last executing test programs: 17m26.858402296s ago: executing program 32 (id=233): io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac4151cc022f670c650200000004000000080000000100000080", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0xff, 0x8000000000000001, 0x5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = getpid() r3 = socket(0xa, 0x3, 0x3a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x3, &(0x7f0000000000)=[{0x5}, {0x20, 0x0, 0x0, 0x8}, {0x6}]}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) r5 = syz_pidfd_open(r2, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r7, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) close_range(r5, r0, 0x0) 17m4.737890455s ago: executing program 1 (id=312): add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 17m4.5570888s ago: executing program 1 (id=313): sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x0, 0x0) (async, rerun: 32) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0xfffffffffffff998, 0x0) read$msr(r0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x918bd000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, 0x0) (async) socketpair(0x27, 0x1, 0x5, &(0x7f00000017c0)) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) (async) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7, 0x1, 0x2, 0x4, 0x59c, 0xffffffffffffffff}) (async, rerun: 32) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x40408d4) (async) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) 17m4.167608646s ago: executing program 1 (id=315): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x3) r1 = accept(r0, &(0x7f0000000240)=@qipcrtr, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@ipv4={""/10, ""/2, @private}}, &(0x7f0000000080)=0x14) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB="20199e"], 0x16) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) 17m3.20501071s ago: executing program 1 (id=318): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x109002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010300000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000150a01020000c20000000000000000000800034000000006"], 0x1c}, 0x1, 0x0, 0x0, 0x10024804}, 0x24040808) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xa8, 0xc8, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4076, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00', 0x7) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 16m54.288951727s ago: executing program 1 (id=334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x6f8, 0x240940) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x55fa3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) 16m52.997622164s ago: executing program 1 (id=335): shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 16m52.57838179s ago: executing program 33 (id=305): r0 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x10, 0x8001002, 0x3d7}) mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000001b80)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) getdents(r4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16m41.004229937s ago: executing program 34 (id=332): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000100)) ioctl$TCFLSH(r7, 0x80045430, 0x7ffffffffffffffe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) ioctl$TIOCL_SETVESABLANK(r10, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r9, 0x541c, &(0x7f0000000000)) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x64, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x1000}}, 0x0}, 0x1000}, @free_buffer={0x40086303, r6}, @dead_binder_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000c40)={0x8, 0x0, &(0x7f0000000240)=[@acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB='%\n\x00'/24], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff800, @void, @value}, 0x94) 16m37.001848103s ago: executing program 35 (id=335): shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 16m7.97537475s ago: executing program 0 (id=412): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xc003, 0x4, "fa3d76170000001b"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff3d) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0xe, 0x8000003, 0x6, 0x4, "a85c45a2c25cc646300200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 16m6.496941871s ago: executing program 0 (id=415): socket$alg(0x26, 0x5, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x1, 0x8, 0x22, 0x5, @remote}, 0x10) read(r0, &(0x7f0000000000)=""/94, 0x5e) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000380)}}, {{0x0, 0x0, 0x0, 0x49}}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000000380)=""/171, 0xab}], 0x1, &(0x7f00000053c0)=""/196, 0xc4}, 0x4}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) clock_gettime(0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4, 0x70ad26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xd, 0xa}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000240)=""/58, 0x3a, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f00000003c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x40f00, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe74, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000884000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x49391000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000002c0)=@userptr={0xbe08, 0x1, 0x4, 0x400, 0x7, {}, {0x2, 0x8, 0x6, 0x80, 0x0, 0x9, "6703ceb4"}, 0x8, 0x2, {&(0x7f0000000100)}, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000280)=0x2) close(0x3) socket$inet(0x2, 0x3, 0x4) 16m5.329029669s ago: executing program 0 (id=418): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000900), 0x3}, 0x17ba}], 0x1e, 0x2000, 0x0) 16m4.923713467s ago: executing program 0 (id=419): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0xfffc, 0x8, 0x29, 0x0, @private=0xa010101, @multicast1}}}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000004e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x8}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000021000040"]) shutdown(r2, 0x1) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r7, 0xfff}, 0x8) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002b40), r1) 16m4.273415745s ago: executing program 0 (id=420): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x9100144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_int(r0, &(0x7f0000000000)=0x3, 0x12) 16m3.563905435s ago: executing program 0 (id=421): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, r1, 0x0, 0x10000f, 0xffffffffffffff7f}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r1, 0x0, 0xfffffffffffffffe, 0x100006d9}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0xa, 0x2, r3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000600010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYRES16=0x0, @ANYBLOB="fcba5c0dafb44ab178ae5a053cd4f990386074f97a59a6aff7788cf0dfd966c3f9819451d5d0b91f90701aea1cf6b16aa9adad9f75058f337c7eb3aaf8d8eb4a9f84004036e9c3d9dcd13ef0a960b6b26a8edec82302665ffd6a69c5a7622237f4e0c5f6832c3062b712ff0c7bbba64c66f6d04db8c01fc5c4911643e530afb04f2be765dbec2ef467b2a8413c01cd8f49150c49fa11"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video(0x0, 0x3ff, 0x0) r5 = inotify_init1(0x0) inotify_rm_watch(r5, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000280)={0x808, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_getscheduler(0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x316}, &(0x7f0000000340), 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1801001a00010026bd7000fcdbdf0000000000f1fffeffffffffffe000000100008f0000000000000000004e2200034e2100070a0020002c0000002364e1254a5549c0e3407333ca885384b1b66d842cff9784ec0755b937bcab766798969877817390d9f3ca43f01afb3e57ca69ab63cacfcf71cfd2b072a3ba990343660b0eb71e11dead0e75e5caa0a067a75612da5f10d5c7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ffffac1414bb000004d33c0000000000000000000000000000000000000002000000000000000700000000000000410200000000000006000000000000000000010000000000000000000000008007000000000000000400000000000000ffffffffffffffff0500010000000000fdffffffffffffff0200000000000000c5000000fcffffff000200002cbd7000040000000a000004000000000000000028001a00ac1414bb000000000000000000000000640101020000000000000000000000000a009006"], 0x118}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r7, 0x0, 0x0) 15m47.702087108s ago: executing program 36 (id=421): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, r1, 0x0, 0x10000f, 0xffffffffffffff7f}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r1, 0x0, 0xfffffffffffffffe, 0x100006d9}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0xa, 0x2, r3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000600010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYRES16=0x0, @ANYBLOB="fcba5c0dafb44ab178ae5a053cd4f990386074f97a59a6aff7788cf0dfd966c3f9819451d5d0b91f90701aea1cf6b16aa9adad9f75058f337c7eb3aaf8d8eb4a9f84004036e9c3d9dcd13ef0a960b6b26a8edec82302665ffd6a69c5a7622237f4e0c5f6832c3062b712ff0c7bbba64c66f6d04db8c01fc5c4911643e530afb04f2be765dbec2ef467b2a8413c01cd8f49150c49fa11"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video(0x0, 0x3ff, 0x0) r5 = inotify_init1(0x0) inotify_rm_watch(r5, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000280)={0x808, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_getscheduler(0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x316}, &(0x7f0000000340), 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1801001a00010026bd7000fcdbdf0000000000f1fffeffffffffffe000000100008f0000000000000000004e2200034e2100070a0020002c0000002364e1254a5549c0e3407333ca885384b1b66d842cff9784ec0755b937bcab766798969877817390d9f3ca43f01afb3e57ca69ab63cacfcf71cfd2b072a3ba990343660b0eb71e11dead0e75e5caa0a067a75612da5f10d5c7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ffffac1414bb000004d33c0000000000000000000000000000000000000002000000000000000700000000000000410200000000000006000000000000000000010000000000000000000000008007000000000000000400000000000000ffffffffffffffff0500010000000000fdffffffffffffff0200000000000000c5000000fcffffff000200002cbd7000040000000a000004000000000000000028001a00ac1414bb000000000000000000000000640101020000000000000000000000000a009006"], 0x118}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r7, 0x0, 0x0) 10m17.244181522s ago: executing program 9 (id=1100): syz_open_procfs(0x0, &(0x7f0000000080)='schedstat\x00') r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, 0x0, 0x20040051) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000300)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="4cc84cdd3740e7827f6da04b1c9f479edd3c4975ab9f4373b39597dbfb7e31bea628804ac8c53963c1a46fa68595fdd9f9eec4bdad7cdfcde4051c0373a06fde005291fab55867bb16851ed72d63bd1cf920c431572cb9a3d9d86888d85859bdadbfaa6d922a091d8c9ff27f8a45c29fee5e3c38e7227d62e0d3398bff3198bfe07af6b19759", 0x86}], 0x1, &(0x7f0000000600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0xe8, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x7, [@remote]}, @rr={0x7, 0x13, 0xfd, [@multicast1, @empty, @remote, @local]}, @cipso={0x86, 0x4c, 0x1, [{0x7, 0xc, "73d4cfa91103814298f2"}, {0x0, 0xe, "4ab924a0ee548bfa12933632"}, {0x5, 0x11, "78b937ca07a31048173775353d4110"}, {0x5, 0x11, "41af53aff57d0314fb52fdfcaba27d"}, {0x0, 0x8, "1c0abcb06528"}, {0x6, 0x2}]}, @lsrr={0x83, 0x27, 0x8e, [@rand_addr=0x64010102, @multicast1, @rand_addr=0x64010100, @private=0xa010100, @rand_addr=0x64010101, @remote, @multicast2, @multicast1, @multicast2]}, @rr={0x7, 0x17, 0x58, [@empty, @multicast2, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x29}]}, @cipso={0x86, 0x34, 0x0, [{0x5, 0xd, "3c0a0fd01807c70772a14f"}, {0x6, 0x9, "305940d0d86088"}, {0x2, 0xd, "ed5868699d3b58fe4db483"}, {0x1, 0x5, 'xy['}, {0x0, 0x6, "ccdfd3b6"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@cipso={0x86, 0x68, 0xffffffffffffffff, [{0x0, 0xd, "bf74f51333a2876986cc9a"}, {0x1, 0x12, "ce3ab41d48d4220a2d587d386baa0d34"}, {0x6, 0x12, "cc6744407ae1dd6ee379d37d9f5984c9"}, {0x7, 0x7, "93dd9fa66d"}, {0x1, 0x8, "8d6d1567884f"}, {0x4, 0x5, "c01ab8"}, {0x6, 0xb, "db72025362b1f34a66"}, {0x7, 0x4, "7583"}, {0x0, 0xe, "c44831abd1ca8eb8ef94c130"}]}, @noop, @ssrr={0x89, 0xb, 0xb4, [@remote, @multicast2]}, @lsrr={0x83, 0x13, 0x10, [@empty, @empty, @multicast2, @multicast2]}, @rr={0x7, 0xf, 0xd3, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x36}]}]}}}], 0x240}}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40080) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = fsopen(&(0x7f00000000c0)='gfs2meta\x00', 0x1) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x4, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) socket(0x200000000000011, 0x2, 0x0) 10m15.962000689s ago: executing program 9 (id=1101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x4, 0x0, 0x6000, 0x1000, &(0x7f0000004000/0x1000)=nil}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000001c0), &(0x7f0000000080)=0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xdc, 0xd3, 0x28, 0x40, 0x7d15, 0x31b2, 0x574b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2f, 0xfc, 0x3, 0x8, 0x2, 0x50, 0x0, [], [{{0x9, 0x5, 0xd, 0x2, 0x8, 0x2, 0x20, 0x6}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x2, 0x3, 0x7}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x9, 0x84, 0x8}}]}}]}}]}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000007c0)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r5, 0xc018aec0, &(0x7f00000000c0)={0x1}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth1_macvtap\x00', @ifru_addrs=@l2tp={0x2, 0x0, @broadcast, 0x80}}) ioctl$sock_netdev_private(r6, 0x89f5, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000017000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 10m13.380849678s ago: executing program 9 (id=1106): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x30, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4a}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x13, 0x30}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x800) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7ff, 0x100) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000001200090002", 0x21) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) sysinfo(&(0x7f0000000500)=""/90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {r5, r6+60000000}}, &(0x7f0000000400)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x2}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1000000, 0x8}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x9, 0x466, 0xffffffffffffffff}, 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r9}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, 0x0) 10m10.710584261s ago: executing program 9 (id=1109): r0 = open$dir(&(0x7f0000000040)='./file2\x00', 0x301000, 0x63) r1 = openat(r0, &(0x7f0000000200)='./file2\x00', 0x185042, 0x1d8) r2 = socket$key(0xf, 0x3, 0x2) socket$tipc(0x1e, 0x5, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x20, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0xfffd, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x6, "5b671624"}]}}}}}}}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000004f00)=""/209, 0xd1}, {&(0x7f00000004c0)=""/261, 0x105}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000001e80)=""/249, 0xf9}, {&(0x7f0000000000)=""/244, 0xf4}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x101}], 0x4, 0x20, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r8, 0x7fff) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x2, 0x10, 0x1, 0x3, 0x2, 0x0, 0x70bd2a, 0x25dfdbfd}, 0x10}}, 0x44084) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syncfs(r1) 10m7.316576059s ago: executing program 9 (id=1115): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8995, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x12}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x34}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f00000026c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x14, r9, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40004044) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x40) sendmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f00000001c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="c8be4bf0f2491bab9c09280878261852c3c8f1b7b9e8b8694b9d17a260c5a84430cbc580ac5121ac532c86433528f2254fc36a9fefcdc5905441d13eeccc22b36a8e5f38b9f2eb88558b45486f115e9ee83482e3186ea7ecb428961eed81706a69053c7a4ccaf64c714a5f869d4022625d1104160a1a0e95149349da6636876460c2d658ea564d9bf89531e03f07000c4e4557e660a3bc4d0a8e845e627b7fdd6c8b59f301aae4dc99e65ea3ec51c22bde84fede6114516859b04c23f1a1ffe914f695edf28e2c596b0f787ee9026566f10a4dda7ab5677bc90e53f29a565876267459c592c41024621f3c72ce915b1fd7ef02c5ba9354c97b", 0xf9}, {&(0x7f00000000c0)="0f94776dbef70ca477fa73996379f26bde440726c658ec09304bb50869a1f0d0b93495fb5217897936f23f7f4b8d002768a6d464f17b10b467946c7e821bdd", 0x3f}, {&(0x7f0000000380)="1a472119939dd47f10a31a21d2ccd83e27934d61a03e16a3c1ccaec9e3ced2307ffee197a5edd0dcbaf508b64ab42959e064ee1c06b7ef0bfdad1e047520e95ebae9f8102f224d393143aa5143857b6d956fc15981ff1eaa9eb5a9a92d89c6c71ee1be141ddef989737f6335748ee396bf30de709a90d4542469a7828a2429108432beaa43c342ace24a5dd3bf43e22a0a8a2a66d118762c019681e79b33b5d077eccf8e31bd5800b1084ec1a51ffa1238dca8d0e5b486534a1f13d7776bc7786dfc4e290ae51d1c8ea903242939d823547b96bf7af13f8d48aa1d398f65", 0xde}, {&(0x7f0000000480)="d59488d0f4cd9f047c68a40fed4be219acc9f5b60c64719f76b0c885d5d7794a10b21fee19ee998c7aebec1c9814fcfca17bd5fc50382a1e18c69ca499cc1e37ef5198529288324f5dd6d7d25bf4ea8343c6d34f5fd6884506932058", 0x5c}, {&(0x7f0000000500)="9d112fb39db30911b750d9a548ab49db8309ac62af1fef12ca85847c902f519e21fffd20913bf20932f341eef29d9b2565071641f8354ca17527a7fa546210530028361aeae75acaa195b4070928644c73e144c2c14edd5142f6dda6ae26796a8e6b4c01bebc6fc3c8f92bb3c7da3ab6ddc53127749161154ebc97d21f079b79f0a56702c3e75e6a30e405727b63bd8aa44b814c086cf96f84e85950471adbd70c69712bac6d7f6ce6b3b996b779681fc64edfe1624ba9341ace8abb97a943a4583f2122ba48d075960296ed3a54673399", 0xd1}], 0x5, 0xfffffffffffffffe}}, {{&(0x7f0000000680)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x2, 0x1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000700)="3ea282dd3e3ab8ffc6a88b8f8ae5d55b504c8552160791939347c1514e358f8d3f680447758f396cb6fda6896422a5223fff839fffb6e5a65748686d79316f619d5fa8dfb3d6e1bc", 0x48}], 0x1}}, {{&(0x7f0000000880)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000900)="bbf1b7ee453cd2daf25778c09a2928f2871e356bf173e40e870e94ec48202c29940ed950c4ce00dc660d7971a3593c8da259979cda4e066e1ad594b1f20b61029d5aaace150292983c83d4d8669097a47441bc62f5c40f4a19dbb9e2bc19932a44e56137d0434323998102689b55c96d4adf0c96dc109fbb4b5b3d6890", 0x7d}, {&(0x7f0000000980)="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", 0x1000}], 0x2, &(0x7f0000001980)=[{0x108, 0x111, 0xf, "851fb38e30d707e6d3306c67b0434f56ad907c82f7a3dddcdb6818647561c84c8e3010d764226ec3fd56809a912af5c54c93647765b89ed02f9a80d27501813c9e12efa6a42e08ef1e55b5d3c30491ab60a652f07cc2cf2dd18bf45b1a3d5681ccf4d55d766d7729b0e45f51c5cdded655c0b9fb494d17a759549d535c960541c12cad191f63716f95ca5b776a1452e9fe588f9ed8c272e207130b1c849cd8c7c583904b99d2ad03e8d5b5c54af190ef9df1ef9a205847a7e13208cc168e6b7fed732d576f2438db5fe51fd0e7d48adb0ee6602a0297dfe962bade7b5e3e4707f1a697a068f84ab17e8101d4195dafca07f9f9fcbace"}, {0x108, 0x108, 0x6, "5ea92766da62eabaa80cc27d33fc12dbcaf40bc125dc5b028e7b43c1f4619246e44da6d1b11fff84db460744ce4f7663ab74f00a8978fd3a523d76555b45e94e216e47fd7d76bf1126fcf2ab25d8c96b49dbe0880c3e74ee5274866d2e9efccb6158c72541f76779220239cd403a2c980414b9109033ceb61c593184825b67e201c3c9ad2dacac311b104690a108ab8202b6eee8ce03c69d0cf87e435b71953e299b78d102e9a1b9a7f16a872453cc0ac54c19eca1cf30bdf7e73650a8add9b86de7f8d5664d02c7e752e581bb664dbea5a2d7a352fcab3435d4681f9c489ae4f5b6752d099291a500accd32012949f60b7a11"}, {0xb8, 0x10f, 0x6, "f2f3cf66989dc846f8784bf7ffd5eabdc23f848d1c901670c479b2d31b80122bfb81109aace8b1c2dffca1aad9c3a8f60b4943667ed9c8194f0ff8df8fa1d863add1dc5e42bd7f9f00e9ff52e3182186fe70e91b7c3fee3aba63230684644dce4e8bfc6910601325481fbedc37b07ef4aa5cdddbbec81ed442e13b67ae2e0987bac914ec1d32fef7cc0d9cf4c2ae7721b475653b2e66cc7cdbcc9ce3bc9222444a95f25d"}, {0x58, 0x10e, 0x9, "ec1cf6e57c8bf594d21672449b4c85c57ad598fe9aa98f5919f8e0a15738fb1d87832f7826e242237ef45b1b85a54217c1a80fea52bbf607c46c40ff904cd233ef31983d85544d"}, {0xf0, 0x117, 0x9, "f10f799bc6ab1344e0c54469b4eed0b37142e4e26986f0e56f272b81180e8e4169ab366ddbfc40c9f1d0aa9882bbef0aee3ae1e23b9c43c79a259adb1d09180aafe7b2e1e3ce76237a98d110ccf9ed50a36aa7cbd81910249fca8ff2079b7feb15e5a79850f5de2aa9e2c625a139807628994396be8eedbb15b3c3627fd09943c5d9f802ae8cdec7a3af89e97f36fea46d332fb91f75953038490983f1500897c64322bd63b8a525dda2d8be4809945c8d8d25757b69d28bc644597a2ffae143b87e4eaca1ccecfb4b39757d698dc0f213d9adb7aa3ac328cf"}, {0xe8, 0x11, 0xf, "0feed0af106c6215474ac343abc6d93b8afacd6178397ed3a743c92d5b34b657573792351c8b2393eda59ae3b75b9287677a4301d8ac7bb95d9caa6bde29dcb7d0d3f2ac56791002d474dbff0e4d0d112ef8ecfe27a512b81f038aefe4f05610452ed46d9bd1670d1e336100ba62c4227aab53932e8675eff07a9243963a0e6376e1561d171686f1dc853dae546935b5e10c4fef23959a40214cac72aaaadd42a640b09b12556e3b4378904e0e1c5e808855f817b2a86979210e61523e0f8dfbdcf5353022495c6709718e95372d3e3aa3a7dfe0"}, {0x98, 0x114, 0x81, "db7df7d3e50336b2df79d6ed145b296b6aebc03e2d74dc2c979647acdced9ad4dd38baf4dcb12e9689327839dfea2e703adb6bac7bad501ea86a8e0ed99d246d5261ecb2553a05c11b9460bf13d7bfabeb2a4d057ab8d8a959687a33e2520522e1807324a32fe477d7e520d9e4050c1fdb4fc84ec7dc1f521a951debe960090418f2642dfdb7"}, {0xb8, 0x118, 0x8, "00c1a36e26a69bb9dbf824707955286f35be8c19d8973b64bfa4ecd52778a394545b507e48992e947f1defe8e5c24531f5aafe1f99bc1755302c3ae6538de579866edad535ee7277534d277701efff2cf7abd090e8c374626771b1ccf90ae7a70c0194ffbf1450f7e6f486733dcf7d3318cd51c2a6666818c32380fceeaf481e749793ab974783064b223eafe5170ab649328e70c816f3132a3c037adc960d0f6a0d7103"}, {0x28, 0x109, 0x1ce, "60b90e843af559b204f81c344e188e40dd28310ccf"}], 0x670}}, {{&(0x7f0000002000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010100}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000002080)}, {&(0x7f00000020c0)="5c4fa4cd26da1b0dabfed9bb2af2679dddd9c8b2c39c93fee554dc667b8b9928b53c9057e3c19ddb92f6c0f94a3a885f76dcdccc0cdd90ea79c065c5535198006910caff043074684607a7f7589c02095b1cfd35f2d3732ae2a925c4ac743758ba1b1ed7aa9d2aa85adc75a79cfb91abb54ee1dac51179d84b3efe165db265ddf9b54706076d5e88621eac1645062c7d24a3dbdc72845f4068bd745740a68a656f952ba6ccf2ee5e2432a5000683c67edb714dcb4497920b41494118319015218b8e428a6a92e905a03d934c5ac7", 0xce}], 0x2}}, {{&(0x7f0000002200)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x100}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002280)="11a6c3d5f40b38b10d3442814879784c613a382be4775725a2fb5725b8fcb0f858417b6edb789ffe2d3a8c0d94d246952f8ffb9714f779577a860b489ad12bebb265d631eef5eb98a9176b3da72e89754f68168eadc729977178d2f393f0daaabf2fd12ebe115d9e6394aaca297e2043f4cf0b230bc33195cf8417abb6982647065e3ff7eb668f0fa6ddb69160458ddd48891c4f9eeb4cc9021c4356d789d026c837023547386464169652c17109c9", 