280][ T8] usb 4-1: config 0 has no interface number 0 [ 788.229522][ T8] usb 4-1: too many endpoints for config 0 interface 142 altsetting 187: 79, using maximum allowed: 30 [ 788.240785][ T8] usb 4-1: config 0 interface 142 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 79 [ 788.255603][ T8] usb 4-1: config 0 interface 142 has no altsetting 0 [ 788.262521][ T8] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 788.271695][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.283570][ T8] usb 4-1: config 0 descriptor?? [ 788.293654][ T8] ums-realtek 4-1:0.142: USB Mass Storage device detected [ 788.341983][ T5883] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 788.502712][ T5883] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 788.509005][T14608] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 788.515045][ T5883] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 788.555161][ T5884] usb 4-1: USB disconnect, device number 44 [ 788.609491][ T5883] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 788.621093][ T5883] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 788.637199][ T5883] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 788.658522][ T5883] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 788.676011][ T5883] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 788.688229][ T5883] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 788.701798][ T5883] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 788.717172][ T5883] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 788.751172][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.865944][T14610] netlink: 'syz.8.1966': attribute type 1 has an invalid length. [ 788.907055][T14612] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1967'. [ 788.978930][T14610] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1966'. [ 789.010389][T14593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.053385][T14610] bond1 (unregistering): Released all slaves [ 789.062366][T14593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.263084][T13594] usb 3-1: USB disconnect, device number 25 [ 789.609941][T14624] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.692894][T14632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1974'. [ 789.801940][T13594] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 789.896282][T14624] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.967329][ T29] audit: type=1800 audit(1731668244.008:272): pid=14635 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1975" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 790.001937][T13594] usb 9-1: Using ep0 maxpacket: 8 [ 790.014125][T13594] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 790.037082][T13594] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 790.050478][T14624] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.088879][T13594] usb 9-1: config 1 has no interface number 1 [ 790.131784][T13594] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 790.165414][T13594] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 790.199207][T14624] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.230103][T13594] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 790.251978][T13594] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.260874][T13594] usb 9-1: Product: syz [ 790.270372][T13594] usb 9-1: Manufacturer: syz [ 790.276000][T13594] usb 9-1: SerialNumber: syz [ 790.414082][T14624] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.428979][T14624] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.445348][T14624] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.470341][T14624] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.513953][T14628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.532464][T14628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.566504][T14628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.609598][T14628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.657289][T13594] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 790.666821][T13594] usb 9-1: 2:1 : unsupported format bits 0x80 [ 790.727908][T13594] usb 9-1: USB disconnect, device number 26 [ 791.471032][ T6861] udevd[6861]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 791.768912][T14661] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 