last executing test programs: 3m25.383216422s ago: executing program 32 (id=105): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="380000006800010000000000000000000a00000000000000100008800c0001000000002000000000060007000800000008000500"], 0x38}}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r6, 0x12}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, 0x0, 0x23d) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfe, 0x0, 0x0, @local, @dev}}}}}}, 0x0) r9 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f00000045c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}], 0x1, 0x0) io_submit(0x0, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r9, &(0x7f0000000340), 0x2d}]) 3m21.043918174s ago: executing program 1 (id=119): r0 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x7c13, 0x1046}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x10, 0x0, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$netlink(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc0, 0x6, 0x77, 0x10, 0x65a, 0x9, 0x1f2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x46, 0x6d, 0xae, 0x0, [], [{{0x9, 0x5, 0x87, 0x2}}]}}]}}]}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x28, 0x14, 0x119, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "8d747ea4dc9278634a4e3ae552"}]}, 0x28}}, 0x0) r1 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r1) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m17.873594747s ago: executing program 1 (id=127): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r1 = gettid() rt_tgsigqueueinfo(r1, r1, 0x40, &(0x7f0000000000)={0x6, 0x9729, 0x80}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) close(0xffffffffffffffff) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) (rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000000000000100000000000000b9df321a43ab336f87d6191c1cbb9d79fcbc5bcad14b4839556300ce1801fba65e54e8086db9ffe7aa68cc83ff000000000000000000000000000000009fc57c7203d60cc1bfae5b319e1472348289dc39dcf6759ad8b8c00be7b138879a6a7841b3297e47ee274c36a07bd92722f9766a5149a50e6784e8d242d986ed1ecb5f08bd6f3a652f1af45a29e10d3e88f3eb396dcf3e843f06a02d856661958cde84681d1f767a30a5accb39c6", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x54) (async) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) (async, rerun: 64) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f0000000240)) (async, rerun: 64) sendfile(r5, r6, 0x0, 0x8000002b) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x418, 0x8800, 0x2, 0x220, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @multicast1, @dev}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="14faede8deed", @mac=@broadcast, @private, @multicast1}}}, {{@arp={@empty, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ipvlan1\x00', 'syz_tun\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @local, @remote}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000040)={0x60, 0x3, &(0x7f0000c2d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffd, &(0x7f0000000140)=[{0x8000000000000000, 0xfffffffffffffffd, 0x1}], 0x1, 0xe4, 0x5d, 0x0, 0x7e, 0x5a}) 3m17.730877293s ago: executing program 1 (id=129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r4, 0x1000008, 0x13, r2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4140aecd, &(0x7f00000001c0)=ANY=[]) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r4, 0x0, 0x110, r8, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r9, 0xc2604110, &(0x7f0000000280)={0x0, [[0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x0, 0x1, 0x0, 0x100009], [0xbff, 0xfffffffc, 0x0, 0x0, 0x0, 0x8, 0x1, 0xfffffffc]], '\x00', [{0x0, 0x1, 0x1}, {0x2}, {0x7, 0xfffffffc}, {0x7, 0xfffffffd}, {0x200003}, {}, {0x1}, {0x0, 0x27f}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 3m17.173710231s ago: executing program 1 (id=132): syz_emit_ethernet(0x6a, &(0x7f0000000740)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0xffff, @empty=0xac1414aa, @empty, {[@lsrr={0x83, 0x3}, @ssrr={0x89, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) 3m17.11929822s ago: executing program 1 (id=133): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='jbd2_submit_inode_data\x00', r1, 0x0, 0x7fffffff}, 0x18) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045009, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9e, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000500), 0x10156, 0x40000042, 0x0) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000040)=@id, 0x10) recvmmsg(r6, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1, &(0x7f0000000e40)=""/120, 0x78}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000d80)=""/157, 0x9d}], 0x1}}], 0x2, 0x0, 0x0) shutdown(r6, 0x2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00cd4316c800fedbdf250205000000000000000000000800620000000000050059000900000008006a0040000000"], 0x34}, 0x1, 0x0, 0x0, 0x24008841}, 0x40004) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x20000000, &(0x7f0000000400)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f0000000200)=@v2={0x3, 0x2, 0x4}, 0x9, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="891000000000000095", @ANYRES8=r4], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m13.795540762s ago: executing program 1 (id=141): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x14, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0xe712, 0x2) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000040)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x28, 0x0) r1 = dup(r0) fallocate(r1, 0x11, 0x0, 0x40000000074100) 3m1.897859498s ago: executing program 4 (id=175): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) clock_gettime(0x0, &(0x7f000000c100)={0x0, 0x0}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfd20, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9031a04000a740100053503000000000000800c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) recvmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000001140)=""/11, 0xb}, 0xfffffff8}, {{&(0x7f0000001180)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f00000034c0)=""/4096, 0x1000}, 0x101}, {{&(0x7f00000044c0)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004540)=""/233, 0xe9}, {&(0x7f0000004640)=""/230, 0xe6}, {&(0x7f0000004740)=""/109, 0x6d}], 0x3}, 0x8}, {{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004880)=""/68, 0x44}, {&(0x7f0000004900)=""/120, 0x78}, {&(0x7f0000004980)=""/198, 0xc6}, {&(0x7f0000004a80)=""/193, 0xc1}, {&(0x7f0000004b80)=""/222, 0xde}], 0x5, &(0x7f0000004d00)=""/136, 0x88}, 0x70b5}, {{&(0x7f0000004dc0)=@alg, 0x80, &(0x7f0000007340), 0x0, &(0x7f0000007400)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000008400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000008700)=[{&(0x7f0000008480)=""/216, 0xd8}, {&(0x7f0000008580)=""/115, 0x73}, {&(0x7f0000008600)}, {&(0x7f0000008640)=""/183, 0xb7}], 0x4, &(0x7f0000008740)=""/194, 0xc2}, 0x6}, {{&(0x7f0000008840)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000008940)=[{&(0x7f00000088c0)=""/83, 0x53}], 0x1, &(0x7f0000008980)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f000000a980)=[{&(0x7f0000009980)=""/4096, 0x1000}], 0x1, &(0x7f000000a9c0)=""/111, 0x6f}, 0x800}, {{&(0x7f000000aa40), 0x80, &(0x7f000000ae40), 0x0, &(0x7f000000aec0)=""/4096, 0x1000}, 0x3}], 0x9, 0x12120, &(0x7f000000c140)={r1, r2+10000000}) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) 3m1.473638113s ago: executing program 4 (id=179): prctl$PR_GET_NAME(0x41555856, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) io_setup(0xd, 0x0) r1 = eventfd(0x1) r2 = openat$dsp(0xffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0xa) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x40000) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)) read$dsp(r2, &(0x7f0000000140)=""/60, 0x3c) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r4, 0x20000000007, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r6 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {&(0x7f0000002200)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r7}}, 0x48) r8 = eventfd2(0x3, 0x38c9232f068520a1) eventfd(0x400) accept$inet(r0, 0x0, &(0x7f00000007c0)) io_submit(0x0, 0x8, &(0x7f0000000840)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x2, r0, &(0x7f0000000580)="a759bbc28c8fdc8c6f6ebd43e412f738ecf632ddb7dcd9974feca75e92cd26839ed781cf3a6e06e9248b4f238c23dc1182d721a775632fabdafca9badd3b96344cce0e9d046ebe4c", 0x48, 0x1de1, 0x0, 0x1, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f00000001c0)="3734688f8b4a095c8791ed7f0c10fb85bdc57d18a7fcd1d0ce00ed5c75351f43e335872b61ad148058e5551cab23dc899e1f0bbdc29c61b038ff83142876ba26477531fc1f826a773721195cf45ca2bec24390512d3aca6302b1aa2cb1b584385a10cfb89960c5ee15c72bfd0639b916f10bb362bc9ab2b27df318e8b8d07e10f5c92651fb4311acbb52a97c9f05829bcfc58a6ce3b6fdb162c86e102e20", 0x9e, 0x4, 0x0, 0x1, r5}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x7, r8, &(0x7f0000000280)="d1c104078846e57f1ab509adf02b511497885da117eae23b056b2a4f5aacee856c3f12c50d23db474e564ae082c4e398223f76db245e2c8f8dd87e482e2a7c1892cf843b6b412025e814d03a72376708ed0d53129990b41a8e1402abab682ff32d6132cde7389f38260352c2917d482a8f40fc23035bf84cbfc7c30198d481b2d9a2f0354c8e0f3fdbe108878d9e7c94785ae74ab94160938c5c27b7f43395bab129bef11db8e92fc6380aa63cf0030d27f7", 0xb2, 0x2, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x4, r0, 0x0, 0x0, 0x6, 0x0, 0x3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x8, r0, &(0x7f00000008c0)="193484664a0fa9157a54b23e7f05d85f52634236e3cb1f1d4f984212350485182937ac6ac2c9a941ecbfd0fd5eabfcf27d338858a7f130d1b599c49a7d27b8ad0166299783cfb7942dca7852fa39fd5b7f9215737134c9fb01069f55b09f48f37256573cad64ff97c0bb0e7ac31097fd891538c2c383a9a4000000000000", 0x7e, 0x6, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0xfffe, r0, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x2, r4}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x404, r0, &(0x7f0000000640)="b62f4ffcd96c2842242ccbf66d14d7d0e7f7242956ab7b799425a3b25f10827c4af8f4b5a614065f5eff1fef2be33ca537b44b618852df40b343634adfe9acc397884053ecd62b66460cb94722080bbe0bedda4557b0983ba85b8af8e0ab808196e20b7c01", 0x65, 0x4, 0x0, 0x3, r8}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f0000000700)="9a88faaebe5bc8233bca45763b7dd88a60947e0376d5b64eac752a9904", 0x1d, 0x7}]) r9 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r9, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 3m0.13116523s ago: executing program 4 (id=182): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a00)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x10, 0xffe0}}}, 0x24}}, 0x0) 2m59.878442113s ago: executing program 4 (id=184): r0 = memfd_create(&(0x7f00000008c0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x2) fallocate(r0, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, &(0x7f0000000240)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2m59.469666463s ago: executing program 4 (id=185): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg1\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'gre0\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x1, 0x7800, 0x8, 0x4, {{0x4a, 0x4, 0x0, 0x27, 0x128, 0x67, 0x0, 0x1, 0xf18b93c1d92cfe93, 0x0, @remote, @broadcast, {[@lsrr={0x83, 0x27, 0x1b, [@broadcast, @rand_addr=0x64010101, @private=0xa010101, @local, @local, @rand_addr=0x64010102, @remote, @multicast2, @empty]}, @noop, @lsrr={0x83, 0x17, 0x11, [@local, @remote, @empty, @broadcast, @remote]}, @rr={0x7, 0x1b, 0xe3, [@dev={0xac, 0x14, 0x14, 0x13}, @loopback, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010101]}, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x3, 0xf, "fdaea6c9eba4986c73be70d3e3"}]}, @rr={0x7, 0x27, 0xeb, [@multicast2, @rand_addr=0x64010102, @multicast1, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x15}, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010102]}, @cipso={0x86, 0x33, 0x3, [{0x1, 0xf, "74d143c389ddea9c110daea472"}, {0x2, 0xf, "a5bc9c8d39dcd75c35efaa526a"}, {0x1, 0xb, "222069240a7a294bdf"}, {0x6, 0x4, "dbe4"}]}, @timestamp={0x44, 0x1c, 0xa4, 0x0, 0x2, [0x3, 0xa, 0xdef, 0x5, 0x1, 0x7fffffff]}, @ssrr={0x89, 0x1b, 0x66, [@private=0xa010100, @multicast2, @multicast1, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x13, 0x63, [@multicast1, @private=0xa010102, @rand_addr=0x64010102, @loopback]}]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010b00000000000000000e00000008000300", @ANYRES32, @ANYBLOB="39a2fbffffffffffff237c5c1e8ce858d53f6be5"], 0x1c}}, 0x0) 2m59.169514358s ago: executing program 4 (id=186): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be0", 0x48, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r5, 0x0) (async) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @remote}, &(0x7f00000004c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000500)={'gretap0\x00', r6, 0x700, 0xb61372055febf616, 0x9, 0x62, {{0x24, 0x4, 0x2, 0x9, 0x90, 0x65, 0x0, 0x8, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x37}, {[@lsrr={0x83, 0x1b, 0x21, [@remote, @loopback, @broadcast, @multicast2, @rand_addr=0x64010102, @multicast1]}, @noop, @timestamp={0x44, 0x1c, 0xe9, 0x0, 0x4, [0x3, 0x7, 0x160, 0x1, 0x17, 0x4f0]}, @rr={0x7, 0x13, 0x61, [@private=0xa010101, @local, @rand_addr=0x64010101, @private=0xa010100]}, @noop, @cipso={0x86, 0x20, 0x1, [{0x5, 0x12, "020b0c1d472bbbe1c8c5cc44af422521"}, {0x0, 0x8, "a485f40e6b29"}]}, @cipso={0x86, 0x10, 0x3, [{0x6, 0xa, "75ddaab4e351b37f"}]}]}}}}}) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r9 = dup3(r7, r8, 0x0) ioctl$IOMMU_IOAS_COPY(r9, 0x3b83, &(0x7f0000000740)={0x28, 0x700, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x100080, 0x78}, 0x20) (async) syz_usb_connect(0x28606d82e1985b14, 0x59f, &(0x7f0000000940)={{0x12, 0x1, 0x310, 0x1e, 0xaf, 0x3c, 0x10, 0x257a, 0x2606, 0x64c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58d, 0x1, 0x8, 0x1, 0x20, 0x1, [{{0x9, 0x4, 0x97, 0x80, 0xe, 0x18, 0x5c, 0xa4, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0xf, 0x8}, [@feature_unit={0xb, 0x24, 0x6, 0x5, 0x5, 0x2, [0x6, 0x3], 0x3c}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x80, "10fde930511b"}, @feature_unit={0x13, 0x24, 0x6, 0x5, 0x6, 0x6, [0x4, 0x6, 0x2, 0x1, 0x4, 0x4], 0x7f}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0x8, "4a7bc7dd6f"}, @mixer_unit={0x7, 0x24, 0x4, 0x2, 0x9, "c19a"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x206, 0x6, 0x4, 0xfffe, 0x3, 0x2}]}], [{{0x9, 0x5, 0x5, 0xc, 0x400, 0xe, 0x0, 0x2, [@generic={0xa3, 0x22, "6a601446417df4fdf0b9f6427643fbd2661ae5a3256ef72e8b0dbac0794e7cbefa2bbcd6d604a5b70a5cb9991d0191b4fb6087fc76a0955a8161d8e1229ceca1335f08bf5a287346a010ad7df76ebec25d7072a70cc7d8c91618e5a76ce1b81d6005350eb43c4448a4511e444b51d2bf2493ecaf67d19e2b59640cb60a63ca518a291a35283bfbc5cecc87f4b06c2d6b8af88ad6306e8a882aa9ab0e7d61ad0775"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x6, 0x6f, 0x3}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x7, 0x6, 0xd9, [@generic={0xb4, 0x23, "db6db313b7a2d9ce9dd60ef095267c7ed6b483d003d3b3ee0b3a4aec03d000f8282125d9a210a43dcc82d481560ed1bf0c5a63c6463d142e3dab06846c7cc14939239f7bee5e9f9134869e3212b8b2730af070b1f4f5b763ccbd8479ede6a7a87df6445917751717d18c224211b72331fd363496b3a78ac24fff6088a76e9ae8591b6912b442c86cfbe82f5be6eceaeff72976f789754c8f31de5b248036589976a8a91dfb39d696fda64459b453c02ae15e"}, @generic={0x75, 0x7, "a7f2c038d2729c680e278fe68a5e90907a6f4da9e4cecb16a9afb151f1d668458ef93010ac92fa1351934187275370bd3f1064aa399fbca9a5a9052ab373246be4e80f4af2e43de05db5b60cea4553264bccf43f0acaf870fea6f2d86b8719189deb60f2c7af60fc8f4c4cacd6b3277998569b"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x3, 0x2, 0x40}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x25, 0x8, 0x9}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x9, 0x32, 0xff}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0x23, 0x5, 0xf9}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x8, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x7}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x8, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xf0, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x2}]}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x2, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0xe, 0x7f, 0x8, [@generic={0xff, 0x1, "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"}, @generic={0xa9, 0x11, "d2ece647ee6c79e9622f6c6b9ca3797d351ddd85a77ecca59955d06488c265303e4408aa8678c0178a9b52d59523f227e3aa08339fb76624c745a40eaf586d613c34c3ab06b73d36676e03b378f6e3d0802d429d0185ad3a023cbdda049b83f2e885be728a4598a6546a4a9d0087992b388a20664da3025c2dd2b6f08baddae68c1cb4f143bf38350dfec6182620734d812f15fd1565900be5ca13d4f2088da7c987924732bc87"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x7f, 0x8, 0x61, [@generic={0xc7, 0x21, "3c2a35000c8d6341da09e893fcb1635f8816a51ab5a0733e3be5ed9d658396ec50d15612b50c7c597130e53324fd527c9c6459571da3eefbc10b0391131d880acc33e885a36ff6d5ac9da49bc2cf457812262ecbb8f42aed62c7297ac94b83211b31d4c52e3caa81bcbae515b3208a488dd342c13caea82078be708d9586f0537acd354c0dabf108f34f86bd7f45663702afba000f9eda6569e6d3dac655becfa267567eeb6554a112f6aa427c644f57d2cc9c797967d5aede05c82e18133ccc7970a9dbd9"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x44, 0x400}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x32, 0x10, 0x9, [@generic={0x49, 0x30, "97614d7f3ab0be20eaea069e899f611e375b556908803e0080661611652ead3d1fc420fb7025ddba85e1535a2375aa9608851e1661597efad157c9e8c9806aaee7d1b9bbdeff04"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x8, 0x2b, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x4}]}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x341, 0xfc, 0x5, 0x10, 0x8, 0x6b}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x437}}, {0x4e, &(0x7f0000000680)=@string={0x4e, 0x3, "d14daa3dc98c86ba388fb9b9a6ceb0ef9134a3d1c0b51dc560acd098f037289ca969785772ca54e2ae73a134ccd4b897de2b9d0d7309ccd475cc8e59c49d47ba223f376e22aeb665fe55a413"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x200a}}]}) r10 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000002840), 0x2, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796e6f61640024000280080004400000001c08000340000000b9080001400000000a08000240000000020900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) (async) write$smackfs_change_rule(r10, &(0x7f0000002880)=ANY=[@ANYBLOB="76657240696f6e3d3970323beb202e7520722077"], 0x1c) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002000000000000000031000008000400", @ANYBLOB="0600204f"], 0x2c}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r13, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)={0x2c, r14, 0x801, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r15}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x2c}}, 0x0) (async) request_key(&(0x7f00000013c0)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', 0x0) 2m58.529820492s ago: executing program 33 (id=141): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x14, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0xe712, 0x2) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000040)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x28, 0x0) r1 = dup(r0) fallocate(r1, 0x11, 0x0, 0x40000000074100) 2m43.855970203s ago: executing program 34 (id=186): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be0", 0x48, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r5, 0x0) (async) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @remote}, &(0x7f00000004c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000500)={'gretap0\x00', r6, 0x700, 0xb61372055febf616, 0x9, 0x62, {{0x24, 0x4, 0x2, 0x9, 0x90, 0x65, 0x0, 0x8, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x37}, {[@lsrr={0x83, 0x1b, 0x21, [@remote, @loopback, @broadcast, @multicast2, @rand_addr=0x64010102, @multicast1]}, @noop, @timestamp={0x44, 0x1c, 0xe9, 0x0, 0x4, [0x3, 0x7, 0x160, 0x1, 0x17, 0x4f0]}, @rr={0x7, 0x13, 0x61, [@private=0xa010101, @local, @rand_addr=0x64010101, @private=0xa010100]}, @noop, @cipso={0x86, 0x20, 0x1, [{0x5, 0x12, "020b0c1d472bbbe1c8c5cc44af422521"}, {0x0, 0x8, "a485f40e6b29"}]}, @cipso={0x86, 0x10, 0x3, [{0x6, 0xa, "75ddaab4e351b37f"}]}]}}}}}) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r9 = dup3(r7, r8, 0x0) ioctl$IOMMU_IOAS_COPY(r9, 0x3b83, &(0x7f0000000740)={0x28, 0x700, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x100080, 0x78}, 0x20) (async) syz_usb_connect(0x28606d82e1985b14, 0x59f, &(0x7f0000000940)={{0x12, 0x1, 0x310, 0x1e, 0xaf, 0x3c, 0x10, 0x257a, 0x2606, 0x64c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58d, 0x1, 0x8, 0x1, 0x20, 0x1, [{{0x9, 0x4, 0x97, 0x80, 0xe, 0x18, 0x5c, 0xa4, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0xf, 0x8}, [@feature_unit={0xb, 0x24, 0x6, 0x5, 0x5, 0x2, [0x6, 0x3], 0x3c}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x80, "10fde930511b"}, @feature_unit={0x13, 0x24, 0x6, 0x5, 0x6, 0x6, [0x4, 0x6, 0x2, 0x1, 0x4, 0x4], 0x7f}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0x8, "4a7bc7dd6f"}, @mixer_unit={0x7, 0x24, 0x4, 0x2, 0x9, "c19a"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x206, 0x6, 0x4, 0xfffe, 0x3, 0x2}]}], [{{0x9, 0x5, 0x5, 0xc, 0x400, 0xe, 0x0, 0x2, [@generic={0xa3, 0x22, "6a601446417df4fdf0b9f6427643fbd2661ae5a3256ef72e8b0dbac0794e7cbefa2bbcd6d604a5b70a5cb9991d0191b4fb6087fc76a0955a8161d8e1229ceca1335f08bf5a287346a010ad7df76ebec25d7072a70cc7d8c91618e5a76ce1b81d6005350eb43c4448a4511e444b51d2bf2493ecaf67d19e2b59640cb60a63ca518a291a35283bfbc5cecc87f4b06c2d6b8af88ad6306e8a882aa9ab0e7d61ad0775"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x6, 0x6f, 0x3}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x7, 0x6, 0xd9, [@generic={0xb4, 0x23, "db6db313b7a2d9ce9dd60ef095267c7ed6b483d003d3b3ee0b3a4aec03d000f8282125d9a210a43dcc82d481560ed1bf0c5a63c6463d142e3dab06846c7cc14939239f7bee5e9f9134869e3212b8b2730af070b1f4f5b763ccbd8479ede6a7a87df6445917751717d18c224211b72331fd363496b3a78ac24fff6088a76e9ae8591b6912b442c86cfbe82f5be6eceaeff72976f789754c8f31de5b248036589976a8a91dfb39d696fda64459b453c02ae15e"}, @generic={0x75, 0x7, "a7f2c038d2729c680e278fe68a5e90907a6f4da9e4cecb16a9afb151f1d668458ef93010ac92fa1351934187275370bd3f1064aa399fbca9a5a9052ab373246be4e80f4af2e43de05db5b60cea4553264bccf43f0acaf870fea6f2d86b8719189deb60f2c7af60fc8f4c4cacd6b3277998569b"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x3, 0x2, 0x40}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x25, 0x8, 0x9}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x9, 0x32, 0xff}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0x23, 0x5, 0xf9}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x8, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x7}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x8, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xf0, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x2}]}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x2, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0xe, 0x7f, 0x8, [@generic={0xff, 0x1, "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"}, @generic={0xa9, 0x11, "d2ece647ee6c79e9622f6c6b9ca3797d351ddd85a77ecca59955d06488c265303e4408aa8678c0178a9b52d59523f227e3aa08339fb76624c745a40eaf586d613c34c3ab06b73d36676e03b378f6e3d0802d429d0185ad3a023cbdda049b83f2e885be728a4598a6546a4a9d0087992b388a20664da3025c2dd2b6f08baddae68c1cb4f143bf38350dfec6182620734d812f15fd1565900be5ca13d4f2088da7c987924732bc87"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x7f, 0x8, 0x61, [@generic={0xc7, 0x21, "3c2a35000c8d6341da09e893fcb1635f8816a51ab5a0733e3be5ed9d658396ec50d15612b50c7c597130e53324fd527c9c6459571da3eefbc10b0391131d880acc33e885a36ff6d5ac9da49bc2cf457812262ecbb8f42aed62c7297ac94b83211b31d4c52e3caa81bcbae515b3208a488dd342c13caea82078be708d9586f0537acd354c0dabf108f34f86bd7f45663702afba000f9eda6569e6d3dac655becfa267567eeb6554a112f6aa427c644f57d2cc9c797967d5aede05c82e18133ccc7970a9dbd9"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x44, 0x400}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x32, 0x10, 0x9, [@generic={0x49, 0x30, "97614d7f3ab0be20eaea069e899f611e375b556908803e0080661611652ead3d1fc420fb7025ddba85e1535a2375aa9608851e1661597efad157c9e8c9806aaee7d1b9bbdeff04"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x8, 0x2b, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x4}]}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x341, 0xfc, 0x5, 0x10, 0x8, 0x6b}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x437}}, {0x4e, &(0x7f0000000680)=@string={0x4e, 0x3, "d14daa3dc98c86ba388fb9b9a6ceb0ef9134a3d1c0b51dc560acd098f037289ca969785772ca54e2ae73a134ccd4b897de2b9d0d7309ccd475cc8e59c49d47ba223f376e22aeb665fe55a413"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x200a}}]}) r10 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000002840), 0x2, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796e6f61640024000280080004400000001c08000340000000b9080001400000000a08000240000000020900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) (async) write$smackfs_change_rule(r10, &(0x7f0000002880)=ANY=[@ANYBLOB="76657240696f6e3d3970323beb202e7520722077"], 0x1c) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002000000000000000031000008000400", @ANYBLOB="0600204f"], 0x2c}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r13, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)={0x2c, r14, 0x801, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r15}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x2c}}, 0x0) (async) request_key(&(0x7f00000013c0)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', 0x0) 2m28.370597579s ago: executing program 0 (id=277): ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$getownex(r0, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) flistxattr(r0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000300)={0x5, 0xfffffffa, 0x1}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000380)={0x5000, 0x100000, 0x6, 0x7, 0xf5}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="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", 0x106}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000740)}], 0x1}}], 0x2, 0x840) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x4) 2m27.334128241s ago: executing program 0 (id=279): io_uring_setup(0x79bb, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2m26.745647218s ago: executing program 0 (id=282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000005100)={@multicast, @multicast, @void, {@llc={0x4, {@snap={0xaa, 0xaa, 's', "f60421", 0x8906}}}}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f00000015c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f00000032c0)={[&(0x7f0000000340)='^-%-\\xc$})\'!