0xaf}, {&(0x7f0000002340)="a99cc1b9d9e0664544da854a6c0c889e21a47a093e8757316f96d7b69f56e9b88c46785d39fa6793727dd614a653733ccb708f3edbd231048d94f786d257884c72119eeb99a0fda89c51aea177a0f4ff66cdf0bedfb7e75f3d7c41c630119dc0eee1498b9ee34855b749cd6bb727327844ef751606c7edb9ef6a4ff5002bd4ef4e8ad9e8e9a3fc8ddd0aacb6cb02f1cddde2ad75b087dbb57c64fb9fc9481f017e6471cb1d1da579806adf067b68840fe2a326943caf126999375ddf6c2e8b", 0xbf}, {&(0x7f0000002400)="13c862e6fcdb9f4a9886cdc5101ba92731", 0x11}], 0x3}}, {{&(0x7f0000002480)=@in={0x2, 0x4e20, @rand_addr=0x64010100}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002500)="16821e342b4ab92b30e20cc34d57cbb64e66acf2d414931fc1f8c9296ae8ebc2da1994cde1f01e0508c181d8bfe147e3e16769427b7295ce5cb2634c03a5a6ee91d1be2d9456b7eed339aea2048f03298c62882d384e4448da7ddae98fb6f271f03c1a5d90b9d099010945b643aec9cfd244537d6783c50e597b540f2806c7e1b15b5bb869b2dd3f6ebd44e34ed87ec8a9dd04f37610d7fbb76047df1f4a048cdb8442b63e81389079267def575589fad96dfbeb8ca5ce71a2b6", 0xba}], 0x1, &(0x7f0000003d00)=ANY=[@ANYBLOB="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"], 0x1240}}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000003840)="b9c309e11fd4823ac8b6a737f7783f967468d28a1135b702dff28a3baf3cdf8cece648633aa121d0b0c697d57e578c3b0329b58a2b5fe5e7707ad6000f059471412c", 0x42}, {&(0x7f00000038c0)="bc8f2f4ba24e2f8373009fe3a899c62666076894ae5429ac840dd49cef36dd7fbc8805749bc00b2426d6a8f66398c5ed646415c76a990dbd03e64daacd971dcc9a22780b00866bcbc827a734a0b03cca44ab72124e26fba5", 0x58}], 0x2, &(0x7f0000003980)=[{0x100, 0x98, 0x0, "d7676af7786b9962574236a39a59c5b765cf1cd1dc6650101c217b92d9ffafc836adf9b20e1e4ccf058ab6796fe7e8df86d0c8952ca6ba77ef3288c72b100b42a93d8479f75177eab3693ff27586098e3d8a8891eb1cb5a72c7292609c34be445250b0e7bf5664ed970d0966e9884af9de4713badfcd6d9ee7622aa079356cd057e1fe683076c02c8689b03442121d7d2bd04c2ed82b7d965357548eff4e597fb8f4b135638967a6c799255b032d711db415ac173c2aea2be4c130e5e5d6e3b70b9f1fde8fa465ef9c7efdfe62259c9cf8de4f3573ad7bc0375ad3b260d37122145486faf26c57b4e448cb"}, {0x28, 0x1, 0x3, "a9a64c4c76f6d71d8214c7317c861acbff00f848"}, {0x70, 0x11, 0x8b0, "696fdbdbaf7a9923a7abc30afbb362b4c1903632ff50aeded24f6868874630a1625b1334002698c0275d3d566727bd2fa1b7dd4a61375ea6d98d273fdb8ffa1ae385ce5a8b1d1af44ffae4173c82f707170d34ad58c4789a2350e7"}], 0x198}}], 0x7, 0x804) 10m1.868136002s ago: executing program 9 (id=1125): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000140)=0x81) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x1ffffffffffffca3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x2000) pread64(r3, &(0x7f0000001600)=""/4075, 0xfeb, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x20010, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001003661"], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) r5 = gettid() ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x5c, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x18, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000d6bdba0e0000000001ebcda47025b1b3d4eeea020741cd710000008520000002008000afced4aea24ba82a1839000002000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300008a0d00008500000006000000850000009a000000185a00000700000000000000000000004d34010001000000850000001d0000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x8080, 0x7c, &(0x7f00000006c0)=""/124, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x32, r2, 0x8, &(0x7f0000000740)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x9, 0xbd, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f00000007c0)=[r2, r2, r2], &(0x7f0000000800)=[{0x4, 0x1, 0xf, 0x2}, {0x2, 0x4, 0x6, 0x4}, {0x0, 0x3, 0x3, 0xb}, {0x3, 0x1, 0x0, 0x6}], 0x10, 0x4, @void, @value}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000b80)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="de76e68869300000006a00000029bd7000fddbdf250000000081818befc2c62dd0e0cadb1c04090003ffee0004000b0008000a0000"], 0x30}, 0x1, 0x0, 0x0, 0x30004850}, 0x880) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x7f4a, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r9, 0x5) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000900000000000000ffffff7f18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000073000000bf91000000000000bf020000010000008500000084000000b700e3ffffff00009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000002600)=""/4096, 0x41100, 0x60, '\x00', r6, @cgroup_skb, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r8, 0x5, &(0x7f0000000900)=[r2, r2], &(0x7f0000000940)=[{0x4, 0x3, 0xe, 0x8}, {0x0, 0x3, 0xb, 0xc}, {0x2, 0x1, 0x2}, {0x5, 0x2, 0x9, 0x8}, {0x5, 0x1, 0xd, 0x9}], 0x10, 0x5, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) 9m46.090429777s ago: executing program 37 (id=1125): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000140)=0x81) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x1ffffffffffffca3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x2000) pread64(r3, &(0x7f0000001600)=""/4075, 0xfeb, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x20010, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001003661"], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) r5 = gettid() ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x5c, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x18, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000d6bdba0e0000000001ebcda47025b1b3d4eeea020741cd710000008520000002008000afced4aea24ba82a1839000002000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300008a0d00008500000006000000850000009a000000185a00000700000000000000000000004d34010001000000850000001d0000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x8080, 0x7c, &(0x7f00000006c0)=""/124, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x32, r2, 0x8, &(0x7f0000000740)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x9, 0xbd, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f00000007c0)=[r2, r2, r2], &(0x7f0000000800)=[{0x4, 0x1, 0xf, 0x2}, {0x2, 0x4, 0x6, 0x4}, {0x0, 0x3, 0x3, 0xb}, {0x3, 0x1, 0x0, 0x6}], 0x10, 0x4, @void, @value}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000b80)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="de76e68869300000006a00000029bd7000fddbdf250000000081818befc2c62dd0e0cadb1c04090003ffee0004000b0008000a0000"], 0x30}, 0x1, 0x0, 0x0, 0x30004850}, 0x880) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x7f4a, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r9, 0x5) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000900000000000000ffffff7f18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000073000000bf91000000000000bf020000010000008500000084000000b700e3ffffff00009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000002600)=""/4096, 0x41100, 0x60, '\x00', r6, @cgroup_skb, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r8, 0x5, &(0x7f0000000900)=[r2, r2], &(0x7f0000000940)=[{0x4, 0x3, 0xe, 0x8}, {0x0, 0x3, 0xb, 0xc}, {0x2, 0x1, 0x2}, {0x5, 0x2, 0x9, 0x8}, {0x5, 0x1, 0xd, 0x9}], 0x10, 0x5, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) 3m25.03340758s ago: executing program 7 (id=1986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xdd) syz_clone3(0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r5, 0x4000}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 3m23.981613622s ago: executing program 7 (id=1988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000a80)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000054d564b"]) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090001000000000000000a00000008000300", @ANYRES32=r8, @ANYBLOB="140050800500090002000000050002"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x2b, 0x80801, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000300)=""/275) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x86c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x840, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffe, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x581, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x80000000, 0x4, 0xc, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0xfff, 0x9, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x22d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0xa, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40001, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x7f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe4a7b3b254e6d600}, @TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x80000001, 0x6, 0x2, 0x1, 0xfffffffc, 0x5, 0x5, 0x5, 0x80000000, 0x7fffffff, 0x7, 0x7, 0x0, 0x3, 0x800, 0x5, 0x8001, 0x80000000, 0x9c0d, 0x8001, 0x80000000, 0xff, 0x3, 0xe, 0x7, 0xffffffa5, 0x1eb4, 0x7, 0xaabb, 0x8, 0x5, 0x9, 0x9, 0x10001, 0xf, 0x22d9, 0xffffffff, 0x10, 0xba, 0x80000001, 0x79, 0xffff, 0x86c, 0x7ff, 0x6, 0x7, 0x9, 0x65, 0x1, 0x5, 0x0, 0x5, 0x977, 0x1, 0x5, 0x10000, 0x4, 0x0, 0x7ff, 0x9, 0x401, 0x3, 0x3, 0x401, 0xfffffffb, 0x3, 0x4, 0x80, 0x2, 0x1000, 0x5, 0x10000000, 0x82173a00, 0x8000, 0x8, 0x66ee, 0x7, 0x0, 0x800, 0x8000, 0x7, 0x2, 0x4, 0x4, 0x50, 0x5, 0x800, 0x70, 0x6, 0x40, 0x80000000, 0x8, 0x6, 0x7fffffff, 0x4, 0x800, 0x7, 0x4, 0x80, 0x4, 0x8, 0x3, 0x1ff, 0x6, 0x0, 0x9, 0x9, 0xec6, 0x7, 0x8, 0x8, 0x10, 0x10, 0x3, 0x5, 0x0, 0x10, 0x3, 0x0, 0x800, 0x9, 0xf, 0x8, 0x4, 0x2, 0xc18c, 0x6, 0x10001, 0x5, 0xffff, 0x7f, 0xfff, 0x4, 0x6, 0xd, 0x80000000, 0x6, 0x3, 0x1, 0xfff, 0x1, 0xffff, 0x5, 0x100, 0x3, 0xac6, 0xc0000000, 0x78, 0xf1, 0x4, 0x5, 0xb78d, 0xd, 0x7fff, 0xea1, 0xb7, 0x101, 0x80000001, 0x7fffffff, 0xfffffffd, 0x10000, 0x4c4, 0x7, 0x80000000, 0x3ff, 0x4, 0x8, 0xbf9, 0x8, 0x8, 0x4, 0x6, 0x3ff, 0x9fef, 0x8000, 0x4, 0xffff, 0xe, 0x36d, 0xf1e, 0x9, 0xc0a5, 0x7fff, 0xffff, 0x7, 0xd7c8, 0x0, 0x81, 0x7, 0x5, 0x1, 0x7, 0x1, 0x4, 0x5, 0x1, 0xffff, 0x1, 0x5, 0x5, 0x10, 0x1, 0x7, 0x0, 0x0, 0xf, 0x2, 0x0, 0x3, 0x0, 0xfffff800, 0x937, 0x9, 0x80000000, 0x3c0000, 0x1, 0x0, 0x9, 0xab, 0x81, 0x400, 0x7, 0x8, 0x2, 0x6, 0x477, 0x36, 0x57e3fa4c, 0x6, 0xad, 0x7, 0xfff, 0xaa66, 0xa852, 0x3, 0x1, 0xdfdb, 0x80, 0x1, 0x92b2, 0xfffffff8, 0xdc21, 0x0, 0x1, 0x7ff, 0x4, 0x9, 0x6, 0x0, 0xfffffff9, 0x101, 0x9, 0x8, 0x10001, 0x40]}]}}]}, 0x86c}}, 0x0) connect$inet6(r9, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="76d3f95e3bab5fa5272154f56eeafec45daca12cd99c4161e0e13be32d272999859dfcba9facf86060f77ade", 0x2c}, {&(0x7f00000000c0)="b731c1024a77bf9a94fc63", 0xb}, {&(0x7f0000000c40)="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", 0x3c1}], 0x3}}], 0x1, 0x84) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/147, 0x93, 0x21, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x17) 3m23.729385475s ago: executing program 7 (id=1991): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003500)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3f}, 0x1c, &(0x7f0000001540)=[{&(0x7f00000001c0)="11", 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={r2}, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000800100003e4", @ANYRES32=r6, @ANYBLOB="83000400000000002000128008000100736974001400028005000900040000000800140003000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x901) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port1\x00', 0x0, 0x0, 0x5, 0x0, 0x1}) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r9, 0x47f6, 0x0, 0x3, 0x0, 0x0) ioperm(0x0, 0x2, 0x2da3b9f4) personality(0x4000000) r12 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100007600090400000003000000c6559239c83ce52ef92adc4a40"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4a) syz_usb_control_io$hid(r12, 0x0, 0x0) 3m21.609456724s ago: executing program 7 (id=1996): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f00000006c0)=@ethtool_rxfh={0x47, 0x1, 0x2, 0x6, 0x4, "e87a00"}}) close_range(r2, 0xffffffffffffffff, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$SNDCTL_DSP_SUBDIVIDE(r6, 0xc0045009, &(0x7f0000000140)=0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c0000000001010400fcffffffffffffff000000240001801402018008000100e00000010800ef21fa7e4e3eafec95b912f91c010c000280050001"], 0x6c}}, 0x0) 3m20.006878343s ago: executing program 7 (id=1999): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000800, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000180), 0x7fffffff, 0x80001) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r7, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r8 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) ftruncate(r8, 0x0) 3m15.91695425s ago: executing program 7 (id=2006): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400), 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32, @ANYBLOB="0400280010006e"], 0x44}, 0x1, 0x0, 0x0, 0x4091}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) 3m14.388742887s ago: executing program 38 (id=2006): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400), 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32, @ANYBLOB="0400280010006e"], 0x44}, 0x1, 0x0, 0x0, 0x4091}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) 2m24.683108852s ago: executing program 4 (id=2100): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9bbb37d8cb736c308b8d396f5bf30284dd07c71df2b4b42aef66edc907ab65de1f40d1396765"], 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0xf, @remote, 0x1}, @in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x7fff}, @in={0x2, 0x4e21, @private=0xa010102}, @in6={0xa, 0x4e23, 0x4, @loopback}, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, @in6={0xa, 0x4e20, 0x4, @local}], 0x9c) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9}}}}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r4, &(0x7f0000006380)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000001c0), 0x4}}], 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611224000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) 2m23.517876961s ago: executing program 4 (id=2105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) getpgid(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) timer_create(0x0, 0x0, 0x0) fcntl$lock(r1, 0x5, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000b00)=0x10001, 0x4) recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186, 0xba}, {0xffffffffffffffff}], 0x2, &(0x7f0000000280)=""/239, 0xef}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000580)=""/245, 0xf5}], 0x5, &(0x7f0000000700)=""/27, 0x1b}}], 0x3, 0x10162, 0x0) 2m22.417780677s ago: executing program 4 (id=2106): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147440, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$video4linux(0x0, 0x6, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$loop(0x0, 0x81, 0x2a82) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)) shutdown(r4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)='qnx4\x00', 0x20808c, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000003c0)={0x90000000}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xffc1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 2m20.571026537s ago: executing program 4 (id=2109): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x1000, 0x808, &(0x7f00003b7000/0x1000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0x27, 0x7, 0x1, 0x0, "38ab20b41df83e4cee41e9d0a474dff0fc9a9cdf500ca46e1d4230b3b6fdee4e2d2c08"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x6) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e21, 0x0, @remote, 0x3}, 0x1c) r4 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x80341) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f00000000c0)={0xe8, 0x0, 0x3017, 0x7, 0x8, 0x8}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) 2m18.381415954s ago: executing program 4 (id=2112): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = open(0x0, 0x101000, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x4f0, 0x1b0, 0xd0, 0xd0, 0x3e0, 0x310, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0xff], 'macvlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0xfd}, {0xffffffffffffffff}, {}, 0xf3d9, 0x2}}}, {{@ipv6={@mcast1, @remote, [], [0xff, 0x0, 0x0, 0xff], '\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1000, 0x6, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xffffffff}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)={0x220, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_OURS={0x170, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x81, 0x4, "0e5ec9a1472a51bd16e798c37474d5923d0636ae9ae8cb7f14d2807d0dc1c8b2fceb76502ab4b34b423adb512503c35f2a703daba78a8df09b0abc2f4c08c13b366a74fc8cc3905869758ffb3c177a6f2ee6a5cebc72b1bdf0c94b98ae0da7b4c0174d076060df481ae2220f98e2a7c3bc7730f003a5ad3e4c5c889b19"}, @ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'dummy0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'HL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '](\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '*)&@]\\$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{%{\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\%\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xe4}, @ETHTOOL_A_LINKMODES_OURS={0x5c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x57, 0x5, "5bb5954b11028d273a0833bf958f5d703b0cf7d34a7c193f7e5cfab933fc23ee6f1509f4b281d537b76e826363854d47563b71785bfe348dcfee0151473686e747bb1e950a1c96272a186996e08cd93f923343"}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x244}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xd}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}]}, 0x220}, 0x1, 0x0, 0x0, 0x4848}, 0x1) 2m14.66590841s ago: executing program 4 (id=2121): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x2f, 0x800000000004, @tid=r0}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$peek(0x4, r0, &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004000) r4 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) 1m59.475495486s ago: executing program 39 (id=2121): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x2f, 0x800000000004, @tid=r0}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$peek(0x4, r0, &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004000) r4 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) 23.585297874s ago: executing program 3 (id=2319): openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) mkdir(&(0x7f0000000400)='./file0\x00', 0x100) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f0000000000)=@null) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0xfffff7b7, &(0x7f0000001980)={0x0, 0x202da9, 0x100, 0x1, 0x150}, &(0x7f0000000780), &(0x7f0000001a00)) lseek(0xffffffffffffffff, 0xffffffffffffa937, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000001b00)={0x0, 0x2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000003300), r4) sendmsg$NFC_CMD_ENABLE_SE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf25110000000800150002000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000000) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 23.389075622s ago: executing program 5 (id=2321): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200001, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x1c, "aad7df99a2fc2cbfbd8517407d37f106ee87cc32ef43b3cf8e3b9317"}, &(0x7f00000001c0)=0x24) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000100)={{0x8, 0x10}, {0xe}, 0xbf00, 0xbf}) 21.762781981s ago: executing program 3 (id=2323): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x18}, 0xc) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x4, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='page_pool_update_nid\x00', 0xffffffffffffffff, 0x0, 0x20c}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000140)) r2 = syz_open_dev$vcsu(&(0x7f0000000180), 0x8, 0xa0200) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r3, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x32}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22000008}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELCHAIN={0x84, 0x5, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9db0d50}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x45b22caa}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1509b01d}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3a4c190f}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x1, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) read$msr(r2, &(0x7f0000000500)=""/107, 0x6b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kvm_age_hva\x00', r2, 0x0, 0x6}, 0x18) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000600)={0x400a, 0x8001, 0x0, 0x100}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000640)={0x2, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000740)={{0x7, 0x2, 0x8, 0x3, 'syz0\x00', 0x4}, 0x5, 0x20, 0xcd, 0x0, 0x4, 0x5, 'syz1\x00', &(0x7f0000000700)=['syz1\x00', '\x03\x03\x03\x03\x03\x03', '%./\xb7.#&.\x00', '.