last executing test programs: 12m1.487260772s ago: executing program 0 (id=1848): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x50, 0x9d, 0x10, 0x40, 0x61d, 0xc170, 0xb188, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd4, 0x0, 0x0, 0x4b, 0x72, 0x86}}]}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x25dfdbfe, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x5, 0x0, 0x1}}]}, 0x24}}, 0x8000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket(0x1, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000000080)=""/4111, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000240)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r2], 0x0) 12m0.018038331s ago: executing program 2 (id=1854): socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x20000040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) fcntl$setstatus(r2, 0x407, 0xa0018ce0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050427bd0200000a00000000000008000100", @ANYRES32=0x0, @ANYBLOB="4800028044000100240001006d6f64650000004000000000000010000000000000000000000007000000000005000300050000001100040061637c6976656261636b757000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$AUDIT_SET(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x3c, 0x3e9, 0x4, 0x70bd2d, 0x25dfdbfb, {0xf, 0x0, 0x1, 0x0, 0xfff, 0x5, 0x0, 0x4, 0x0, 0x3, 0x5}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x48800) connect$unix(r6, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@gettaction={0x68, 0x32, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4084}, 0x891) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000069000010000000004000000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400000620000001000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x573, &(0x7f0000001e00)=""/4044, 0x100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) recvmmsg(r8, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002940)=""/2, 0x2}, {&(0x7f0000002980)=""/96, 0x60}], 0x2}, 0x1}], 0x1, 0x2100, 0x0) msgget$private(0x0, 0xae) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 11m57.201375627s ago: executing program 0 (id=1859): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x850}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={r5}, &(0x7f0000000140)=0x8) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000a00)=@urb_type_iso={0x0, {0x7, 0x1}, 0x9, 0x40, &(0x7f0000000300)="064534e70dc38ba3e47a19fe16245dec436aaa3da842fa54ff88e2915781e2c37b35bacfa4", 0x25, 0x4, 0xbe8d, 0x42, 0xe70d, 0x5, &(0x7f0000000340)="925f3ac478638d5806b19ab09eba6d1c767073f6e29b836483c164ae33dc2c73dc2529fdf2b46b57fb47a89632b2aa5790e69c1be201f39213522c37550547eb50c1830e2c43", [{0x8, 0x7, 0x7}, {0xca, 0x4, 0x4}, {0x209990dd, 0x6, 0x1}, {0x0, 0xfffffff8, 0xb}, {0xb8, 0x4, 0x6}, {0x8, 0x10000, 0x6}, {0x2, 0x5, 0x7}, {0x8, 0x9, 0x2}, {0x9, 0x1, 0x8}, {0x9, 0x3ff}, {0x10000, 0x1, 0x1}, {0x4, 0x7, 0xfffffffb}, {0x48d66f4c, 0xffffff71, 0x4}, {0x93, 0x9, 0xf}, {0x7, 0x3, 0xaabd}, {0xfffffffb, 0x1000, 0x2}, {0x800, 0xe0, 0x2}, {0xfff, 0x45a, 0x3}, {0xe4, 0xffffffff, 0x21a21209}, {0x5, 0x3, 0x8}, {0x2, 0xfff, 0x2}, {0x1, 0xd, 0x8}, {0x9, 0xe53a, 0x4}, {0x7, 0x3, 0x9}, {0x3, 0x7ff, 0x7fffffff}, {0x7, 0xfffffe26, 0x3ff}, {0x64, 0x3ff, 0x80000000}, {0x400, 0x1, 0xd}, {0x1, 0x2, 0x8}, {0x7, 0x7, 0x1ff}, {0x7abf, 0xff}, {0x9, 0x80, 0xffff}, {0xf1, 