791.788918][T14663] netlink: 'syz.8.1982': attribute type 1 has an invalid length. [ 791.836221][T14663] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1982'. [ 791.880312][T14663] bond1 (unregistering): Released all slaves [ 791.990208][T14666] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1983'. [ 792.367935][T14680] delete_channel: no stack [ 794.374444][ T29] audit: type=1326 audit(1731672343.422:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14698 comm="syz.8.1989" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ad557e719 code=0x0 [ 794.410060][T14703] fuse: Bad value for 'fd' [ 795.524959][T14719] netlink: 'syz.9.1995': attribute type 1 has an invalid length. [ 796.188824][ T5884] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 796.293734][T14730] FAULT_INJECTION: forcing a failure. [ 796.293734][T14730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.313578][T14730] CPU: 1 UID: 0 PID: 14730 Comm: syz.9.1998 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 796.324358][T14730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 796.334426][T14730] Call Trace: [ 796.337719][T14730] [ 796.340656][T14730] dump_stack_lvl+0x241/0x360 [ 796.345383][T14730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 796.350595][T14730] ? __pfx__printk+0x10/0x10 [ 796.355201][T14730] ? __pfx_lock_release+0x10/0x10 [ 796.360265][T14730] should_fail_ex+0x3b0/0x4e0 [ 796.364957][T14730] _copy_from_user+0x2f/0xc0 [ 796.369559][T14730] copy_msghdr_from_user+0xae/0x680 [ 796.374774][T14730] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 796.380606][T14730] __sys_sendmmsg+0x36d/0x730 [ 796.385308][T14730] ? __pfx___sys_sendmmsg+0x10/0x10 [ 796.390528][T14730] ? __pfx_lock_release+0x10/0x10 [ 796.395563][T14730] ? kstrtouint_from_user+0x128/0x190 [ 796.400987][T14730] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 796.406891][T14730] ? ksys_write+0x229/0x2b0 [ 796.411408][T14730] ? __pfx_lock_release+0x10/0x10 [ 796.416462][T14730] ? vfs_write+0x730/0xd30 [ 796.420897][T14730] ? __mutex_unlock_slowpath+0x21d/0x750 [ 796.426549][T14730] ? __fget_files+0x3f3/0x470 [ 796.431256][T14730] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 796.437254][T14730] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 796.443598][T14730] ? do_syscall_64+0x100/0x230 [ 796.448388][T14730] __x64_sys_sendmmsg+0xa0/0xb0 [ 796.453253][T14730] do_syscall_64+0xf3/0x230 [ 796.457780][T14730] ? clear_bhb_loop+0x35/0x90 [ 796.462471][T14730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.468386][T14730] RIP: 0033:0x7f2333f7e719 [ 796.472809][T14730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.492431][T14730] RSP: 002b:00007f2334cde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 796.500859][T14730] RAX: ffffffffffffffda RBX: 00007f2334135f80 RCX: 00007f2333f7e719 [ 796.508838][T14730] RDX: 00000000000003ef RSI: 0000000020000180 RDI: 0000000000000004 [ 796.516825][T14730] RBP: 00007f2334cde090 R08: 0000000000000000 R09: 0000000000000000 [ 796.524805][T14730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.532788][T14730] R13: 0000000000000000 R14: 00007f2334135f80 R15: 00007ffe701f6878 [ 796.540785][T14730] [ 796.603859][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.631099][T14728] fuse: Unknown parameter '' [ 796.645873][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.676341][ T5884] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 796.700103][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.740009][ T5884] usb 4-1: config 0 descriptor?? [ 801.853472][ T5884] usbhid 4-1:0.0: can't add hid device: -32 [ 801.859513][ T5884] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 808.827838][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.834194][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.742779][T13006] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 811.754443][T13006] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 811.772584][T13006] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 811.782032][T13006] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 811.791634][T13006] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 811.798963][T13006] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 811.902947][T14772] lo speed is unknown, defaulting to 1000 [ 813.262820][T14772] chnl_net:caif_netlink_parms(): no