&}*', &(0x7f0000000440)='syz0']}, &(0x7f0000001100)={[&(0x7f00000010c0)='$!\x80\"\xc4\xc6\x87\xde>d\xc3$\xcf\xb0\xc7\x1cAYf\'\xe9\tD\x04\xd5\x17+c\xc4\xe1\xae7\xcb\xe8]Vs\xc1!\xda\x0e\xe4C\x8c^\xd8']}) r5 = dup(r3) write$FUSE_INIT(r5, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r5, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x405, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa048}}, 0x20}}, 0x4000040) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(0x4) ioctl$KVM_CHECK_EXTENSION(r0, 0xae01, 0x7) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 2m22.668743665s ago: executing program 0 (id=291): prctl$PR_GET_NAME(0x41555856, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) io_setup(0xd, 0x0) r1 = eventfd(0x1) r2 = openat$dsp(0xffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0xa) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x40000) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)) read$dsp(r2, &(0x7f0000000140)=""/60, 0x3c) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r4, 0x20000000007, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r6 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {&(0x7f0000002200)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r7}}, 0x48) r8 = eventfd2(0x3, 0x38c9232f068520a1) eventfd(0x400) accept$inet(r0, 0x0, &(0x7f00000007c0)) io_submit(0x0, 0x8, &(0x7f0000000840)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x2, r0, &(0x7f0000000580)="a759bbc28c8fdc8c6f6ebd43e412f738ecf632ddb7dcd9974feca75e92cd26839ed781cf3a6e06e9248b4f238c23dc1182d721a775632fabdafca9badd3b96344cce0e9d046ebe4c", 0x48, 0x1de1, 0x0, 0x1, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f00000001c0)="3734688f8b4a095c8791ed7f0c10fb85bdc57d18a7fcd1d0ce00ed5c75351f43e335872b61ad148058e5551cab23dc899e1f0bbdc29c61b038ff83142876ba26477531fc1f826a773721195cf45ca2bec24390512d3aca6302b1aa2cb1b584385a10cfb89960c5ee15c72bfd0639b916f10bb362bc9ab2b27df318e8b8d07e10f5c92651fb4311acbb52a97c9f05829bcfc58a6ce3b6fdb162c86e102e20", 0x9e, 0x4, 0x0, 0x1, r5}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x7, r8, &(0x7f0000000280)="d1c104078846e57f1ab509adf02b511497885da117eae23b056b2a4f5aacee856c3f12c50d23db474e564ae082c4e398223f76db245e2c8f8dd87e482e2a7c1892cf843b6b412025e814d03a72376708ed0d53129990b41a8e1402abab682ff32d6132cde7389f38260352c2917d482a8f40fc23035bf84cbfc7c30198d481b2d9a2f0354c8e0f3fdbe108878d9e7c94785ae74ab94160938c5c27b7f43395bab129bef11db8e92fc6380aa63cf0030d27f7", 0xb2, 0x2, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000380)="a9e623273c0f81b192be5003db29001d7436786a73def3929be00b595419a893e718c316af7f7bf78c5bddb8bea4e610073a897b3241b5b011624f4b3663898b46e8e710bee466cccead40f597fe5badc5aa4f81fde7bb15870a6602c4e2374077e2e4e332edca98b82f55d185d3a5d8e013e56a598aeb2afe2363ae721f8ab32ff3a3aae818a4494f36cd38ac561bb8889adf53bd96cc34e60a78c58ffbc89b377c399d26fee5fb0af45f5d9d9894303e5cf262", 0xb4, 0x6, 0x0, 0x3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x8, r0, &(0x7f00000008c0)="193484664a0fa9157a54b23e7f05d85f52634236e3cb1f1d4f984212350485182937ac6ac2c9a941ecbfd0fd5eabfcf27d338858a7f130d1b599c49a7d27b8ad0166299783cfb7942dca7852fa39fd5b7f9215737134c9fb01069f55b09f48f37256573cad64ff97c0bb0e7ac31097fd891538c2c383a9a4000000000000", 0x7e, 0x6, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0xfffe, r0, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x2, r4}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x404, r0, &(0x7f0000000640)="b62f4ffcd96c2842242ccbf66d14d7d0e7f7242956ab7b799425a3b25f10827c4af8f4b5a614065f5eff1fef2be33ca537b44b618852df40b343634adfe9acc397884053ecd62b66460cb94722080bbe0bedda4557b0983ba85b8af8e0ab808196e20b7c01", 0x65, 0x4, 0x0, 0x3, r8}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f0000000700)="9a88faaebe5bc8233bca45763b7dd88a60947e0376d5b64eac752a9904", 0x1d, 0x7}]) r9 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r9, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 2m20.509124295s ago: executing program 0 (id=298): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, @local, @empty}}}}}}, 0x0) (fail_nth: 3) 2m19.219553386s ago: executing program 0 (id=302): getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40c0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x20000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0ca8) fchown(r0, 0xee01, 0x0) write$binfmt_elf64(r0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x22e) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4480c2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00000005000000020000000400000020000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r6}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x80040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0xa, 0x1f9, 0xfffffffc}) iopl(0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004100)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000080)={0x2020}, 0x3a) read$FUSE(r8, &(0x7f0000004380)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m16.5995524s ago: executing program 3 (id=312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c00000052000100000000000000000002000000080002"], 0x1c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x212000, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000640)={0x1, 0x0, @pic={0x6, 0x8, 0x6, 0xf, 0xe2, 0x16, 0xf9, 0x2, 0x3, 0x9, 0x11, 0x3, 0xf, 0x5, 0x7, 0xbf}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000040)="0f01c20f20e035000040000f22e03e640f871d0000000f01cbc0222a2e64652ef30f01eac4e17917a6123a000026660f38152b26d70f01c8", 0xffffffffffffff60}], 0xaaaaaaaaaaaadd2, 0x0, 0x0, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in=@broadcast, 0x4e21, 0x9, 0x4e22, 0x5, 0x2, 0x42a6340857f25ec8, 0x80, 0x6}, {0x3, 0xfff, 0x5, 0x0, 0xff, 0x5, 0x7, 0x100000000}, {0xfffffffffffff800, 0x5, 0x4000000000000, 0x1}, 0x2, 0x6e6bbe, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d6, 0x2b}, 0x2, @in=@empty, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x402}}, 0xe8) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m15.442238593s ago: executing program 3 (id=318): pipe2(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd70a5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c707647fa8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa60e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b0a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000f841b35af2e300"/3601], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) r1 = socket(0x1e, 0x5, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x22000600) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_io_uring_setup(0x7d32, &(0x7f0000000040)={0x0, 0x0, 0x32}, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x26d5, &(0x7f0000000200)={0x0, 0x8e00, 0x3ba0589bb144b516, 0x2, 0x2370, 0x0, r4}, &(0x7f0000000180), 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @loopback, @rand_addr=0x64010101}}}}) r6 = epoll_create(0x2a) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000004c001280110001006272696467655f736c6176650000000034000580050019"], 0x98}}, 0x0) 2m14.992981795s ago: executing program 3 (id=320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x80803, 0x4000000000000004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="4c0000001300ff09fffd956fa283b700008c0e440000000002007d3540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) r3 = dup(r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) 2m14.87350368s ago: executing program 3 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x109001, 0x0) write$rfkill(r1, &(0x7f0000000040)={0x5, 0x7, 0x0, 0x0, 0x1}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'veth0_vlan\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f00000001c0)='efs\x00', 0x1) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0, 0xb}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000840)={r2}, &(0x7f0000000880)=0x8) recvfrom$inet(r0, &(0x7f00000008c0)=""/98, 0x62, 0x10000, &(0x7f0000000940)={0x2, 0x4e20, @multicast1}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000d40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a00)={0x2d8, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc118}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbb1c}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "3e72c9044685b1ff7e52848f6a24f63e4f7dcfb5293e"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "bacd3f1ce3af3de1e438c7321b08d60d05fe1db0bb1b782cdeb329d6e23a94fa19b8c5"}}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "75903fe23820deef8966af1e524bc5ad63a86c5e"}}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb8ec}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b5160bd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "2430e5a7b2efd02a2a6ebdfe0b3998be4c1628b95829f5d67f24139818fef0dc5d"}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x80}, 0x40040) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000d80)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) accept4$unix(r5, 0x0, &(0x7f0000000e00), 0x800) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000e40)={r3, 0xa7, "fa24e73daea9da1abeeb8742ae0fceaa75bca552e53e0cbf0d1d55fd30233e2263605fb5c9b77ab1d0aaef069e2caf1a8d7e4b6ace02908cbbe7fbfac7fe0a0665501e8f124c3d9df8e7c653488bc3403ac494f45f2c61bd84b364fecad5716f486ddbbe8e11ba4a1b3a43de04a56fb3c89f5caf08f3e41d4c01d712cf1c0abfabc5acd4ba149bfac5707c4f837b51e644a72b0e675bc28d1458c8a3f9926bef05e8d1efd45cb6"}, &(0x7f0000000f00)=0xaf) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000f40)={r6, 0x40}, &(0x7f0000000f80)=0x8) read$alg(r0, &(0x7f0000000fc0)=""/45, 0x2d) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000001040), r0) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}]}, 0x28}}, 0x20004841) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001140)={'wlan1\x00'}) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x8c, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x465}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8895}, 0x44801) r8 = syz_usb_connect$cdc_ncm(0x2, 0x77, &(0x7f0000001300)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x5, 0xa0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c40b238000"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xe, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x6, 0x4}, [@acm={0x4, 0x24, 0x2, 0xf}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x7f, 0x80, 0xe5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x6, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x8, 0xe6, 0x3}}}}}}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x201, 0x8d, 0xf, 0x2c, 0x10, 0x7}, 0x65, &(0x7f00000013c0)={0x5, 0xf, 0x65, 0x1, [@generic={0x60, 0x10, 0x4, "69377fa4e4b55c9c911e54402038236bdff1715899cabdb7cff9ddc0e7a9f5cf7a3cb225ccea4348876cd69d498e2fb9d22e6fac5b5fa6d57a513557c311f12bc88c06187c7daac7ac12e371a6ff5f71d5ce418ec7a8cfd4ef22dcc149"}]}, 0x2, [{0xbf, &(0x7f0000001440)=@string={0xbf, 0x3, "777c6115ef1f759565973efa5e429969fd56642d3f29682c6503a5cb744937ab89f5214b6364373102de7fe94254dc170776bb3af3d1672ac09aa451525acc5de9cfc215b2b5877c97a9e05c2b699b7c31de945e494878a2c37382660e9fa642bedce7ad15bae86b99c6da44248b4037d16adc62ed6fa0006d2228e13073034f8c85c0407b3cd280afe44359f38184a424bf64f269e596020fd71efc4bfc63ae2fdd350b8d6277fd47d5e6baa3b5296ef215b5252a327d1b35ced2ce92"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x81a}}]}) syz_usb_control_io(r8, &(0x7f0000001780)={0x2c, &(0x7f0000001580)={0x40, 0x22, 0xf3, {0xf3, 0x31, "df470812ef28694ec072bd8305027bada939d610ba6c2af06374f17cb7c0f506f6f5914ea4f633788e02f3c463582504a3197bd422b6ea515a7ec19bceeea8b8d073a732a9cc298e6e77f797b354d17c3997d452eb00b6a32506cb09290d245338ff6f8ab4fc60c761503c2b36e31aa47a75fbe72fc7e8929675e4ca94824203fad70aa67d33caec9e963c67a2d93d020908c56713b0d77d0d9b54c54ee3ba6da0453a4263d39f73faeaba6472d579adb97ff788ebe0c5132e0d088939924b4898198a929f2e43fa2b1c5feb7a8d93ebc6fbd7040b9ac2524738f26da7903779c266ff108368f5e1a1e4e8634cbcfb2c1c"}}, &(0x7f0000001680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f00000016c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001700)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x4, 0x80, 0x10, "c0ae716f", "e29e1e25"}}, &(0x7f0000001740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x80, 0x5, 0x8, 0xc, 0x2, 0xb60}}}, &(0x7f0000001c40)={0x84, &(0x7f00000017c0)={0x0, 0xf, 0x8c, "d872a2a117de052bcf63e9c92def7765c2a70124db6b687d616ad219af7acf0c83c50eceb1197ca52f9b507319ec7ff739fbc8bd736391ddd7b10b0a4961d37ca045934107fde2610a1606c3a16a47a5b24c41b34f5d34fc3be244cc57a4ceccfcc27d5c41b91e0d924562147afe1726cb0786dde058aef577c8b68a9f3319ef77b13495bb70338d8c43a4bf"}, &(0x7f0000001880)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000018c0)={0x0, 0x8, 0x1, 0xa9}, &(0x7f0000001900)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x4, {0x440}}, &(0x7f0000001980)={0x40, 0x7, 0x2, 0x400}, &(0x7f00000019c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001a00)={0x40, 0xb, 0x2, "6ac4"}, &(0x7f0000001a40)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001a80)={0x40, 0x13, 0x6, @random="a7ea2d3c1cb8"}, &(0x7f0000001ac0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f0000001b00)={0x40, 0x19, 0x2, "d426"}, &(0x7f0000001b40)={0x40, 0x1a, 0x2, 0x34}, &(0x7f0000001b80)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000001bc0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000001c00)={0x40, 0x21, 0x1, 0x3}}) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001e80)={&(0x7f0000001d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0xdc, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0x5a, 0xc, "edc6ebd42670cf810d9d76f63bc4de4921949f4f14d82141ae4df564c82105fc3107103d19e56fe3828d4a5e19bba141036d0da840408cecac801f21761dea4ebbdb13ef3a202b237f0b61fc9cfffdaa50d55146b870"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x4b, 0xc, "01a41ad2c6cd0ba6572aff2256ac98a883715212f1a724b7399a2288b8042e4e2c23c752ff3920f21839e92ccb975a4e16366036c53490808fbbab7fa2c95ab905cb604c6630a1"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) socket$nl_route(0x10, 0x3, 0x0) 2m12.544940036s ago: executing program 3 (id=328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='d6', 0x2, 0x4008000, 0x0, 0x0) close(0x3) 2m12.443784507s ago: executing program 35 (id=328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='d6', 0x2, 0x4008000, 0x0, 0x0) close(0x3) 2m3.857468672s ago: executing program 36 (id=302): getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40c0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x20000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0ca8) fchown(r0, 0xee01, 0x0) write$binfmt_elf64(r0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x22e) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4480c2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00000005000000020000000400000020000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r6}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x80040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0xa, 0x1f9, 0xfffffffc}) iopl(0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004100)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000080)={0x2020}, 0x3a) read$FUSE(r8, &(0x7f0000004380)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m7.4601307s ago: executing program 7 (id=516): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ff}]}) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='sctp_probe_path\x00', r5, 0x0, 0x5}, 0x18) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x500) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xe, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'}) 1m5.731900681s ago: executing program 7 (id=519): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000fcffff7f000000000000000c85000000170000001801000020756c2500000000002033207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 2) 1m3.783706846s ago: executing program 7 (id=524): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0xc048aec8, &(0x7f0000000440)={0x6, 0xffffffffffffffff, 0xffffffff}) 1m3.457301297s ago: executing program 7 (id=527): r0 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) r2 = open_tree(r1, &(0x7f0000000040)='./file0/file0\x00', 0x9100) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000200000040fc0d000140000102030109022d0001010630bf090400f00203010006092108000f01227d0b090581000000001003090502032000030504b2559d793c1fa2865c7b6536e10f37d62e22ef608d84232244ae5c29771979a0edd37273aa6e72128630fede3644258d15b47be7f436aec65972ea97eaa7c18d0dbbc35635359d6a0de1d8de288254aa1864b576289e5d665140da4a2f9c765703af601ee087c4d0000002d7018431d59f6cfad10c53b039361170bcbab90c5b1ca17ecb76c1c248810cdd70dc5ebe3ea54c6edd44f54563bb99aee4a52a6ab6584c4ce21066ea03f19d6fdade5d"], &(0x7f0000000880)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0xe, 0x4, 0x6, 0x10, 0x9}, 0x10, &(0x7f0000000340)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x70, 0x8, 0xb6, 0x8, 0xe}]}, 0x7, [{0x71, &(0x7f0000000380)=@string={0x71, 0x3, "3ca25fdb09f3d6819e1da1773cd771ccef9afea8e9e9e6801cda7b6b6f7a074a1a94610210754936bfd6724c6f21a2e7daddb9d5c13304d78bfa03091bfa0196f2d5795da142024050ad65aa2bb57191ddfe45236447c73b7ff51d8145d032d415f5bba746ad1ea72dbfc42ac66a9d"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3c01}}, {0xd6, &(0x7f00000004c0)=@lang_id={0x0, 0x3, 0x416}}, {0x4, &(0x7f0000000600)=@lang_id={0x4}}, {0xfffffffffffffe86, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x843}}, {0x0, &(0x7f00000007c0)=@lang_id={0x0, 0x3, 0xc01}}, {0x0, &(0x7f0000000800)=@string={0x0, 0x3, "64d1ffc06b882b9b12d2d268b2053efb2e133006cd"}}, {0x0, &(0x7f0000000840)=@lang_id={0x0, 0x3, 0x41f}}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0), 0x0, 0x100, &(0x7f0000001e00)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x9, 0x0, 0x0, @void, @value}, 0x20) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632177fbac141416ac14141607089f034d2f87e5890c6aab845013f2325f1a39018602038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa00b3461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x6, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x2000000}, 0x50) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) mount_setattr(r1, &(0x7f0000000500)='./file0/file0\x00', 0x100, &(0x7f0000000780)={0x82, 0xf2, 0x100000, {r2}}, 0x20) syz_usb_disconnect(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r4, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r8, 0x107, 0xc, 0x0, &(0x7f00000000c0)=0xfffffffffffffda3) 1m1.435880337s ago: executing program 7 (id=534): r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2901) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1000001000104) openat$smackfs_relabel_self(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}]}, 0x48}}, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 1m0.408912864s ago: executing program 7 (id=536): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x4, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) unshare(0x20000400) shutdown(r0, 0x0) 59.197431973s ago: executing program 37 (id=536): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x4, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) unshare(0x20000400) shutdown(r0, 0x0) 15.866335787s ago: executing program 9 (id=657): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="380000006800010000000000000000000a00000000000000100008800c0001000000002000000000060007000800000008000500", @ANYRES32], 0x38}}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r6, 0x12}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, 0x0, 0x23d) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfe, 0x0, 0x0, @local, @dev}}}}}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000045c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}], 0x1, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r9, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, 0xffffffffffffffff, &(0x7f0000000340), 0x2d}]) 14.629842301s ago: executing program 6 (id=660): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000003680)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200035c0, 0x0, 0x0, 0x200035f0, 0x20003620], 0x0, 0x0, &(0x7f00000035c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000a07debbd2251d47700000000000000000000000000000000ffffffff10000000000000000000"]}, 0xde) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r1 = socket(0x840000000002, 0x3, 0xff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) ioprio_set$pid(0x1, 0x0, 0x2000) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@none}]}) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x2200000, &(0x7f00000001c0)=ANY=[@ANYBLOB="6370752c726f6f74636f6e746578743d73797374656d5f752c736d61636b6673726f6f743d6e6174002c7375626a5f726f6c653d5b2c5b45ac39ab033a0627afe68f272c646566636f6e74657874"]) 13.002733052s ago: executing program 6 (id=662): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)="d4", 0x1}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf6c1) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb18906", 0x18, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000280)={0xb, 0x1}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x4000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x7, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000340)) r6 = syz_io_uring_setup(0x37b2, &(0x7f0000000440)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x0) 12.673966965s ago: executing program 9 (id=664): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000005c0)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000680)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f00000006c0)={0x0, 0x0, 0x0}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r11], &(0x7f00000000c0)=[0x2], &(0x7f0000000580)=[r10], &(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f00000008c0)={0x101, 0x9, &(0x7f0000000700)=[0x0, 0x0, r5, 0x0, r7, r4, 0x0, r6, r7], &(0x7f0000000740)=[0x101, 0xf, 0x9, 0xfffffffd, 0x9, 0x8, 0x5], &(0x7f0000000780)=[0x0, r10], &(0x7f0000000880), 0x0, 0xf000000000000000}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11.724298413s ago: executing program 8 (id=665): r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2901) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1000001000104) r3 = openat$smackfs_relabel_self(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_labels_list(r3, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}]}, 