[\x00'], 0x17}) r5 = fsmount(r2, 0x0, 0x4) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$vhost_msg_v2(r6, &(0x7f00000009c0)={0x2, 0x0, {&(0x7f00000008c0)=""/176, 0xb0, &(0x7f0000000980)=""/52, 0x1, 0x3}}, 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000a40)={{0x1, 0x32}, 'port1\x00', 0x14, 0x20, 0x6, 0x8, 0xa54b, 0x40, 0x1, 0x0, 0x6, 0x4}) ioctl$VHOST_VDPA_GET_VRING_NUM(r5, 0x8002af76, &(0x7f0000000b00)) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b40), 0x22000) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000000b80)={0x81, {0x18, 0x6, 0x10001, 0x8, 0x1}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), r8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000c00)={{0x7d, 0x5}, 'port1\x00', 0x1, 0x438, 0x4, 0x6b3, 0x100, 0x401, 0x6, 0x0, 0x9, 0xf1}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) listen(r9, 0x4) ioctl$SNDCTL_DSP_GETTRIGGER(r7, 0x80045010, &(0x7f0000000cc0)) 21.517093522s ago: executing program 5 (id=2324): socket$netlink(0x10, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x0, 0x9, 0xd9}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) creat(0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="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", 0x263, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000240)=""/54}, 0x20) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) 21.418487692s ago: executing program 3 (id=2326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0403052003ceac6a3f8f96117bd82ad32f40459d03e383036816e48e8e5a68e758c467ef62774e1faf7e68"], 0x7) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000300)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x2}}, 0x10, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, 0x0, 0x2) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) semtimedop(0x0, 0x0, 0x0, 0x0) accept$netrom(0xffffffffffffffff, &(0x7f0000000400)={{0x3, @default}, [@default, @bcast, @default, @null, @rose, @netrom, @remote, @netrom]}, &(0x7f0000000080)=0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 18.161818308s ago: executing program 6 (id=2331): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket(0x11, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x10) 17.833928322s ago: executing program 6 (id=2333): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SET_THP_DISABLE(0x44, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000180)="e4d79b3b828024b59aa49c257addff4e", 0x20) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000140)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000000)=0x7, 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x18642, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x881) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf6ed4a7fd1ce5562, 0x13, r2, 0xbc7e9000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) dup(0xffffffffffffffff) fspick(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000380)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000004c0)='./file0\x00', 0x1) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in6=@loopback, 0x4d2, 0x6c}, @in6=@empty, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x7fffffffffffffff}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8, 0x16, 0x7fff}]}, 0x140}}, 0x0) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000940)=""/4096, &(0x7f0000000100)=0x1000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) 16.916688969s ago: executing program 5 (id=2334): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SET_THP_DISABLE(0x44, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000180)="e4d79b3b828024b59aa49c257addff4e", 0x20) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000140)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000000)=0x7, 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x18642, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x881) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf6ed4a7fd1ce5562, 0x13, r2, 0xbc7e9000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) dup(0xffffffffffffffff) fspick(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000380)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000004c0)='./file0\x00', 0x1) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in6=@loopback, 0x4d2, 0x6c}, @in6=@empty, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x7fffffffffffffff}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8, 0x16, 0x7fff}]}, 0x140}}, 0x0) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000940)=""/4096, &(0x7f0000000100)=0x1000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) 12.08630282s ago: executing program 5 (id=2340): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SET_THP_DISABLE(0x44, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000180)="e4d79b3b828024b59aa49c257addff4e", 0x20) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000140)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000000)=0x7, 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x18642, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x881) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf6ed4a7fd1ce5562, 0x13, r2, 0xbc7e9000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) dup(0xffffffffffffffff) fspick(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000380)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000004c0)='./file0\x00', 0x1) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in6=@loopback, 0x4d2, 0x6c}, @in6=@empty, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x7fffffffffffffff}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8, 0x16, 0x7fff}]}, 0x140}}, 0x0) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000940)=""/4096, &(0x7f0000000100)=0x1000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) 11.773425695s ago: executing program 6 (id=2341): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000bc0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000001880), 0x40101, 0x0) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 11.231893692s ago: executing program 8 (id=2342): socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$video(&(0x7f0000000100), 0x800800004, 0x20080) madvise(&(0x7f00006e9000/0x4000)=nil, 0x4000, 0x12) socket(0x10, 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) getpgrp(0x0) kcmp(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffe, {0x0, 0x0, 0xe403, 0x0, 0x5280}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x19}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000844}, 0x8880) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32, @ANYBLOB="000000000000000018001a8014000a8005000800"], 0x40}}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 10.92943063s ago: executing program 2 (id=2343): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket(0x11, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8], 0x3c}}, 0x10) 10.646433256s ago: executing program 8 (id=2344): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000bcd37c240943dca033093810", @ANYRES32, @ANYBLOB="0000000000000000b70800000c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setregid(0xee00, 0xee00) keyctl$session_to_parent(0x12) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_io_uring_setup(0x3c66, &(0x7f0000000140)={0x0, 0xfffffffe, 0x10100, 0x2, 0x4000000}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2df0, 0x0, 0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10.557681028s ago: executing program 2 (id=2345): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4000800, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000180), 0x7fffffff, 0x80001) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) r7 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r7, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) ftruncate(r7, 0x0) 9.941261807s ago: executing program 3 (id=2346): socket$netlink(0x10, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x0, 0x9, 0xd9}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000240)=""/54}, 0x20) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) 9.820856929s ago: executing program 6 (id=2347): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r5 = openat$sw_sync(0xffffff9c, &(0x7f00000005c0), 0x42000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000600)={0x0, "76e14961f6d0d5439e2248ca5baf1f1a9439b9f2066b1c2f76cb704ac25cbf51"}) close(r5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_j1939(r7, &(0x7f0000000640)={0x1d, r8, 0x0, {0x0, 0x0, 0x1}, 0x1}, 0x18) sendfile(r7, r4, 0x0, 0x1000000000000a) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@getqdisc={0x40, 0x26, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff8, 0x3}, {0x8, 0x4}, {0x10, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 8.574481172s ago: executing program 8 (id=2348): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0xb) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) r4 = socket$inet6(0xa, 0x2, 0x3a) bind$l2tp6(r4, &(0x7f0000001080)={0xa, 0x0, 0x1, @mcast2, 0x4, 0x5}, 0x20) r5 = syz_io_uring_setup(0x1ade, &(0x7f0000000300)={0x0, 0x6aa2, 0x10100, 0x400, 0xfffffffc}, &(0x7f0000000440), &(0x7f0000000080)) io_uring_enter(r5, 0x5b43, 0x0, 0x20, 0x0, 0x0) (async) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r7 = fsopen(&(0x7f0000000000)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='\a\xca3\xe9D7\xee5\r\x1cR\x90\xcdP\x0e\xbf\xc7N\x0f\"H\x86\xf9\x95\xe7dz\xe6\x93\xba\xc9\xff\x9f\xf0V\xe6\xc2\xc3\xd0\xdd\x01', &(0x7f00000007c0)='/\b\x00\x00\x00\x00\x00\x00\x00o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X\x05\x00\n}\xf3\x9d\xe4_\x05\x9cqf1\t\x00#b?9\xde\xb5C\'\x83L\xcf\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd78e\xa6\xc1\n1J?R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9mT\x14R_\x9a\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) r7 = dup(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045540, &(0x7f0000000280)=0xffffff4a) 6.401923315s ago: executing program 8 (id=2351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x1, 0x5, 0xffffffff, 0x30000, 0x80000001, 0x8, 0x4, 0x5e5e}, &(0x7f0000000480), &(0x7f0000000500)={0x0}) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x27}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002000010327bd7000fedbdf25020000fc00001f001c00"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000000) socket$vsock_stream(0x28, 0x1, 0x0) clock_getres(0x2, 0x0) r4 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000100)=@keyring) add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r4) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x10000000, 0x0, 0x7fffffff}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x10000}}, 0x0, 0x0}}) 6.399885561s ago: executing program 5 (id=2352): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000012", @ANYRES16=0x0, @ANYBLOB="7f4d25bd7000fcdbdf253400000008000300", @ANYRES32=r1, @ANYBLOB="140055002635eb6f2d8ab086368aa4cec5d828e0040034000600fd00ca000000"], 0x3c}}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0x1fc, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x100, 0x80}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x1c, 0xfa, "89b45725ff8252b380df2f06b5492b074c46cc79399cccb8"}, @NL80211_ATTR_FILS_ERP_REALM={0xe6, 0xfa, "3d6424ceeba919779bad254effffe2a3fd62382d7b648eb864dc65915389b80e5a759ad587d447cae86baad2d256232c11c3957cb7939e989b78fbc5387f5797676a4ea676d62d1ef4a3f53e606161342c2d29c46f2b87e3cac5a8c33234389598b0945a0b6b53c473e1eeb7add398e210af04c720c2bc49c94f3b3dd6e304494199ac63c5311fc3b086168a00b4929d29e22dcd9f46858fb0bbdf5b6de020832e5012c531c96bb0378723e96d22ba96505b05a4a39c8da98527742ac4c80444628f6be4c045dac20d2263835a03683d8020d3d9de901dafe397bee639911f29ddb5"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "969708441aeecf17"}], @NL80211_ATTR_IE={0xc1, 0x2a, [@fast_bss_trans={0x37, 0xa1, {0x9, 0x5, "d714f71c9400db2f9e74d19942583474", "1b165f22dd0e81a9f913a79a21f73360ea5db4905ce1a96165a4837a9e6789d5", "d1bd899e87e2b292bbe0a8f385aea3026aaaad59fbc9438416bfa9032729b8b0", [{0x2, 0x3, "caba4a"}, {0x4, 0x11, "7186730b18494432c580f84326e58c1031"}, {0x4, 0x1d, "ae91f6961b22ab357e42f48b3183fc483bce5280d1064c5f062ae0b244"}, {0x1, 0x6, "2eccafabe944"}, {0x1, 0xe, "b39ee5c92c978df5f9415aef5850"}]}}, @ibss={0x6, 0x2, 0x4}, @peer_mgmt={0x75, 0x14, {0x0, 0xfe00, @void, @void, @val="c2e2987029d4fbd1f5707ca4477a11c0"}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x15}, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x1, 0x5, 0xffffffff, 0x30000, 0x80000001, 0x8, 0x4, 0x5e5e}, &(0x7f0000000480), &(0x7f0000000500)={0x0}) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x27}, 0x14) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002000010327bd7000fedbdf25020000fc00001f001c00"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000000) socket$vsock_stream(0x28, 0x1, 0x0) clock_getres(0x2, 0x0) r8 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000100)=@keyring) add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r8) r9 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x35}]) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r10, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0x0, 0x7fffffff}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x10000}}, 0x0, 0x0}}) 6.212420458s ago: executing program 2 (id=2353): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffd, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4811) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x8) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x1000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000500050001000000080004000000000005000600000000000800030001000000df756fc266b29925a5f87eea66faf002b81c4a183ae01092b538bea3e74aba20242304d3fe93cd895f3d53f0b74ce3bd38a4490565d09d265c13e712ec5ccd10ac208364bb0b387840787920fe5b688cc3f464f83ec12a49bb2438921e9e9792d5a36700ea205042"], 0x34}}, 0x0) 4.45441058s ago: executing program 8 (id=2354): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e5000000870006000009058103"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 4.349857906s ago: executing program 5 (id=2355): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2, 0x2c003) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) unshare(0x24020400) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x7, 0x1, 0x2, 0xa}, {0x2}], 0x10, 0x8, @void, @value}, 0x94) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000480)='contention_end\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) rt_sigaction(0x21, &(0x7f0000000100)={0x0, 0x88000002, 0x0, {[0x477e]}}, 0x0, 0x8, &(0x7f0000000340)) 4.018030074s ago: executing program 6 (id=2356): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.254899456s ago: executing program 2 (id=2357): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000040}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xe, 0xc, &(0x7f0000001280)=ANY=[@ANYBLOB="1800005bbb56f3000004000052ffe24c05515825000000001b002945512542b2f0bfeb0ebe6d6a39a461478fb92790fd8961b2656fdbe161679ebcabbc0149334815f30d4d1e956adcdc3e09163f182a766104779dbdf731e99627178b4072116588cdef2f6c23fc25e602d2", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000001300)={0x0, 0x9, @status={[0xfaa, 0x7, 0x5, 0xca92, 0xffffffff, 0x8000000000000000]}, [0xffffffffffffffa4, 0x86, 0xffffffffffffffff, 0x196, 0x4, 0x8001, 0xb, 0x5, 0x7, 0x50a3, 0x3ff, 0x18000000, 0xf8b, 0x7fff, 0x9, 0x5, 0x9, 0x2, 0x79ea, 0x8, 0x754, 0x96f, 0x2, 0x7, 0x6f, 0x8000000000000000, 0x100000000, 0x4521, 0x2, 0x8, 0x9, 0x6, 0xac91, 0x7, 0x2, 0x9, 0x100000001, 0x4, 0x80000001, 0xb17, 0x2, 0x8, 0x9, 0x9, 0x6, 0xef8f, 0xfffffffffffffff7, 0x6, 0x0, 0x4, 0x800, 0x5, 0x76d, 0x0, 0x100000000, 0xff, 0x18afce95, 0x7, 0x55, 0x0, 0xffffffff00000000, 0x7, 0x1, 0xfffffffffffffff8]}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syslog(0x4, &(0x7f00000000c0)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x88890) 1.985080013s ago: executing program 3 (id=2358): socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010300000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000011400"], 0x64}}, 0x0) 1.624276317s ago: executing program 8 (id=2359): socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010300000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000150a01020000c2000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10024804}, 0x24040808) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xa8, 0xc8, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4076, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00', 0x7) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 1.061667153s ago: executing program 2 (id=2360): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffd, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4811) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x8) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = timerfd_create(0x0, 0x80000) timerfd_settime(r4, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timerfd_settime(r4, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {r5, r6+60000000}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000010000000500050001000000080004000000000005000600000000000800030001000000df756fc266b29925a5f87eea66faf002b81c4a183ae01092b538bea3e74aba20242304d3fe93cd895f3d53f0b74ce3bd38a4490565d09d265c13e712ec5ccd10ac208364bb0b387840787920fe5b688cc3f464f83ec12a49bb2438921e9e9792d5a36700ea205042"], 0x34}}, 0x0) 0s ago: executing program 3 (id=2361): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x20000000000000d2, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000de14d8403a090f05b7c2000000010902120001e50000000904000000d8ba6e00"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000380)='\xab\x00\x1a\x9c\x0fv\x99\xd8PYcK\xb7\xe6!t\xa9\xcf\x8d\xbf\x1e\x9ea#\x94\x89\x81L\xd5a\xc1\x96X\\\xac\xfc\xed\x11 \xa9\xf8t\xef\x0eT\x82:6\x16xEw\x85\xbd\r\rt\xc6Jk\x04\xa8f\xde0\xbc\xbe^3\xce\xd1\x7f\xfaH\xdbQ\xea\xbd\xf5D\xf5', 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000480), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="94", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f00000005c0)=""/54, 0x36) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000200000000001c000a00", @ANYRES32=0x0, @ANYBLOB="040000000000000010"], 0x2c, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): 7b8e969 code=0x7ffc0000 [ 997.696893][ T30] audit: type=1326 audit(1747911992.964:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13948 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a87b8e969 code=0x7ffc0000 [ 1000.058733][ T5921] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1000.387352][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 1000.402682][ T5921] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 1000.430598][ T5921] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.478877][ T5921] usb 5-1: config 135 has no interface number 0 [ 1000.509995][ T5921] usb 5-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 1000.561704][ T5921] usb 5-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 1000.618297][ T5921] usb 5-1: config 135 interface 230 has no altsetting 0 [ 1000.651380][ T5921] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1000.693106][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.726436][ T5921] usb 5-1: Product: syz [ 1000.730667][ T5921] usb 5-1: Manufacturer: syz [ 1000.749246][ T5921] usb 5-1: SerialNumber: syz [ 1000.784837][ T5921] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 1000.799560][ T5921] usb 5-1: No valid video chain found. [ 1001.152362][ T5889] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1002.094871][ T5889] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.143438][T14001] binder: 13991:14001 ioctl 4018620d 0 returned -22 [ 1002.259536][ T5889] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 1002.290259][ T30] audit: type=1326 audit(1747911998.354:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13991 comm="syz.3.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59eb8e969 code=0x7ffc0000 [ 1002.356553][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.394335][ T5889] usb 7-1: Product: syz [ 1002.407728][ T30] audit: type=1326 audit(1747911998.354:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13991 comm="syz.3.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fe59eb8e969 code=0x7ffc0000 [ 1002.409223][ T5889] usb 7-1: Manufacturer: syz [ 1002.429572][ T30] audit: type=1326 audit(1747911998.354:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13991 comm="syz.3.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59eb8e969 code=0x7ffc0000 [ 1002.463755][ T30] audit: type=1326 audit(1747911998.364:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13991 comm="syz.3.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59eb8e969 code=0x7ffc0000 [ 1002.520435][ T5889] usb 7-1: SerialNumber: syz [ 1002.570975][ T5889] usb 7-1: config 0 descriptor?? [ 1002.594693][ T5889] ims_pcu 7-1:0.0: Zero length descriptor [ 1002.610577][ T5889] ims_pcu 7-1:0.0: probe with driver ims_pcu failed with error -22 [ 1003.117003][T13988] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1806'. [ 1003.832695][ T24] usb 5-1: USB disconnect, device number 75 [ 1004.526371][ T5889] usb 7-1: USB disconnect, device number 56 [ 1004.663488][T14024] netlink: 'syz.7.1816': attribute type 4 has an invalid length. [ 1005.334813][ T5875] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1005.497306][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.917402][T14035] binder: 14034:14035 ioctl 4018620d 0 returned -22 [ 1005.979644][ T30] audit: type=1326 audit(1747912002.164:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14034 comm="syz.7.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43b38e969 code=0x7ffc0000 [ 1005.992690][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1006.013023][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1006.055396][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1006.062208][ T30] audit: type=1326 audit(1747912002.164:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14034 comm="syz.7.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43b38e969 code=0x7ffc0000 [ 1006.094438][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1006.108126][ T30] audit: type=1326 audit(1747912002.164:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14034 comm="syz.7.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fd43b38e969 code=0x7ffc0000 [ 1006.166433][ T30] audit: type=1326 audit(1747912002.164:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14034 comm="syz.7.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43b38e969 code=0x7ffc0000 [ 1006.195848][ T5875] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1006.205464][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1006.390552][ T5875] usb 4-1: Product: syz [ 1006.394904][ T30] audit: type=1326 audit(1747912002.164:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14034 comm="syz.7.