0x9, 0x2}, {0x1, 0x5f, 0x66d}, {0x56, 0x9, 0x29a1}, {0x2fbf, 0x7, 0x2}, {0x0, 0xffffffff, 0x7f}, {0x100, 0x5, 0x9}, {0x4, 0x8, 0xfffff800}, {0x4, 0xfffffa95, 0x7f95}, {0xf8, 0x0, 0xfffff000}, {0x8, 0xcc2, 0x9}, {0x6, 0x5, 0x5}, {0x1000, 0x10001, 0x4b1}, {0x4, 0x9, 0x7}, {0x0, 0x6, 0x4}, {0xe6a0, 0x1570400, 0x897e}, {0x3, 0x5, 0xd13a}, {0xdd5d, 0x2, 0x2}, {0x4f, 0x1, 0xfffffff7}, {0x6, 0x1, 0x8}, {0x6, 0x10, 0xcb55}, {0x9, 0xf900, 0x9}, {0x7fff, 0x9, 0xe163}, {0x8001, 0x38, 0x7}, {0xfff, 0x7, 0xf}, {0xfffffffb, 0xca5, 0x7}, {0x1, 0x6}, {0x2, 0xffff, 0x4}, {0x7, 0x6, 0x7}, {0x7fffffff, 0x7, 0x7}, {0x0, 0xa97, 0x1}, {0x8, 0x8, 0x2}, {0xd911, 0x2, 0xee}, {0x86c, 0x93, 0x4}, {0x10, 0x1}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071107d000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = semget$private(0x0, 0x1, 0x2a8) semctl$GETZCNT(r7, 0x2, 0xf, 0x0) 11m57.159155471s ago: executing program 3 (id=1860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='fsi_dev_init\x00', r4, 0x0, 0x9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r6 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x33, 0x39, 0x36, 0x0, 0x34, 0x33, 0x31, 0x64, 0xc1e688e9b2ae2fc6, 0x61, 0x62, 0x0, 0x63, 0x0, 0x65, 0x5a]}, 0x0, 0x0, 0xfffffffffffffffe) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x8000, &(0x7f00000003c0)=ANY=[]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="ce010000f299697f65360c5e86dd", 0x0, 0x1fe7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 11m57.027768821s ago: executing program 2 (id=1862): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000004c00)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)='oyr', 0x3}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) 11m55.359782263s ago: executing program 3 (id=1864): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) 11m55.217450508s ago: executing program 0 (id=1865): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={r6}, &(0x7f0000000140)=0x8) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000a00)=@urb_type_iso={0x0, {0x7, 0x1}, 0x9, 0x40, &(0x7f0000000300)="064534e70dc38ba3e47a19fe16245dec436aaa3da842fa54ff88e2915781e2c37b35bacfa4", 0x25, 0x4, 0xbe8d, 0x42, 0xe70d, 0x5, &(0x7f0000000340)="925f3ac478638d5806b19ab09eba6d1c767073f6e29b836483c164ae33dc2c73dc2529fdf2b46b57fb47a89632b2aa5790e69c1be201f39213522c37550547eb50c1830e2c43", [{0x8, 0x7, 0x7}, {0xca, 0x4, 0x4}, {0x209990dd, 0x6, 0x1}, {0x0, 0xfffffff8, 0xb}, {0xb8, 0x4, 0x6}, {0x8, 0x10000, 0x6}, {0x2, 0x5, 0x7}, {0x8, 0x9, 0x2}, {0x9, 0x1, 0x8}, {0x9, 0x3ff}, {0x10000, 0x1, 0x1}, {0x4, 0x7, 0xfffffffb}, {0x48d66f4c, 0xffffff71, 0x4}, {0x93, 0x9, 0xf}, {0x7, 0x3, 0xaabd}, {0xfffffffb, 0x1000, 0x2}, {0x800, 0xe0, 0x2}, {0xfff, 0x45a, 0x3}, {0xe4, 0xffffffff, 0x21a21209}, {0x5, 0x3, 0x8}, {0x2, 0xfff, 0x2}, {0x1, 0xd, 0x8}, {0x9, 0xe53a, 0x4}, {0x7, 0x3, 0x9}, {0x3, 0x7ff, 0x7fffffff}, {0x7, 0xfffffe26, 0x3ff}, {0x64, 0x3ff, 0x80000000}, {0x400, 0x1, 0xd}, {0x1, 0x2, 0x8}, {0x7, 0x7, 0x1ff}, {0x7abf, 0xff}, {0x9, 0x80, 0xffff}, {0xf1, 0x9, 0x2}, {0x1, 0x5f, 0x66d}, {0x56, 0x9, 0x29a1}, {0x2fbf, 0x7, 0x2}, {0x0, 0xffffffff, 0x7f}, {0x100, 0x5, 0x9}, {0x4, 0x8, 0xfffff800}, {0x4, 0xfffffa95, 0x7f95}, {0xf8, 0x0, 0xfffff000}, {0x8, 0xcc2, 0x9}, {0x6, 0x5, 0x5}, {0x1000, 0x10001, 0x4b1}, {0x4, 0x9, 0x7}, {0x0, 0x6, 0x4}, {0xe6a0, 0x1570400, 