params data found [ 813.331992][T14789] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 813.359025][T14792] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 813.372592][T14792] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 813.380755][T14792] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 813.389474][T14792] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 813.396688][T14792] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 813.406629][T14792] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 813.415392][T14792] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 813.422818][T14792] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 813.430279][T14792] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 813.438390][T14792] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 813.446549][T13006] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 813.475008][T13006] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 813.484757][T13006] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 813.495213][T13006] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 813.504902][T13006] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 813.512102][T14792] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 813.520100][T13006] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 813.529887][T13006] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 813.539129][T13006] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 813.546992][T13006] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 813.554370][T14792] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 813.578244][T13006] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 813.585585][T13006] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 813.852520][T14794] Bluetooth: hci5: command tx timeout [ 815.561907][T14794] Bluetooth: hci7: command tx timeout [ 815.602313][T14794] Bluetooth: hci6: command tx timeout [ 815.702305][T14794] Bluetooth: hci9: command tx timeout [ 815.708612][T14794] Bluetooth: hci8: command tx timeout [ 815.952621][T14794] Bluetooth: hci5: command tx timeout [ 817.603034][T14794] Bluetooth: hci7: command tx timeout [ 817.702298][T14794] Bluetooth: hci6: command tx timeout [ 817.752275][T14793] Bluetooth: hci8: command tx timeout [ 817.757707][T14793] Bluetooth: hci9: command tx timeout [ 818.002260][T14794] Bluetooth: hci5: command tx timeout [ 900.501795][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 900.508793][ C1] rcu: 0-...!: (1 GPs behind) idle=718c/1/0x4000000000000000 softirq=63773/63780 fqs=464 [ 900.520135][ C1] rcu: (detected by 1, t=10502 jiffies, g=53345, q=5986 ncpus=2) [ 900.527958][ C1] Sending NMI from CPU 1 to CPUs 0: [ 900.527992][ C0] NMI backtrace for cpu 0 [ 900.528006][ C0] CPU: 0 UID: 0 PID: 14712 Comm: syz.8.1994 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 900.528024][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 900.528033][ C0] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 900.528060][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <75> 06 5a c3 cc cc cc cc 56 0f b6 f0 e8 9f ff ff ff 5e 5a c3 cc cc [ 900.528074][ C0] RSP: 0018:ffffc90000007b30 EFLAGS: 00000046 [ 900.528089][ C0] RAX: 0000000000000001 RBX: 1ffffffff34b4785 RCX: 0000000000000000 [ 900.528100][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9a5a3c20 [ 900.528110][ C0] RBP: dffffc0000000000 R08: ffffffff9a5a3c23 R09: 1ffffffff34b4784 [ 900.528122][ C0] R10: dffffc0000000000 R11: fffffbfff34b4785 R12: 1ffffffff34b4786 [ 900.528134][ C0] R13: ffffffff9a5a3c30 R14: ffffffff9a5a3c28 R15: ffffffff9a5a3c20 [ 900.528145][ C0] FS: 00007f2ad62d56c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 900.528160][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 900.528171][ C0] CR2: 0000000020003c80 CR3: 00000000643d0000 CR4: 00000000003526f0 [ 900.528184][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 900.528194][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 900.528204][ C0] Call Trace: [ 900.528211][ C0] [ 900.528218][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 900.528240][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 900.528262][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 900.528282][ C0] ? nmi_handle+0x2a/0x5a0 [ 900.528304][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 