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43b38e969 code=0x7ffc0000 [ 1006.417385][ T5875] usb 4-1: Manufacturer: syz [ 1006.754432][ T5875] usb 4-1: SerialNumber: syz [ 1006.765311][ T5875] usb 4-1: config 0 descriptor?? [ 1007.214898][ T5875] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1007.312289][ T5875] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1007.467498][ T5875] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 1007.530498][ T5875] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1007.598022][ T5875] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1007.720709][ T5875] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 1009.464722][ T5875] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1009.473448][ T5875] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 1009.509144][ T5875] usb 4-1: USB disconnect, device number 23 [ 1011.964444][T14079] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1831'. [ 1011.986928][T14078] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1831'. [ 1012.704476][T11219] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 1012.884470][T11219] usb 7-1: device descriptor read/64, error -71 [ 1013.044432][ T5875] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1013.432829][T11219] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 1013.507665][ T5875] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.527786][ T5875] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1013.549633][ T5875] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1013.565038][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.573961][ T5875] usb 4-1: Product: syz [ 1013.578635][T11219] usb 7-1: device descriptor read/64, error -71 [ 1013.593519][ T5875] usb 4-1: Manufacturer: syz [ 1013.604109][ T5875] usb 4-1: SerialNumber: syz [ 1013.809618][T11219] usb usb7-port1: attempt power cycle [ 1013.874257][T14092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1014.373051][T14083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.485086][T14083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.535168][T11219] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 1014.596848][T11219] usb 7-1: device descriptor read/8, error -71 [ 1015.023957][ T5875] usb 4-1: 0:2 : does not exist [ 1015.085091][T11219] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 1015.215304][T14105] trusted_key: encrypted_key: key user:syz not found [ 1015.274365][T11219] usb 7-1: device descriptor read/8, error -71 [ 1016.006045][T11219] usb usb7-port1: unable to enumerate USB device [ 1016.066783][T14110] program syz.4.1841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1017.104941][ T5875] usb 4-1: USB disconnect, device number 24 [ 1017.203737][T12235] udevd[12235]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1021.265339][T14145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1851'. [ 1021.314490][ T5921] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1021.314489][ T5875] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1022.155711][ T5921] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.184435][ T5875] usb 4-1: device descriptor read/64, error -71 [ 1022.193740][ T5921] usb 9-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 1022.216455][ T5921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.407792][ T5921] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1022.445110][ T5875] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1022.604616][ T5875] usb 4-1: device descriptor read/64, error -71 [ 1022.637373][ T10] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1022.745768][ T5875] usb usb4-port1: attempt power cycle [ 1023.081094][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.094227][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1023.138011][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1023.164737][ T5875] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1023.195040][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.198309][ T5875] usb 4-1: device descriptor read/8, error -71 [ 1023.208158][ T10] usb 5-1: Product: syz [ 1023.213452][ T10] usb 5-1: Manufacturer: syz [ 1023.218740][ T10] usb 5-1: SerialNumber: syz [ 1023.234765][ T5877] usb 9-1: USB disconnect, device number 41 [ 1023.475378][T14152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.499981][T14152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.751330][ T10] usb 5-1: 0:2 : does not exist [ 1024.118995][ T5875] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1024.172578][ T5875] usb 4-1: device descriptor read/8, error -71 [ 1024.295474][ T5875] usb usb4-port1: unable to enumerate USB device [ 1024.694266][T14168] trusted_key: encrypted_key: keyword 'nŠîì!efault' not recognized [ 1026.543091][T14176] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1858'. [ 1026.595680][ T10] usb 5-1: USB disconnect, device number 76 [ 1026.677006][T12235] udevd[12235]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1027.794775][T14193] tmpfs: Unknown parameter 'no' [ 1027.801079][T14193] binder: 14192:14193 ioctl 400c620e 200000000380 returned -22 [ 1027.902385][T14196] netlink: 'syz.8.1864': attribute type 23 has an invalid length. [ 1029.529557][T14212] netlink: 'syz.6.1869': attribute type 10 has an invalid length. [ 1030.654050][T14223] netlink: 'syz.4.1875': attribute type 10 has an invalid length. [ 1030.683807][T14225] fuse: Bad value for 'fd' [ 1030.741040][T14223] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1030.761216][ T5955] Process accounting resumed [ 1031.574673][ T5839] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1031.993450][ T5839] usb 5-1: Using ep0 maxpacket: 16 [ 1032.136720][ T5839] usb 5-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 1032.150262][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1032.171848][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1032.347398][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1032.364747][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1032.380442][ T5839] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1032.404712][ T5839] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1033.208035][ T5839] usb 5-1: Manufacturer: syz [ 1033.270438][T14248] FAULT_INJECTION: forcing a failure. [ 1033.270438][T14248] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.391000][ T5839] usb 5-1: config 0 descriptor?? [ 1033.455382][T14248] CPU: 1 UID: 0 PID: 14248 Comm: syz.6.1882 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1033.455413][T14248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1033.455428][T14248] Call Trace: [ 1033.455437][T14248] [ 1033.455447][T14248] dump_stack_lvl+0x189/0x250 [ 1033.455486][T14248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1033.455515][T14248] ? __pfx__printk+0x10/0x10 [ 1033.455547][T14248] ? __lock_acquire+0xaac/0xd20 [ 1033.455589][T14248] should_fail_ex+0x414/0x560 [ 1033.455619][T14248] should_failslab+0xa8/0x100 [ 1033.455641][T14248] __kmalloc_noprof+0xcb/0x4f0 [ 1033.455672][T14248] ? __nla_parse+0x40/0x60 [ 1033.455693][T14248] ? seg6_local_build_state+0x129/0xdb0 [ 1033.455730][T14248] seg6_local_build_state+0x129/0xdb0 [ 1033.455774][T14248] ? __lock_acquire+0xaac/0xd20 [ 1033.455804][T14248] ? __pfx_seg6_local_build_state+0x10/0x10 [ 1033.455851][T14248] ? lwtunnel_build_state+0xe2/0x4c0 [ 1033.455887][T14248] lwtunnel_build_state+0x381/0x4c0 [ 1033.455920][T14248] ? lwtunnel_build_state+0xe2/0x4c0 [ 1033.455955][T14248] fib_nh_common_init+0x14b/0x430 [ 1033.455976][T14248] ? in6_dev_get+0x1a/0x290 [ 1033.456003][T14248] ? __pfx_fib_nh_common_init+0x10/0x10 [ 1033.456023][T14248] ? in6_dev_get+0x1a/0x290 [ 1033.456053][T14248] fib6_nh_init+0x1608/0x1ff0 [ 1033.456089][T14248] ? inet6_rtm_newroute+0x222/0x1bf0 [ 1033.456120][T14248] ? netlink_rcv_skb+0x21c/0x490 [ 1033.456142][T14248] ? netlink_unicast+0x758/0x8d0 [ 1033.456160][T14248] ? netlink_sendmsg+0x805/0xb30 [ 1033.456185][T14248] ? __pfx_fib6_nh_init+0x10/0x10 [ 1033.456206][T14248] ? do_syscall_64+0xf6/0x210 [ 1033.456231][T14248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.456289][T14248] ? ip_fib_metrics_init+0x404/0x6f0 [ 1033.456316][T14248] ? fib6_info_alloc+0x30/0xf0 [ 1033.456339][T14248] ? __pfx_ip_fib_metrics_init+0x10/0x10 [ 1033.456367][T14248] ? __asan_memcpy+0x40/0x70 [ 1033.456394][T14248] ? ipv6_addr_prefix+0xe7/0x1d0 [ 1033.456430][T14248] ip6_route_info_create+0x9ff/0x1360 [ 1033.456472][T14248] ip6_route_add+0x28/0x160 [ 1033.456500][T14248] inet6_rtm_newroute+0x222/0x1bf0 [ 1033.456534][T14248] ? __lock_acquire+0xaac/0xd20 [ 1033.456565][T14248] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1033.456588][T14248] ? __mutex_trylock_common+0x153/0x260 [ 1033.456613][T14248] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1033.456631][T14248] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1033.456667][T14248] ? rcu_is_watching+0x15/0xb0 [ 1033.456700][T14248] ? trace_contention_end+0x39/0x120 [ 1033.456721][T14248] ? __mutex_lock+0x330/0xe80 [ 1033.456750][T14248] ? __dev_queue_xmit+0x27e/0x3a70 [ 1033.456779][T14248] ? __dev_queue_xmit+0x27e/0x3a70 [ 1033.456845][T14248] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1033.456866][T14248] rtnetlink_rcv_msg+0x779/0xb70 [ 1033.456896][T14248] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1033.456918][T14248] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1033.456947][T14248] ? ref_tracker_free+0x63a/0x7d0 [ 1033.456969][T14248] ? __copy_skb_header+0xa7/0x550 [ 1033.457010][T14248] netlink_rcv_skb+0x21c/0x490 [ 1033.457036][T14248] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1033.457062][T14248] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1033.457116][T14248] ? netlink_deliver_tap+0x2e/0x1b0 [ 1033.457141][T14248] ? netlink_deliver_tap+0x2e/0x1b0 [ 1033.457171][T14248] netlink_unicast+0x758/0x8d0 [ 1033.457207][T14248] netlink_sendmsg+0x805/0xb30 [ 1033.457231][T14248] ? is_bpf_text_address+0x26/0x2b0 [ 1033.457269][T14248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1033.457304][T14248] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1033.457326][T14248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1033.457352][T14248] __sock_sendmsg+0x219/0x270 [ 1033.457377][T14248] ____sys_sendmsg+0x505/0x830 [ 1033.457413][T14248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1033.457453][T14248] ? import_iovec+0x74/0xa0 [ 1033.457487][T14248] ___sys_sendmsg+0x21f/0x2a0 [ 1033.457518][T14248] ? __pfx____sys_sendmsg+0x10/0x10 [ 1033.457588][T14248] ? __fget_files+0x2a/0x420 [ 1033.457608][T14248] ? __fget_files+0x3a0/0x420 [ 1033.457640][T14248] __x64_sys_sendmsg+0x19b/0x260 [ 1033.457673][T14248] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1033.457721][T14248] ? do_syscall_64+0xba/0x210 [ 1033.457753][T14248] do_syscall_64+0xf6/0x210 [ 1033.457781][T14248] ? clear_bhb_loop+0x60/0xb0 [ 1033.457808][T14248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.457828][T14248] RIP: 0033:0x7f239158e969 [ 1033.457848][T14248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.457867][T14248] RSP: 002b:00007f23923f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1033.457891][T14248] RAX: ffffffffffffffda RBX: 00007f23917b5fa0 RCX: 00007f239158e969 [ 1033.457906][T14248] RDX: 000000001000c840 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1033.457921][T14248] RBP: 00007f23923f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.457934][T14248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.457947][T14248] R13: 0000000000000000 R14: 00007f23917b5fa0 R15: 00007ffee6c1dd88 [ 1033.457980][T14248] [ 1034.283039][ T5839] usb 5-1: USB disconnect, device number 77 [ 1034.699932][T14261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1886'. [ 1034.853351][T14264] KVM: debugfs: duplicate directory 14264-11 [ 1034.870534][T14264] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1037.257192][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1889'. [ 1037.275018][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1889'. [ 1037.517565][ T30] audit: type=1326 audit(1747912033.704:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14285 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d97f8e969 code=0x7ffc0000 [ 1037.544389][ T5877] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1037.638205][ T30] audit: type=1326 audit(1747912033.704:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14285 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d97f8e969 code=0x7ffc0000 [ 1037.678234][T14291] rdma_op ffff88807ddd21f0 conn xmit_rdma 0000000000000000 [ 1037.688058][ T30] audit: type=1326 audit(1747912033.704:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14285 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d97f2ab39 code=0x7ffc0000 [ 1037.754277][ T5877] usb 7-1: Using ep0 maxpacket: 32 [ 1038.625164][ T5877] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.170312][ T30] audit: type=1326 audit(1747912033.704:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14285 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d97f8e969 code=0x7ffc0000 [ 1039.193096][ T30] audit: type=1326 audit(1747912033.704:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14285 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d97f2ab39 code=0x7ffc0000 [ 1039.216391][ T30] audit: type=1326 audit(1747912033.704:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14285 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d97f8e969 code=0x7ffc0000 [ 1039.240166][ T5877] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1039.249326][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.259707][ T30] audit: type=1326 audit(1747912033.704:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14285 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d97f2ab39 code=0x7ffc0000 [ 1039.291783][ T5877] usb 7-1: Product: syz [ 1039.304438][ T5877] usb 7-1: Manufacturer: syz [ 1039.309107][ T5877] usb 7-1: SerialNumber: syz [ 1039.368053][ T5877] usb 7-1: config 0 descriptor?? [ 1039.382762][ T30] audit: type=1326 audit(1747912033.704:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14285 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d97f8e969 code=0x7ffc0000 [ 1039.624553][ T30] audit: type=1326 audit(1747912033.704:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14285 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d97f2ab39 code=0x7ffc0000 [ 1039.629264][ T5877] usb 7-1: can't set config #0, error -71 [ 1039.680835][ T30] audit: type=1326 audit(1747912033.714:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14285 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d97f2ab39 code=0x7ffc0000 [ 1039.760595][T14313] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1900'. [ 1039.896943][ T5877] usb 7-1: USB disconnect, device number 61 [ 1042.786734][ T5955] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1042.794738][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1905'. [ 1042.831796][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1905'. [ 1042.977136][ T5955] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1043.207277][ T30] kauditd_printk_skb: 184 callbacks suppressed [ 1043.207297][ T30] audit: type=1326 audit(1747912039.404:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.8.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d97f2ab39 code=0x7ffc0000 [ 1043.210754][ T5955] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1043.246642][ T30] audit: type=1326 audit(1747912039.404:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.8.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d97f2ab39 code=0x7ffc0000 [ 1043.300115][ T30] audit: type=1326 audit(1747912039.404:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.8.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d97f2ab39 code=0x7ffc0000 [ 1043.376681][ T30] audit: type=1326 audit(1747912039.404:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.8.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d97f2ab39 code=0x7ffc0000 [ 1043.424300][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.432378][ T5955] usb 5-1: Product: syz [ 1043.477252][ T5955] usb 5-1: Manufacturer: syz [ 1043.479554][ T30] audit: type=1326 audit(1747912039.474:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.8.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d97f2ab39 code=0x7ffc0000 [ 1043.481906][ T5955] usb 5-1: SerialNumber: syz [ 1043.555844][ T30] audit: type=1326 audit(1747912039.474:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.8.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d97f8e969 code=0x7ffc0000 [ 1043.628741][ T5955] usb 5-1: config 0 descriptor?? [ 1043.630031][ T30] audit: type=1326 audit(1747912039.474:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.8.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d97f8e969 code=0x7ffc0000 [ 1043.717973][ T30] audit: type=1326 audit(1747912039.474:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.8.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d97f2ab39 code=0x7ffc0000 [ 1043.802932][ T30] audit: type=1326 audit(1747912039.474:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.8.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d97f8e969 code=0x7ffc0000 [ 1043.922453][ T30] audit: type=1326 audit(1747912039.474:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.8.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d97f2ab39 code=0x7ffc0000 [ 1044.105904][T14351] binder: 14350:14351 ioctl 4018620d 0 returned -22 [ 1044.119829][T11219] usb 5-1: USB disconnect, device number 78 [ 1044.638409][T14362] use of bytesused == 0 is deprecated and will be removed in the future, [ 1044.648342][T14362] use the actual size instead. [ 1046.744654][T14376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1920'. [ 1046.787531][T14376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1920'. [ 1048.538799][T14393] lo speed is unknown, defaulting to 1000 [ 1048.547708][T14393] lo speed is unknown, defaulting to 1000 [ 1048.554239][T14393] lo speed is unknown, defaulting to 1000 [ 1048.691621][T14393] infiniband sz1: set active [ 1048.696685][T14393] infiniband sz1: added lo [ 1048.708577][ T24] lo speed is unknown, defaulting to 1000 [ 1048.718111][ T24] kernel write not supported for file /adsp1 (pid: 24 comm: kworker/1:0) [ 1048.759121][T14393] RDS/IB: sz1: added [ 1048.763816][T14393] smc: adding ib device sz1 with port count 1 [ 1048.770286][T14393] smc: ib device sz1 port 1 has pnetid [ 1048.778281][T14393] lo speed is unknown, defaulting to 1000 [ 1048.935147][T14393] lo speed is unknown, defaulting to 1000 [ 1049.090379][T14393] lo speed is unknown, defaulting to 1000 [ 1049.246332][T14393] lo speed is unknown, defaulting to 1000 [ 1049.401938][T14393] lo speed is unknown, defaulting to 1000 [ 1049.554698][T14393] lo speed is unknown, defaulting to 1000 [ 1049.687494][ T24] lo speed is unknown, defaulting to 1000 [ 1050.194771][ T5877] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1050.376365][ T5877] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1051.818201][ T5877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.115004][ T5877] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1052.245477][ T5877] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1052.322955][ T5877] usb 4-1: Manufacturer: syz [ 1052.447386][ T5877] usb 4-1: config 0 descriptor?? [ 1052.461426][ T5877] igorplugusb 4-1:0.0: incorrect number of endpoints [ 1053.336671][T14428] binder: 14419:14428 ioctl 4018620d 0 returned -22 [ 1053.512909][ T30] kauditd_printk_skb: 493 callbacks suppressed [ 1053.512960][ T30] audit: type=1326 audit(1747912049.664:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14419 comm="syz.4.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a87b8e969 code=0x7ffc0000 [ 1053.943342][ T5976] usb 4-1: USB disconnect, device number 29 [ 1054.000208][ T30] audit: type=1326 audit(1747912049.664:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14419 comm="syz.4.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a87b8e969 code=0x7ffc0000 [ 1054.056762][ T30] audit: type=1326 audit(1747912049.674:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14419 comm="syz.4.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f8a87b8e969 code=0x7ffc0000 [ 1054.080221][ T30] audit: type=1326 audit(1747912049.674:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14419 comm="syz.4.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a87b8e969 code=0x7ffc0000 [ 1054.102372][ T30] audit: type=1326 audit(1747912049.674:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14419 comm="syz.4.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a87b8e969 code=0x7ffc0000 [ 1054.169135][T14440] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1054.271900][T14443] (unnamed net_device) (uninitialized): option use_carrier: invalid value (2) [ 1054.549330][T14454] mmap: syz.8.1940 (14454): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 1055.665579][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.671955][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.174620][ T5921] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1057.399717][ T5921] usb 7-1: device descriptor read/64, error -71 [ 1057.655658][ T5921] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1057.934330][ T5921] usb 7-1: device descriptor read/64, error -71 [ 1058.784534][ T5921] usb usb7-port1: attempt power cycle [ 1059.134333][ T5921] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1059.164957][ T5889] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1059.165095][ T5921] usb 7-1: device descriptor read/8, error -71 [ 1059.454482][ T5921] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1059.486531][ T5889] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1059.495021][ T5921] usb 7-1: device descriptor read/8, error -71 [ 1059.496109][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.516508][ T5889] usb 5-1: config 0 descriptor?? [ 1059.525565][ T5889] cp210x 5-1:0.0: cp210x converter detected [ 1059.965777][T11219] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1060.053547][ T5889] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1060.075245][ T5921] usb usb7-port1: unable to enumerate USB device [ 1060.216516][ T5889] cp210x 5-1:0.0: querying part number failed [ 1060.228000][ T5889] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1060.252843][ T5889] usb 5-1: USB disconnect, device number 79 [ 1060.295272][ T5889] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1060.322364][ T5889] cp210x 5-1:0.0: device disconnected [ 1060.374215][T11219] usb 9-1: Using ep0 maxpacket: 16 [ 1060.386346][T11219] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1060.415739][T11219] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1060.545080][T11219] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1061.070492][T11219] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1061.120429][T11219] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1061.139039][T11219] usb 9-1: SerialNumber: syz [ 1061.225072][T14498] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1061.691043][T11219] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1061.727410][T11219] usb 9-1: USB disconnect, device number 42 [ 1065.374002][ T30] audit: type=1400 audit(1747912061.564:1002): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14534 comm="syz.8.1964" daddr=ff02::1 [ 1065.425320][T14535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.516516][T14535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.084697][T14547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.246960][T14547] batadv_slave_0: entered promiscuous mode [ 1066.906465][T14547] batadv_slave_0: entered allmulticast mode [ 1069.224386][T11219] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1073.858395][ T24] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1073.908839][T14621] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1988'. [ 1074.037869][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.074310][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1074.093600][ T30] audit: type=1400 audit(1747912070.284:1003): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14624 comm="syz.7.1991" daddr=::ffff:172.30.0.8 dest=20003 [ 1074.134012][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1074.139206][ T30] audit: type=1400 audit(1747912070.284:1004): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14624 comm="syz.7.1991" daddr=fe88::8 [ 1074.244361][ T10] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 