0x897e}, {0x3, 0x5, 0xd13a}, {0xdd5d, 0x2, 0x2}, {0x4f, 0x1, 0xfffffff7}, {0x6, 0x1, 0x8}, {0x6, 0x10, 0xcb55}, {0x9, 0xf900, 0x9}, {0x7fff, 0x9, 0xe163}, {0x8001, 0x38, 0x7}, {0xfff, 0x7, 0xf}, {0xfffffffb, 0xca5, 0x7}, {0x1, 0x6}, {0x2, 0xffff, 0x4}, {0x7, 0x6, 0x7}, {0x7fffffff, 0x7, 0x7}, {0x0, 0xa97, 0x1}, {0x8, 0x8, 0x2}, {0xd911, 0x2, 0xee}, {0x86c, 0x93, 0x4}, {0x10, 0x1}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071107d000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = semget$private(0x0, 0x1, 0x2a8) semctl$GETZCNT(r8, 0x2, 0xf, 0x0) 11m55.127022751s ago: executing program 2 (id=1867): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x40, 0x3}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000002c0)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 11m55.109737814s ago: executing program 3 (id=1868): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) (fail_nth: 2) write(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 11m53.550515293s ago: executing program 0 (id=1870): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r1, &(0x7f0000000740)={@void, @void, @llc={@snap={0x155, 0x1, "e8", "c312bc", 0x147c2}}}, 0x8) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={0x0, &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 11m53.435823083s ago: executing program 2 (id=1871): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0xfffffffffffffe7d, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, 'McE7'}]}}, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x20774, 0x8000, 0x40, 0x0, 0x3, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x6, 0x2, 0x0, 0x7fffffff], 0x80a0000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) socket$l2tp(0x2, 0x2, 0x73) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r5, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00000000007fffffff00"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xff02}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x93, 0x1, 0x0, [{@broadcast}, {}, {@private}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="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", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240), 0x300}}], 0x4, 0xc080) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r4, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 11m52.884622741s ago: executing program 3 (id=1873): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b6a, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x7, 0x1, 0x0, 0x800, 'syz0\x00'}, 0x1, [0x0, 0x80, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x42, 0x0, 0xfffffffffffffffd, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0xd453, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffc, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x0, 0x0, 0x80000000000, 0x79, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffffffffffd, 0x4000000000000, 0x200, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x34, 0x0, 0x4, 0x0, 0x400, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x20b50d5b]}) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = syz_open_dev$mouse(&(0x7f0000006300), 0x0, 0x8200) recvfrom(r8, 0x0, 0x0, 0x40002120, &(0x7f0000006380)=@l2tp={0x2, 0x0, @private=0xa010101, 0x2}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000004880)={'ip6gre0\x00', &(0x7f0000004800)={'ip6tnl0\x00', r7, 