900.528322][ C0] ? nmi_handle+0x14f/0x5a0 [ 900.528337][ C0] ? nmi_handle+0x2a/0x5a0 [ 900.528352][ C0] ? __raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 900.528371][ C0] ? default_do_nmi+0x63/0x160 [ 900.528386][ C0] ? exc_nmi+0x123/0x1f0 [ 900.528400][ C0] ? end_repeat_nmi+0xf/0x53 [ 900.528423][ C0] ? __raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 900.528442][ C0] ? __raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 900.528462][ C0] ? __raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 900.528480][ C0] [ 900.528486][ C0] [ 900.528491][ C0] do_raw_spin_unlock+0x13c/0x8b0 [ 900.528510][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 900.528527][ C0] _raw_spin_unlock_irqrestore+0x81/0x140 [ 900.528544][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 900.528565][ C0] debug_object_deactivate+0x2d5/0x390 [ 900.528583][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 900.528600][ C0] ? timerqueue_add+0x260/0x290 [ 900.528620][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 900.528638][ C0] debug_deactivate+0x1b/0x220 [ 900.528654][ C0] __hrtimer_run_queues+0x305/0xd50 [ 900.528670][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 900.528696][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 900.528711][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 900.528732][ C0] hrtimer_interrupt+0x396/0x990 [ 900.528758][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 900.528775][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 900.528798][ C0] [ 900.528803][ C0] [ 900.528808][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 900.528825][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 900.528842][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 3a 7c a7 f5 48 89 df e8 52 c2 a8 f5 e8 dd ae d3 f5 fb bf 01 00 00 00 d2 3d 9a f5 65 8b 05 b3 d5 3a 74 85 c0 74 06 5b c3 cc cc cc cc [ 900.528854][ C0] RSP: 0018:ffffc9000bb3fd00 EFLAGS: 00000286 [ 900.528868][ C0] RAX: 38075fa6b6cafe00 RBX: ffff888028e5d488 RCX: ffffffff9a39f903 [ 900.528879][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0acac0 RDI: 0000000000000001 [ 900.528891][ C0] RBP: 00000000ffffff83 R08: ffffffff901bdfaf R09: 1ffffffff2037bf5 [ 900.528902][ C0] R10: dffffc0000000000 R11: fffffbfff2037bf6 R12: ffff888028e5d400 [ 900.528913][ C0] R13: 7fffffffffffffff R14: ffff888028e5d480 R15: 0000000000000003 [ 900.528932][ C0] do_timerfd_settime+0xd33/0x1020 [ 900.528961][ C0] __x64_sys_timerfd_settime+0x16f/0x220 [ 900.528982][ C0] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 900.529007][ C0] ? do_syscall_64+0x100/0x230 [ 900.529026][ C0] ? do_syscall_64+0xb6/0x230 [ 900.529045][ C0] do_syscall_64+0xf3/0x230 [ 900.529062][ C0] ? clear_bhb_loop+0x35/0x90 [ 900.529080][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.529097][ C0] RIP: 0033:0x7f2ad557e719 [ 900.529112][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.529123][ C0] RSP: 002b:00007f2ad62d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 900.529138][ C0] RAX: ffffffffffffffda RBX: 00007f2ad5735f80 RCX: 00007f2ad557e719 [ 900.529149][ C0] RDX: 0000000020000000 RSI: 0000000000000003 RDI: 000000000000000a [ 900.529159][ C0] RBP: 00007f2ad55f175e R08: 0000000000000000 R09: 0000000000000000 [ 900.529168][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.529178][ C0] R13: 0000000000000000 R14: 00007f2ad5735f80 R15: 00007ffc70959848 [ 900.529195][ C0] [ 900.529985][ C1] rcu: rcu_preempt kthread starved for 8090 jiffies! g53345 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 901.060283][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 901.070258][ C1] rcu: RCU grace-period kthread stack dump: [ 901.076150][ C1] task:rcu_preempt state:R running task stack:24112 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 901.087914][ C1] Call Trace: [ 901.091199][ C1] [ 901.094170][ C1] __schedule+0x17fa/0x4bd0 [ 901.098712][ C1] ? __pfx___schedule+0x10/0x10 [ 901.103584][ C1] ? __pfx_lock_release+0x10/0x10 [ 901.108624][ C1] ? __asan_memset+0x23/0x50 [ 901.113240][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 901.119062][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 901.125414][ C1] ? schedule+0x90/0x320 [ 901.129669][ C1] schedule+0x14b/0x320 [ 901.133836][ C1] schedule_timeout+0x1be/0x310 [ 901.138701][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 