1074.267326][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.482645][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1992'. [ 1074.492641][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1992'. [ 1074.537261][ T30] audit: type=1400 audit(1747912070.284:1005): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14624 comm="syz.7.1991" daddr=fc01:: [ 1074.703563][ T24] usb 4-1: Product: syz [ 1074.730438][ T24] usb 4-1: Manufacturer: syz [ 1074.736806][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.740808][ T24] usb 4-1: SerialNumber: syz [ 1074.760990][ T10] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1074.780570][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1074.801278][ T10] usb 7-1: Product: syz [ 1074.829360][ T10] usb 7-1: Manufacturer: syz [ 1074.913636][ T10] usb 7-1: SerialNumber: syz [ 1074.935181][ T10] usb 7-1: config 0 descriptor?? [ 1075.030129][T14617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.053246][T14617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.300677][ T24] usb 4-1: 0:2 : does not exist [ 1075.964570][ T5921] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1075.982883][T14643] fuse: Unknown parameter '0x000000000000000a' [ 1076.136491][ T5921] usb 9-1: Using ep0 maxpacket: 16 [ 1076.154385][ T5921] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1076.186528][ T5921] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1076.200144][ T5921] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1077.366120][ T5921] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1077.376663][ T5921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1077.385134][ T5921] usb 9-1: SerialNumber: syz [ 1077.392899][T14649] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1996'. [ 1077.394008][T14635] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1077.465790][T14649] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1996'. [ 1077.488870][T11219] usb 7-1: USB disconnect, device number 66 [ 1077.681067][ T5921] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1077.740131][ T24] usb 4-1: USB disconnect, device number 30 [ 1077.792002][ T5921] usb 9-1: USB disconnect, device number 43 [ 1077.843030][T14653] udevd[14653]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1077.931841][T14658] mkiss: ax0: crc mode is auto. [ 1081.474583][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2000'. [ 1081.934557][ T24] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1081.974801][T11219] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1082.276940][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1082.291578][ T24] usb 5-1: can't read configurations, error -61 [ 1082.334391][T11219] usb 9-1: Using ep0 maxpacket: 32 [ 1083.006944][T11219] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1083.058262][ T24] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1083.093812][T12018] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.114584][T11219] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.157699][T11219] usb 9-1: config 0 descriptor?? [ 1083.363195][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1083.392871][ T24] usb 5-1: can't read configurations, error -61 [ 1083.405570][T11219] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1083.415639][ T24] usb usb5-port1: attempt power cycle [ 1083.424487][T11219] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1083.442560][T11219] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1083.450233][T11219] usb 9-1: media controller created [ 1083.472345][T12018] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.497923][T14679] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1083.510424][T11219] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1083.609541][T11219] az6027: usb out operation failed. (-71) [ 1083.610997][T12018] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.638815][T11219] az6027: usb out operation failed. (-71) [ 1083.650245][T11219] stb0899_attach: Driver disabled by Kconfig [ 1083.660516][T11219] az6027: no front-end attached [ 1083.660516][T11219] [ 1083.673394][T14679] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.686841][T11219] az6027: usb out operation failed. (-71) [ 1083.692806][T11219] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1083.706886][T14679] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1083.737199][T14679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1083.745840][T11219] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input17 [ 1083.759319][T14679] usb 4-1: Product: syz [ 1083.771557][T14679] usb 4-1: Manufacturer: syz [ 1083.776494][ T24] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1083.791579][T11219] dvb-usb: schedule remote query interval to 400 msecs. [ 1083.802188][T14679] usb 4-1: SerialNumber: syz [ 1083.807612][T11219] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1083.819970][T12018] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.850113][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1083.862134][T14679] usb 4-1: config 0 descriptor?? [ 1083.874046][ T24] usb 5-1: can't read configurations, error -61 [ 1083.900115][T11219] usb 9-1: USB disconnect, device number 44 [ 1084.025555][ T24] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1084.069695][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1084.081932][T11219] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1084.114432][ T24] usb 5-1: can't read configurations, error -61 [ 1084.131825][ T24] usb usb5-port1: unable to enumerate USB device [ 1084.334887][T14693] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1084.356893][T14693] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1084.366775][T12018] bridge_slave_1: left allmulticast mode [ 1084.373018][T12018] bridge_slave_1: left promiscuous mode [ 1084.379627][T14693] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1084.379741][T12018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.396909][T14693] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1084.413618][T12018] bridge_slave_0: left allmulticast mode [ 1084.420338][T14693] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1084.427458][T12018] bridge_slave_0: left promiscuous mode [ 1084.427760][T12018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.615355][T11219] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1084.817727][ T10] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1084.995466][T11219] usb 9-1: config 229 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.006621][T11219] usb 9-1: config 229 has 0 interfaces, different from the descriptor's value: 1 [ 1085.016011][T11219] usb 9-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 1085.025523][T11219] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.034364][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1085.067265][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1085.143989][T14700] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1085.796782][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1085.834322][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1085.930853][ T30] audit: type=1400 audit(1747912082.104:1006): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14696 comm="syz.4.2012" daddr=ff02::1 dest=65534 [ 1085.977855][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1085.988002][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1086.049927][ T10] usb 7-1: SerialNumber: syz [ 1086.110459][T14694] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1086.437795][T14705] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2010'. [ 1086.561110][ T5823] Bluetooth: hci0: command tx timeout [ 1086.934658][ T10] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 1086.961571][ T10] usb 7-1: USB disconnect, device number 67 [ 1087.051830][T12018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1087.051942][ T59] usb 4-1: USB disconnect, device number 31 [ 1087.105634][T12018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1087.142943][T12018] bond0 (unregistering): Released all slaves [ 1087.306251][T14691] lo speed is unknown, defaulting to 1000 [ 1087.602964][T14714] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2015'. [ 1087.953380][T14720] Bluetooth: MGMT ver 1.23 [ 1088.604413][ T5823] Bluetooth: hci0: command tx timeout [ 1088.724287][ T59] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1088.754029][T14679] usb 9-1: USB disconnect, device number 45 [ 1088.905018][ T59] usb 7-1: Using ep0 maxpacket: 16 [ 1088.960845][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.170372][ T59] usb 7-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1089.906698][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.966133][ T59] usb 7-1: config 0 descriptor?? [ 1090.583947][T11219] usb 7-1: USB disconnect, device number 68 [ 1090.684452][ T5823] Bluetooth: hci0: command tx timeout [ 1091.829729][ T30] audit: type=1400 audit(1747912088.014:1007): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14744 comm="syz.4.2024" daddr=ff02::1 [ 1092.721572][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2021'. [ 1092.794702][ T5823] Bluetooth: hci0: command tx timeout [ 1092.808043][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2021'. [ 1093.241961][ T30] audit: type=1326 audit(1747912089.434:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14757 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a87b8e969 code=0x7ffc0000 [ 1093.977994][ T30] audit: type=1326 audit(1747912089.464:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14757 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f8a87b8e969 code=0x7ffc0000 [ 1094.002036][ T30] audit: type=1326 audit(1747912089.464:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14757 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a87b8e969 code=0x7ffc0000 [ 1094.025184][ T30] audit: type=1326 audit(1747912089.464:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14757 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a87b8e969 code=0x7ffc0000 [ 1094.230483][T12018] hsr_slave_0: left promiscuous mode [ 1094.657783][T12018] hsr_slave_1: left promiscuous mode [ 1094.666252][T12018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1094.689446][T12018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.703170][T12018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1094.711252][T12018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.924590][T12018] veth1_macvtap: left promiscuous mode [ 1094.930841][T12018] veth0_macvtap: left promiscuous mode [ 1094.953159][T12018] veth1_vlan: left promiscuous mode [ 1095.060303][T12018] veth0_vlan: left promiscuous mode [ 1095.502989][T14776] netlink: zone id is out of range [ 1095.566456][T14776] netlink: set zone limit has 8 unknown bytes [ 1096.392999][T12018] pimreg (unregistering): left allmulticast mode [ 1097.794264][ T5921] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 1097.972273][ T5921] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.010397][ T5921] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1098.092074][ T5921] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1098.103872][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.112456][ T5921] usb 7-1: Product: syz [ 1098.123786][T12018] team0 (unregistering): Port device team_slave_1 removed [ 1098.123812][ T5921] usb 7-1: Manufacturer: syz [ 1098.123834][ T5921] usb 7-1: SerialNumber: syz [ 1098.498669][T12018] team0 (unregistering): Port device team_slave_0 removed [ 1099.293281][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2035'. [ 1100.185766][ T6006] smc: removing ib device sz1 [ 1100.263753][ T47] lo speed is unknown, defaulting to 1000 [ 1100.283643][ T47] sz1: Port: 1 Link DOWN [ 1100.519388][ T47] kernel write not supported for file /adsp1 (pid: 47 comm: kworker/1:1) [ 1100.602089][T14691] chnl_net:caif_netlink_parms(): no params data found [ 1101.335071][ T5921] usb 7-1: 0:2 : does not exist [ 1101.523596][ T5921] usb 7-1: USB disconnect, device number 69 [ 1101.930858][T14817] udevd[14817]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1102.706066][ T5877] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1103.144405][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 1103.274699][ T5877] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1103.310933][ T5877] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1103.363623][ T5877] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1103.426219][ T5877] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1103.454228][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1103.463464][ T5877] usb 5-1: SerialNumber: syz [ 1103.548503][T14819] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1103.754369][ T30] audit: type=1326 audit(1747912099.944:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14836 comm="syz.8.2044" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d97f8e969 code=0x0 [ 1103.804880][ T5877] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1103.891437][ T5877] usb 5-1: USB disconnect, device number 85 [ 1103.978309][T14839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1104.270050][T14846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 1105.014707][T14691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.049690][T14691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.076234][T14691] bridge_slave_0: entered allmulticast mode [ 1105.136419][T14691] bridge_slave_0: entered promiscuous mode [ 1105.345557][T14691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.912038][T14691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.915048][ T30] audit: type=1326 audit(1747912102.094:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14851 comm="syz.6.2047" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f239158e969 code=0x0 [ 1105.968155][T14691] bridge_slave_1: entered allmulticast mode [ 1106.449061][T14862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1106.458078][T14691] bridge_slave_1: entered promiscuous mode [ 1106.879946][T14868] binder: 14866:14868 ioctl 4018620d 0 returned -22 [ 1106.891348][ T30] audit: type=1326 audit(1747912103.084:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14866 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59eb8e969 code=0x7ffc0000 [ 1108.588070][ T30] audit: type=1326 audit(1747912103.114:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14866 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fe59eb8e969 code=0x7ffc0000 [ 1108.610384][ T30] audit: type=1326 audit(1747912103.114:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14866 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59eb8e969 code=0x7ffc0000 [ 1108.632761][ T30] audit: type=1326 audit(1747912103.114:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14866 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59eb8e969 code=0x7ffc0000 [ 1109.628196][T14691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.521270][T14691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.526451][T14878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1110.980612][T14691] team0: Port device team_slave_0 added [ 1111.236059][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2056'. [ 1111.940329][ T47] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 1111.964388][ T30] audit: type=1326 audit(1747912107.364:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14885 comm="syz.8.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d97f8e969 code=0x7ffc0000 [ 1112.088505][T14691] team0: Port device team_slave_1 added [ 1112.163235][ T30] audit: type=1326 audit(1747912107.364:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14885 comm="syz.8.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d97f8e969 code=0x7ffc0000 [ 1112.185826][ T30] audit: type=1326 audit(1747912107.364:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14885 comm="syz.8.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d97f2ab39 code=0x7ffc0000 [ 1112.228334][ T47] usb 7-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 1112.275716][ T30] audit: type=1326 audit(1747912107.364:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14885 comm="syz.8.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d97f2ab39 code=0x7ffc0000 [ 1112.294264][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.321888][ T47] usb 7-1: Product: syz [ 1112.363885][ T47] usb 7-1: Manufacturer: syz [ 1112.397769][ T47] usb 7-1: SerialNumber: syz [ 1112.454696][ T30] audit: type=1326 audit(1747912107.364:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14885 comm="syz.8.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d97f8e969 code=0x7ffc0000 [ 1112.512743][ T47] usb 7-1: config 0 descriptor?? [ 1112.587843][ T47] comedi comedi0: This driver needs USB 2.0 to operate. Aborting... [ 1112.629518][ T47] usbduxfast 7-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 1112.639006][ T30] audit: type=1326 audit(1747912108.254:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14885 comm="syz.8.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d97f2ab39 code=0x7ffc0000 [ 1112.808566][ T30] audit: type=1326 audit(1747912108.254:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14885 comm="syz.8.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d97f8e969 code=0x7ffc0000 [ 1113.092678][ T30] audit: type=1326 audit(1747912108.254:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14885 comm="syz.8.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d97f2ab39 code=0x7ffc0000 [ 1113.146415][T14691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.262342][T14691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.312380][ T30] audit: type=1326 audit(1747912108.254:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14885 comm="syz.8.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d97f8e969 code=0x7ffc0000 [ 1113.435420][ T30] audit: type=1326 audit(1747912108.254:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14885 comm="syz.8.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d97f2ab39 code=0x7ffc0000 [ 1113.508301][T14691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.651795][T14691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.687868][T14691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.762920][T14679] usb 7-1: USB disconnect, device number 70 [ 1113.978880][T14691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.342355][T14899] mkiss: ax0: crc mode is auto. [ 1115.617515][T14691] hsr_slave_0: entered promiscuous mode [ 1115.656455][T14691] hsr_slave_1: entered promiscuous mode [ 1115.776114][T14919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1115.783188][ T5839] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1116.074463][ T5839] usb 7-1: Using ep0 maxpacket: 8 [ 1116.110051][ T5839] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1116.139931][ T5839] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 1116.149790][ T5839] usb 7-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1116.167137][ T5839] usb 7-1: config 4 has no interface number 0 [ 1116.198834][ T5839] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1116.251244][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.448746][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.455721][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.471327][ T5839] usb 7-1: Product: syz [ 1117.094389][ T5839] usb 7-1: Manufacturer: syz [ 1117.099070][ T5839] usb 7-1: SerialNumber: syz [ 1117.467137][T14923] block nbd4: shutting down sockets [ 1117.523111][ T5839] usb 7-1: Found UVC 0.02 device syz (04f2:b746) [ 1117.560975][ T5839] usb 7-1: No valid video chain found. [ 1117.593697][ T5839] usb 7-1: USB disconnect, device number 71 [ 1117.952615][T14942] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1118.454743][T14946] netlink: 272 bytes leftover after parsing attributes in process `syz.6.2069'. [ 1119.911000][ T30] kauditd_printk_skb: 176 callbacks suppressed [ 1119.911089][ T30] audit: type=1400 audit(1747912116.104:1204): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14954 comm="syz.3.2073" daddr=ff02::1 [ 1120.601587][T14691] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1120.625197][T14691] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1120.653866][T14691] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1120.727983][T14691] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1120.768489][T14967] mkiss: ax0: crc mode is auto. [ 1124.047573][ T30] audit: type=1326 audit(1747912120.244:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14979 comm="syz.4.2080" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a87b8e969 code=0x0 [ 1124.128750][T14691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.148936][T14984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1124.358967][T14691] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.388269][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.395500][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.451869][T12024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.459115][T12024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.843718][ T30] audit: type=1400 audit(1747912120.934:1206): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14990 comm="syz.8.2085" daddr=ff02::1 [ 1125.470187][T14998] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1125.917471][T14691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.224663][T14691] veth0_vlan: entered promiscuous mode [ 1127.264639][T14691] veth1_vlan: entered promiscuous mode [ 1127.423960][T14691] veth0_macvtap: entered promiscuous mode [ 1127.450651][T14691] veth1_macvtap: entered promiscuous mode [ 1128.029303][T14691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.089747][T14691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.106245][T14691] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.115726][T14691] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.126145][T14691] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.144202][T14691] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.405507][ T10] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1128.864255][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1128.872313][ T10] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 1128.888322][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.904937][ T10] usb 5-1: config 0 has no interface number 0 [ 1128.962431][ T10] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1129.013253][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.014609][ T10] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 1129.030752][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.060476][ T10] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1129.085937][ T10] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147 [ 1129.112495][ T10] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1129.174230][ T10] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1129.188037][T12025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.200563][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.202252][T12025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.098590][T15033] overlayfs: failed to resolve './file1/file0': -2 [ 1130.365120][ T10] usb 5-1: config 0 descriptor?? [ 1130.399674][T15017] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1130.569342][T15017] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1130.630926][ T10] usb 5-1: can't set config #0, error -71 [ 1130.673511][ T10] usb 5-1: USB disconnect, device number 86 [ 1130.958910][T15042] random: crng reseeded on system resumption [ 1131.416005][ T30] audit: type=1400 audit(1747912127.234:1207): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15037 comm="syz.2.2009" daddr=fe80::bb dest=20001 [ 1132.094232][ T30] audit: type=1400 audit(1747912127.874:1208): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15041 comm="syz.3.2095" daddr=ff02::1 [ 1133.504247][T14679] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1133.803424][ T30] audit: type=1326 audit(1747912129.994:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15056 comm="syz.6.2101" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f239158e969 code=0x0 [ 1133.915164][T15062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1133.952773][T14679] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.993108][T14679] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1134.010908][T14679] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1134.031342][T14679] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1134.089363][T14679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1134.132210][T14679] usb 3-1: Product: syz [ 1134.254480][T14679] usb 3-1: Manufacturer: syz [ 1134.288269][T14679] usb 3-1: SerialNumber: syz [ 1134.338290][T14679] usb 3-1: config 0 descriptor?? [ 1134.650869][T14679] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 1134.674989][ T47] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1134.935195][ T30] audit: type=1400 audit(1747912130.664:1210): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15074 comm="syz.4.2105" daddr=ff02::1 [ 1134.968338][T14679] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 1134.983106][T14679] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1135.031217][T15077] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1135.125385][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 1135.136953][ T47] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1135.150764][ T47] usb 4-1: config 0 has no interface number 0 [ 1135.170449][ T47] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1135.182901][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.220868][ T47] usb 4-1: Product: syz [ 1135.225268][ T47] usb 4-1: Manufacturer: syz [ 1135.231013][ T47] usb 4-1: SerialNumber: syz [ 1135.360997][ T47] usb 4-1: config 0 descriptor?? [ 1135.486021][ T47] smsc95xx v2.0.0 [ 1136.851319][T15087] fuse: Bad value for 'fd' [ 1136.856762][T15072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2104'. [ 1136.914398][T15072] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2104'. [ 1136.967171][ T10] usb 3-1: USB disconnect, device number 18 [ 1137.109155][T15072] gretap1: entered promiscuous mode [ 1137.132808][T11219] kernel write not supported for file /adsp1 (pid: 11219 comm: kworker/1:8) [ 1137.291501][ T30] audit: type=1400 audit(1747912133.484:1211): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15090 comm="syz.2.2108" daddr=ff02::1 [ 1137.820208][ T47] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1137.879852][ T47] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1138.059543][ T30] audit: type=1400 audit(1747912134.254:1212): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15093 comm="syz.4.2109" daddr=fe80::bb dest=20001 [ 1139.249783][ T47] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1139.264579][ T47] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 1139.294371][ T59] usb 4-1: USB disconnect, device number 32 [ 1140.456483][ T47] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1141.085233][ T30] audit: type=1400 audit(1747912137.264:1213): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15113 comm="syz.2.2116" daddr=ff02::1 [ 1141.272743][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 1141.567384][ T47] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1141.597153][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.635470][ T47] usb 5-1: Product: syz [ 1141.647611][ T47] usb 5-1: Manufacturer: syz [ 1141.658716][ T47] usb 5-1: SerialNumber: syz [ 1141.680686][ T47] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1141.688567][ T47] r8152-cfgselector 5-1: config 0 descriptor?? [ 1141.989124][ T30] audit: type=1326 audit(1747912138.134:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15119 comm="syz.2.2117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a6ff8e969 code=0x0 [ 1142.038543][ T10] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1142.199570][T15127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1142.374645][ T10] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 1142.464481][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.594948][ T10] usb 9-1: config 0 has no interface number 0 [ 1142.601398][ T10] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1142.611975][ T47] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1142.612247][ T47] r8152-cfgselector 5-1: bad CDC descriptors [ 1142.782808][ T10] usb 9-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1143.006272][ T47] r8152-cfgselector 5-1: USB disconnect, device number 87 [ 1143.157805][ T10] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1143.177336][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.185626][ T10] usb 9-1: Product: syz [ 1143.191124][ T10] usb 9-1: Manufacturer: syz [ 1143.207736][ T10] usb 9-1: SerialNumber: syz [ 1143.263187][ T10] usb 9-1: config 0 descriptor?? [ 1143.392369][ T30] audit: type=1400 audit(1747912139.544:1215): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15133 comm="syz.3.2120" daddr=ff02::1 [ 1144.914419][ T30] audit: type=1400 audit(1747912141.084:1216): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15142 comm="syz.3.2122" daddr=fe80::bb dest=20001 [ 1146.143458][T15152] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2124'. [ 1146.626275][ T59] usb 9-1: USB disconnect, device number 46 [ 1147.161286][ T30] audit: type=1400 audit(1747912143.034:1217): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15158 comm="syz.3.2127" daddr=ff02::1 [ 1148.384677][ T30] audit: type=1400 audit(1747912144.084:1218): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15174 comm="syz.2.2132" daddr=ff02::1 [ 1148.744280][ T5877] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1150.257766][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 1150.842954][ T5877] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1150.859867][ T5877] usb 4-1: can't read configurations, error -71 [ 1151.074799][ T30] audit: type=1400 audit(1747912147.264:1219): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15187 comm="syz.3.2135" daddr=fe80::bb dest=20001 [ 1153.736055][T15196] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2137'. [ 1154.530398][ T5921] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1155.755773][ T5921] usb 9-1: Using ep0 maxpacket: 16 [ 1155.879584][ T5921] usb 9-1: device descriptor read/all, error -71 [ 1156.252153][T15206] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2140'. [ 1157.055090][ T30] audit: type=1326 audit(1747912153.244:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15203 comm="syz.3.2139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe59eb8e969 code=0x0 [ 1157.086958][T15211] usb usb8: usbfs: process 15211 (syz.2.2141) did not claim interface 32 before use [ 1157.334454][T15215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1157.431181][ T30] audit: type=1400 audit(1747912153.624:1221): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15217 comm="syz.6.2143" dest=2 [ 1157.818335][ T30] audit: type=1400 audit(1747912153.934:1222): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15220 comm="syz.6.2144" daddr=ff02::1 [ 1158.855720][ T5921] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1158.978073][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2146'. [ 1158.987269][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2146'. [ 1159.084228][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 1159.103082][ T5921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1159.163896][ T5921] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1159.204680][ T5921] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1159.294440][ T5921] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1159.340578][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1159.364614][ T5921] usb 3-1: SerialNumber: syz [ 1159.388227][T15225] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1159.651015][ T5921] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1159.716482][ T5921] usb 3-1: USB disconnect, device number 19 [ 1159.983236][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1160.003948][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1160.013196][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1160.031486][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1160.044839][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1161.474907][ T30] audit: type=1400 audit(1747912157.674:1223): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15237 comm="syz.8.2149" [ 1162.225329][ T5823] Bluetooth: hci1: command tx timeout [ 1162.645997][ T5875] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1162.828236][ T5875] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 769 [ 1162.860882][ T5875] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1162.893477][ T5875] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1162.931931][T15239] chnl_net:caif_netlink_parms(): no params data found [ 1162.943820][ T5875] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 1162.960602][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.005249][T15264] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1163.044024][ T5875] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1163.069459][ T5875] usb 4-1: invalid MIDI in EP 0 [ 1163.508607][ T5875] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1163.511362][ T30] audit: type=1400 audit(1747912159.674:1224): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15271 comm="syz.8.2157" daddr=ff02::1 [ 1163.543810][ T5875] usb 4-1: USB disconnect, device number 35 [ 1164.284448][ T5823] Bluetooth: hci1: command tx timeout [ 1164.497065][T15239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.504759][T15239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.524671][T15239] bridge_slave_0: entered allmulticast mode [ 1164.534780][T15239] bridge_slave_0: entered promiscuous mode [ 1164.671260][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2158'. [ 1164.680804][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2158'. [ 1164.829611][T15239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.838157][T15239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.850963][T15239] bridge_slave_1: entered allmulticast mode [ 1164.891434][T15239] bridge_slave_1: entered promiscuous mode [ 1165.344503][T11219] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1165.553341][T15239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1165.601696][T11219] usb 9-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 1165.668675][T11219] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.732881][T15239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1165.759612][T11219] gspca_main: mars-2.14.0 probing 093a:050f [ 1166.027317][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2163'. [ 1166.364696][ T5823] Bluetooth: hci1: command tx timeout [ 1166.821715][ T47] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1166.879688][T15305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2164'. [ 1167.092379][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2160'. [ 1167.141447][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 1167.623019][ T47] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1167.669265][T15239] team0: Port device team_slave_0 added [ 1167.681928][T11219] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1167.690042][ T47] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1167.710832][T15239] team0: Port device team_slave_1 added [ 1167.713670][ T47] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1167.760445][ T47] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1167.778430][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1167.792309][ T47] usb 3-1: SerialNumber: syz [ 1167.803115][T15297] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1167.864203][T11219] usb 4-1: Using ep0 maxpacket: 16 [ 1167.885859][T11219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.901288][T15239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.919739][T15239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1167.951907][T11219] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1167.966527][T11219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.979301][T11219] usb 4-1: config 0 descriptor?? [ 1167.996218][T15239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1168.013335][T15239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1168.039894][T15239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1168.069401][ T47] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1168.102517][T15239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.237707][ T47] usb 3-1: USB disconnect, device number 20 [ 1168.445650][ T5823] Bluetooth: hci1: command tx timeout [ 1168.744413][ T47] usb 4-1: USB disconnect, device number 36 [ 1168.789539][T11219] usb 9-1: USB disconnect, device number 49 [ 1169.516111][T15239] hsr_slave_0: entered promiscuous mode [ 1169.606420][T15239] hsr_slave_1: entered promiscuous mode [ 1169.612860][T15239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1170.008236][T15338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2170'. [ 1170.277033][T15239] Cannot create hsr debugfs directory [ 1170.534274][ T5877] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1170.838145][ T5877] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1171.014384][ T5877] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.094377][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2172'. [ 1171.104530][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2172'. [ 1171.291063][ T5877] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1171.300641][ T5877] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1171.332486][ T5877] usb 3-1: Manufacturer: syz [ 1171.342764][ T5877] usb 3-1: config 0 descriptor?? [ 1171.377562][ T5877] igorplugusb 3-1:0.0: incorrect number of endpoints [ 1171.671286][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2174'. [ 1171.795176][T15330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2169'. [ 1172.264115][T15330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.271860][T15330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.803894][T15363] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2175'. [ 1174.629160][T15372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1175.295404][T15374] mkiss: ax0: crc mode is auto. [ 1175.444481][ C0] hrtimer: interrupt took 1190125 ns [ 1176.246434][T11219] usb 3-1: USB disconnect, device number 21 [ 1176.897659][ T5955] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1177.391604][T15400] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2184'. [ 1177.793868][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 1177.854594][ T5955] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1177.988663][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.995169][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.324006][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.584263][ T5955] usb 3-1: Product: syz [ 1178.590042][ T5955] usb 3-1: Manufacturer: syz [ 1178.664522][ T5955] usb 3-1: SerialNumber: syz [ 1178.708376][ T5955] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1178.732184][T15402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2185'. [ 1178.751715][ T5955] r8152-cfgselector 3-1: config 0 descriptor?? [ 1178.780080][T15402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2185'. [ 1178.792530][ T30] audit: type=1400 audit(1747912174.954:1225): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15404 comm="syz.8.2186" daddr=fe80::aa dest=20002 [ 1178.879564][T15239] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1179.050780][T15239] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1179.098860][T15239] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1179.155800][T15239] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1179.241559][ T5877] r8152-cfgselector 3-1: USB disconnect, device number 22 [ 1179.444387][ T5839] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 1179.552791][T15239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1179.608682][ T5839] usb 9-1: not running at top speed; connect to a high speed hub [ 1179.616465][T15239] 8021q: adding VLAN 0 to HW filter on device team0 [ 1179.623962][ T8306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.628072][ T10] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1179.633836][ T8306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1179.651732][ T8306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.651848][ T8306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.669249][ T5839] usb 9-1: config 95 has an invalid interface number: 1 but max is 0 [ 1179.679601][ T5839] usb 9-1: config 95 has no interface number 0 [ 1179.687219][ T5839] usb 9-1: config 95 interface 1 has no altsetting 0 [ 1179.787803][T15413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1179.790058][ T5839] usb 9-1: string descriptor 0 read error: -22 [ 1179.925644][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1179.932629][ T5839] usb 9-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 1179.951107][ T5839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.003671][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.162819][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.254771][ T10] usb 7-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1180.277678][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.349963][ T10] usb 7-1: config 0 descriptor?? [ 1181.239022][ T10] uclogic 0003:5543:0004.001B: No inputs registered, leaving [ 1181.336579][ T5839] usb 9-1: USB disconnect, device number 50 [ 1181.366791][ T10] uclogic 0003:5543:0004.001B: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.6-1/input0 [ 1181.600039][ T47] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1181.644896][ T10] usb 7-1: USB disconnect, device number 72 [ 1181.796110][T15425] fido_id[15425]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1181.829295][ T47] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1181.859253][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.907530][ T47] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1181.948801][T15239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1181.962824][ T47] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1182.024967][ T47] usb 4-1: Manufacturer: syz [ 1182.075980][ T47] usb 4-1: config 0 descriptor?? [ 1182.121343][ T47] igorplugusb 4-1:0.0: incorrect number of endpoints [ 1182.197505][T15432] mkiss: ax0: crc mode is auto. [ 1182.743145][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2191'. [ 1182.900322][T15423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.908477][T15423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.034844][ T47] usb 4-1: USB disconnect, device number 37 [ 1184.230460][T15239] veth0_vlan: entered promiscuous mode [ 1184.289067][T15239] veth1_vlan: entered promiscuous mode [ 1184.338708][T15450] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2196'. [ 1184.379750][T15239] veth0_macvtap: entered promiscuous mode [ 1184.400596][T15239] veth1_macvtap: entered promiscuous mode [ 1184.440082][T15239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1184.498597][T15239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1184.504651][ T5877] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1184.546966][T15239] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.580286][T15239] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.610972][T15239] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.632248][T15239] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.709345][ T5877] usb 7-1: Using ep0 maxpacket: 16 [ 1184.743326][ T5877] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1185.052986][ T5877] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1185.742061][ T5877] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1185.769990][ T5877] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1185.796596][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1185.852271][ T5877] usb 7-1: SerialNumber: syz [ 1185.883925][T15447] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1185.912791][T12018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1185.923192][T12018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.238208][ T5877] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 1186.246190][ T8306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.589952][ T8306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.030895][ T5877] usb 7-1: USB disconnect, device number 73 [ 1188.079673][ T30] audit: type=1326 audit(1747912184.274:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15463 comm="syz.2.2200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a6ff8e969 code=0x0 [ 1188.119118][T15474] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1188.423176][T15471] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2202'. [ 1188.498472][T15465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1188.674238][ T5955] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1190.263426][ T5955] usb 7-1: Using ep0 maxpacket: 16 [ 1192.360228][ T5955] usb 7-1: device descriptor read/all, error -71 [ 1194.526803][T15491] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2206'. [ 1194.791869][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2207'. [ 1194.832654][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2207'. [ 