0x48}}, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 11.003671372s ago: executing program 9 (id=667): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x402, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000000906010200000000000000000200000208000940000000645e00020073797a3100000000050001000700000020000880"], 0x50}, 0x1, 0x0, 0x0, 0x30008092}, 0x4000080) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc8240, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000140)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) 8.524382893s ago: executing program 6 (id=672): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x14, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x2}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = memfd_secret(0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) capset(&(0x7f0000000000)={0x19980330}, 0x0) socket$inet(0x2, 0x0, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0x0, 0xd95df4, 0x32314d4e, 0x7, 0x0, [{}, {0x0, 0x6}, {0x4}, {0x0, 0x20000}, {}, {0x9}], 0x4e}}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000280)={@empty, 0x1, 0x0, 0x40, 0x0, [{@multicast1}, {@private}, {@broadcast}, {@dev}]}}) r9 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r9, 0xc4c85513, &(0x7f0000000080)={0xa, 0x0, 0x0, 0x0, '\x00', 0x2}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="3eef12c9e843", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) 8.015650514s ago: executing program 2 (id=676): openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 7.172761772s ago: executing program 5 (id=677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) eventfd(0xef5) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340), &(0x7f0000000280)) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x2c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x12}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x33}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}]}, 0x2c}}, 0x800) 7.092076388s ago: executing program 5 (id=678): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x2000000000000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {0x2}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}]}, 0x24}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') chdir(&(0x7f0000000140)='./bus\x00') r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)="fba59e92bf709fcb6fcf29a3a09997f163af4538391d09967c80b6e561dddf38f209b8fc10aa20aaa405a60cc2b5e91d881a8ce00a6b0b51fd112a5f0b07efe841965e4ae6cb9c2514059c1451d79e480e59a0265b3a", 0x56}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4008000) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0xb8e]}}, 0x5c) (fail_nth: 1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x6000001c}) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setrlimit(0x1, 0x0) 6.798979979s ago: executing program 2 (id=679): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x160, 0xa8, 0xfeffffff, 0x208, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'macvlan1\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty}}}}, {{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x7}}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@dev, @ipv4=@remote, @port, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @broadcast, @local, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x37}, 0x12000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast1, 0x0, 0x0, 'macvtap0\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) (fail_nth: 3) 5.945629387s ago: executing program 2 (id=680): r0 = socket(0x1, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b050000000000000049714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdeb003588aa623fa71f31bf0f871ab5c2ff8a6fc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9db000000000000af0000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb16a443925ea5f8cc80fcf546a64027f0158b331fe45653143401c6fe5e4fad8a898dcebe77b6c861bd4847643b5bc8e8b46426ba214e9a2d9f0117879929a463649dda957aed4e007e98ad8212abf14d09345005b6f618aa69400000001000000004353bd9969fd727162de2275f0f570aad3a69d23b50e900cb3e7b1ef01e52d02fc7bee53b39ab1181a8a56b7aec9402e78eee057adcfd4b57ec057992666b33453c4a6e8dcf20809b28396dd23347b2f6ada5d64"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) (async) syz_emit_ethernet(0x5e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc02000540e1223e55276c00000000000000000000000000fe"], 0x0) (async) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r0, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000300)="d6", 0x1}, {&(0x7f0000000340)="dae9fafc98efd9911c0ea6870ef1d5377167f571b332e2f02180d9a558bc0bd24386ccdb1f66d1a834df67ccad0c3aebb9ab13c3e034f2c53bf90d8a6c87c442af2625dfafd8f13d878a5f81187cdb89d6ada9cb5ed198d95bb6614228c91061195f26aec0a154854b264730c072e80410d510fb3cf6e568a4121dd798dcfc7ce3054e57ecf8c94f60330846f3", 0x8d}, {&(0x7f0000001080)="da820e994ab4dcf0535786e57afc16bb7992cdb2782f4f5b03441330c4aa31", 0x1f}], 0x3}}], 0x1, 0x0) (async) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/172, 0xac}], 0x7}}], 0x1, 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000a8f3d2207205200385010102030109021b0001000000000904"], 0x0) syz_usb_ep_write(r3, 0xf, 0xc0, &(0x7f0000000000)="06d67f053e8e10cb3274a44aeba3d6379ccf5743abad47a4f0e57e4cb79cd29711b607f1bd4912d2a1ea95b48e6455d0b9678ce883fc22fdd2209ca85a581ea56d9124bd92b667cfe72db066d2bf656d53144512e191c6eecee247f2d0fd2a58faa527ff24c78446d618a7d81fae8b6d721a5853e83a1c2abf38026e0a23ca151e312a96f7024b9c7001c7252d1522044ab2b41fb81f3f9b94c7b50f89504095ea08f3c8909bf332ac2c02720a4da3f8e805e1cadca13418c503723468462b78") 5.568945037s ago: executing program 9 (id=681): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100090810000000000000040000", 0x58}], 0x1) 5.531377228s ago: executing program 8 (id=682): r0 = socket(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={0xfc, r6, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0xfc}}, 0x8804) socket(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, 0x0, 0x0) socket(0x2, 0x4, 0x9) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) 5.346772373s ago: executing program 9 (id=683): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ff}]}) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='sctp_probe_path\x00', r5, 0x0, 0x5}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'}) 4.051868024s ago: executing program 6 (id=684): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141201) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCFLSH(r0, 0x540b, 0x2) 3.140977433s ago: executing program 8 (id=685): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000039dac0ef0000030000000800010000000000"], 0x1c}}, 0x0) 2.829180293s ago: executing program 9 (id=686): syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$isdn(0x22, 0x3, 0x23) fallocate(r0, 0x78, 0x0, 0x82) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000980)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/109, 0x6d}], 0x1, &(0x7f0000000340)=""/152, 0x98}, 0x8000}, {{&(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000480)=""/168, 0xa8}, {&(0x7f0000000540)=""/110, 0x6e}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f00000005c0)=""/198, 0xc6}, {&(0x7f0000000780)=""/211, 0xd3}], 0x5, &(0x7f0000000900)=""/83, 0x53}, 0xb}], 0x2, 0x2, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r8, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r8, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0xff00) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r9, 0x0, 0x0) io_pgetevents(0x0, 0x8, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) 2.689740695s ago: executing program 5 (id=687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x56) (fail_nth: 3) 2.485740919s ago: executing program 2 (id=688): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000611201000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000c40)={'wg1\x00', {0x2, 0x0, @empty}}) 2.033218778s ago: executing program 6 (id=689): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$getownex(r0, 0x10, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], &(0x7f00000029c0)=""/4089, 0x3e, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES8=0x0, @ANYBLOB="000000001800000000000000000000000000b15bb70db325e6573295100990e659d4cad146701c7daad91ac0f06e739be63144fa23671922eb97ec73004abcda115a1d0672a932499f83929d6613178682fddd2387c051a95155", @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e22, 0x3, @local, 0x8c9}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @local}], 0x7c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x4) 2.032915548s ago: executing program 5 (id=690): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[r2, 0x0], 0x2, 0x80800}) 1.915145564s ago: executing program 8 (id=691): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[r2, 0x0], 0x2, 0x80800}) (fail_nth: 3) 1.801764199s ago: executing program 2 (id=692): r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2901) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1000001000104) r2 = openat$smackfs_relabel_self(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_labels_list(r2, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}]}, 0x48}}, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 1.692393697s ago: executing program 5 (id=693): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x42) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) geteuid() r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)) writev(r0, &(0x7f0000000580), 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e817782db4cb904021d0800067c7c09e8fe0ba10a0007000200142603600e1208001e0003070401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ebef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x2002c040) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x42) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) (async) geteuid() (async) syz_open_pts(r1, 0x0) (async) dup3(r2, r1, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)) (async) writev(r0, &(0x7f0000000580), 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e817782db4cb904021d0800067c7c09e8fe0ba10a0007000200142603600e1208001e0003070401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ebef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x2002c040) (async) 1.374996548s ago: executing program 8 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x1ff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x12}}], 0x400000000000181, 0x9200000000000000) 1.221677931s ago: executing program 2 (id=695): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\r'], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x20004008) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0xf000, 0x0, 0x8, r3, 0xb}) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x8, r3, 0x2}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x40, 0x31, 0x64, {0x64, 0xf, "c83768426ad3b9d742a223ea785898163312aa3b8e6a4c9cb0cf0c8d8e45dca55e9e52d789f71b93262208a7d17072f15b86fbe261698ed82c2f58ea4eaa15863b7edb77d91283f701783d5f78b7d3189be622d9a3cf61c98bd1b3a234ad4101e6c7"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, &(0x7f0000000140)={0x0, 0xf, 0xe6, {0x5, 0xf, 0xe6, 0x3, [@generic={0xca, 0x10, 0x2, "4f97155e3165dc71410b2bd625bb93c5f0f4b570e252826a64cfd7710562976714c5b583a177d4f9177df32d45d862c01f8f6f9728c0f1e760cb0bdde87a9e9b5c7446d8cbe61e436a4da890507175c0a42429685ab72e015057604a59c34352576efdb7c201461d7c1d866f6abecbab962f4ecccd9f8dbc1cc9bc43936e2836e944ed047d2144dd4a2f7e35487625f313945e2c0224a4a0b67c0a6e0c917d3266d37ef35337bbec328acc8ad450cfa1c95a4a84b787287dd6d61ed61d259ffedbba052de82a6f"}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "8b15c677c0a7102344a7fa1467ec0557"}, @ptm_cap={0x3}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x4, 0x3, 0x8, "0e1dc03d", "c8a520a5"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x10, 0x6, 0x4, 0x3, 0x80}}}, &(0x7f0000000800)={0x84, &(0x7f0000000300)={0x0, 0xa, 0x5a, "e5614ce67e9bedaf082dc66d82df7f146d27c183d69bb696fbf57cc9ee134912e3f52f7b2a4f9d3f7b8fa0bf653d2c8a05efabf70f13e2b44ce71a4659b276cf4cd6b8fb4f084d0faa3097dfa5c7bd80c5cd775b00d1a49a100b"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xe}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x120, 0x20}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x1}, &(0x7f00000005c0)={0x40, 0xb, 0x2, '^T'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x9c6a}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, &(0x7f0000000680)={0x40, 0x17, 0x6}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "08a9"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000740)={0x40, 0x1c, 0x1}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x15}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x10}}) 1.01750552s ago: executing program 6 (id=696): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000005c0)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000680)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f00000006c0)={0x0, 0x0, 0x0}) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r10}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r12], &(0x7f00000000c0)=[0x2], &(0x7f0000000580)=[r11], &(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f00000008c0)={0x101, 0x9, &(0x7f0000000700)=[0x0, 0x0, r6, 0x0, r8, r5, 0x0, r7, r8], &(0x7f0000000740)=[0x101, 0xf, 0x9, 0xfffffffd, 0x9, 0x8, 0x5], &(0x7f0000000780)=[0x0, r11], &(0x7f0000000880), 0x0, 0xf000000000000000}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="f7ff078379db1cff6813a26e11efe7cc4090d7fe", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b6090100000000006d0000000000000018010000646c6c2500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b7030000000000001500000006000000ce93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 940.863971ms ago: executing program 5 (id=697): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000540), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3e, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x2, 0x12) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000012140100000000000000000008000300000000000800010000ad0aa0ac9e0bc6000000"], 0x20}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) close(r10) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffff59, r12, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r11, 0xc06864a2, &(0x7f0000000300)={0x0, 0x0, r12, r13, 0x0, 0x0, 0x0, 0x1, {0x7, 0x9, 0x7, 0x21, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0e19cd27afbd5acaa3431c1d8bdffb38a310364ef87b48499c76277e5c2e3653"}}) r14 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r8, &(0x7f0000000800)={0x6}) sendmsg$tipc(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000580)="b748eb7d605e6852527d5cad1ccf76f45a992029727fba195d960d8b92c94405e4d5e390119c10290b1c50f5b166e56e26af4bdc17c49103fd8b968cbf4669bc046ab9ff240c21689cb10606b5b3fad9764f3ddf92229b4e20778dcbc925693e465b3b", 0x63}, {&(0x7f0000000600)="e7d3c6906ec59425d9608bf25f12c68de7d39d6ff1b4c3a44b32933a341ae9567cc128488643159470327aec684c6a995fa2ab25f35331b9db94e7f4d32639b73be13eed4eba146cfc65c16592f7dc83cdb76e0db29e2c97c54ac4c64a5a367044b6ccb14afe9731851050516c26d375733d28ba5c58bf76822b2e1309fa50e200360e0310544ae70f99de38", 0x8c}, {&(0x7f00000006c0)="0632d72511333d615c9e123d7760c2606e3bd3c7643b455b07320ff9294800290a0670f7e8bb6acbaaab5c700a7dcddae1d7b544c8c6492da558c7d81f47fd69016abd394dc42f4ee881b48201e7", 0x4e}, {&(0x7f0000000300)="dd44d9d0f818cd04907a5a", 0xb}, {&(0x7f0000000740)="e49f6a80dad27a3147400e81458becf9ad630849f58650e413814d1953c7941d722aa90d616f267de35c5fc616e255bfb5025853dc01f63f4a4f3ead213c71907d6f0dc29496250597d5f367799531d3fe2c186d155c3b980930d5e697f0e073ee92823a7d66b15978eff992b29dc09e619ebd5e079236fca8208e8baebfd7b7a8dc0e6b9f65ab16273ec42d29896a3f154680219759c7fd140feb83dfebf84c82479937a8c27543f400afdf42f182847e6197d19edaaabd4e23272ae2abac78d4d7a7a9", 0xc4}, {&(0x7f0000001700)="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", 0x3bd}], 0x6}, 0x88c) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r14, @ANYRES32=r15], 0x5c}}, 0x40048004) 0s ago: executing program 8 (id=698): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x430}, 0x1, 0x0, 0x0, 0x200000c1}, 0x20000040) listen(r0, 0x20000005) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e0ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r1}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x20) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r4) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x24, r5, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0xc0) kernel console output (not intermixed with test programs): =7612 comm="syz.5.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93a517d0b0 code=0x7ffc0000 [ 184.999374][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.017431][ T29] audit: type=1326 audit(1731226360.876:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7612 comm="syz.5.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93a517d0b0 code=0x7ffc0000 [ 185.030482][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.185802][ T29] audit: type=1326 audit(1731226360.876:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7612 comm="syz.5.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a517e719 code=0x7ffc0000 [ 185.214489][ T7514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.307565][ T5141] Bluetooth: hci7: command tx timeout [ 185.404821][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.460445][ T29] audit: type=1326 audit(1731226360.876:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7612 comm="syz.5.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f93a517e719 code=0x7ffc0000 [ 185.522647][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.548716][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.713882][ T29] audit: type=1326 audit(1731226360.876:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7612 comm="syz.5.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a517e719 code=0x7ffc0000 [ 185.737854][ T29] audit: type=1326 audit(1731226360.876:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7612 comm="syz.5.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93a517e719 code=0x7ffc0000 [ 185.739746][ T7514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.759136][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.762893][ T29] audit: type=1326 audit(1731226360.876:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7612 comm="syz.5.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a517e719 code=0x7ffc0000 [ 185.833587][ T6128] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 185.956854][ T7632] netlink: 68 bytes leftover after parsing attributes in process `syz.7.369'. [ 185.995085][ T6128] usb 7-1: Using ep0 maxpacket: 16 [ 186.004944][ T6128] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 186.006850][ T7430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.013579][ T6128] usb 7-1: config 0 has no interface number 0 [ 186.029863][ T7430] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.053842][ T746] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.061067][ T746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.101812][ T746] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.109081][ T746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.165388][ T7636] block nbd5: shutting down sockets [ 186.248375][ T6128] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 186.293309][ T6128] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 186.713926][ T7514] hsr_slave_0: entered promiscuous mode [ 186.737889][ T6128] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 186.795530][ T6128] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 186.795712][ T7514] hsr_slave_1: entered promiscuous mode [ 186.803573][ T6128] usb 7-1: Manufacturer: syz [ 186.803590][ T6128] usb 7-1: SerialNumber: syz [ 186.820313][ T6128] usb 7-1: config 0 descriptor?? [ 186.836995][ T7623] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 186.870942][ T7514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.879511][ T7514] Cannot create hsr debugfs directory [ 187.081411][ T7623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.115386][ T7623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.146675][ T6128] usbtouchscreen 7-1:0.214: Failed to read FW rev: -71 [ 187.153755][ T6128] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 187.205269][ T6128] usb 7-1: USB disconnect, device number 7 [ 187.311911][ T7646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.345177][ T5141] Bluetooth: hci7: command tx timeout [ 188.162293][ T7430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.184608][ T7514] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 188.242204][ T7514] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 188.285584][ T7514] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 188.321519][ T7514] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 188.650454][ T7514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.343507][ T7514] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.420458][ T7308] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.427674][ T7308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.510082][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.517312][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.639839][ T7430] veth0_vlan: entered promiscuous mode [ 189.739056][ T7430] veth1_vlan: entered promiscuous mode [ 189.766184][ T7430] veth0_macvtap: entered promiscuous mode [ 189.776007][ T7430] veth1_macvtap: entered promiscuous mode [ 189.798620][ T7704] input: syz0 as /devices/virtual/input/input12 [ 189.807013][ T7430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.817669][ T7430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.894045][ T7704] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 189.938006][ T7430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.949252][ T7430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.962310][ T7709] netlink: 'syz.7.384': attribute type 9 has an invalid length. [ 189.970743][ T7709] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.384'. [ 190.000291][ T7430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.000316][ T7430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.000344][ T7430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.000359][ T7430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.000376][ T7430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.000391][ T7430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.006948][ T7430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.128069][ T7430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.139674][ T7430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.150882][ T7430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.162200][ T7430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.172374][ T7430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.183467][ T7430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.285401][ T7430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.296550][ T7430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.307242][ T7430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.318232][ T7430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.330042][ T7430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.347830][ T7430] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.359324][ T7430] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.399048][ T7430] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.424966][ T7430] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.579066][ T7711] netlink: 'syz.7.384': attribute type 9 has an invalid length. [ 190.592284][ T7514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.619130][ T7711] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.384'. [ 191.647289][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.655817][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.724746][ T5924] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 191.861637][ T746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.894840][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 191.919765][ T746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.928158][ T5924] usb 6-1: config 0 has an invalid interface number: 135 but max is 0 [ 191.994025][ T5924] usb 6-1: config 0 has no interface number 0 [ 