901.144100][ C1] ? __pfx_process_timeout+0x10/0x10 [ 901.149405][ C1] ? prepare_to_swait_event+0x330/0x350 [ 901.154976][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 901.159833][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 901.165079][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 901.171241][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 901.176534][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 901.182444][ C1] ? finish_swait+0xd4/0x1e0 [ 901.187056][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 901.191657][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 901.196872][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 901.202789][ C1] ? __kthread_parkme+0x169/0x1d0 [ 901.207839][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 901.213043][ C1] kthread+0x2f0/0x390 [ 901.217126][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 901.222329][ C1] ? __pfx_kthread+0x10/0x10 [ 901.226934][ C1] ret_from_fork+0x4b/0x80 [ 901.231367][ C1] ? __pfx_kthread+0x10/0x10 [ 901.235978][ C1] ret_from_fork_asm+0x1a/0x30 [ 901.240778][ C1] [ 901.243805][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 901.250166][ C1] CPU: 1 UID: 0 PID: 1123 Comm: kworker/u8:7 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 901.261017][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 901.271090][ C1] Workqueue: writeback wb_workfn (flush-8:0) [ 901.277102][ C1] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2ca0 [ 901.283884][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 86 f3 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 31 ef 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 15 ef [ 901.303498][ C1] RSP: 0000:ffffc90003e45fa0 EFLAGS: 00000293 [ 901.309578][ C1] RAX: ffffffff8188fa9b RBX: 1ffff110170c8ca5 RCX: ffff88802745bc00 [ 901.317558][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 901.325551][ C1] RBP: ffffc90003e461a0 R08: ffffffff8188fa6a R09: 1ffff920007c8be4 [ 901.333551][ C1] R10: dffffc0000000000 R11: ffffffff81432160 R12: dffffc0000000000 [ 901.341564][ C1] R13: ffff8880b8646528 R14: ffff8880b873fc40 R15: 0000000000000000 [ 901.349550][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 901.358488][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 901.365080][ C1] CR2: 00007f503a889d39 CR3: 000000000e734000 CR4: 00000000003526f0 [ 901.373064][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 901.381048][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 901.389025][ C1] Call Trace: [ 901.392342][ C1] [ 901.395197][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 901.401559][ C1] ? print_other_cpu_stall+0x1475/0x15b0 [ 901.407215][ C1] ? notifier_call_chain+0x19f/0x3e0 [ 901.412526][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 901.418361][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 901.424615][ C1] ? rcu_sched_clock_irq+0xa1a/0x10d0 [ 901.430003][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 901.435649][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 901.440903][ C1] ? acct_account_cputime+0x207/0x210 [ 901.446305][ C1] ? update_process_times+0x1ce/0x230 [ 901.451703][ C1] ? tick_nohz_handler+0x37c/0x500 [ 901.456872][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 901.462386][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 901.467769][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 901.473777][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 901.479517][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 901.485605][ C1] ? hrtimer_interrupt+0x396/0x990 [ 901.490750][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 901.496923][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 901.502742][ C1] [ 901.505678][ C1] [ 901.508622][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 901.514794][ C1] ? __pfx_tlb_is_not_lazy+0x10/0x10 [ 901.520100][ C1] ? smp_call_function_many_cond+0x19da/0x2ca0 [ 901.526264][ C1] ? smp_call_function_many_cond+0x1a0b/0x2ca0 [ 901.532428][ C1] ? smp_call_function_many_cond+0x19f3/0x2ca0 [ 901.538591][ C1] ? mark_lock+0x9a/0x360 [ 901.542945][ C1] ? __pfx_tlb_is_not_lazy+0x10/0x10 [ 901.548239][ C1] ? __lock_acquire+0x1384/0x2050 [ 901.553276][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 901.558511][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 