1194.940559][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2207'. [ 1195.664771][T11219] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1195.864409][T11219] usb 9-1: Using ep0 maxpacket: 16 [ 1196.397766][T11219] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1196.429136][T11219] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.448854][T11219] usb 9-1: Product: syz [ 1196.469928][T11219] usb 9-1: Manufacturer: syz [ 1196.499790][T11219] usb 9-1: SerialNumber: syz [ 1196.656992][T11219] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1196.663346][T11219] r8152-cfgselector 9-1: config 0 descriptor?? [ 1197.382584][ T5955] r8152-cfgselector 9-1: USB disconnect, device number 51 [ 1198.496156][T15511] syz_tun: entered allmulticast mode [ 1198.670327][T15510] syz_tun: left allmulticast mode [ 1198.807362][T15518] bridge2: entered allmulticast mode [ 1200.217724][T15531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2218'. [ 1200.534346][T11219] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1200.718709][T11219] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.738329][T11219] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1200.808410][T11219] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1200.977912][ T47] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1201.268553][T11219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.411060][T11219] usb 4-1: Product: syz [ 1201.425278][T11219] usb 4-1: Manufacturer: syz [ 1201.430038][T11219] usb 4-1: SerialNumber: syz [ 1201.549277][T15544] FAULT_INJECTION: forcing a failure. [ 1201.549277][T15544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1201.556922][ T47] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1201.587417][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.589293][T15544] CPU: 0 UID: 0 PID: 15544 Comm: syz.8.2223 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1201.589328][T15544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1201.589343][T15544] Call Trace: [ 1201.589354][T15544] [ 1201.589365][T15544] dump_stack_lvl+0x189/0x250 [ 1201.589401][T15544] ? __lock_acquire+0xaac/0xd20 [ 1201.589436][T15544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1201.589465][T15544] ? __pfx__printk+0x10/0x10 [ 1201.589499][T15544] ? __might_fault+0xb0/0x130 [ 1201.589546][T15544] should_fail_ex+0x414/0x560 [ 1201.589577][T15544] _copy_from_user+0x2d/0xb0 [ 1201.589610][T15544] ___sys_recvmsg+0x12e/0x510 [ 1201.589657][T15544] ? __pfx____sys_recvmsg+0x10/0x10 [ 1201.589723][T15544] ? __might_fault+0xb0/0x130 [ 1201.589761][T15544] do_recvmmsg+0x307/0x760 [ 1201.589802][T15544] ? __pfx_do_recvmmsg+0x10/0x10 [ 1201.589847][T15544] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1201.589897][T15544] __x64_sys_recvmmsg+0x190/0x240 [ 1201.589928][T15544] ? rcu_is_watching+0x15/0xb0 [ 1201.589960][T15544] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1201.589997][T15544] ? do_syscall_64+0xba/0x210 [ 1201.590030][T15544] do_syscall_64+0xf6/0x210 [ 1201.590059][T15544] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1201.590082][T15544] ? clear_bhb_loop+0x60/0xb0 [ 1201.590108][T15544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.590130][T15544] RIP: 0033:0x7f8d97f8e969 [ 1201.590150][T15544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1201.590170][T15544] RSP: 002b:00007f8d98ddb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1201.590195][T15544] RAX: ffffffffffffffda RBX: 00007f8d981b5fa0 RCX: 00007f8d97f8e969 [ 1201.590211][T15544] RDX: 0000000000000004 RSI: 0000200000005bc0 RDI: 0000000000000003 [ 1201.590226][T15544] RBP: 00007f8d98ddb090 R08: 0000000000000000 R09: 0000000000000000 [ 1201.590240][T15544] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 1201.590253][T15544] R13: 0000000000000000 R14: 00007f8d981b5fa0 R15: 00007ffeb38d7ac8 [ 1201.590287][T15544] [ 1202.110721][ T47] usb 3-1: config 0 descriptor?? [ 1202.146396][T15533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.174686][T15533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.536544][ T47] ath6kl: Failed to submit usb control message: -71 [ 1202.624688][ T47] ath6kl: unable to send the bmi data to the device: -71 [ 1202.673002][T11219] usb 4-1: 0:2 : does not exist [ 1202.678385][ T47] ath6kl: Unable to send get target info: -71 [ 1202.775467][ T47] ath6kl: Failed to init ath6kl core: -71 [ 1202.780176][T15533] fuse: Unknown parameter '0x000000000000000d' [ 1202.783128][ T47] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1202.896993][T15552] binder: 15549:15552 ioctl 4018620d 0 returned -22 [ 1203.028723][ T30] audit: type=1326 audit(1747912199.224:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15549 comm="syz.8.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d97f8e969 code=0x7ffc0000 [ 1203.088197][ T30] audit: type=1326 audit(1747912199.224:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15549 comm="syz.8.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f8d97f8e969 code=0x7ffc0000 [ 1203.612220][ T30] audit: type=1326 audit(1747912199.224:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15549 comm="syz.8.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d97f8e969 code=0x7ffc0000 [ 1203.637283][ T30] audit: type=1326 audit(1747912199.224:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15549 comm="syz.8.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d97f8e969 code=0x7ffc0000 [ 1203.645339][ T47] usb 3-1: USB disconnect, device number 23 [ 1203.735583][T11219] usb 4-1: USB disconnect, device number 38 [ 1203.958200][T14941] udevd[14941]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1204.414269][ T47] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1204.714291][ T47] usb 7-1: Using ep0 maxpacket: 16 [ 1204.739019][ T47] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1204.794560][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.834374][ T47] usb 7-1: Product: syz [ 1204.880959][ T47] usb 7-1: Manufacturer: syz [ 1204.902388][ T47] usb 7-1: SerialNumber: syz [ 1204.994822][ T47] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1205.001265][ T47] r8152-cfgselector 7-1: config 0 descriptor?? [ 1205.014199][ T5875] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1205.742239][ T5875] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 1205.959152][ T5955] r8152-cfgselector 7-1: USB disconnect, device number 76 [ 1206.059254][ T5875] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1206.219010][ T5875] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1206.238987][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.257187][ T5875] usb 4-1: Product: syz [ 1206.261600][ T5875] usb 4-1: Manufacturer: syz [ 1206.272153][ T5875] usb 4-1: SerialNumber: syz [ 1206.615383][T15576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.629763][T15576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.697988][ T5875] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1206.746220][ T5875] usb 4-1: USB disconnect, device number 39 [ 1206.765070][ T5955] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1207.106282][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1207.124427][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1207.173854][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1207.220457][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1207.253894][ T5955] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1207.304665][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.354950][ T5955] usb 3-1: config 0 descriptor?? [ 1207.524268][ T47] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1207.677726][ T47] usb 4-1: device descriptor read/64, error -71 [ 1207.919690][ T5955] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1207.957604][ T47] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1207.989052][ T5955] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1208.021836][ T5955] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 1208.074329][ T5889] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1208.106679][ T5955] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1208.144643][ T47] usb 4-1: device descriptor read/64, error -71 [ 1208.222805][T15587] binder: 15585:15587 ioctl 4018620d 0 returned -22 [ 1208.275821][ T47] usb usb4-port1: attempt power cycle [ 1208.282109][ T5889] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.322356][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1208.337732][ T30] audit: type=1326 audit(1747912204.534:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15585 comm="syz.6.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239158e969 code=0x7ffc0000 [ 1208.445416][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1208.467247][ T30] audit: type=1326 audit(1747912204.534:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15585 comm="syz.6.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239158e969 code=0x7ffc0000 [ 1208.543835][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1208.567716][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1208.676605][ T5889] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1208.743211][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1209.292834][ T5889] usb 6-1: Product: syz [ 1209.378750][ T5889] usb 6-1: Manufacturer: syz [ 1209.409184][ T5889] usb 6-1: SerialNumber: syz [ 1209.447403][ T5889] usb 6-1: config 0 descriptor?? [ 1209.775785][ T5889] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1209.804577][ T5889] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1209.928404][T15598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2239'. [ 1209.952652][ C1] raw-gadget.3 gadget.5: ignoring, device is not running [ 1209.960659][ T5955] usb 3-1: USB disconnect, device number 24 [ 1209.988876][ T5889] usb 6-1: USB disconnect, device number 4 [ 1210.504623][ T5889] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1210.684741][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 1210.704172][ T5889] usb 7-1: Using ep0 maxpacket: 16 [ 1210.722018][ T5889] usb 7-1: config 3 has an invalid interface number: 155 but max is 0 [ 1210.768784][ T5823] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 1210.778140][ T5889] usb 7-1: config 3 has an invalid interface association descriptor of length 3, skipping [ 1210.815721][ T5889] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.952826][ T5889] usb 7-1: config 3 has no interface number 0 [ 1210.994296][ T5889] usb 7-1: config 3 interface 155 has no altsetting 0 [ 1211.053735][ T5889] usb 7-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 1211.110151][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.157570][ T5889] usb 7-1: Product: syz [ 1211.172095][ T5889] usb 7-1: Manufacturer: syz [ 1211.201566][ T5889] usb 7-1: SerialNumber: syz [ 1211.354833][ T5921] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1211.917199][ T5921] usb 6-1: Using ep0 maxpacket: 16 [ 1211.932959][ T5921] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1211.943064][ T5921] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1211.962352][ T5921] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1211.974963][ T5921] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1211.984920][ T5921] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1211.996667][ T5921] usb 6-1: config 0 has no interface number 0 [ 1212.004335][ T5921] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1212.017382][ T5921] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1212.028983][ T5921] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1212.042465][ T5921] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1212.078511][ T5921] usb 6-1: config 0 interface 125 has no altsetting 0 [ 1212.106997][ T5921] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1212.162592][ T5921] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1212.189315][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.220961][ T5921] usb 6-1: Product: syz [ 1212.244001][ T5921] usb 6-1: Manufacturer: syz [ 1212.267318][ T5921] usb 6-1: SerialNumber: syz [ 1212.310606][ T5921] usb 6-1: config 0 descriptor?? [ 1212.353676][ T5921] usb 6-1: selecting invalid altsetting 2 [ 1213.502699][ T5921] get_1284_register timeout [ 1213.510769][ C0] usb 6-1: async_complete: urb error -104 [ 1213.517419][ T5921] uss720 6-1:0.125: probe with driver uss720 failed with error -5 [ 1213.543316][ T5889] usb 7-1: USB disconnect, device number 77 [ 1213.647880][T15621] nbd: nbd8 already in use [ 1213.837341][T15629] binder: 15623:15629 ioctl 4018620d 0 returned -22 [ 1213.902999][ T30] audit: type=1326 audit(1747912210.094:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15623 comm="syz.6.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239158e969 code=0x7ffc0000 [ 1214.161469][ T30] audit: type=1326 audit(1747912210.094:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15623 comm="syz.6.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f239158e969 code=0x7ffc0000 [ 1214.254141][ T30] audit: type=1326 audit(1747912210.094:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15623 comm="syz.6.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239158e969 code=0x7ffc0000 [ 1214.320964][ T30] audit: type=1326 audit(1747912210.094:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15623 comm="syz.6.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239158e969 code=0x7ffc0000 [ 1214.771587][T15638] overlay: ./bus is not a directory [ 1216.575898][ T5889] usb 6-1: USB disconnect, device number 5 [ 1217.144833][ T5839] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1217.589148][ T5839] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1217.614569][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.674432][ T5839] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1217.704644][ T5839] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1217.732932][ T5839] usb 3-1: Manufacturer: syz [ 1218.193508][ T5839] usb 3-1: config 0 descriptor?? [ 1218.306402][ T5839] igorplugusb 3-1:0.0: incorrect number of endpoints [ 1218.439535][T15657] unknown channel width for channel at 909000KHz? [ 1218.663993][T15645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2253'. [ 1219.760909][ T47] usb 3-1: USB disconnect, device number 25 [ 1219.984237][ T5889] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1220.199952][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.238054][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.274409][ T47] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1220.336126][ T5889] usb 9-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1220.369560][T15670] binder: 15668:15670 ioctl 4018620d 0 returned -22 [ 1220.386696][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.428720][ T30] audit: type=1326 audit(1747912216.604:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15668 comm="syz.5.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1974b8e969 code=0x7ffc0000 [ 1220.462994][ T5889] usb 9-1: config 0 descriptor?? [ 1220.508433][ T47] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1220.571366][ T47] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 1220.588285][ T30] audit: type=1326 audit(1747912216.614:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15668 comm="syz.5.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1974b8e969 code=0x7ffc0000 [ 1220.630234][ T47] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1220.680466][ T47] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1220.928171][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.955517][T15667] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1220.976191][ T5889] aquacomputer_d5next 0003:0C70:F00D.001D: unknown main item tag 0x0 [ 1221.567739][T15678] overlay: ./bus is not a directory [ 1222.158095][ T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1222.217063][T15667] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1222.231223][T15667] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1222.240233][T15667] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1222.260052][ T5889] aquacomputer_d5next 0003:0C70:F00D.001D: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.8-1/input0 [ 1222.348271][T15667] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1222.406464][T15667] geneve2: entered promiscuous mode [ 1222.530054][T15667] geneve2: entered allmulticast mode [ 1223.071643][ T5889] usb 9-1: USB disconnect, device number 52 [ 1223.260705][T15682] fido_id[15682]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1223.536623][ T47] usb 4-1: USB disconnect, device number 43 [ 1224.489550][ T5823] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 1225.262065][ T30] audit: type=1326 audit(1747912221.444:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15704 comm="syz.8.2271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d97f8e969 code=0x0 [ 1225.885208][T15717] binder: 15714:15717 ioctl 4018620d 0 returned -22 [ 1225.915199][ T30] audit: type=1326 audit(1747912222.114:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15714 comm="syz.6.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239158e969 code=0x7ffc0000 [ 1225.952183][ T30] audit: type=1326 audit(1747912222.114:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15714 comm="syz.6.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239158e969 code=0x7ffc0000 [ 1225.976967][ T30] audit: type=1326 audit(1747912222.134:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15714 comm="syz.6.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f239158e969 code=0x7ffc0000 [ 1226.428071][ T30] audit: type=1326 audit(1747912222.134:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15714 comm="syz.6.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239158e969 code=0x7ffc0000 [ 1226.455235][ T30] audit: type=1326 audit(1747912222.134:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15714 comm="syz.6.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239158e969 code=0x7ffc0000 [ 1227.441558][T15725] overlay: ./bus is not a directory [ 1228.180163][ T47] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0 [ 1228.234087][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2276'. [ 1229.427069][ T47] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0 [ 1231.174458][ T47] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0 [ 1231.182481][ T47] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0 [ 1231.379360][ T47] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0 [ 1231.393182][ T47] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0 [ 1231.586874][ T47] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0 [ 1231.630156][ T47] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0 [ 1231.690760][ T47] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0 [ 1231.719004][ T47] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0 [ 1231.754691][ T47] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0 [ 1231.773797][ T47] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0 [ 1232.000034][ T47] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0 [ 1232.019006][ T47] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0 [ 1232.045073][ T47] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0 [ 1232.111624][ T47] hid-generic 002F:0004:0007.001E: hidraw0: HID v0.05 Device [syz1] on syz1 [ 1233.441827][T15745] fido_id[15745]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1234.339776][T15761] FAULT_INJECTION: forcing a failure. [ 1234.339776][T15761] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.354770][T15761] CPU: 0 UID: 0 PID: 15761 Comm: syz.8.2285 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1234.354800][T15761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1234.354814][T15761] Call Trace: [ 1234.354823][T15761] [ 1234.354833][T15761] dump_stack_lvl+0x189/0x250 [ 1234.354870][T15761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1234.354898][T15761] ? __pfx__printk+0x10/0x10 [ 1234.354936][T15761] ? __pfx___might_resched+0x10/0x10 [ 1234.354967][T15761] ? fs_reclaim_acquire+0x7d/0x100 [ 1234.354996][T15761] should_fail_ex+0x414/0x560 [ 1234.355023][T15761] should_failslab+0xa8/0x100 [ 1234.355044][T15761] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1234.355073][T15761] ? io_submit_one+0x11f/0x1240 [ 1234.355110][T15761] io_submit_one+0x11f/0x1240 [ 1234.355149][T15761] ? __lock_acquire+0xaac/0xd20 [ 1234.355182][T15761] ? __pfx_io_submit_one+0x10/0x10 [ 1234.355214][T15761] ? __might_fault+0xb0/0x130 [ 1234.355259][T15761] ? __might_fault+0xb0/0x130 [ 1234.355294][T15761] __se_sys_io_submit+0x185/0x2f0 [ 1234.355326][T15761] ? __pfx___se_sys_io_submit+0x10/0x10 [ 1234.355375][T15761] ? ksys_write+0x1f0/0x250 [ 1234.355411][T15761] ? do_syscall_64+0xba/0x210 [ 1234.355447][T15761] do_syscall_64+0xf6/0x210 [ 1234.355473][T15761] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1234.355492][T15761] ? clear_bhb_loop+0x60/0xb0 [ 1234.355516][T15761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.355536][T15761] RIP: 0033:0x7f8d97f8e969 [ 1234.355564][T15761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1234.355583][T15761] RSP: 002b:00007f8d98ddb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1234.355605][T15761] RAX: ffffffffffffffda RBX: 00007f8d981b5fa0 RCX: 00007f8d97f8e969 [ 1234.355621][T15761] RDX: 0000200000000680 RSI: 0000000000000001 RDI: 00007f8d98db2000 [ 1234.355636][T15761] RBP: 00007f8d98ddb090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.355649][T15761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.355660][T15761] R13: 0000000000000000 R14: 00007f8d981b5fa0 R15: 00007ffeb38d7ac8 [ 1234.355691][T15761] [ 1236.916016][T15772] binder: 15769:15772 ioctl 4018620d 0 returned -22 [ 1236.981112][ T30] audit: type=1326 audit(1747912233.174:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15769 comm="syz.5.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1974b8e969 code=0x7ffc0000 [ 1237.290130][ T30] audit: type=1326 audit(1747912233.174:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15769 comm="syz.5.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1974b8e969 code=0x7ffc0000 [ 1238.198010][ T30] audit: type=1326 audit(1747912233.204:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15769 comm="syz.5.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f1974b8e969 code=0x7ffc0000 [ 1238.222524][ T30] audit: type=1326 audit(1747912233.204:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15769 comm="syz.5.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1974b8e969 code=0x7ffc0000 [ 1238.254699][ T30] audit: type=1326 audit(1747912233.204:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15769 comm="syz.5.