192.032410][ T5924] usb 6-1: config 0 interface 135 has no altsetting 0 [ 192.047167][ T7755] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.063349][ T7756] random: crng reseeded on system resumption [ 192.088762][ T5924] usb 6-1: New USB device found, idVendor=0c52, idProduct=2821, bcdDevice=94.c1 [ 192.130137][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.194013][ T5924] usb 6-1: Product: syz [ 192.241316][ T5924] usb 6-1: Manufacturer: syz [ 192.276056][ T5924] usb 6-1: SerialNumber: syz [ 192.372570][ T5924] usb 6-1: config 0 descriptor?? [ 192.379747][ T7514] veth0_vlan: entered promiscuous mode [ 192.423926][ T5924] ftdi_sio 6-1:0.135: FTDI USB Serial Device converter detected [ 192.516409][ T7514] veth1_vlan: entered promiscuous mode [ 192.532916][ T5924] ftdi_sio ttyUSB0: unknown device type: 0x94c1 [ 192.594594][ T7760] tipc: Failed to remove unknown binding: 66,1,1/0:2220831135/2220831137 [ 192.612671][ T7760] tipc: Failed to remove unknown binding: 66,1,1/0:2220831135/2220831137 [ 192.626425][ T5924] usb 6-1: USB disconnect, device number 8 [ 192.681390][ T7514] veth0_macvtap: entered promiscuous mode [ 192.710100][ T5924] ftdi_sio 6-1:0.135: device disconnected [ 192.742173][ T7514] veth1_macvtap: entered promiscuous mode [ 192.828978][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.860819][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.899097][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.910737][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.922679][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.935426][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.948045][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.960068][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.971083][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.983159][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.993520][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.004830][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.016886][ T7514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.082651][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.106147][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.117762][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.140124][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.151405][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.162595][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.175116][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.186253][ T6129] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 193.203860][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.225063][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.237990][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.251901][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.263864][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.282527][ T7514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.310169][ T7514] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.327241][ T7514] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.338781][ T7514] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.348334][ T7514] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.357890][ T6129] usb 9-1: Using ep0 maxpacket: 32 [ 193.368025][ T6129] usb 9-1: config 0 has an invalid descriptor of length 122, skipping remainder of the config [ 193.381634][ T6129] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.519343][ T6129] usb 9-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=71.71 [ 193.529125][ T6129] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.538146][ T6129] usb 9-1: Product: syz [ 193.542354][ T6129] usb 9-1: Manufacturer: syz [ 193.548028][ T6129] usb 9-1: SerialNumber: syz [ 193.555776][ T6129] usb 9-1: config 0 descriptor?? [ 193.862479][ T7308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.031550][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.051952][ T7308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.070179][ T6129] usb 9-1: USB disconnect, device number 2 [ 194.147272][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.449695][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.456369][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.821466][ T7787] netlink: 72 bytes leftover after parsing attributes in process `syz.9.347'. [ 195.843868][ T7802] netlink: 596 bytes leftover after parsing attributes in process `syz.8.398'. [ 196.906227][ T6129] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 196.986912][ T7824] netlink: 24 bytes leftover after parsing attributes in process `syz.5.405'. [ 197.087046][ T6129] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 197.116614][ T6129] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.248208][ T6129] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 197.343744][ T6129] usb 8-1: config 1 has no interface number 0 [ 197.388104][ T6129] usb 8-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 197.411847][ T7836] netlink: 156 bytes leftover after parsing attributes in process `syz.9.409'. [ 197.460654][ T7838] FAULT_INJECTION: forcing a failure. [ 197.460654][ T7838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.475044][ T6129] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 197.509521][ T6129] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.520317][ T6129] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.538246][ T6129] usb 8-1: Product: syz [ 197.542482][ T6129] usb 8-1: Manufacturer: syz [ 197.548063][ T6129] usb 8-1: SerialNumber: syz [ 197.561011][ T6129] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 197.569068][ T6129] cdc_ncm 8-1:1.1: bind() failure [ 197.583870][ T7838] CPU: 0 UID: 0 PID: 7838 Comm: syz.5.410 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 197.594519][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 197.604608][ T7838] Call Trace: [ 197.607920][ T7838] [ 197.610883][ T7838] dump_stack_lvl+0x241/0x360 [ 197.615604][ T7838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.620841][ T7838] ? __pfx__printk+0x10/0x10 [ 197.625476][ T7838] ? __pfx_lock_release+0x10/0x10 [ 197.630551][ T7838] should_fail_ex+0x3b0/0x4e0 [ 197.635272][ T7838] _copy_from_user+0x2f/0xc0 [ 197.639897][ T7838] get_sg_io_hdr+0x152/0x1240 [ 197.644605][ T7838] ? _raw_write_unlock_irqrestore+0x8f/0x140 [ 197.650619][ T7838] ? lockdep_hardirqs_on+0x99/0x150 [ 197.655853][ T7838] ? _raw_write_unlock_irqrestore+0xdd/0x140 [ 197.661870][ T7838] ? __pfx__raw_write_unlock_irqrestore+0x10/0x10 [ 197.668329][ T7838] ? __pfx_get_sg_io_hdr+0x10/0x10 [ 197.673487][ T7838] ? sg_add_request+0x606/0x660 [ 197.678392][ T7838] sg_new_write+0x141/0x7f0 [ 197.682939][ T7838] ? __pfx_sg_new_write+0x10/0x10 [ 197.687997][ T7838] ? kfree+0x1a0/0x440 [ 197.692125][ T7838] sg_ioctl+0x17b7/0x2e80 [ 197.696507][ T7838] ? __pfx_sg_ioctl+0x10/0x10 [ 197.701215][ T7838] ? __fget_files+0x3f3/0x470 [ 197.705902][ T7838] ? __pfx_sg_ioctl+0x10/0x10 [ 197.710589][ T7838] __se_sys_ioctl+0xf9/0x170 [ 197.715186][ T7838] do_syscall_64+0xf3/0x230 [ 197.719691][ T7838] ? clear_bhb_loop+0x35/0x90 [ 197.724367][ T7838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.730258][ T7838] RIP: 0033:0x7f93a517e719 [ 197.734677][ T7838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.754297][ T7838] RSP: 002b:00007f93a5f9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.762715][ T7838] RAX: ffffffffffffffda RBX: 00007f93a5335f80 RCX: 00007f93a517e719 [ 197.770689][ T7838] RDX: 0000000020000040 RSI: 0000000000002285 RDI: 0000000000000006 [ 197.778656][ T7838] RBP: 00007f93a5f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 197.786630][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.794600][ T7838] R13: 0000000000000000 R14: 00007f93a5335f80 R15: 00007ffc0590f828 [ 197.802581][ T7838] [ 198.072615][ T6129] usb 8-1: USB disconnect, device number 5 [ 198.189090][ T7847] lo speed is unknown, defaulting to 1000 [ 198.214567][ T7847] lo speed is unknown, defaulting to 1000 [ 198.228208][ T7847] lo speed is unknown, defaulting to 1000 [ 198.693912][ T7847] infiniband syz1: set active [ 198.698993][ T7847] infiniband syz1: added lo [ 198.764556][ T7847] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 198.770018][ T7847] infiniband syz1: Couldn't open port 1 [ 198.795942][ T5847] lo speed is unknown, defaulting to 1000 [ 198.885053][ T7847] RDS/IB: syz1: added [ 198.890521][ T7847] smc: adding ib device syz1 with port count 1 [ 198.897146][ T7847] smc: ib device syz1 port 1 has pnetid [ 198.906881][ T7847] lo speed is unknown, defaulting to 1000 [ 198.943353][ T970] lo speed is unknown, defaulting to 1000 [ 199.112951][ T7847] lo speed is unknown, defaulting to 1000 [ 199.389182][ T7847] lo speed is unknown, defaulting to 1000 [ 199.544966][ T7847] lo speed is unknown, defaulting to 1000 [ 199.645092][ T6130] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 199.763187][ T7847] lo speed is unknown, defaulting to 1000 [ 200.023197][ T7847] lo speed is unknown, defaulting to 1000 [ 200.161188][ T7847] lo speed is unknown, defaulting to 1000 [ 200.297190][ T7847] lo speed is unknown, defaulting to 1000 [ 200.564713][ T7867] dccp_invalid_packet: P.Data Offset(0) too small [ 201.045490][ T6130] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.058152][ T6130] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.070136][ T6130] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 201.079769][ T6130] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.096666][ T6130] usb 7-1: config 0 descriptor?? [ 201.149211][ T7871] netlink: 'syz.5.415': attribute type 9 has an invalid length. [ 201.177371][ T7871] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.415'. [ 201.221270][ T7875] FAULT_INJECTION: forcing a failure. [ 201.221270][ T7875] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 201.235656][ T7876] netlink: 'syz.5.415': attribute type 9 has an invalid length. [ 201.243343][ T7876] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.415'. [ 201.264806][ T7875] CPU: 1 UID: 0 PID: 7875 Comm: syz.8.417 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 201.275468][ T7875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 201.285558][ T7875] Call Trace: [ 201.288863][ T7875] [ 201.291814][ T7875] dump_stack_lvl+0x241/0x360 [ 201.296531][ T7875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.301770][ T7875] ? __pfx__printk+0x10/0x10 [ 201.306414][ T7875] should_fail_ex+0x3b0/0x4e0 [ 201.311123][ T7875] prepare_alloc_pages+0x1da/0x5b0 [ 201.316273][ T7875] __alloc_pages_noprof+0x16f/0x710 [ 201.321505][ T7875] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 201.327268][ T7875] ? __pfx___might_resched+0x10/0x10 [ 201.332580][ T7875] ? __might_fault+0xaa/0x120 [ 201.337289][ T7875] ___kmalloc_large_node+0x8b/0x1d0 [ 201.342520][ T7875] __kmalloc_large_node_noprof+0x1a/0x80 [ 201.348192][ T7875] __kmalloc_node_track_caller_noprof+0x2cd/0x440 [ 201.354635][ T7875] ? __se_sys_fsconfig+0x63d/0xf70 [ 201.359774][ T7875] ? _copy_from_user+0x99/0xc0 [ 201.364654][ T7875] memdup_user_nul+0x2f/0x100 [ 201.369373][ T7875] __se_sys_fsconfig+0x63d/0xf70 [ 201.374343][ T7875] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 201.379835][ T7875] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 201.385849][ T7875] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 201.392207][ T7875] ? do_syscall_64+0x100/0x230 [ 201.397005][ T7875] ? __x64_sys_fsconfig+0x20/0xc0 [ 201.402059][ T7875] do_syscall_64+0xf3/0x230 [ 201.406588][ T7875] ? clear_bhb_loop+0x35/0x90 [ 201.411294][ T7875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.417217][ T7875] RIP: 0033:0x7fc39417e719 [ 201.421662][ T7875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.441306][ T7875] RSP: 002b:00007fc394fe9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 201.449742][ T7875] RAX: ffffffffffffffda RBX: 00007fc394335f80 RCX: 00007fc39417e719 [ 201.457718][ T7875] RDX: 0000000020000280 RSI: 0000000000000002 RDI: 0000000000000003 [ 201.465692][ T7875] RBP: 00007fc394fe9090 R08: 000000000000ff57 R09: 0000000000000000 [ 201.473660][ T7875] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 201.481635][ T7875] R13: 0000000000000000 R14: 00007fc394335f80 R15: 00007ffe75b8bc28 [ 201.489622][ T7875] [ 201.492659][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.783873][ T7888] block nbd8: shutting down sockets [ 201.791848][ T7884] netlink: 'syz.8.420': attribute type 8 has an invalid length. [ 201.846197][ T6130] usbhid 7-1:0.0: can't add hid device: -32 [ 201.852261][ T6130] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 201.866761][ T7857] netlink: 156 bytes leftover after parsing attributes in process `syz.6.413'. [ 201.881226][ T7889] fuse: root generation should be zero [ 201.973176][ T6130] usb 7-1: USB disconnect, device number 8 [ 202.355907][ T6128] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 203.445940][ T6128] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.471045][ T7913] netlink: 'syz.6.425': attribute type 1 has an invalid length. [ 203.480939][ T7913] netlink: 'syz.6.425': attribute type 1 has an invalid length. [ 203.762744][ T6128] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.818658][ T6128] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 203.839029][ T6128] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 203.847291][ T6128] usb 8-1: SerialNumber: syz [ 204.064401][ T6128] usb 8-1: 0:2 : does not exist [ 204.073920][ T6128] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 204.136310][ T6128] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 204.196964][ T6128] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 204.221864][ T6128] usb 8-1: USB disconnect, device number 6 [ 204.475732][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.764837][ T7931] dccp_invalid_packet: P.Data Offset(0) too small [ 205.376336][ T7936] (unnamed net_device) (uninitialized): option mode: invalid value (68) [ 207.031336][ T7959] FAULT_INJECTION: forcing a failure. [ 207.031336][ T7959] name failslab, interval 1, probability 0, space 0, times 0 [ 207.085224][ T7959] CPU: 0 UID: 0 PID: 7959 Comm: syz.5.436 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 207.095888][ T7959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 207.105975][ T7959] Call Trace: [ 207.109285][ T7959] [ 207.112241][ T7959] dump_stack_lvl+0x241/0x360 [ 207.116954][ T7959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.122189][ T7959] ? __pfx__printk+0x10/0x10 [ 207.126814][ T7959] ? fs_reclaim_acquire+0x93/0x130 [ 207.131962][ T7959] ? __pfx___might_resched+0x10/0x10 [ 207.137286][ T7959] should_fail_ex+0x3b0/0x4e0 [ 207.142000][ T7959] ? device_write+0x18b/0xf20 [ 207.146707][ T7959] should_failslab+0xac/0x100 [ 207.151422][ T7959] ? device_write+0x18b/0xf20 [ 207.156129][ T7959] __kmalloc_noprof+0xd8/0x400 [ 207.160928][ T7959] device_write+0x18b/0xf20 [ 207.165465][ T7959] ? rw_verify_area+0x1c3/0x6f0 [ 207.170354][ T7959] ? __pfx_device_write+0x10/0x10 [ 207.175410][ T7959] vfs_write+0x2a3/0xd30 [ 207.179698][ T7959] ? __pfx_vfs_write+0x10/0x10 [ 207.184495][ T7959] ? __fget_files+0x29/0x470 [ 207.189126][ T7959] ? __fget_files+0x3f3/0x470 [ 207.193844][ T7959] ? __fget_files+0x29/0x470 [ 207.198477][ T7959] ? fdget_pos+0x19a/0x320 [ 207.202936][ T7959] ksys_write+0x183/0x2b0 [ 207.207304][ T7959] ? __pfx_ksys_write+0x10/0x10 [ 207.212188][ T7959] ? do_syscall_64+0x100/0x230 [ 207.216987][ T7959] ? do_syscall_64+0xb6/0x230 [ 207.221702][ T7959] do_syscall_64+0xf3/0x230 [ 207.226237][ T7959] ? clear_bhb_loop+0x35/0x90 [ 207.230947][ T7959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.236865][ T7959] RIP: 0033:0x7f93a517e719 [ 207.241298][ T7959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.260909][ T7959] RSP: 002b:00007f93a5f9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.269321][ T7959] RAX: ffffffffffffffda RBX: 00007f93a5335f80 RCX: 00007f93a517e719 [ 207.277293][ T7959] RDX: 0000000000000070 RSI: 0000000020001380 RDI: 0000000000000003 [ 207.285276][ T7959] RBP: 00007f93a5f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 207.293252][ T7959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.301233][ T7959] R13: 0000000000000000 R14: 00007f93a5335f80 R15: 00007ffc0590f828 [ 207.309209][ T7959] [ 208.576862][ T7981] random: crng reseeded on system resumption [ 209.095285][ T6128] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 209.877362][ T6128] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.892793][ T6128] usb 9-1: New USB device found, idVendor=04d5, idProduct=0001, bcdDevice= 0.00 [ 209.905436][ T6128] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.916355][ T6128] usb 9-1: config 0 descriptor?? [ 209.933562][ T6128] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 210.441725][ T8007] netlink: 'syz.9.446': attribute type 4 has an invalid length. [ 210.907983][ T6128] usb 9-1: USB disconnect, device number 3 [ 210.957033][ T8010] netlink: 'syz.7.447': attribute type 8 has an invalid length. [ 211.020917][ T5847] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 211.213605][ T5847] usb 7-1: Using ep0 maxpacket: 8 [ 211.284726][ T5847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 211.295108][ T5847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 211.315798][ T5847] usb 7-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 211.325312][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.334164][ T5847] usb 7-1: Product: syz [ 211.339037][ T5847] usb 7-1: Manufacturer: syz [ 211.343685][ T5847] usb 7-1: SerialNumber: syz [ 211.351805][ T5847] usb 7-1: config 0 descriptor?? [ 211.363792][ T5847] smsusb:smsusb_probe: board id=2, interface number 0 [ 211.374939][ T5847] smsusb:smsusb_probe: Device initialized with return code -19 [ 211.584623][ T7993] netlink: 16 bytes leftover after parsing attributes in process `syz.6.443'. [ 211.628653][ T970] usb 7-1: USB disconnect, device number 9 [ 211.691586][ T8034] random: crng reseeded on system resumption [ 213.302965][ T8058] dccp_invalid_packet: P.Data Offset(0) too small [ 213.776205][ T8062] FAULT_INJECTION: forcing a failure. [ 213.776205][ T8062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.982525][ T8062] CPU: 1 UID: 0 PID: 8062 Comm: syz.5.457 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 213.993180][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 214.003260][ T8062] Call Trace: [ 214.006543][ T8062] [ 214.009481][ T8062] dump_stack_lvl+0x241/0x360 [ 214.014168][ T8062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.019369][ T8062] ? __pfx__printk+0x10/0x10 [ 214.023962][ T8062] ? snprintf+0xda/0x120 [ 214.028205][ T8062] should_fail_ex+0x3b0/0x4e0 [ 214.032882][ T8062] _copy_to_user+0x31/0xb0 [ 214.037319][ T8062] simple_read_from_buffer+0xca/0x150 [ 214.042689][ T8062] proc_fail_nth_read+0x1e9/0x250 [ 214.047709][ T8062] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.053252][ T8062] ? rw_verify_area+0x55e/0x6f0 [ 214.058102][ T8062] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.063645][ T8062] vfs_read+0x1fc/0xb70 [ 214.067801][ T8062] ? fdget_pos+0x24e/0x320 [ 214.072218][ T8062] ? __pfx_vfs_read+0x10/0x10 [ 214.076889][ T8062] ? path_umount+0x284/0xf70 [ 214.081476][ T8062] ? __fget_files+0x3f3/0x470 [ 214.086179][ T8062] ? fdget_pos+0x24e/0x320 [ 214.090638][ T8062] ksys_read+0x183/0x2b0 [ 214.094898][ T8062] ? __pfx_ksys_read+0x10/0x10 [ 214.099661][ T8062] ? do_syscall_64+0x100/0x230 [ 214.104434][ T8062] ? do_syscall_64+0xb6/0x230 [ 214.109125][ T8062] do_syscall_64+0xf3/0x230 [ 214.113627][ T8062] ? clear_bhb_loop+0x35/0x90 [ 214.118314][ T8062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.124226][ T8062] RIP: 0033:0x7f93a517d15c [ 214.128643][ T8062] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 214.148248][ T8062] RSP: 002b:00007f93a5f7e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.156661][ T8062] RAX: ffffffffffffffda RBX: 00007f93a5336058 RCX: 00007f93a517d15c [ 214.164637][ T8062] RDX: 000000000000000f RSI: 00007f93a5f7e0a0 RDI: 0000000000000004 [ 214.172621][ T8062] RBP: 00007f93a5f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 214.180602][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.188576][ T8062] R13: 0000000000000000 R14: 00007f93a5336058 R15: 00007ffc0590f828 [ 214.196567][ T8062] [ 214.199709][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.868644][ T6129] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 216.445181][ T6129] usb 8-1: Using ep0 maxpacket: 8 [ 216.459110][ T6129] usb 8-1: config 0 has an invalid interface number: 151 but max is 1 [ 216.557089][ T6129] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.677278][ T8089] dccp_invalid_packet: P.Data Offset(0) too small [ 216.765180][ T6129] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 216.844021][ T6129] usb 8-1: config 0 has no interface number 0 [ 216.932221][ T6129] usb 8-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 217.028964][ T8099] binder_alloc: 8098: binder_install_single_page failed to insert page at offset 1000 with -14 [ 217.100213][ T8104] capability: warning: `syz.8.469' uses deprecated v2 capabilities in a way that may be insecure [ 217.128945][ T6129] usb 8-1: string descriptor 0 read error: -71 [ 217.164741][ T6129] usb 8-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 217.174359][ T6129] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.208313][ T6129] usb 8-1: config 0 descriptor?? [ 217.219302][ T6129] usb 8-1: can't set config #0, error -71 [ 217.243927][ T6129] usb 8-1: USB disconnect, device number 7 [ 217.914741][ T8116] dccp_invalid_packet: P.Data Offset(0) too small [ 218.755133][ T8128] /dev/nullb0: Can't open blockdev [ 218.878053][ T6128] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 219.073412][ T8143] netlink: 'syz.5.478': attribute type 9 has an invalid length. [ 219.101890][ T6128] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.125008][ T6128] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.135363][ T8143] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.478'. [ 219.144973][ T6128] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.145025][ T6128] usb 8-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 219.145049][ T6128] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.177252][ T6128] usb 8-1: config 0 descriptor?? [ 219.357161][ T6131] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 219.388325][ T8150] netlink: 52 bytes leftover after parsing attributes in process `syz.5.478'. [ 219.513699][ T6131] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 219.672663][ T6128] gt683r_led 0003:1770:FF00.0006: item fetching failed at offset 1/5 [ 219.877960][ T8127] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.475'. [ 219.891436][ T6128] gt683r_led 0003:1770:FF00.0006: hid parsing failed [ 220.297828][ T6128] gt683r_led 0003:1770:FF00.0006: probe with driver gt683r_led failed with error -22 [ 220.315982][ T8150] netlink: 'syz.5.478': attribute type 9 has an invalid length. [ 220.370097][ T8150] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.478'. [ 220.426812][ T5923] usb 8-1: USB disconnect, device number 8 [ 220.554550][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 220.554570][ T29] audit: type=1326 audit(1731226396.636:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8154 comm="syz.8.479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc39417e719 code=0x0 [ 221.009611][ T8171] netlink: 40 bytes leftover after parsing attributes in process `syz.9.480'. [ 221.764558][ T8182] capability: warning: `syz.6.482' uses 32-bit capabilities (legacy support in use) [ 222.180812][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 222.187681][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 222.261689][ T7731] Bluetooth: hci8: Frame reassembly failed (-84) [ 222.374624][ T25] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 222.536404][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.549307][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 222.560123][ T25] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.584143][ T25] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.594551][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.602660][ T25] usb 8-1: Product: syz [ 222.607030][ T25] usb 8-1: Manufacturer: syz [ 222.611699][ T25] usb 8-1: SerialNumber: syz [ 222.628510][ T25] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 222.636072][ T25] cdc_ncm 8-1:1.0: bind() failure [ 222.672219][ T8196] netlink: 'syz.9.485': attribute type 9 has an invalid length. [ 222.680072][ T8196] netlink: 209836 bytes leftover after parsing attributes in process `syz.9.485'. [ 222.959773][ T8198] netlink: 52 bytes leftover after parsing attributes in process `syz.9.485'. [ 223.472297][ T8196] netlink: 'syz.9.485': attribute type 9 has an invalid length. [ 223.480065][ T8196] netlink: 209836 bytes leftover after parsing attributes in process `syz.9.485'. [ 223.736776][ T8206] dccp_invalid_packet: P.Data Offset(0) too small [ 224.234813][ T5838] Bluetooth: hci8: command 0x1003 tx timeout [ 224.402174][ T55] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 224.816663][ T8217] /dev/nullb0: Can't open blockdev [ 226.254554][ T5923] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 226.674681][ T8234] dccp_invalid_packet: P.Data Offset(0) too small [ 226.829715][ T6132] usb 8-1: USB disconnect, device number 9 [ 227.046393][ T5923] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.148315][ T5923] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.166732][ T5923] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.176896][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.186465][ T5923] usb 7-1: Product: syz [ 227.190671][ T5923] usb 7-1: Manufacturer: syz [ 227.195389][ T5923] usb 7-1: SerialNumber: syz [ 227.215962][ T5923] usb 7-1: selecting invalid altsetting 1 [ 227.346012][ T6132] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 227.578183][ T6132] usb 8-1: config 0 has an invalid interface number: 124 but max is 0 [ 227.600333][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.9.496'. [ 227.601229][ T6132] usb 8-1: config 0 has no interface number 0 [ 227.759895][ T6132] usb 8-1: config 0 interface 124 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 227.777242][ T6132] usb 8-1: config 0 interface 124 altsetting 0 endpoint 0x5 has invalid maxpacket 911, setting to 64 [ 227.827370][ T6132] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=83.86 [ 227.838740][ T6132] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.848439][ T6132] usb 8-1: Product: syz [ 227.867927][ T6132] usb 8-1: Manufacturer: syz [ 227.873619][ T6132] usb 8-1: SerialNumber: syz [ 227.937424][ T6132] usb 8-1: config 0 descriptor?? [ 228.413741][ T8242] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 228.440483][ T6132] keyspan 8-1:0.124: Keyspan 4 port adapter converter detected [ 228.450540][ T6132] keyspan 8-1:0.124: found no endpoint descriptor for endpoint 81 [ 228.456479][ T29] audit: type=1326 audit(1731226404.546:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8266 comm="syz.9.497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44e9d7e719 code=0x0 [ 228.460860][ T6132] keyspan 8-1:0.124: found no endpoint descriptor for endpoint 88 [ 228.491345][ T6132] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 228.568915][ T6132] keyspan 8-1:0.124: found no endpoint descriptor for endpoint 2 [ 228.632353][ T6132] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 228.642767][ T6132] keyspan 8-1:0.124: unsupported endpoint type 0 [ 229.272585][ T6132] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 229.284297][ T6132] keyspan 8-1:0.124: found no endpoint descriptor for endpoint 6 [ 229.306798][ T6132] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 229.320612][ T6132] usb 8-1: USB disconnect, device number 10 [ 229.337272][ T6132] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 229.363832][ T6132] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 229.395695][ T6132] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 229.407261][ T5923] cdc_ncm 7-1:1.0: SET_CRC_MODE failed [ 229.472725][ T6132] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 229.474521][ T5923] usb 7-1: selecting invalid altsetting 1 [ 229.506653][ T6132] keyspan 8-1:0.124: device disconnected [ 229.532509][ T5923] cdc_ncm 7-1:1.0: bind() failure [ 229.658524][ T29] audit: type=1326 audit(1731226405.686:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8283 comm="syz.9.501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44e9d7e719 code=0x0 [ 229.684699][ T5923] usb 7-1: USB disconnect, device number 10 [ 229.873120][ T8291] dccp_invalid_packet: P.Data Offset(0) too small [ 230.272175][ T29] audit: type=1326 audit(1731226406.356:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8278 comm="syz.6.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ef7e719 code=0x7fc00000 [ 231.429315][ T8313] dccp_invalid_packet: P.Data Offset(0) too small [ 231.614789][ T25] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 231.734841][ T8316] netlink: 'syz.5.506': attribute type 8 has an invalid length. [ 231.807781][ T8303] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 231.948040][ T8312] block nbd5: shutting down sockets [ 231.970006][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.004504][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 232.013434][ T25] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.172397][ T25] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.208686][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.218013][ T25] usb 8-1: Product: syz [ 232.222962][ T25] usb 8-1: Manufacturer: syz [ 232.227805][ T25] usb 8-1: SerialNumber: syz [ 232.237419][ T25] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 232.244733][ T25] cdc_ncm 8-1:1.0: bind() failure [ 232.891971][ T8324] process 'syz.8.507' launched './file0' with NULL argv: empty string added [ 233.366899][ T6132] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 233.499618][ T29] audit: type=1326 audit(1731226409.596:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8347 comm="syz.8.513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc39417e719 code=0x0 [ 233.521483][ T6131] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 233.563720][ T6132] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.597611][ T6132] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.679530][ T6131] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.698326][ T6132] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 233.722646][ T6131] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.741200][ T6132] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.789708][ T6132] usb 6-1: SerialNumber: syz [ 233.802414][ T6131] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.835238][ T6131] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.867654][ T6131] usb 10-1: Product: syz [ 233.891979][ T6131] usb 10-1: Manufacturer: syz [ 233.913027][ T6131] usb 10-1: SerialNumber: syz [ 233.972558][ T6131] usb 10-1: selecting invalid altsetting 1 [ 234.138201][ T6132] usb 6-1: 0:2 : does not exist [ 234.242608][ T6132] usb 6-1: USB disconnect, device number 9 [ 234.491382][ T6129] usb 8-1: USB disconnect, device number 11 [ 234.609593][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.786075][ T29] audit: type=1326 audit(1731226410.776:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8364 comm="syz.7.516" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f40b7e719 code=0x0 [ 236.327104][ T8374] hub 6-0:1.0: USB hub found [ 236.333444][ T8374] hub 6-0:1.0: 1 port detected [ 236.367102][ T8374] Invalid ELF header magic: != ELF [ 237.095668][ T8378] rtc_cmos 00:00: Alarms can be up to one day in the future [ 237.107602][ T6131] cdc_ncm 10-1:1.0: SET_CRC_MODE failed [ 237.125052][ T6131] usb 10-1: selecting invalid altsetting 1 [ 237.130959][ T6131] cdc_ncm 10-1:1.0: bind() failure [ 237.151685][ T6131] usb 10-1: USB disconnect, device number 2 [ 237.232703][ T8384] loop6: detected capacity change from 0 to 524287999 [ 237.248575][ T8385] FAULT_INJECTION: forcing a failure. [ 237.248575][ T8385] name failslab, interval 1, probability 0, space 0, times 0 [ 237.320002][ T8385] CPU: 0 UID: 0 PID: 8385 Comm: syz.7.519 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 237.330647][ T8385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 237.340812][ T8385] Call Trace: [ 237.344110][ T8385] [ 237.347060][ T8385] dump_stack_lvl+0x241/0x360 [ 237.351765][ T8385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.356987][ T8385] ? __pfx__printk+0x10/0x10 [ 237.361606][ T8385] ? __kmalloc_noprof+0xb0/0x400 [ 237.366570][ T8385] ? __pfx___might_resched+0x10/0x10 [ 237.371887][ T8385] should_fail_ex+0x3b0/0x4e0 [ 237.376595][ T8385] ? bpf_test_init+0xe1/0x180 [ 237.381288][ T8385] should_failslab+0xac/0x100 [ 237.385991][ T8385] ? bpf_test_init+0xe1/0x180 [ 237.390690][ T8385] __kmalloc_noprof+0xd8/0x400 [ 237.393628][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.395464][ T8385] bpf_test_init+0xe1/0x180 [ 237.395493][ T8385] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 237.404808][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.409097][ T8385] ? __pfx_lock_release+0x10/0x10 [ 237.427292][ T8385] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 237.433101][ T8385] ? __fget_files+0x29/0x470 [ 237.437703][ T8385] ? fput+0x1a8/0x230 [ 237.441689][ T8385] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 237.447509][ T8385] bpf_prog_test_run+0x2e4/0x360 [ 237.452450][ T8385] __sys_bpf+0x48d/0x810 [ 237.456697][ T8385] ? __pfx___sys_bpf+0x10/0x10 [ 237.461466][ T8385] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 237.467465][ T8385] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.473808][ T8385] ? do_syscall_64+0x100/0x230 [ 237.478591][ T8385] __x64_sys_bpf+0x7c/0x90 [ 237.483013][ T8385] do_syscall_64+0xf3/0x230 [ 237.487520][ T8385] ? clear_bhb_loop+0x35/0x90 [ 237.492203][ T8385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.498102][ T8385] RIP: 0033:0x7f5f40b7e719 [ 237.502522][ T8385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.522129][ T8385] RSP: 002b:00007f5f41979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.530549][ T8385] RAX: ffffffffffffffda RBX: 00007f5f40d35f80 RCX: 00007f5f40b7e719 [ 237.538610][ T8385] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 237.546585][ T8385] RBP: 00007f5f41979090 R08: 0000000000000000 R09: 0000000000000000 [ 237.554556][ T8385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.562523][ T8385] R13: 0000000000000000 R14: 00007f5f40d35f80 R15: 00007ffc32788148 [ 237.570507][ T8385] [ 237.616738][ T8391] FAULT_INJECTION: forcing a failure. [ 237.616738][ T8391] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 237.630162][ T8391] CPU: 0 UID: 0 PID: 8391 Comm: syz.8.523 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 237.635843][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.640757][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 237.659932][ T8391] Call Trace: [ 237.663232][ T8391] [ 237.663911][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.666186][ T8391] dump_stack_lvl+0x241/0x360 [ 237.666221][ T8391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.666244][ T8391] ? __pfx__printk+0x10/0x10 [ 237.675394][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.679990][ T8391] ? validate_chain+0x11e/0x5920 [ 237.685937][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.689754][ T8391] should_fail_ex+0x3b0/0x4e0 [ 237.689786][ T8391] prepare_alloc_pages+0x1da/0x5b0 [ 237.697648][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.702487][ T8391] __alloc_pages_noprof+0x16f/0x710 [ 237.734360][ T8391] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 237.740115][ T8391] ___kmalloc_large_node+0x8b/0x1d0 [ 237.745320][ T8391] __kmalloc_large_node_noprof+0x1a/0x80 [ 237.750956][ T8391] ? iovec_from_user+0x87/0x240 [ 237.755811][ T8391] __kmalloc_noprof+0x2ae/0x400 [ 237.760666][ T8391] iovec_from_user+0x87/0x240 [ 237.765344][ T8391] __import_iovec+0x152/0x870 [ 237.770030][ T8391] import_iovec+0xeb/0x120 [ 237.774457][ T8391] copy_msghdr_from_user+0x52f/0x680 [ 237.779757][ T8391] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 237.785579][ T8391] __sys_recvmsg+0x24c/0x3d0 [ 237.790178][ T8391] ? __pfx___sys_recvmsg+0x10/0x10 [ 237.795289][ T8391] ? __mutex_unlock_slowpath+0x21d/0x750 [ 237.800942][ T8391] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.807273][ T8391] ? do_syscall_64+0x100/0x230 [ 237.812039][ T8391] ? do_syscall_64+0xb6/0x230 [ 237.816716][ T8391] do_syscall_64+0xf3/0x230 [ 237.821217][ T8391] ? clear_bhb_loop+0x35/0x90 [ 237.825896][ T8391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.831788][ T8391] RIP: 0033:0x7fc39417e719 [ 237.836202][ T8391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.855812][ T8391] RSP: 002b:00007fc394fe9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 237.864226][ T8391] RAX: ffffffffffffffda RBX: 00007fc394335f80 RCX: 00007fc39417e719 [ 237.872195][ T8391] RDX: 0000000000003f01 RSI: 0000000020000500 RDI: 0000000000000004 [ 237.880164][ T8391] RBP: 00007fc394fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 237.888133][ T8391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.896104][ T8391] R13: 0000000000000000 R14: 00007fc394335f80 R15: 00007ffe75b8bc28 [ 237.904083][ T8391] [ 237.945326][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.954544][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.986952][ T8392] dccp_invalid_packet: P.Data Offset(0) too small [ 238.232017][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.241277][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.260048][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.269265][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.280676][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.289936][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.303124][ T8384] ldm_validate_partition_table(): Disk read failed. [ 238.318741][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.327992][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.361464][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.370707][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.381745][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.396067][ T8384] Dev loop6: unable to read RDB block 0 [ 238.416733][ T8384] loop6: unable to read partition table [ 238.436155][ T8384] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 238.555063][ T5204] ldm_validate_partition_table(): Disk read failed. [ 238.588852][ T29] audit: type=1326 audit(1731226414.686:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8403 comm="syz.6.525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f082ef7e719 code=0x0 [ 238.625493][ T5204] Dev loop6: unable to read RDB block 0 [ 238.693711][ T5204] loop6: unable to read partition table [ 238.916055][ T25] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 238.990337][ T5923] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 239.141422][ T25] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.154666][ T25] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 239.166521][ T25] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.180252][ T5923] usb 8-1: config 1 interface 0 altsetting 240 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.192546][ T5923] usb 8-1: config 1 interface 0 has no altsetting 0 [ 239.204249][ T25] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.205342][ T6131] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 239.215383][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.233006][ T5923] usb 8-1: New USB device found, idVendor=0dfc, idProduct=0100, bcdDevice= 0.40 [ 239.243050][ T5923] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.251412][ T25] usb 9-1: Product: syz [ 239.255805][ T25] usb 9-1: Manufacturer: syz [ 239.260431][ T25] usb 9-1: SerialNumber: syz [ 239.267690][ T5923] usb 8-1: Product: ã° [ 239.272765][ T5923] usb 8-1: Manufacturer: â°Š [ 239.287685][ T25] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 239.295217][ T25] cdc_ncm 9-1:1.0: bind() failure [ 239.458245][ T6131] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 239.476411][ T6131] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 239.491329][ T6131] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 239.502526][ T6131] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 239.520027][ T6131] usb 10-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 239.540542][ T5923] usbhid 8-1:1.0: couldn't find an input interrupt endpoint [ 239.543994][ T6131] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.571879][ T6131] usb 10-1: Product: syz [ 239.584188][ T6131] usb 10-1: Manufacturer: syz [ 239.590495][ T6131] usb 10-1: SerialNumber: syz [ 239.607379][ T6131] usb 10-1: config 0 descriptor?? [ 239.616483][ T5923] usb 8-1: USB disconnect, device number 12 [ 239.618104][ T6131] ums-isd200 10-1:0.0: USB Mass Storage device detected [ 239.818723][ T970] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 239.840373][ T6131] scsi host1: usb-storage 10-1:0.0 [ 239.977794][ T970] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.990022][ T970] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.993237][ T8436] batman_adv: batadv0: Interface deactivated: geneve2 [ 240.016423][ T970] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.028955][ T8436] batman_adv: batadv0: Removing interface: geneve2 [ 240.062304][ T970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.072647][ T970] usb 7-1: Product: syz [ 240.078931][ T970] usb 7-1: Manufacturer: syz [ 240.084304][ T970] usb 7-1: SerialNumber: syz [ 240.105375][ T970] usb 7-1: selecting invalid altsetting 1 [ 240.146021][ T8420] netlink: 'syz.9.530': attribute type 1 has an invalid length. [ 240.173097][ T8420] openvswitch: netlink: Actions may not be safe on all matching packets [ 240.665279][ T8442] cgroup: none used incorrectly [ 241.217738][ T8442] orangefs_mount: mount request failed with -4 [ 241.479887][ T6131] usb 10-1: USB disconnect, device number 3 [ 242.435950][ T6128] usb 9-1: USB disconnect, device number 4 [ 242.470498][ T970] cdc_ncm 7-1:1.0: SET_CRC_MODE failed [ 242.507167][ T970] usb 7-1: selecting invalid altsetting 1 [ 242.575930][ T970] cdc_ncm 7-1:1.0: bind() failure [ 242.659382][ T970] usb 7-1: USB disconnect, device number 11 [ 242.986048][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.008441][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.035909][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.080065][ T8459] netlink: 'syz.9.540': attribute type 8 has an invalid length. [ 243.118965][ T5141] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 243.120250][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.135115][ T5141] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 243.144329][ T5141] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 243.157475][ T5141] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 243.166249][ T8473] block nbd9: shutting down sockets [ 243.172474][ T55] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 243.197271][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.200721][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.254792][ T970] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 243.282657][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.298471][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.301915][ T8467] lo speed is unknown, defaulting to 1000 [ 243.335175][ T25] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 243.394633][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.443783][ T970] usb 6-1: no configurations [ 243.454487][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.461918][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.469568][ T970] usb 6-1: can't read configurations, error -22 [ 243.476610][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.484573][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.493097][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.500937][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.509261][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.517390][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.525104][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.532512][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.540247][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.548116][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.555826][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.563321][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.570934][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.578455][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.586546][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.593958][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.601891][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.609405][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.617284][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.625091][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.632509][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.640348][ T5847] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 243.649816][ T5847] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 243.659663][ T25] usb 7-1: device descriptor read/64, error -71 [ 243.784897][ T970] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 243.906107][ T25] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 243.978534][ T970] usb 6-1: no configurations [ 243.983188][ T970] usb 6-1: can't read configurations, error -22 [ 244.021021][ T970] usb usb6-port1: attempt power cycle [ 244.074556][ T25] usb 7-1: device descriptor read/64, error -71 [ 244.186664][ T25] usb usb7-port1: attempt power cycle [ 244.277170][ T8467] chnl_net:caif_netlink_parms(): no params data found [ 244.504017][ T8467] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.537111][ T970] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 244.551855][ T8467] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.566572][ T970] usb 6-1: no configurations [ 244.572336][ T970] usb 6-1: can't read configurations, error -22 [ 244.578768][ T8467] bridge_slave_0: entered allmulticast mode [ 244.579874][ T8467] bridge_slave_0: entered promiscuous mode [ 244.605653][ T25] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 244.635462][ T25] usb 7-1: device descriptor read/8, error -71 [ 244.655053][ T8499] FAULT_INJECTION: forcing a failure. [ 244.655053][ T8499] name failslab, interval 1, probability 0, space 0, times 0 [ 244.668417][ T8499] CPU: 1 UID: 0 PID: 8499 Comm: syz.8.546 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 244.679028][ T8499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 244.689108][ T8499] Call Trace: [ 244.692401][ T8499] [ 244.695344][ T8499] dump_stack_lvl+0x241/0x360 [ 244.700047][ T8499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.705266][ T8499] ? __pfx__printk+0x10/0x10 [ 244.709871][ T8499] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 244.715276][ T8499] should_fail_ex+0x3b0/0x4e0 [ 244.719975][ T8499] should_failslab+0xac/0x100 [ 244.724677][ T8499] ? sctp_add_bind_addr+0x89/0x3a0 [ 244.729806][ T8499] __kmalloc_cache_noprof+0x6c/0x2c0 [ 244.735110][ T8499] ? __pfx_sctp_get_port_local+0x10/0x10 [ 244.740767][ T8499] sctp_add_bind_addr+0x89/0x3a0 [ 244.745728][ T8499] ? sctp_v6_available+0x76/0x3e0 [ 244.750769][ T8499] sctp_do_bind+0x5d2/0x950 [ 244.755299][ T8499] sctp_connect_new_asoc+0x277/0x6c0 [ 244.760603][ T8499] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 244.766428][ T8499] ? sctp_get_af_specific+0x2a/0x80 [ 244.771642][ T8499] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 244.777470][ T8499] __sctp_connect+0x66d/0xe30 [ 244.782172][ T8499] ? __local_bh_enable_ip+0x168/0x200 [ 244.787568][ T8499] ? __pfx___sctp_connect+0x10/0x10 [ 244.792778][ T8499] ? sctp_inet_connect+0xa7/0x1f0 [ 244.797823][ T8499] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 244.803562][ T8499] ? do_raw_spin_unlock+0x13c/0x8b0 [ 244.808787][ T8499] sctp_inet_connect+0x149/0x1f0 [ 244.813747][ T8499] ? __pfx_sctp_inet_connect+0x10/0x10 [ 244.819227][ T8499] __sys_connect+0x2d1/0x300 [ 244.823839][ T8499] ? __pfx___sys_connect+0x10/0x10 [ 244.828980][ T8499] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.835333][ T8499] ? do_syscall_64+0x100/0x230 [ 244.840122][ T8499] __x64_sys_connect+0x7a/0x90 [ 244.844918][ T8499] do_syscall_64+0xf3/0x230 [ 244.849435][ T8499] ? clear_bhb_loop+0x35/0x90 [ 244.854130][ T8499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.860052][ T8499] RIP: 0033:0x7fc39417e719 [ 244.864483][ T8499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.884107][ T8499] RSP: 002b:00007fc394fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 244.892546][ T8499] RAX: ffffffffffffffda RBX: 00007fc394336130 RCX: 00007fc39417e719 [ 244.900532][ T8499] RDX: 0000000000000010 RSI: 0000000020004cc0 RDI: 0000000000000006 [ 244.908515][ T8499] RBP: 00007fc394fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 244.916502][ T8499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.924489][ T8499] R13: 0000000000000000 R14: 00007fc394336130 R15: 00007ffe75b8bc28 [ 244.932490][ T8499] [ 245.018904][ T8467] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.047071][ T8467] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.054703][ T970] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 245.099717][ T970] usb 6-1: no configurations [ 245.105365][ T8467] bridge_slave_1: entered allmulticast mode [ 245.112378][ T970] usb 6-1: can't read configurations, error -22 [ 245.128552][ T8467] bridge_slave_1: entered promiscuous mode [ 245.134683][ T25] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 245.161932][ T970] usb usb6-port1: unable to enumerate USB device [ 245.265999][ T55] Bluetooth: hci6: command tx timeout [ 245.266902][ T25] usb 7-1: device descriptor read/8, error -71 [ 245.394998][ T25] usb usb7-port1: unable to enumerate USB device [ 245.498135][ T8467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.578601][ T8467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.690820][ T8467] team0: Port device team_slave_0 added [ 245.710411][ T8467] team0: Port device team_slave_1 added [ 245.794763][ T5923] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 245.854216][ T8467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.861826][ T8467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.891932][ T25] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 245.895044][ T8467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.920859][ T8467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.944377][ T8467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.989046][ T8467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.032192][ T5923] usb 10-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 246.065430][ T5923] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.074113][ T5923] usb 10-1: Product: syz [ 246.078711][ T5923] usb 10-1: Manufacturer: syz [ 246.083415][ T5923] usb 10-1: SerialNumber: syz [ 246.092269][ T5923] usb 10-1: config 0 descriptor?? [ 246.105638][ T25] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.132606][ T25] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 246.156106][ T25] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.174053][ T25] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.183765][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.192119][ T25] usb 9-1: Product: syz [ 246.198721][ T25] usb 9-1: Manufacturer: syz [ 246.203352][ T25] usb 9-1: SerialNumber: syz [ 246.226100][ T25] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 246.233171][ T25] cdc_ncm 9-1:1.0: bind() failure [ 246.297518][ T8467] hsr_slave_0: entered promiscuous mode [ 246.330631][ T8467] hsr_slave_1: entered promiscuous mode [ 246.359240][ T8467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.387423][ T8467] Cannot create hsr debugfs directory [ 247.357675][ T5838] Bluetooth: hci6: command tx timeout [ 248.090590][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 249.381288][ T5923] usb 9-1: USB disconnect, device number 5 [ 249.434832][ T55] Bluetooth: hci6: command tx timeout [ 249.447161][ T25] usb 10-1: USB disconnect, device number 4 [ 250.624864][ T25] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 250.800616][ T8565] FAULT_INJECTION: forcing a failure. [ 250.800616][ T8565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.819380][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 250.895391][ T8565] CPU: 0 UID: 0 PID: 8565 Comm: syz.9.561 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 250.906021][ T8565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 250.906292][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 250.916080][ T8565] Call Trace: [ 250.916120][ T8565] [ 250.916130][ T8565] dump_stack_lvl+0x241/0x360 [ 250.936752][ T8565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.937129][ T25] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 250.941959][ T8565] ? __pfx__printk+0x10/0x10 [ 250.941991][ T8565] ? __pfx_lock_release+0x10/0x10 [ 250.961328][ T8565] ? __lock_acquire+0x1384/0x2050 [ 250.966390][ T8565] should_fail_ex+0x3b0/0x4e0 [ 250.971093][ T8565] _copy_from_user+0x2f/0xc0 [ 250.975702][ T8565] kstrtouint_from_user+0xc6/0x190 [ 250.980841][ T8565] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 250.984053][ T25] usb 9-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=1f.2e [ 250.986569][ T8565] ? __pfx_lock_acquire+0x10/0x10 [ 250.986612][ T8565] proc_fail_nth_write+0xaa/0x2d0 [ 250.995795][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.000607][ T8565] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 251.015697][ T25] usb 9-1: Product: syz [ 251.019454][ T8565] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 251.019498][ T8565] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 251.028324][ T25] usb 9-1: Manufacturer: syz [ 251.029247][ T8565] vfs_write+0x2a3/0xd30 [ 251.035253][ T25] usb 9-1: SerialNumber: syz [ 251.039460][ T8565] ? fdget_pos+0x24e/0x320 [ 251.052701][ T8565] ? __pfx_vfs_write+0x10/0x10 [ 251.056004][ T25] usb 9-1: config 0 descriptor?? [ 251.057456][ T8565] ? __fget_files+0x3f3/0x470 [ 251.067073][ T8565] ? fdget_pos+0x24e/0x320 [ 251.070636][ T25] opticon 9-1:0.0: opticon converter detected [ 251.071496][ T8565] ksys_write+0x183/0x2b0 [ 251.071528][ T8565] ? __pfx_ksys_write+0x10/0x10 [ 251.083237][ T25] usb 9-1: opticon converter now attached to ttyUSB0 [ 251.086731][ T8565] ? do_syscall_64+0x100/0x230 [ 251.086764][ T8565] ? do_syscall_64+0xb6/0x230 [ 251.086788][ T8565] do_syscall_64+0xf3/0x230 [ 251.086810][ T8565] ? clear_bhb_loop+0x35/0x90 [ 251.086834][ T8565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.086851][ T8565] RIP: 0033:0x7f44e9d7d1ff [ 251.086870][ T8565] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 251.086886][ T8565] RSP: 002b:00007f44eac13030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 251.086908][ T8565] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f44e9d7d1ff [ 251.086922][ T8565] RDX: 0000000000000001 RSI: 00007f44eac130a0 RDI: 0000000000000005 [ 251.086936][ T8565] RBP: 00007f44eac13090 R08: 0000000000000000 R09: 0000000000000000 [ 251.086948][ T8565] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 251.086961][ T8565] R13: 0000000000000000 R14: 00007f44e9f35f80 R15: 00007fff141daf98 [ 251.086992][ T8565] [ 251.626843][ T55] Bluetooth: hci6: command tx timeout [ 251.703743][ T8578] dccp_invalid_packet: P.Data Offset(0) too small [ 252.513022][ T8467] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 252.544155][ T8467] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 252.598743][ T8467] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 252.669620][ T8467] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 252.772438][ T8591] /dev/nullb0: Can't open blockdev [ 253.123920][ T6128] usb 9-1: USB disconnect, device number 6 [ 253.133855][ T6128] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 253.144244][ T6128] opticon 9-1:0.0: device disconnected [ 253.347411][ T8467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.355783][ T29] audit: type=1326 audit(1731226429.426:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8595 comm="syz.8.566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc39417e719 code=0x0 [ 253.535392][ T8467] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.563132][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.570320][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.676469][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.683678][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.116441][ T8467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.869257][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.888215][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.001543][ T8636] dccp_invalid_packet: P.Data Offset(0) too small [ 256.822300][ T8467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.928763][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 256.945315][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 256.967951][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 256.997536][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.098952][ T25] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 257.404742][ T5969] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 257.530094][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 257.566868][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.617060][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 257.628532][ T5969] usb 9-1: no configurations [ 257.633152][ T5969] usb 9-1: can't read configurations, error -22 [ 257.766173][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.773636][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.782841][ T8467] veth0_vlan: entered promiscuous mode [ 257.796845][ T25] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 257.807055][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.814647][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.821376][ T8467] veth1_vlan: entered promiscuous mode [ 257.823763][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.835677][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.843501][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.851400][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.859076][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.866664][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.896921][ T8656] cgroup: none used incorrectly [ 257.903700][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.911330][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.918920][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.926998][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.934966][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.942478][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.950415][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.958409][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.966106][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.973793][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.981430][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.989296][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 257.996945][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 258.004547][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 258.013780][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 258.021515][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 258.029597][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 258.183230][ T8656] orangefs_mount: mount request failed with -4 [ 258.207726][ T5923] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 258.299559][ T8467] veth0_macvtap: entered promiscuous mode [ 258.308530][ T8467] veth1_macvtap: entered promiscuous mode [ 258.324601][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.335654][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.345971][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.356839][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.367023][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.377528][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.387784][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.398273][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.408146][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.418736][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.428604][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.439289][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.450432][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.461241][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.472321][ T8467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.482095][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.492562][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.502444][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.513369][ T25] usb 10-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=1f.2e [ 258.523747][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.533968][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.542795][ T25] usb 10-1: Product: syz [ 258.547922][ T25] usb 10-1: Manufacturer: syz [ 258.552970][ T25] usb 10-1: SerialNumber: syz [ 258.559257][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.571057][ T25] usb 10-1: config 0 descriptor?? [ 258.578514][ T25] opticon 10-1:0.0: opticon converter detected [ 258.588556][ T25] usb 10-1: opticon converter now attached to ttyUSB0 [ 258.614602][ T5969] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 258.633423][ T29] audit: type=1326 audit(1731226434.726:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8661 comm="syz.5.580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93a517e719 code=0x0 [ 258.641749][ T8662] random: crng reseeded on system resumption [ 258.669209][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.732551][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.775746][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.783141][ T5969] usb 9-1: no configurations [ 258.787541][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.802273][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.809006][ T5969] usb 9-1: can't read configurations, error -22 [ 258.813994][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.833658][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.846762][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.873244][ T5969] usb usb9-port1: attempt power cycle [ 258.904652][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.962212][ T8467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.061289][ T8467] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.096598][ T8467] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.129410][ T8467] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.156329][ T8467] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.284595][ T5969] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 259.346333][ T5969] usb 9-1: no configurations [ 259.368583][ T5969] usb 9-1: can't read configurations, error -22 [ 259.576978][ T5969] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 259.636919][ T5969] usb 9-1: no configurations [ 259.645156][ T5969] usb 9-1: can't read configurations, error -22 [ 259.668513][ T5969] usb usb9-port1: unable to enumerate USB device [ 259.759763][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.777939][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.878085][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.887811][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.968218][ T6128] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 260.063711][ T6131] usb 10-1: USB disconnect, device number 5 [ 260.125046][ T6128] usb 6-1: Using ep0 maxpacket: 8 [ 260.140740][ T6131] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 260.156331][ T6128] usb 6-1: config 0 has an invalid interface number: 211 but max is 0 [ 260.176631][ T29] audit: type=1326 audit(1731226436.276:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8685 comm="syz.8.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39417e719 code=0x7ffc0000 [ 260.224162][ T6128] usb 6-1: config 0 has no interface number 0 [ 260.253441][ T6131] opticon 10-1:0.0: device disconnected [ 260.278700][ T29] audit: type=1326 audit(1731226436.276:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8685 comm="syz.8.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39417e719 code=0x7ffc0000 [ 260.292203][ T6128] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=76.ff [ 260.302234][ T29] audit: type=1326 audit(1731226436.346:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8685 comm="syz.8.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc39417e719 code=0x7ffc0000 [ 260.322095][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.8.582'. [ 260.334123][ T29] audit: type=1326 audit(1731226436.346:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8685 comm="syz.8.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39417e719 code=0x7ffc0000 [ 260.546159][ T29] audit: type=1326 audit(1731226436.346:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8685 comm="syz.8.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc39417e719 code=0x7ffc0000 [ 261.001651][ T6128] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.015064][ T6128] usb 6-1: config 0 descriptor?? [ 261.028997][ T29] audit: type=1326 audit(1731226436.346:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8685 comm="syz.8.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39417e719 code=0x7ffc0000 [ 261.051382][ T29] audit: type=1326 audit(1731226436.346:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8685 comm="syz.8.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc39417e719 code=0x7ffc0000 [ 261.097655][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.8.582'. [ 261.171394][ T29] audit: type=1326 audit(1731226436.346:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8685 comm="syz.8.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39417e719 code=0x7ffc0000 [ 261.407504][ T29] audit: type=1326 audit(1731226436.366:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8685 comm="syz.8.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc39417e719 code=0x7ffc0000 [ 261.616701][ T6128] usb 6-1: f81604_write: reg: 105 data: 29 failed: -EPROTO [ 261.623970][ T6128] f81604 6-1:0.211: Setting termination of CH#0 failed: -EPROTO [ 261.724517][ T8710] cgroup: none used incorrectly [ 262.216777][ T8710] orangefs_mount: mount request failed with -4 [ 262.388136][ T6128] f81604 6-1:0.211: probe with driver f81604 failed with error -71 [ 262.403114][ T6128] usb 6-1: USB disconnect, device number 14 [ 262.646399][ T8720] netlink: 'syz.9.587': attribute type 10 has an invalid length. [ 263.737175][ T8738] block nbd8: shutting down sockets [ 263.796837][ T8720] syz_tun: entered promiscuous mode [ 263.828003][ T8741] random: crng reseeded on system resumption [ 263.860400][ T8720] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 263.915587][ T8730] netlink: 'syz.8.589': attribute type 8 has an invalid length. [ 264.124613][ T8748] netlink: 36 bytes leftover after parsing attributes in process `syz.6.592'. [ 264.830082][ T8759] syz.9.596: attempt to access beyond end of device [ 264.830082][ T8759] nbd9: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 264.955258][ T8759] SQUASHFS error: Failed to read block 0x0: -5 [ 264.962615][ T8759] unable to read squashfs_super_block [ 265.210861][ T8765] netlink: 596 bytes leftover after parsing attributes in process `syz.8.595'. [ 269.354095][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 269.354114][ T29] audit: type=1326 audit(1731226445.446:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8794 comm="syz.5.603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93a517e719 code=0x0 [ 269.381766][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.175625][ T8820] nbd6: detected capacity change from 0 to 20 [ 270.192719][ T5851] block nbd6: Send control failed (result -89) [ 270.211800][ T5851] block nbd6: Request send failed, requeueing [ 270.281155][ T55] block nbd6: Receive control failed (result -32) [ 270.311192][ T45] block nbd6: Dead connection, failed to find a fallback [ 270.320645][ T45] block nbd6: shutting down sockets [ 270.327242][ T45] blk_print_req_error: 25 callbacks suppressed [ 270.327257][ T45] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.345797][ T45] buffer_io_error: 24 callbacks suppressed [ 270.345811][ T45] Buffer I/O error on dev nbd6, logical block 0, async page read [ 270.363935][ T8827] nbd6: detected capacity change from 20 to 6 [ 270.381327][ T5851] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.425286][ T8833] FAULT_INJECTION: forcing a failure. [ 270.425286][ T8833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.461613][ T5851] Buffer I/O error on dev nbd6, logical block 0, async page read [ 270.500744][ T5851] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.569242][ T8833] CPU: 1 UID: 0 PID: 8833 Comm: syz.5.608 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 270.579893][ T8833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 270.589989][ T8833] Call Trace: [ 270.593284][ T8833] [ 270.596236][ T8833] dump_stack_lvl+0x241/0x360 [ 270.600943][ T8833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.606167][ T8833] ? __pfx__printk+0x10/0x10 [ 270.610779][ T8833] ? __pfx_lock_release+0x10/0x10 [ 270.615829][ T8833] ? smack_log+0x123/0x540 [ 270.620282][ T8833] should_fail_ex+0x3b0/0x4e0 [ 270.624989][ T8833] _copy_from_user+0x2f/0xc0 [ 270.629595][ T8833] drm_ioctl+0x574/0xad0 [ 270.633861][ T8833] ? __pfx_drm_setversion+0x10/0x10 [ 270.639100][ T8833] ? __pfx_drm_ioctl+0x10/0x10 [ 270.643911][ T8833] ? __pfx_drm_ioctl+0x10/0x10 [ 270.648704][ T8833] __se_sys_ioctl+0xf9/0x170 [ 270.653319][ T8833] do_syscall_64+0xf3/0x230 [ 270.657845][ T8833] ? clear_bhb_loop+0x35/0x90 [ 270.662548][ T8833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.668464][ T8833] RIP: 0033:0x7f93a517e719 [ 270.672894][ T8833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.692519][ T8833] RSP: 002b:00007f93a5f9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.700929][ T8833] RAX: ffffffffffffffda RBX: 00007f93a5335f80 RCX: 00007f93a517e719 [ 270.708894][ T8833] RDX: 0000000020000000 RSI: 00000000c0106407 RDI: 0000000000000003 [ 270.715151][ T5851] Buffer I/O error on dev nbd6, logical block 0, async page read [ 270.716850][ T8833] RBP: 00007f93a5f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 270.730688][ T5851] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.732505][ T8833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.732522][ T8833] R13: 0000000000000000 R14: 00007f93a5335f80 R15: 00007ffc0590f828 [ 270.732549][ T8833] [ 270.760742][ T5851] Buffer I/O error on dev nbd6, logical block 0, async page read [ 270.789508][ T5851] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.842546][ T5851] Buffer I/O error on dev nbd6, logical block 0, async page read [ 270.854551][ T5851] ldm_validate_partition_table(): Disk read failed. [ 270.861270][ T5851] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.894532][ T5851] Buffer I/O error on dev nbd6, logical block 0, async page read [ 270.939823][ T5851] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.995126][ T5851] Buffer I/O error on dev nbd6, logical block 0, async page read [ 271.003086][ T5851] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.012818][ T5851] Buffer I/O error on dev nbd6, logical block 0, async page read [ 271.021308][ T5851] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.031823][ T5851] Buffer I/O error on dev nbd6, logical block 0, async page read [ 271.040717][ T5851] Dev nbd6: unable to read RDB block 0 [ 271.046842][ T5851] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.057396][ T5851] Buffer I/O error on dev nbd6, logical block 0, async page read [ 271.066818][ T5851] nbd6: unable to read partition table [ 271.072559][ T5851] nbd6: partition table beyond EOD, truncated [ 271.113909][ T5851] ldm_validate_partition_table(): Disk read failed. [ 271.121792][ T5851] Dev nbd6: unable to read RDB block 0 [ 271.128173][ T5851] nbd6: unable to read partition table [ 271.134775][ T5851] nbd6: partition table beyond EOD, truncated [ 271.214625][ T970] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 271.232002][ T8847] netlink: 220 bytes leftover after parsing attributes in process `syz.5.610'. [ 271.242425][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.5.610'. [ 271.574615][ T970] usb 3-1: Using ep0 maxpacket: 16 [ 271.583588][ T970] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 271.604606][ T970] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 271.612926][ T970] usb 3-1: can't read configurations, error -61 [ 271.686415][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.6.611'. [ 272.504679][ T970] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 274.123685][ T8874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.617'. [ 274.373428][ T6128] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 274.573285][ T6128] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.012288][ T6128] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.026127][ T6128] usb 9-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 275.089996][ T6128] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.101854][ T6128] usb 9-1: config 0 descriptor?? [ 275.140850][ T8885] FAULT_INJECTION: forcing a failure. [ 275.140850][ T8885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.244625][ T6131] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 275.313158][ T8885] CPU: 1 UID: 0 PID: 8885 Comm: syz.9.619 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 275.323814][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 275.333907][ T8885] Call Trace: [ 275.337214][ T8885] [ 275.340163][ T8885] dump_stack_lvl+0x241/0x360 [ 275.344880][ T8885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.350106][ T8885] ? __pfx__printk+0x10/0x10 [ 275.354735][ T8885] should_fail_ex+0x3b0/0x4e0 [ 275.359459][ T8885] _copy_from_user+0x2f/0xc0 [ 275.364070][ T8885] bpf_test_init+0x11f/0x180 [ 275.368688][ T8885] bpf_prog_test_run_skb+0x2bb/0x1820 [ 275.374084][ T8885] ? __pfx_lock_release+0x10/0x10 [ 275.379154][ T8885] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 275.384989][ T8885] ? fput+0x1a8/0x230 [ 275.388994][ T8885] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 275.394824][ T8885] bpf_prog_test_run+0x2e4/0x360 [ 275.399794][ T8885] __sys_bpf+0x48d/0x810 [ 275.404065][ T8885] ? __pfx___sys_bpf+0x10/0x10 [ 275.408875][ T8885] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 275.414899][ T8885] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.421270][ T8885] ? do_syscall_64+0x100/0x230 [ 275.426075][ T8885] __x64_sys_bpf+0x7c/0x90 [ 275.430524][ T8885] do_syscall_64+0xf3/0x230 [ 275.435056][ T8885] ? clear_bhb_loop+0x35/0x90 [ 275.439761][ T8885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.445688][ T8885] RIP: 0033:0x7f44e9d7e719 [ 275.450121][ T8885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.469764][ T8885] RSP: 002b:00007f44eac13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.478334][ T8885] RAX: ffffffffffffffda RBX: 00007f44e9f35f80 RCX: 00007f44e9d7e719 [ 275.486339][ T8885] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 275.494334][ T8885] RBP: 00007f44eac13090 R08: 0000000000000000 R09: 0000000000000000 [ 275.502332][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.510331][ T8885] R13: 0000000000000000 R14: 00007f44e9f35f80 R15: 00007fff141daf98 [ 275.518349][ T8885] [ 275.625372][ T6131] usb 6-1: Using ep0 maxpacket: 8 [ 275.644189][ T6131] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 275.655311][ T6131] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.691569][ T8895] dccp_invalid_packet: P.Data Offset(0) too small [ 276.194609][ T6131] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 276.226891][ T6131] usb 6-1: config 0 has no interface number 0 [ 276.233052][ T6131] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 276.263053][ T6128] usbhid 9-1:0.0: can't add hid device: -71 [ 276.269803][ T6128] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 276.280613][ T6131] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 276.291542][ T6131] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.302588][ T6131] usb 6-1: Product: syz [ 276.311959][ T6131] usb 6-1: Manufacturer: syz [ 276.317728][ T6131] usb 6-1: SerialNumber: syz [ 276.332947][ T6131] usb 6-1: config 0 descriptor?? [ 276.338758][ T6128] usb 9-1: USB disconnect, device number 11 [ 276.376951][ T6131] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 276.416396][ T6131] snd-usb-audio 6-1:0.151: probe with driver snd-usb-audio failed with error -2 [ 276.557703][ T6131] usb 6-1: USB disconnect, device number 15 [ 276.569957][ T5841] udevd[5841]: setting mode of /dev/bus/usb/006/015 to 020664 failed: No such file or directory [ 276.606228][ T5841] udevd[5841]: setting owner of /dev/bus/usb/006/015 to uid=0, gid=0 failed: No such file or directory [ 276.743888][ T7271] udevd[7271]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.904728][ T5969] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 276.923340][ T8913] netlink: 36 bytes leftover after parsing attributes in process `syz.5.626'. [ 277.195412][ T5969] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.207204][ T5969] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.220259][ T5969] usb 10-1: New USB device found, idVendor=0463, idProduct=c537, bcdDevice=34.39 [ 277.322956][ T5969] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 277.331719][ T5969] usb 10-1: Manufacturer: syz [ 277.351918][ T5969] usb 10-1: config 0 descriptor?? [ 277.517671][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'. [ 277.527472][ T8874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.579450][ T8874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.653387][ T8874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.661752][ T8874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.794647][ T25] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 277.912064][ T5969] hid-generic 0003:0463:C537.0009: unknown main item tag 0x0 [ 277.957140][ T25] usb 7-1: config index 0 descriptor too short (expected 61202, got 18) [ 278.007956][ T5969] hid-generic 0003:0463:C537.0009: unknown main item tag 0x0 [ 278.020151][ T25] usb 7-1: config 0 has an invalid interface number: 124 but max is 0 [ 278.046040][ T5969] hid-generic 0003:0463:C537.0009: unknown main item tag 0x0 [ 278.053500][ T5969] hid-generic 0003:0463:C537.0009: unknown main item tag 0x0 [ 278.069939][ T25] usb 7-1: config 0 has no interface number 0 [ 278.101270][ T25] usb 7-1: New USB device found, idVendor=0403, idProduct=f06a, bcdDevice=30.00 [ 278.135902][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.143955][ T25] usb 7-1: Product: syz [ 278.148396][ T5969] hid-generic 0003:0463:C537.0009: unknown main item tag 0x0 [ 278.157227][ T25] usb 7-1: Manufacturer: syz [ 278.161863][ T25] usb 7-1: SerialNumber: syz [ 278.169807][ T5969] hid-generic 0003:0463:C537.0009: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 278.181679][ T25] usb 7-1: config 0 descriptor?? [ 278.295206][ T6131] usb 10-1: USB disconnect, device number 6 [ 278.398928][ T25] ftdi_sio 7-1:0.124: FTDI USB Serial Device converter detected [ 278.421240][ T25] usb 7-1: Detected FT2232HP [ 278.437938][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 278.445815][ T25] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 278.455195][ T25] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 278.467354][ T25] usb 7-1: USB disconnect, device number 16 [ 278.476129][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 278.487282][ T25] ftdi_sio 7-1:0.124: device disconnected [ 279.389864][ T8963] dccp_invalid_packet: P.Data Offset(0) too small [ 279.682258][ T8964] FAULT_INJECTION: forcing a failure. [ 279.682258][ T8964] name failslab, interval 1, probability 0, space 0, times 0 [ 279.912814][ T8964] CPU: 1 UID: 0 PID: 8964 Comm: syz.5.636 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 279.923472][ T8964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 279.933557][ T8964] Call Trace: [ 279.936857][ T8964] [ 279.939794][ T8964] dump_stack_lvl+0x241/0x360 [ 279.944490][ T8964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.949705][ T8964] ? __pfx__printk+0x10/0x10 [ 279.954296][ T8964] ? lockdep_hardirqs_on+0x99/0x150 [ 279.959499][ T8964] ? __pfx___might_resched+0x10/0x10 [ 279.964794][ T8964] ? security_inode_alloc+0x37/0x310 [ 279.970095][ T8964] should_fail_ex+0x3b0/0x4e0 [ 279.974783][ T8964] ? security_inode_alloc+0x37/0x310 [ 279.980079][ T8964] should_failslab+0xac/0x100 [ 279.984769][ T8964] ? security_inode_alloc+0x37/0x310 [ 279.990063][ T8964] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 279.995437][ T8964] security_inode_alloc+0x37/0x310 [ 280.000547][ T8964] inode_init_always_gfp+0x988/0xcd0 [ 280.005836][ T8964] ? __pfx_sock_alloc_inode+0x10/0x10 [ 280.011206][ T8964] alloc_inode+0x9f/0x1a0 [ 280.015539][ T8964] __sock_create+0x123/0x940 [ 280.020136][ T8964] __sys_socket+0x150/0x3c0 [ 280.024644][ T8964] ? __pfx___sys_socket+0x10/0x10 [ 280.029678][ T8964] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 280.036009][ T8964] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 280.042348][ T8964] __x64_sys_socket+0x7a/0x90 [ 280.047027][ T8964] do_syscall_64+0xf3/0x230 [ 280.051532][ T8964] ? clear_bhb_loop+0x35/0x90 [ 280.056210][ T8964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.062099][ T8964] RIP: 0033:0x7f93a5180637 [ 280.066517][ T8964] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.086131][ T8964] RSP: 002b:00007f93a5f7cfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 280.094553][ T8964] RAX: ffffffffffffffda RBX: 00007f93a5336058 RCX: 00007f93a5180637 [ 280.102532][ T8964] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 280.110507][ T8964] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 280.118477][ T8964] R10: 00000000200005c0 R11: 0000000000000286 R12: 0000000000000001 [ 280.126445][ T8964] R13: 0000000000000001 R14: 00007f93a5336058 R15: 00007ffc0590f828 [ 280.134429][ T8964] [ 280.140181][ T8964] socket: no more sockets [ 280.169881][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 280.218626][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 280.242436][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 280.311044][ T8968] random: crng reseeded on system resumption [ 281.606253][ T8991] FAULT_INJECTION: forcing a failure. [ 281.606253][ T8991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.655299][ T8991] CPU: 1 UID: 0 PID: 8991 Comm: syz.2.642 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 281.665947][ T8991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 281.676018][ T8991] Call Trace: [ 281.679296][ T8991] [ 281.679307][ T8991] dump_stack_lvl+0x241/0x360 [ 281.679335][ T8991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.679356][ T8991] ? __pfx__printk+0x10/0x10 [ 281.679382][ T8991] ? snprintf+0xda/0x120 [ 281.679407][ T8991] should_fail_ex+0x3b0/0x4e0 [ 281.679432][ T8991] _copy_to_user+0x31/0xb0 [ 281.679452][ T8991] simple_read_from_buffer+0xca/0x150 [ 281.679480][ T8991] proc_fail_nth_read+0x1e9/0x250 [ 281.679506][ T8991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.679533][ T8991] ? rw_verify_area+0x55e/0x6f0 [ 281.679555][ T8991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.679580][ T8991] vfs_read+0x1fc/0xb70 [ 281.679607][ T8991] ? fdget_pos+0x24e/0x320 [ 281.679632][ T8991] ? __pfx_vfs_read+0x10/0x10 [ 281.679660][ T8991] ? __fget_files+0x3f3/0x470 [ 281.679691][ T8991] ? fdget_pos+0x24e/0x320 [ 281.679718][ T8991] ksys_read+0x183/0x2b0 [ 281.679740][ T8991] ? __pfx_ksys_read+0x10/0x10 [ 281.679761][ T8991] ? do_syscall_64+0x100/0x230 [ 281.679784][ T8991] ? do_syscall_64+0xb6/0x230 [ 281.679807][ T8991] do_syscall_64+0xf3/0x230 [ 281.679827][ T8991] ? clear_bhb_loop+0x35/0x90 [ 281.679849][ T8991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.679867][ T8991] RIP: 0033:0x7fb47e17d15c [ 281.679887][ T8991] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 281.679904][ T8991] RSP: 002b:00007fb47ef2c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.679936][ T8991] RAX: ffffffffffffffda RBX: 00007fb47e335f80 RCX: 00007fb47e17d15c [ 281.679950][ T8991] RDX: 000000000000000f RSI: 00007fb47ef2c0a0 RDI: 0000000000000004 [ 281.679963][ T8991] RBP: 00007fb47ef2c090 R08: 0000000000000000 R09: 0000000000000000 [ 281.679976][ T8991] R10: 0000000040000121 R11: 0000000000000246 R12: 0000000000000001 [ 281.679989][ T8991] R13: 0000000000000000 R14: 00007fb47e335f80 R15: 00007fff88c02538 [ 281.680019][ T8991] [ 282.059394][ T746] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.142075][ T8999] netlink: 44 bytes leftover after parsing attributes in process `syz.5.643'. [ 282.145219][ T6128] IPVS: starting estimator thread 0... [ 282.234565][ T9002] tipc: Started in network mode [ 282.244937][ T9004] IPVS: using max 17 ests per chain, 40800 per kthread [ 282.291660][ T9002] tipc: Node identity ac1414aa, cluster identity 4711 [ 282.332318][ T9002] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 282.420350][ T9002] tipc: Enabled bearer , priority 10 [ 282.467043][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 282.605000][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 282.744984][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 282.885321][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 282.939236][ T746] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.025007][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 283.129204][ T9036] dccp_invalid_packet: P.Data Offset(0) too small [ 283.164595][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 283.305096][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 283.460190][ T6130] tipc: Node number set to 2886997162 [ 283.585027][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 283.661932][ T9038] netlink: 'syz.9.650': attribute type 9 has an invalid length. [ 283.670000][ T9038] netlink: 209836 bytes leftover after parsing attributes in process `syz.9.650'. [ 285.560401][ T746] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.064902][ T9042] netlink: 'syz.8.651': attribute type 9 has an invalid length. [ 286.064949][ T9042] netlink: 209836 bytes leftover after parsing attributes in process `syz.8.651'. [ 287.504618][ C0] net_ratelimit: 4 callbacks suppressed [ 287.504640][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 287.806997][ T55] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 288.544611][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 288.675332][ T746] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.785364][ T9096] orangefs_mount: mount request failed with -4 [ 289.334686][ T29] audit: type=1326 audit(1731226465.426:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.6.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ef7e719 code=0x7ffc0000 [ 289.584526][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 290.008245][ T29] audit: type=1326 audit(1731226465.426:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.6.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ef7e719 code=0x7ffc0000 [ 290.093138][ T29] audit: type=1326 audit(1731226465.426:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.6.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f082ef7d0b0 code=0x7ffc0000 [ 290.115623][ T29] audit: type=1326 audit(1731226465.426:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.6.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f082ef7e31b code=0x7ffc0000 [ 290.136921][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.143942][ T29] audit: type=1326 audit(1731226465.426:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.6.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f082ef7e31b code=0x7ffc0000 [ 290.165779][ T29] audit: type=1326 audit(1731226465.426:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.6.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f082ef7e31b code=0x7ffc0000 [ 290.187069][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.204689][ T970] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 290.624548][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 290.746009][ T29] audit: type=1326 audit(1731226465.426:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.6.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f082ef7e31b code=0x7ffc0000 [ 290.948593][ T29] audit: type=1326 audit(1731226466.166:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.6.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f082ef7e31b code=0x7ffc0000 [ 291.026695][ T746] bridge_slave_1: left allmulticast mode [ 291.029526][ T9121] netlink: 'syz.9.667': attribute type 9 has an invalid length. [ 291.046438][ T970] usb 7-1: Using ep0 maxpacket: 8 [ 291.062493][ T970] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 291.073804][ T970] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 291.083773][ T746] bridge_slave_1: left promiscuous mode [ 291.085977][ T970] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 291.107391][ T970] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.121088][ T29] audit: type=1326 audit(1731226466.236:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.6.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f082ef7e31b code=0x7ffc0000 [ 291.123953][ T970] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 291.151465][ T746] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.151810][ T970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.174612][ T9121] netlink: 209836 bytes leftover after parsing attributes in process `syz.9.667'. [ 291.213163][ T29] audit: type=1326 audit(1731226466.366:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.6.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f082ef7e31b code=0x7ffc0000 [ 291.234542][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.243671][ T9117] block nbd8: shutting down sockets [ 291.285693][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.666'. [ 291.414333][ T746] bridge_slave_0: left allmulticast mode [ 291.420983][ T746] bridge_slave_0: left promiscuous mode [ 291.474512][ T970] usb 7-1: GET_CAPABILITIES returned 0 [ 291.479187][ T746] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.481300][ T970] usbtmc 7-1:16.0: can't read capabilities [ 291.665745][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 292.049894][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 292.067028][ T9134] netlink: zone id is out of range [ 292.072895][ T9134] netlink: zone id is out of range [ 292.089085][ T9134] netlink: zone id is out of range [ 292.094259][ T9134] netlink: zone id is out of range [ 292.193171][ T9134] netlink: zone id is out of range [ 292.387038][ T970] usb 7-1: USB disconnect, device number 17 [ 292.704537][ C0] net_ratelimit: 228 callbacks suppressed [ 292.704556][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 293.744513][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 293.748642][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 293.757719][ T5969] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 293.883357][ T9164] No such timeout policy "syz0" [ 293.924807][ T5969] usb 7-1: Using ep0 maxpacket: 8 [ 293.932507][ T5969] usb 7-1: config 1 interface 0 altsetting 20 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.944516][ T5969] usb 7-1: config 1 interface 0 has no altsetting 0 [ 293.986264][ T5969] usb 7-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 294.050898][ T5969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.715568][ T5969] usb 7-1: Product: syz [ 294.719845][ T5969] usb 7-1: Manufacturer: syz [ 294.724602][ T5969] usb 7-1: SerialNumber: syz [ 294.734604][ T5969] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input14 [ 294.784541][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 295.548160][ T9178] FAULT_INJECTION: forcing a failure. [ 295.548160][ T9178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.562228][ T9178] CPU: 0 UID: 0 PID: 9178 Comm: syz.2.679 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 295.572866][ T9178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 295.582952][ T9178] Call Trace: [ 295.586249][ T9178] [ 295.589199][ T9178] dump_stack_lvl+0x241/0x360 [ 295.593903][ T9178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.599116][ T9178] ? __pfx__printk+0x10/0x10 [ 295.603727][ T9178] ? __pfx_lock_release+0x10/0x10 [ 295.608800][ T9178] should_fail_ex+0x3b0/0x4e0 [ 295.613503][ T9178] _copy_from_user+0x2f/0xc0 [ 295.618114][ T9178] copy_from_sockptr_offset+0x6b/0xb0 [ 295.623514][ T9178] do_ipt_set_ctl+0xbdd/0x1250 [ 295.628306][ T9178] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 295.633530][ T9178] ? __pfx_lock_release+0x10/0x10 [ 295.638588][ T9178] ? preempt_schedule_thunk+0x1a/0x30 [ 295.643988][ T9178] ? __mutex_unlock_slowpath+0x21d/0x750 [ 295.649636][ T9178] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 295.655028][ T9178] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 295.661041][ T9178] nf_setsockopt+0x295/0x2c0 [ 295.665656][ T9178] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 295.671570][ T9178] do_sock_setsockopt+0x3af/0x720 [ 295.676609][ T9178] ? irqentry_exit+0x63/0x90 [ 295.681223][ T9178] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 295.686793][ T9178] ? __fget_files+0x29/0x470 [ 295.691412][ T9178] ? __fget_files+0x3f3/0x470 [ 295.696106][ T9178] ? __fget_files+0x29/0x470 [ 295.700728][ T9178] __sys_setsockopt+0x1a2/0x250 [ 295.705610][ T9178] __x64_sys_setsockopt+0xb5/0xd0 [ 295.710664][ T9178] do_syscall_64+0xf3/0x230 [ 295.715197][ T9178] ? clear_bhb_loop+0x35/0x90 [ 295.719902][ T9178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.725812][ T9178] RIP: 0033:0x7fb47e17e719 [ 295.730242][ T9178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.749877][ T9178] RSP: 002b:00007fb47ef2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 295.758317][ T9178] RAX: ffffffffffffffda RBX: 00007fb47e335f80 RCX: 00007fb47e17e719 [ 295.766307][ T9178] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 295.774291][ T9178] RBP: 00007fb47ef2c090 R08: 00000000000002a0 R09: 0000000000000000 [ 295.782275][ T9178] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.790261][ T9178] R13: 0000000000000000 R14: 00007fb47e335f80 R15: 00007fff88c02538 [ 295.798251][ T9178] [ 295.824772][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 296.128733][ T746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.158517][ T746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.225754][ T746] bond0 (unregistering): (slave team0): Releasing backup interface [ 296.283693][ T746] bond0 (unregistering): Released all slaves [ 296.301082][ T9123] netlink: 'syz.8.665': attribute type 8 has an invalid length. [ 296.405075][ T6128] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 296.560837][ T6128] usb 3-1: config 0 has an invalid interface number: 201 but max is 0 [ 296.597995][ T6128] usb 3-1: config 0 has an invalid descriptor of length 192, skipping remainder of the config [ 296.662520][ T6128] usb 3-1: config 0 has no interface number 0 [ 296.690469][ T6128] usb 3-1: too many endpoints for config 0 interface 201 altsetting 16: 97, using maximum allowed: 30 [ 296.792314][ T6128] usb 3-1: config 0 interface 201 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 296.864678][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 296.919018][ T6128] usb 3-1: config 0 interface 201 has no altsetting 0 [ 296.931979][ T6128] usb 3-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 297.904630][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 297.921353][ T6128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.929565][ T5189] bcm5974 7-1:1.0: could not read from device [ 297.937327][ T6128] usb 3-1: Product: syz [ 297.942417][ T6128] usb 3-1: Manufacturer: syz [ 297.948826][ T6128] usb 3-1: SerialNumber: syz [ 297.958687][ T6128] usb 3-1: config 0 descriptor?? [ 298.043089][ T5189] bcm5974 7-1:1.0: could not read from device [ 298.054176][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 298.054194][ T29] audit: type=1326 audit(1731226474.146:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9194 comm="syz.9.683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44e9d7e719 code=0x0 [ 298.139306][ T5969] usb 7-1: USB disconnect, device number 18 [ 298.944636][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 299.052476][ T6128] usb 3-1: USB disconnect, device number 4 [ 299.390057][ T9217] block nbd0: not configured, cannot reconfigure [ 299.589916][ T9218] FAULT_INJECTION: forcing a failure. [ 299.589916][ T9218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.604821][ T9218] CPU: 0 UID: 0 PID: 9218 Comm: syz.5.687 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 299.615461][ T9218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 299.625551][ T9218] Call Trace: [ 299.628863][ T9218] [ 299.631824][ T9218] dump_stack_lvl+0x241/0x360 [ 299.636545][ T9218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.641786][ T9218] ? __pfx__printk+0x10/0x10 [ 299.646425][ T9218] ? snprintf+0xda/0x120 [ 299.650716][ T9218] should_fail_ex+0x3b0/0x4e0 [ 299.655442][ T9218] _copy_to_user+0x31/0xb0 [ 299.659898][ T9218] simple_read_from_buffer+0xca/0x150 [ 299.665320][ T9218] proc_fail_nth_read+0x1e9/0x250 [ 299.670389][ T9218] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.675967][ T9218] ? rw_verify_area+0x55e/0x6f0 [ 299.680825][ T9218] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.686371][ T9218] vfs_read+0x1fc/0xb70 [ 299.690535][ T9218] ? do_sock_getsockopt+0x2d5/0x7e0 [ 299.695740][ T9218] ? fdget_pos+0x24e/0x320 [ 299.700184][ T9218] ? __pfx_vfs_read+0x10/0x10 [ 299.704870][ T9218] ? __fget_files+0x3f3/0x470 [ 299.709557][ T9218] ? fdget_pos+0x24e/0x320 [ 299.713977][ T9218] ksys_read+0x183/0x2b0 [ 299.718228][ T9218] ? __pfx_ksys_read+0x10/0x10 [ 299.722995][ T9218] ? do_syscall_64+0x100/0x230 [ 299.727762][ T9218] ? do_syscall_64+0xb6/0x230 [ 299.732443][ T9218] do_syscall_64+0xf3/0x230 [ 299.736960][ T9218] ? clear_bhb_loop+0x35/0x90 [ 299.741642][ T9218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.747534][ T9218] RIP: 0033:0x7f93a517d15c [ 299.751945][ T9218] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 299.771549][ T9218] RSP: 002b:00007f93a5f7e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.779977][ T9218] RAX: ffffffffffffffda RBX: 00007f93a5336058 RCX: 00007f93a517d15c [ 299.787945][ T9218] RDX: 000000000000000f RSI: 00007f93a5f7e0a0 RDI: 0000000000000007 [ 299.795912][ T9218] RBP: 00007f93a5f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 299.803882][ T9218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.811856][ T9218] R13: 0000000000000000 R14: 00007f93a5336058 R15: 00007ffc0590f828 [ 299.819843][ T9218] [ 299.984694][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 300.300227][ T9233] FAULT_INJECTION: forcing a failure. [ 300.300227][ T9233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.318543][ T9233] CPU: 0 UID: 0 PID: 9233 Comm: syz.8.691 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 300.329160][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 300.339217][ T9233] Call Trace: [ 300.342517][ T9233] [ 300.345474][ T9233] dump_stack_lvl+0x241/0x360 [ 300.350185][ T9233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.355417][ T9233] ? __pfx__printk+0x10/0x10 [ 300.360042][ T9233] ? __pfx_lock_release+0x10/0x10 [ 300.365108][ T9233] ? smack_log+0x123/0x540 [ 300.369558][ T9233] should_fail_ex+0x3b0/0x4e0 [ 300.374262][ T9233] _copy_from_user+0x2f/0xc0 [ 300.378883][ T9233] drm_ioctl+0x574/0xad0 [ 300.383167][ T9233] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 300.389539][ T9233] ? __pfx_drm_ioctl+0x10/0x10 [ 300.394359][ T9233] ? __pfx_drm_ioctl+0x10/0x10 [ 300.398826][ T9231] netlink: 'syz.2.692': attribute type 8 has an invalid length. [ 300.399134][ T9233] __se_sys_ioctl+0xf9/0x170 [ 300.411377][ T9233] do_syscall_64+0xf3/0x230 [ 300.415912][ T9233] ? clear_bhb_loop+0x35/0x90 [ 300.420622][ T9233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.426549][ T9233] RIP: 0033:0x7fc39417e719 [ 300.430993][ T9233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.450634][ T9233] RSP: 002b:00007fc394fe9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.459091][ T9233] RAX: ffffffffffffffda RBX: 00007fc394335f80 RCX: 00007fc39417e719 [ 300.467130][ T9233] RDX: 00000000200003c0 RSI: 00000000c01864c6 RDI: 0000000000000003 [ 300.475133][ T9233] RBP: 00007fc394fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 300.483139][ T9233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.491147][ T9233] R13: 0000000000000000 R14: 00007fc394335f80 R15: 00007ffe75b8bc28 [ 300.499168][ T9233] [ 300.502350][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.024624][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 301.505589][ T746] hsr_slave_0: left promiscuous mode [ 301.764601][ T746] hsr_slave_1: left promiscuous mode [ 301.955070][ T6131] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 302.044781][ T30] INFO: task syz.4.186:6739 blocked for more than 165 seconds. [ 302.052400][ T30] Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 302.064511][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 302.460695][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.762616][ T30] task:syz.4.186 state:D stack:23808 pid:6739 tgid:6739 ppid:5828 flags:0x00000004 [ 302.840400][ T30] Call Trace: [ 302.843790][ T30] [ 302.847366][ T30] __schedule+0x17fa/0x4bd0 [ 302.852914][ T30] ? __pfx___schedule+0x10/0x10 [ 302.859470][ T6131] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 302.871801][ T6131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.882671][ T6131] usb 3-1: config 0 descriptor?? [ 302.890244][ T6131] cp210x 3-1:0.0: cp210x converter detected [ 302.907972][ T30] ? __pfx_lock_release+0x10/0x10 [ 302.926203][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 302.932271][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 302.950126][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 302.962041][ T30] ? schedule+0x90/0x320 [ 302.971035][ T30] schedule+0x14b/0x320 [ 302.980647][ T30] ? down_read+0x6a5/0xa40 [ 302.985259][ T30] schedule_preempt_disabled+0x13/0x30 [ 302.990769][ T30] down_read+0x705/0xa40 [ 302.995129][ T30] ? __pfx_down_read+0x10/0x10 [ 302.999947][ T30] ? release_fault_lock+0x163/0x230 [ 303.005458][ T30] ? release_fault_lock+0xa6/0x230 [ 303.010862][ T30] page_cache_ra_unbounded+0x135/0x8a0 [ 303.016475][ T30] do_sync_mmap_readahead+0x499/0x970 [ 303.021901][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 303.028153][ T30] ? count_memcg_event_mm+0x90/0x420 [ 303.033490][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 303.038927][ T30] filemap_fault+0x8c5/0x1950 [ 303.043656][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 303.048928][ T30] ? handle_pte_fault+0x2188/0x6820 [ 303.054163][ T30] ? pte_alloc_one+0x490/0x610 [ 303.059006][ T30] ? __pfx_lock_release+0x10/0x10 [ 303.064082][ T30] ? handle_pte_fault+0x2188/0x6820 [ 303.069438][ T30] __do_fault+0x135/0x460 [ 303.073814][ T30] ? handle_pte_fault+0x2188/0x6820 [ 303.079184][ T30] handle_pte_fault+0x2d1c/0x6820 [ 303.084693][ T30] ? mark_lock+0x9a/0x360 [ 303.089081][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 303.095001][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 303.098198][ T6131] usb 3-1: cp210x converter now attached to ttyUSB0 [ 303.100395][ T30] ? lock_vma_under_rcu+0x34b/0x790 [ 303.100444][ T30] ? __thp_vma_allowable_orders+0x8ff/0x9c0 [ 303.107169][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 303.125781][ T30] handle_mm_fault+0x1053/0x1ad0 [ 303.130794][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 303.136191][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 303.141458][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 303.146839][ T30] ? exc_page_fault+0x113/0x8c0 [ 303.151907][ T30] exc_page_fault+0x459/0x8c0 [ 303.156735][ T30] asm_exc_page_fault+0x26/0x30 [ 303.161650][ T30] RIP: 0033:0x7f92f8645055 [ 303.166190][ T30] RSP: 002b:00007fff85b91ea0 EFLAGS: 00010202 [ 303.172302][ T30] RAX: 0000000020000520 RBX: 0000000004000001 RCX: 0000000000000000 [ 303.180504][ T30] RDX: f87f5cd3799ee9ce RSI: 0000000000000000 RDI: 000055557ad833c8 [ 303.189003][ T30] RBP: 00007fff85b91fb8 R08: 0000000000000000 R09: 0000000000000004 [ 303.197472][ T30] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 303.205560][ T30] R13: 00007fff85b91fe0 R14: 0000000000000032 R15: fffffffffffffffe [ 303.214131][ T30] [ 303.217341][ T30] INFO: task syz.4.186:6740 blocked for more than 166 seconds. [ 303.225118][ T30] Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 303.233006][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 303.241801][ T30] task:syz.4.186 state:D stack:23512 pid:6740 tgid:6739 ppid:5828 flags:0x00000004 [ 303.252107][ T30] Call Trace: [ 303.255186][ T746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.255447][ T30] [ 303.263546][ T746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.265744][ T30] __schedule+0x17fa/0x4bd0 [ 303.265798][ T30] ? __pfx___schedule+0x10/0x10 [ 303.265823][ T30] ? __pfx_lock_release+0x10/0x10 [ 303.265850][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 303.265880][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 303.265905][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 303.265929][ T30] ? schedule+0x90/0x320 [ 303.265949][ T30] schedule+0x14b/0x320 [ 303.265976][ T30] ? down_read+0x6a5/0xa40 [ 303.265999][ T30] schedule_preempt_disabled+0x13/0x30 [ 303.266019][ T30] down_read+0x705/0xa40 [ 303.266051][ T30] ? __pfx_down_read+0x10/0x10 [ 303.266088][ T30] ? do_sync_mmap_readahead+0x699/0x970 [ 303.266114][ T30] page_cache_ra_unbounded+0x135/0x8a0 [ 303.266159][ T30] do_sync_mmap_readahead+0x499/0x970 [ 303.266189][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 303.266209][ T30] ? count_memcg_event_mm+0x90/0x420 [ 303.266236][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 303.266268][ T30] filemap_fault+0x8c5/0x1950 [ 303.374819][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 303.380017][ T30] ? handle_pte_fault+0x2188/0x6820 [ 303.385374][ T30] ? pte_alloc_one+0x490/0x610 [ 303.390929][ T30] ? __pfx_lock_release+0x10/0x10 [ 303.396134][ T30] ? handle_pte_fault+0x2188/0x6820 [ 303.401375][ T30] __do_fault+0x135/0x460 [ 303.405866][ T30] ? handle_pte_fault+0x2188/0x6820 [ 303.411530][ T30] handle_pte_fault+0x2d1c/0x6820 [ 303.416786][ T30] ? mark_lock+0x9a/0x360 [ 303.421156][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 303.427799][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 303.433254][ T30] ? __thp_vma_allowable_orders+0x8ff/0x9c0 [ 303.439329][ T30] handle_mm_fault+0x1053/0x1ad0 [ 303.444380][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 303.449805][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 303.456249][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 303.461581][ T30] exc_page_fault+0x2b9/0x8c0 [ 303.466392][ T30] asm_exc_page_fault+0x26/0x30 [ 303.471287][ T30] RIP: 0010:rep_movs_alternative+0x13/0x70 [ 303.477251][ T30] Code: cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 303.497390][ T30] RSP: 0018:ffffc900039ffcd0 EFLAGS: 00050202 [ 303.503514][ T30] RAX: 0000000000000001 RBX: 00000000200004c0 RCX: 0000000000000004 [ 303.512050][ T30] RDX: 0000000000000001 RSI: 00000000200004c0 RDI: ffffc900039ffd80 [ 303.520371][ T30] RBP: ffffc900039ffe00 R08: 0000000000000003 R09: fffff5200073ffb0 [ 303.528716][ T30] R10: dffffc0000000000 R11: fffff5200073ffb0 R12: 00000000200004c0 [ 303.536902][ T30] R13: ffff88805e43aa00 R14: ffffc900039ffd80 R15: 0000000000000004 [ 303.544987][ T30] _copy_from_user+0x7f/0xc0 [ 303.549633][ T30] do_sock_getsockopt+0x1d1/0x7e0 [ 303.554801][ T30] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 303.560393][ T30] ? __fget_files+0x3f3/0x470 [ 303.565202][ T30] ? __fget_files+0x29/0x470 [ 303.569834][ T30] __sys_getsockopt+0x267/0x330 [ 303.574816][ T30] ? __pfx___sys_getsockopt+0x10/0x10 [ 303.580231][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 303.586975][ T30] ? do_syscall_64+0x100/0x230 [ 303.592539][ T30] __x64_sys_getsockopt+0xb5/0xd0 [ 303.597730][ T30] do_syscall_64+0xf3/0x230 [ 303.602278][ T30] ? clear_bhb_loop+0x35/0x90 [ 303.607101][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.613048][ T30] RIP: 0033:0x7f92f877e719 [ 303.617795][ T30] RSP: 002b:00007f92f6bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 303.626535][ T30] RAX: ffffffffffffffda RBX: 00007f92f8935f80 RCX: 00007f92f877e719 [ 303.634670][ T30] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000006 [ 303.642685][ T30] RBP: 00007f92f87f139e R08: 00000000200004c0 R09: 0000000000000000 [ 303.650789][ T30] R10: 0000000020000440 R11: 0000000000000246 R12: 0000000000000000 [ 303.658897][ T30] R13: 0000000000000000 R14: 00007f92f8935f80 R15: 00007fff85b91d78 [ 303.667030][ T30] [ 303.670142][ T30] [ 303.670142][ T30] Showing all locks held in the system: [ 303.678004][ T30] 1 lock held by ksoftirqd/0/16: [ 303.682968][ T30] 1 lock held by khungtaskd/30: [ 303.687894][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 303.698401][ T30] 3 locks held by kworker/u8:2/35: [ 303.703552][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 303.715927][ T30] #1: ffffc90000ab7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 303.727420][ T30] #2: ffffffff8fcc1448 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 303.736925][ T30] 4 locks held by kworker/u8:4/64: [ 303.742084][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 303.754120][ T30] #1: ffffc900015f7d00 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 303.767261][ T30] #2: ffffffff8e7d1d90 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 303.777395][ T30] #3: ffffffff8e9eda48 (jump_label_mutex){+.+.}-{3:3}, at: static_key_disable_cpuslocked+0x9b/0x1c0 [ 303.788785][ T30] 5 locks held by kworker/u8:5/746: [ 303.794031][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 303.805647][ T30] #1: ffffc90003317d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 303.816882][ T30] #2: ffffffff8fcb4910 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 303.826941][ T30] #3: ffffffff8fcc1448 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xaa0 [ 303.837459][ T30] #4: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 303.848645][ T30] 4 locks held by kworker/u8:8/3451: [ 303.853982][ T30] 2 locks held by getty/5589: [ 303.858965][ T30] #0: ffff888030e590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 303.869068][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 303.879604][ T30] 1 lock held by syz.1.141/6520: [ 303.884895][ T30] #0: ffff88802353b740 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490 [ 303.895832][ T30] 1 lock held by syz.4.186/6739: [ 303.903183][ T30] #0: ffff88802353b740 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 303.914871][ T30] 1 lock held by syz.4.186/6740: [ 303.919847][ T30] #0: ffff88802353b740 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 303.931589][ T30] 1 lock held by syz.0.302/7331: [ 303.937044][ T30] #0: ffff88802353b740 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 303.948618][ T30] 1 lock held by syz.0.302/7332: [ 303.953589][ T30] #0: ffff88802353b740 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 303.965233][ T30] 1 lock held by syz.0.302/7336: [ 303.970213][ T30] #0: ffff88802353b740 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 303.981785][ T30] 1 lock held by syz.5.697/9249: [ 303.987134][ T30] #0: ffff888029d38068 (&pipe->mutex){+.+.}-{3:3}, at: pipe_release+0x48/0x320 [ 303.996501][ T30] 1 lock held by syz.5.697/9251: [ 304.002985][ T30] #0: ffff888029d38068 (&pipe->mutex){+.+.}-{3:3}, at: splice_file_to_pipe+0x2e/0x500 [ 304.012845][ T30] 4 locks held by rm/9276: [ 304.017410][ T30] [ 304.018323][ T746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.019737][ T30] ============================================= [ 304.019737][ T30] [ 304.019749][ T30] NMI backtrace for cpu 1 [ 304.019765][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 304.019788][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 304.060388][ T30] Call Trace: [ 304.063668][ T30] [ 304.066602][ T30] dump_stack_lvl+0x241/0x360 [ 304.071286][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.076483][ T30] ? __pfx__printk+0x10/0x10 [ 304.081101][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 304.086048][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 304.091505][ T30] ? _printk+0xd5/0x120 [ 304.095660][ T30] ? __pfx__printk+0x10/0x10 [ 304.100246][ T30] ? __wake_up_klogd+0xcc/0x110 [ 304.105101][ T30] ? __pfx__printk+0x10/0x10 [ 304.109689][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 304.114719][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 304.120700][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 304.126690][ T30] watchdog+0xff4/0x1040 [ 304.130939][ T30] ? watchdog+0x1ea/0x1040 [ 304.135376][ T30] ? __pfx_watchdog+0x10/0x10 [ 304.140065][ T30] kthread+0x2f0/0x390 [ 304.144133][ T30] ? __pfx_watchdog+0x10/0x10 [ 304.144523][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 304.148797][ T30] ? __pfx_kthread+0x10/0x10 [ 304.160230][ T30] ret_from_fork+0x4b/0x80 [ 304.164660][ T30] ? __pfx_kthread+0x10/0x10 [ 304.169256][ T30] ret_from_fork_asm+0x1a/0x30 [ 304.174032][ T30] [ 304.177924][ T30] Sending NMI from CPU 1 to CPUs 0: [ 304.183199][ C0] NMI backtrace for cpu 0 [ 304.183213][ C0] CPU: 0 UID: 0 PID: 3429 Comm: kworker/u8:7 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 304.183233][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 304.183244][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 304.183274][ C0] RIP: 0010:unwind_next_frame+0xba4/0x22d0 [ 304.183302][ C0] Code: df e8 c0 1a ba 00 4c 8b 74 24 08 4d 8b 66 10 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 20 0f b6 04 01 84 c0 0f 85 67 12 00 00 <48> 8b 04 24 4c 8d 68 f8 41 83 3e 00 74 1c 4c 39 ed 77 17 4d 39 ec [ 304.183316][ C0] RSP: 0018:ffffc9000bc7e830 EFLAGS: 00000246 [ 304.183330][ C0] RAX: 0000000000000000 RBX: ffffc9000bc7e910 RCX: 1ffff9200178fd20 [ 304.183342][ C0] RDX: ffffffff9139d5fe RSI: 0000000000000002 RDI: 0000000000000001 [ 304.183354][ C0] RBP: ffffc9000bc78000 R08: 0000000000000001 R09: ffffc9000bc7e9f0 [ 304.183366][ C0] R10: ffffc9000bc7e950 R11: ffffffff81809260 R12: ffffc9000bc80000 [ 304.183378][ C0] R13: ffffc9000bc7e900 R14: ffffc9000bc7e900 R15: 1ffff9200178fd22 [ 304.183391][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 304.183406][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 304.183417][ C0] CR2: 00007f05bd305270 CR3: 000000005324c000 CR4: 00000000003526f0 [ 304.183432][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 304.183442][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 304.183452][ C0] Call Trace: [ 304.183459][ C0] [ 304.183466][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 304.183489][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 304.183514][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 304.183537][ C0] ? nmi_handle+0x2a/0x5a0 [ 304.183561][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 304.183582][ C0] ? nmi_handle+0x14f/0x5a0 [ 304.183598][ C0] ? nmi_handle+0x2a/0x5a0 [ 304.183615][ C0] ? unwind_next_frame+0xba4/0x22d0 [ 304.183639][ C0] ? default_do_nmi+0x63/0x160 [ 304.183663][ C0] ? exc_nmi+0x123/0x1f0 [ 304.183685][ C0] ? end_repeat_nmi+0xf/0x53 [ 304.183711][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 304.183733][ C0] ? unwind_next_frame+0xba4/0x22d0 [ 304.183758][ C0] ? unwind_next_frame+0xba4/0x22d0 [ 304.183783][ C0] ? unwind_next_frame+0xba4/0x22d0 [ 304.183807][ C0] [ 304.183813][ C0] [ 304.183823][ C0] ? ieee80211_iface_work+0x8a5/0xf20 [ 304.183842][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 304.183862][ C0] arch_stack_walk+0x11c/0x150 [ 304.183882][ C0] ? ieee80211_iface_work+0x8a5/0xf20 [ 304.183901][ C0] stack_trace_save+0x118/0x1d0 [ 304.183921][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 304.183940][ C0] ? __lock_acquire+0x1384/0x2050 [ 304.183967][ C0] kasan_save_stack+0x3f/0x60 [ 304.183987][ C0] ? kasan_save_stack+0x3f/0x60 [ 304.184007][ C0] ? __kasan_record_aux_stack+0xac/0xc0 [ 304.184025][ C0] ? kvfree_call_rcu+0xfc/0x790 [ 304.184042][ C0] ? cfg80211_update_known_bss+0xb45/0x1590 [ 304.184062][ C0] ? __cfg80211_bss_update+0x153/0x2030 [ 304.184080][ C0] ? cfg80211_inform_single_bss_data+0xd82/0x2090 [ 304.184100][ C0] ? cfg80211_inform_bss_data+0x3ce/0x5e80 [ 304.184119][ C0] ? cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 304.184138][ C0] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 304.184153][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 304.184178][ C0] ? ieee80211_iface_work+0x8a5/0xf20 [ 304.184214][ C0] ? __phys_addr+0xba/0x170 [ 304.184231][ C0] __kasan_record_aux_stack+0xac/0xc0 [ 304.184250][ C0] kvfree_call_rcu+0xfc/0x790 [ 304.184268][ C0] ? __lock_acquire+0x1384/0x2050 [ 304.184293][ C0] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 304.184316][ C0] cfg80211_update_known_bss+0xb45/0x1590 [ 304.184339][ C0] ? cmp_bss+0x8c7/0xea0 [ 304.184359][ C0] __cfg80211_bss_update+0x153/0x2030 [ 304.184379][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 304.184399][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 304.184425][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 304.184441][ C0] ? cfg80211_inform_single_bss_data+0xb2d/0x2090 [ 304.184460][ C0] ? cfg80211_inform_single_bss_data+0xb2d/0x2090 [ 304.184477][ C0] ? cfg80211_inform_single_bss_data+0xb2d/0x2090 [ 304.184496][ C0] ? cfg80211_inform_single_bss_data+0xd6e/0x2090 [ 304.184519][ C0] cfg80211_inform_single_bss_data+0xd82/0x2090 [ 304.184543][ C0] ? deref_stack_reg+0x17c/0x210 [ 304.184557][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 304.184587][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 304.184612][ C0] ? cfg80211_inform_bss_data+0x3b6/0x5e80 [ 304.184635][ C0] cfg80211_inform_bss_data+0x3ce/0x5e80 [ 304.184669][ C0] ? __pfx_validate_chain+0x10/0x10 [ 304.184704][ C0] ? __pfx_validate_chain+0x10/0x10 [ 304.184723][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 304.184748][ C0] ? mark_lock+0x9a/0x360 [ 304.184767][ C0] ? __lock_acquire+0x1384/0x2050 [ 304.184805][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 304.184829][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 304.184848][ C0] cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 304.184874][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 304.184891][ C0] ieee80211_bss_info_update+0x8a7/0xbc0 [ 304.184912][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 304.184929][ C0] ? __pfx_lock_release+0x10/0x10 [ 304.184960][ C0] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 304.184993][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 304.185020][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 304.185053][ C0] ? mark_lock+0x9a/0x360 [ 304.185072][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 304.185099][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 304.185124][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 304.185152][ C0] ieee80211_iface_work+0x8a5/0xf20 [ 304.185174][ C0] cfg80211_wiphy_work+0x2db/0x490 [ 304.185198][ C0] ? process_scheduled_works+0x976/0x1850 [ 304.185220][ C0] process_scheduled_works+0xa63/0x1850 [ 304.185255][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 304.185281][ C0] ? assign_work+0x364/0x3d0 [ 304.185304][ C0] worker_thread+0x870/0xd30 [ 304.185333][ C0] ? __kthread_parkme+0x169/0x1d0 [ 304.185357][ C0] ? __pfx_worker_thread+0x10/0x10 [ 304.185379][ C0] kthread+0x2f0/0x390 [ 304.185394][ C0] ? __pfx_worker_thread+0x10/0x10 [ 304.185416][ C0] ? __pfx_kthread+0x10/0x10 [ 304.185431][ C0] ret_from_fork+0x4b/0x80 [ 304.185453][ C0] ? __pfx_kthread+0x10/0x10 [ 304.185468][ C0] ret_from_fork_asm+0x1a/0x30 [ 304.185498][ C0] [ 304.186728][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 304.186744][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 304.186767][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 304.186778][ T30] Call Trace: [ 304.186785][ T30] [ 304.186793][ T30] dump_stack_lvl+0x241/0x360 [ 304.186822][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.186844][ T30] ? __pfx__printk+0x10/0x10 [ 304.186862][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 304.186893][ T30] ? vscnprintf+0x5d/0x90 [ 304.186919][ T30] panic+0x349/0x880 [ 304.186949][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 304.186975][ T30] ? __pfx_panic+0x10/0x10 [ 304.186992][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 304.187012][ T30] ? __irq_work_queue_local+0x137/0x410 [ 304.187036][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 304.187056][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 304.187079][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 304.187105][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 304.187132][ T30] watchdog+0x1033/0x1040 [ 304.187156][ T30] ? watchdog+0x1ea/0x1040 [ 304.187183][ T30] ? __pfx_watchdog+0x10/0x10 [ 304.187204][ T30] kthread+0x2f0/0x390 [ 304.187223][ T30] ? __pfx_watchdog+0x10/0x10 [ 304.187244][ T30] ? __pfx_kthread+0x10/0x10 [ 304.187262][ T30] ret_from_fork+0x4b/0x80 [ 304.187284][ T30] ? __pfx_kthread+0x10/0x10 [ 304.187302][ T30] ret_from_fork_asm+0x1a/0x30 [ 304.187336][ T30] [ 304.967026][ T30] Kernel Offset: disabled [ 304.971347][ T30] Rebooting in 86400 seconds..