901.564866][ C1] ? rcu_is_watching+0x15/0xb0 [ 901.569641][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 901.574848][ C1] ? __pfx_tlb_is_not_lazy+0x10/0x10 [ 901.580151][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 901.585274][ C1] flush_tlb_mm_range+0x329/0x5c0 [ 901.590340][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 901.595898][ C1] ? page_ext_get+0x1d6/0x2a0 [ 901.600599][ C1] ptep_clear_flush+0x11a/0x170 [ 901.605464][ C1] page_vma_mkclean_one+0x58a/0x9a0 [ 901.610697][ C1] ? __pfx_page_vma_mkclean_one+0x10/0x10 [ 901.616443][ C1] ? __pfx_validate_chain+0x10/0x10 [ 901.621685][ C1] page_mkclean_one+0x280/0x420 [ 901.626555][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 901.631956][ C1] ? __pfx_down_read_trylock+0x10/0x10 [ 901.637429][ C1] ? vma_interval_tree_iter_next+0x307/0x340 [ 901.643428][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 901.648816][ C1] rmap_walk_file+0x52f/0x9f0 [ 901.653519][ C1] folio_mkclean+0x262/0x440 [ 901.658126][ C1] ? __pfx_folio_mkclean+0x10/0x10 [ 901.663250][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 901.668637][ C1] ? __pfx_invalid_mkclean_vma+0x10/0x10 [ 901.674295][ C1] ? __pfx_lock_release+0x10/0x10 [ 901.679334][ C1] ? folio_mapping+0x1b2/0x430 [ 901.684166][ C1] folio_clear_dirty_for_io+0x22b/0xd00 [ 901.689726][ C1] ? xas_find_marked+0xf67/0x10e0 [ 901.694777][ C1] ? __pfx_folio_clear_dirty_for_io+0x10/0x10 [ 901.700876][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 901.705861][ C1] ? filemap_get_folios_tag+0x1ce/0x890 [ 901.711429][ C1] mpage_submit_folio+0x88/0x230 [ 901.716381][ C1] mpage_process_page_bufs+0x6c9/0x8d0 [ 901.721870][ C1] mpage_prepare_extent_to_map+0xec7/0x1c80 [ 901.727774][ C1] ? kasan_save_track+0x51/0x80 [ 901.732635][ C1] ? kasan_save_track+0x3f/0x80 [ 901.737528][ C1] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 901.743895][ C1] ? ext4_init_io_end+0x29/0x130 [ 901.748889][ C1] ? rcu_is_watching+0x15/0xb0 [ 901.753665][ C1] ? ext4_init_io_end+0x29/0x130 [ 901.758622][ C1] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 901.764285][ C1] ext4_do_writepages+0xc55/0x3d20 [ 901.769452][ C1] ? __pfx_ext4_do_writepages+0x10/0x10 [ 901.775042][ C1] ? rcu_read_lock_any_held+0xb7/0x160 [ 901.780526][ C1] ext4_writepages+0x213/0x3c0 [ 901.785312][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 901.790621][ C1] ? reacquire_held_locks+0x3eb/0x690 [ 901.796010][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 901.801308][ C1] do_writepages+0x35d/0x870 [ 901.805921][ C1] ? __pfx_do_writepages+0x10/0x10 [ 901.811070][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 901.816130][ C1] ? writeback_sb_inodes+0x595/0x1370 [ 901.821527][ C1] ? __pfx_lock_release+0x10/0x10 [ 901.826574][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 901.831635][ C1] __writeback_single_inode+0x14f/0x10d0 [ 901.837313][ C1] ? wbc_attach_and_unlock_inode+0x565/0x580 [ 901.843315][ C1] writeback_sb_inodes+0x80c/0x1370 [ 901.848533][ C1] ? mark_lock+0x9a/0x360 [ 901.852899][ C1] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 901.858577][ C1] ? __pfx_move_expired_inodes+0x10/0x10 [ 901.864221][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 901.869267][ C1] __writeback_inodes_wb+0x11b/0x260 [ 901.874585][ C1] wb_writeback+0x42f/0xbd0 [ 901.879114][ C1] ? queue_io+0x3b1/0x5a0 [ 901.883453][ C1] ? __pfx_wb_writeback+0x10/0x10 [ 901.888503][ C1] wb_workfn+0xba1/0x1090 [ 901.892887][ C1] ? __pfx_wb_workfn+0x10/0x10 [ 901.897684][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 901.903692][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 901.910046][ C1] ? process_scheduled_works+0x976/0x1850 [ 901.915779][ C1] process_scheduled_works+0xa63/0x1850 [ 901.921363][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 901.927376][ C1] ? assign_work+0x364/0x3d0 [ 901.931984][ C1] worker_thread+0x870/0xd30 [ 901.936608][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 901.942536][ C1] ? __kthread_parkme+0x169/0x1d0 [ 901.947581][ C1] ? __pfx_worker_thread+0x10/0x10 [ 901.952714][ C1] kthread+0x2f0/0x390 [ 901.956790][ C1] ? __pfx_worker_thread+0x10/0x10 [ 901.961913][ C1] ? __pfx_kthread+0x10/0x10 [ 901.966514][ C1] ret_from_fork+0x4b/0x80 [ 901.970971][ C1] ? __pfx_kthread+0x10/0x10 [ 901.975580][ C1] ret_from_fork_asm+0x1a/0x30 [ 901.980374][ C1]