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1974b8e969 code=0x7ffc0000 [ 1238.554252][T11219] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1238.802553][T15788] FAULT_INJECTION: forcing a failure. [ 1238.802553][T15788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1238.817878][T15788] CPU: 0 UID: 0 PID: 15788 Comm: syz.6.2295 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1238.817908][T15788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1238.817921][T15788] Call Trace: [ 1238.817930][T15788] [ 1238.817940][T15788] dump_stack_lvl+0x189/0x250 [ 1238.817978][T15788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1238.818006][T15788] ? __pfx__printk+0x10/0x10 [ 1238.818042][T15788] ? get_sigframe+0x596/0x7d0 [ 1238.818082][T15788] should_fail_ex+0x414/0x560 [ 1238.818110][T15788] _copy_to_user+0x31/0xb0 [ 1238.818142][T15788] copy_siginfo_to_user+0x22/0xc0 [ 1238.818172][T15788] x64_setup_rt_frame+0x777/0xd40 [ 1238.818228][T15788] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1238.818272][T15788] arch_do_signal_or_restart+0x3e5/0x780 [ 1238.818308][T15788] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1238.818354][T15788] ? local_irq_enable_exit_to_user+0x5/0x10 [ 1238.818389][T15788] irqentry_exit_to_user_mode+0x81/0x120 [ 1238.818418][T15788] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1238.818440][T15788] RIP: 0033:0x7f239145e93d [ 1238.818460][T15788] Code: 30 e8 87 58 ff ff 48 89 83 88 00 00 00 e9 38 fe ff ff 0f 1f 00 8b 7c 24 14 48 8d 74 24 40 ba 0f 00 00 00 e8 f5 e9 12 00 85 c0 <0f> 8e 16 01 00 00 31 db 83 f8 02 0f 84 ca 00 00 00 8b 7c 24 14 48 [ 1238.818478][T15788] RSP: 002b:00007f23923d3060 EFLAGS: 00000202 [ 1238.818497][T15788] RAX: 0000000000000002 RBX: 00007f23917b6080 RCX: 0000000000000000 [ 1238.818512][T15788] RDX: 0000000000000000 RSI: 00007f23923d30a0 RDI: 00007f23923d39c8 [ 1238.818526][T15788] RBP: 00007f23923d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1238.818540][T15788] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 1238.818552][T15788] R13: 0000000000000000 R14: 00007f23917b6080 R15: 00007ffee6c1dd88 [ 1238.818585][T15788] [ 1238.886434][T11219] usb 4-1: Using ep0 maxpacket: 16 [ 1239.044471][ T5823] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 1239.112614][T11219] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1239.154675][T11219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.247139][T11219] usb 4-1: Product: syz [ 1239.251374][T11219] usb 4-1: Manufacturer: syz [ 1239.293800][T11219] usb 4-1: SerialNumber: syz [ 1239.332422][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.454188][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.625284][T11219] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1239.663729][T11219] r8152-cfgselector 4-1: config 0 descriptor?? [ 1242.260022][T11219] r8152-cfgselector 4-1: can't set config #0, error -71 [ 1242.312410][T11219] r8152-cfgselector 4-1: USB disconnect, device number 44 [ 1244.021137][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1244.148676][ T5823] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 1245.028162][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1245.062937][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1245.204590][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1245.217019][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1245.232684][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1245.243824][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.386982][ T10] usb 6-1: config 0 descriptor?? [ 1245.756008][T15828] vivid-000: disconnect [ 1245.764555][T15828] netlink: 'syz.3.2305': attribute type 13 has an invalid length. [ 1245.773534][T15828] vivid-000: reconnect [ 1246.766385][T15810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.817799][T15810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.403419][ T30] audit: type=1400 audit(1747912242.684:1250): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15809 comm="syz.5.2301" dest=2 [ 1247.472487][ T10] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1247.481431][ T30] audit: type=1400 audit(1747912243.664:1251): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15809 comm="syz.5.2301" daddr=fc02::1 [ 1247.500798][ T10] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1247.526721][ T47] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1247.527847][ T10] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 1247.785985][ T47] usb 9-1: Using ep0 maxpacket: 16 [ 1247.905658][ T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.008551][ T47] usb 9-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1248.240735][ T30] audit: type=1400 audit(1747912243.664:1252): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15809 comm="syz.5.2301" daddr=fc01:: dest=20003 [ 1248.276133][ T10] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1248.324630][ T10] usb 6-1: USB disconnect, device number 6 [ 1248.328228][ T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.565468][ T47] usb 9-1: config 0 descriptor?? [ 1249.406126][ T47] usb 9-1: USB disconnect, device number 53 [ 1249.503177][T15843] fido_id[15843]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1249.892971][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2311'. [ 1250.998924][T15855] FAULT_INJECTION: forcing a failure. [ 1250.998924][T15855] name failslab, interval 1, probability 0, space 0, times 0 [ 1251.089064][T15855] CPU: 1 UID: 0 PID: 15855 Comm: syz.8.2312 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1251.089098][T15855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1251.089112][T15855] Call Trace: [ 1251.089121][T15855] [ 1251.089131][T15855] dump_stack_lvl+0x189/0x250 [ 1251.089169][T15855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1251.089197][T15855] ? __pfx__printk+0x10/0x10 [ 1251.089236][T15855] ? __pfx___might_resched+0x10/0x10 [ 1251.089267][T15855] ? fs_reclaim_acquire+0x7d/0x100 [ 1251.089297][T15855] should_fail_ex+0x414/0x560 [ 1251.089325][T15855] should_failslab+0xa8/0x100 [ 1251.089348][T15855] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 1251.089388][T15855] ? __d_alloc+0x31/0x6f0 [ 1251.089418][T15855] __d_alloc+0x31/0x6f0 [ 1251.089447][T15855] d_alloc+0x4b/0x190 [ 1251.089469][T15855] ? lookup_one_qstr_excl_raw+0xb4/0x280 [ 1251.089496][T15855] lookup_one_qstr_excl_raw+0xc8/0x280 [ 1251.089525][T15855] filename_create+0x225/0x470 [ 1251.089558][T15855] ? __pfx_filename_create+0x10/0x10 [ 1251.089598][T15855] do_mkdirat+0xa0/0x590 [ 1251.089630][T15855] ? __pfx_do_mkdirat+0x10/0x10 [ 1251.089662][T15855] ? getname_flags+0x1e5/0x540 [ 1251.089688][T15855] __x64_sys_mkdir+0x6c/0x80 [ 1251.089717][T15855] do_syscall_64+0xf6/0x210 [ 1251.089748][T15855] ? clear_bhb_loop+0x60/0xb0 [ 1251.089774][T15855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.089795][T15855] RIP: 0033:0x7f8d97f8e969 [ 1251.089814][T15855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1251.089832][T15855] RSP: 002b:00007f8d98ddb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1251.089855][T15855] RAX: ffffffffffffffda RBX: 00007f8d981b5fa0 RCX: 00007f8d97f8e969 [ 1251.089871][T15855] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000200000000040 [ 1251.089884][T15855] RBP: 00007f8d98ddb090 R08: 0000000000000000 R09: 0000000000000000 [ 1251.089897][T15855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1251.089910][T15855] R13: 0000000000000000 R14: 00007f8d981b5fa0 R15: 00007ffeb38d7ac8 [ 1251.089944][T15855] [ 1251.817385][T15859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2313'. [ 1256.364604][ T47] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1256.482241][ T5823] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 1256.557241][ T47] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1256.584438][ T47] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.608419][ T47] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1256.674257][ T47] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1256.682495][ T47] usb 9-1: Manufacturer: syz [ 1256.688492][T11219] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1256.728944][ T47] usb 9-1: config 0 descriptor?? [ 1256.767633][ T47] igorplugusb 9-1:0.0: incorrect number of endpoints [ 1256.900194][T11219] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1257.424590][T11219] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.486137][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2322'. [ 1257.529888][T11219] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1257.734198][T11219] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1257.794970][T11219] usb 6-1: Manufacturer: syz [ 1257.849008][T15901] ieee802154 phy0 wpan0: encryption failed: -90 [ 1257.866359][T15899] delete_channel: no stack [ 1257.917628][T11219] usb 6-1: config 0 descriptor?? [ 1257.979260][T11219] igorplugusb 6-1:0.0: incorrect number of endpoints [ 1258.337133][T15897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2324'. [ 1258.421538][T15897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.429347][T15897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.795446][T15913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1258.802606][T15914] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2328'. [ 1259.698161][ T10] usb 6-1: USB disconnect, device number 7 [ 1262.312395][T15934] fuse: Bad value for 'fd' [ 1262.363110][ T5875] usb 9-1: USB disconnect, device number 54 [ 1269.672574][T15987] vivid-000: disconnect [ 1269.687474][T15987] vivid-000: reconnect [ 1269.700687][ T5875] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1271.285050][ T5875] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1271.293473][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.406617][ T5875] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1271.449959][ T5875] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1271.494088][ T5875] usb 4-1: Manufacturer: syz [ 1271.737129][ T5875] usb 4-1: config 0 descriptor?? [ 1271.811818][ T5875] igorplugusb 4-1:0.0: incorrect number of endpoints [ 1272.063482][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2351'. [ 1272.696000][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2352'. [ 1273.426784][T15977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2346'. [ 1274.114285][T11219] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1274.424285][T11219] usb 9-1: Using ep0 maxpacket: 16 [ 1274.732824][T11219] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.770684][T11219] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.885240][T11219] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1274.933085][T11219] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1275.111576][T11219] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1275.166479][T11219] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1275.212491][T11219] usb 9-1: SerialNumber: syz [ 1275.276399][T11219] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1275.494509][T11219] usb 9-1: USB disconnect, device number 55 [ 1275.696876][ T5877] usb 4-1: USB disconnect, device number 45 [ 1276.374418][T16028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 1276.785904][T16032] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2359'. [ 1276.806697][T16032] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2359'. [ 1383.094077][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1383.101105][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11254/1:b..l [ 1383.110203][ C1] rcu: (detected by 1, t=10504 jiffies, g=90373, q=216 ncpus=2) [ 1383.117977][ C1] task:syz-executor state:R running task stack:21512 pid:11254 tgid:11254 ppid:11229 task_flags:0x400140 flags:0x00004002 [ 1383.133095][ C1] Call Trace: [ 1383.136409][ C1] [ 1383.139365][ C1] __schedule+0x168f/0x4c70 [ 1383.144101][ C1] ? arch_stack_walk+0xfc/0x150 [ 1383.149015][ C1] ? stack_trace_save+0x9c/0xe0 [ 1383.153896][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 1383.159218][ C1] ? __pfx___schedule+0x10/0x10 [ 1383.164199][ C1] ? cgroup_rstat_updated+0x144/0xb50 [ 1383.169631][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1383.174697][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1383.180369][ C1] ? ptlock_alloc+0x20/0x70 [ 1383.184899][ C1] ? copy_pmd_range+0x6903/0x7000 [ 1383.189955][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 1383.195269][ C1] preempt_schedule_irq+0xb5/0x150 [ 1383.200412][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1383.206190][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1383.212256][ C1] irqentry_exit+0x6f/0x90 [ 1383.216728][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1383.222750][ C1] RIP: 0010:lock_release+0x2b5/0x3e0 [ 1383.228166][ C1] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 fb 4d d4 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 1383.247821][ C1] RSP: 0018:ffffc90003f8f330 EFLAGS: 00000206 [ 1383.253950][ C1] RAX: d3b419d6fb374500 RBX: 0000000000000206 RCX: d3b419d6fb374500 [ 1383.262249][ C1] RDX: 0000000000000003 RSI: ffffffff8d924a0f RDI: ffffffff8bc120c0 [ 1383.270278][ C1] RBP: ffff888030c0c768 R08: ffffc90003f8f590 R09: 0000000000000000 [ 1383.278307][ C1] R10: ffffc90003f8f4b8 R11: fffff520007f1e99 R12: 0000000000000003 [ 1383.286311][ C1] R13: 0000000000000003 R14: ffffffff8df3dee0 R15: ffff888030c0bc00 [ 1383.294335][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1383.299485][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1383.304624][ C1] unwind_next_frame+0x19a9/0x2390 [ 1383.309772][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1383.314908][ C1] ? stack_trace_save+0x9c/0xe0 [ 1383.319790][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1383.325968][ C1] arch_stack_walk+0x11c/0x150 [ 1383.330771][ C1] ? kasan_save_track+0x3e/0x80 [ 1383.335746][ C1] stack_trace_save+0x9c/0xe0 [ 1383.340451][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1383.346048][ C1] kasan_save_track+0x3e/0x80 [ 1383.350894][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1383.355812][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1383.361521][ C1] ? vm_area_dup+0x28/0x540 [ 1383.366108][ C1] vm_area_dup+0x28/0x540 [ 1383.370505][ C1] ? copy_mm+0x9ed/0x2160 [ 1383.374876][ C1] copy_mm+0xbda/0x2160 [ 1383.379192][ C1] ? __pfx_copy_mm+0x10/0x10 [ 1383.383829][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1383.388903][ C1] ? __init_rwsem+0x122/0x160 [ 1383.393612][ C1] ? copy_signal+0x50b/0x630 [ 1383.398225][ C1] ? copy_process+0x978/0x3b80 [ 1383.403017][ C1] copy_process+0x16d3/0x3b80 [ 1383.407726][ C1] ? copy_process+0x978/0x3b80 [ 1383.412533][ C1] ? __pfx_copy_process+0x10/0x10 [ 1383.417698][ C1] kernel_clone+0x224/0x7f0 [ 1383.422239][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1383.427301][ C1] ? count_memcg_event_mm+0x35b/0x3b0 [ 1383.432702][ C1] ? count_memcg_event_mm+0x92/0x3b0 [ 1383.438030][ C1] __x64_sys_clone+0x18b/0x1e0 [ 1383.442824][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1383.448176][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 1383.453520][ C1] ? do_syscall_64+0xba/0x210 [ 1383.458265][ C1] do_syscall_64+0xf6/0x210 [ 1383.462841][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1383.467566][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.473512][ C1] RIP: 0033:0x7fe59eb851d3 [ 1383.477994][ C1] RSP: 002b:00007ffcd76c40e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1383.486477][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe59eb851d3 [ 1383.494590][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1383.502601][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1383.510596][ C1] R10: 0000555559a237d0 R11: 0000000000000246 R12: 0000000000000000 [ 1383.518676][ C1] R13: 00000000000927c0 R14: 0000000000137910 R15: 00007ffcd76c4280 [ 1383.526791][ C1] [ 1383.529830][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g90373 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1383.541065][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1383.551084][ C1] rcu: RCU grace-period kthread stack dump: [ 1383.557021][ C1] task:rcu_preempt state:R running task stack:27296 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1383.570696][ C1] Call Trace: [ 1383.574039][ C1] [ 1383.577125][ C1] __schedule+0x168f/0x4c70 [ 1383.581831][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1383.587169][ C1] ? schedule+0x165/0x360 [ 1383.591535][ C1] ? __pfx___schedule+0x10/0x10 [ 1383.596429][ C1] ? schedule+0x91/0x360 [ 1383.600701][ C1] schedule+0x165/0x360 [ 1383.604891][ C1] schedule_timeout+0x12b/0x270 [ 1383.609765][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1383.615177][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1383.621187][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1383.626504][ C1] ? prepare_to_swait_event+0x341/0x380 [ 1383.632084][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 1383.636977][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1383.642218][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1383.647180][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1383.653130][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1383.658496][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1383.663810][ C1] ? finish_swait+0xcd/0x1f0 [ 1383.668634][ C1] rcu_gp_kthread+0x99/0x390 [ 1383.673307][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1383.678565][ C1] ? __kthread_parkme+0x7b/0x200 [ 1383.683561][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1383.688660][ C1] kthread+0x711/0x8a0 [ 1383.692795][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1383.698032][ C1] ? __pfx_kthread+0x10/0x10 [ 1383.702648][ C1] ? __pfx_kthread+0x10/0x10 [ 1383.707374][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1383.712649][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1383.717894][ C1] ? __pfx_kthread+0x10/0x10 [ 1383.722513][ C1] ret_from_fork+0x4b/0x80 [ 1383.726962][ C1] ? __pfx_kthread+0x10/0x10 [ 1383.731577][ C1] ret_from_fork_asm+0x1a/0x30 [ 1383.736426][ C1] [ 1383.739476][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1383.745825][ C1] CPU: 1 UID: 0 PID: 16036 Comm: syz.2.2360 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1383.757952][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1383.768055][ C1] RIP: 0010:smp_call_function_many_cond+0xe69/0x11c0 [ 1383.774778][ C1] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 70 6d 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 1b 69 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 00 69 0b [ 1383.795123][ C1] RSP: 0018:ffffc9000ae06fc0 EFLAGS: 00000246 [ 1383.801229][ C1] RAX: ffffffff81b487e0 RBX: ffff8880b893abc0 RCX: 0000000000080000 [ 1383.809231][ C1] RDX: ffffc90010422000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1383.817245][ C1] RBP: ffffc9000ae07120 R08: ffffffff8f7e0977 R09: 1ffffffff1efc12e [ 1383.825240][ C1] R10: dffffc0000000000 R11: fffffbfff1efc12f R12: 1ffff11017108221 [ 1383.833234][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8841108 [ 1383.841231][ C1] FS: 00007f7a70dd16c0(0000) GS:ffff8881261f6000(0000) knlGS:0000000000000000 [ 1383.850205][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1383.856861][ C1] CR2: 000000110c443256 CR3: 0000000028ce4000 CR4: 00000000003526f0 [ 1383.864988][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1383.873007][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1383.881129][ C1] Call Trace: [ 1383.884631][ C1] [ 1383.887744][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1383.892824][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1383.899471][ C1] ? __pfx___text_poke+0x10/0x10 [ 1383.904459][ C1] ? rcu_is_watching+0x15/0xb0 [ 1383.909294][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1383.914391][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1383.919583][ C1] ? tc_run+0xea/0x6e0 [ 1383.923825][ C1] text_poke_bp_batch+0x319/0x940 [ 1383.928915][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1383.933994][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1383.939618][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 1383.946470][ C1] ? __jump_label_update+0x37e/0x3a0 [ 1383.951818][ C1] text_poke_finish+0x30/0x50 [ 1383.956618][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1383.962788][ C1] static_key_slow_inc_cpuslocked+0x80/0xf0 [ 1383.968783][ C1] static_key_slow_inc+0x1a/0x30 [ 1383.973848][ C1] tc_new_tfilter+0x10c1/0x15b0 [ 1383.978891][ C1] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1383.984193][ C1] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1383.989563][ C1] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1383.994727][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1383.999894][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1384.005423][ C1] ? ref_tracker_free+0x63a/0x7d0 [ 1384.010537][ C1] ? __copy_skb_header+0xa7/0x550 [ 1384.015762][ C1] netlink_rcv_skb+0x21c/0x490 [ 1384.020596][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1384.026120][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1384.031692][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1384.037021][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1384.042260][ C1] netlink_unicast+0x758/0x8d0 [ 1384.047080][ C1] netlink_sendmsg+0x805/0xb30 [ 1384.051882][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1384.057205][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1384.062654][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1384.067992][ C1] __sock_sendmsg+0x219/0x270 [ 1384.072733][ C1] ____sys_sendmsg+0x505/0x830 [ 1384.077764][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1384.083148][ C1] ? import_iovec+0x74/0xa0 [ 1384.087747][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 1384.092475][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1384.097755][ C1] ? __fget_files+0x2a/0x420 [ 1384.102402][ C1] ? __fget_files+0x3a0/0x420 [ 1384.107145][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 1384.112149][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1384.117682][ C1] ? do_syscall_64+0xba/0x210 [ 1384.122412][ C1] do_syscall_64+0xf6/0x210 [ 1384.126972][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1384.131716][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.137670][ C1] RIP: 0033:0x7f7a6ff8e969 [ 1384.142314][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1384.162582][ C1] RSP: 002b:00007f7a70dd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1384.171230][ C1] RAX: ffffffffffffffda RBX: 00007f7a701b6160 RCX: 00007f7a6ff8e969 [ 1384.179253][ C1] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000008 [ 1384.187292][ C1] RBP: 00007f7a70010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1384.195301][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1384.203319][ C1] R13: 0000000000000000 R14: 00007f7a701b6160 R15: 00007ffc8b6706a8 [ 1384.211343][ C1]