0x29, 0x1, 0x1, 0x9, 0x20, @mcast2, @loopback, 0x8, 0x700, 0x9, 0x7fff}}) syz_clone(0x10201000, &(0x7f0000005080)="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", 0x1000, &(0x7f0000006080), &(0x7f00000060c0), &(0x7f0000006100)="0ece99cf77c529409a8aecfb7965fddbea5fcc66a5a7f9cc00e67ac1fe76dd81c57364e93b649879d929ec89b63a94f5d833f584dd8573c084d44824821cb43c51c2dcd3e0e75a7c644861484995bee2599009a44c22028f4ecd2fe038a645f14870880ec9bb274fb086b66231529f4f2e62a2963535d3da0d017bf0811d08b4cfd28952d8ae0f0fcae63fbe5675bef2146f23782fee0e01e2119a2eda371147a5631f18010d880417824bdaf4b1aafe8a231ba91ca69f504c8adebcc96318d783ffef569891fd") sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004e00)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x0, 0x2, 0x0, 0x2, {0xa, 0x4e22, 0x60, @private0}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)="35e2d712dc149c5a5881f764975731ebb7954db11fd66efa6c8c2f4684f9bf0360e8af1817448f1a827635651b8d1476f809a874473d64ff45379a6bd66c68f1fc3fb4ee", 0x44}, {&(0x7f0000000400)="cf5aedf6ac601b9c2cc8fa2b62b7d5679486f2a1800ebd3d94a12b8259ea7cdf2d1e42179b2286e42b5c3e5dcf61a5018f8f5fe9656c1275c4703e36cd358bedc4da5c463d275d35cfa8374e9dfcc7109a3ef65ec5061ca9d22f194fee7b6670990cd8c4ab315d10759d4c4041ab6e0317d0bdc9f6a316de091c48b51417f89c9ef488a9b7bb6b4c26c7bbc46298", 0x8e}], 0x2, &(0x7f00000004c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}], 0x48}}, {{&(0x7f0000000540)=@caif=@dgm={0x25, 0x2, 0x4}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000007c0)="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", 0x1000}], 0x1, &(0x7f0000000600)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xff}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0xc0}}, {{&(0x7f00000006c0)=@x25, 0x80, &(0x7f0000001a80)=[{&(0x7f00000017c0)="028c65b3ba9096e7bae6bfa954939b43bb46f1a0a5b76839d392d27a653d8293899f336157f96ead382aab8d7227b8afa3940569a64772061cf4a579430e5cdef6abfcb959b1c213d53d00189617e4d5e7cb8e7d37cf3f621eba40283aa9dadf5f43883f3d2833f365692f", 0x6b}, {&(0x7f0000001840)="6a18efd0e3e401a1573edfc20e6bfeb71ccc6f1f75e4d050740662bca1f09061bd4ed568bb27edbdbfe3c873e8a14a4f52fd489d2b9f4eb98e9fc4489e612a269e6666367bbdad3f645b8e58258a5fe99b307d43de20a80cc3924635a3ed97c1d821769e58f8d899383ce1e4daab4731786a5cd0dd60867e17361ba039ae3a09304afed0a05ac7d1fd4e7de2402c75b88bbaa144f6ebe2c23457ffb9633333f958f0ae1a8f6ef5b3f2a5f7118d1ac475f0d14e5496570465e84f26a2a290f9d34b4cb77243e7ec5640f360a3539e7ae8c331db143a39b07c4245f2259511e04e09e42c215b4d5a53414569", 0xeb}, {&(0x7f0000000740)="d1a83dc35e3e875d1700cd29657f9f2af52ce3671ee6b015e3b7ef8a9584461d61689901", 0x24}, {&(0x7f0000001940)="4de365dbd30a01640886da1bf454fcafe1be453fa748", 0x16}, {&(0x7f0000001980)="30aefbce92640cdd6ced72b00f2d6425ade211c30845ffefd59147e530ffcbc70e6e2f46c4c9a8bfb0f12160fe493c3b3dca6a6e44d98dd62b402302e33aa2128ab55b25ed54d2ece701c925aa9a4da99dc9e88ca2ec71a7d82079bda6acf403dc8cb14f1911eab329981d5ebbd0fe888f658df494a2a7c70326532982b15927a97c9d10336f1b207a850fbe8b08c209f3740f6fba1436a97609557945d5ce980582310237c8fafd2cdb29a3811b0690ba340adf62ea7718ea53ff683b6179567fc7ba0c7192d416ddf13bfb2b29442eb86cebf90950df2d15803aa0bc38fa046878bf6d075148070e526527b54011b9441a", 0xf2}], 0x5, &(0x7f0000001b00)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffac}}, @mark={{0x14, 0x1, 0x24, 0xfffffff7}}, @mark={{0x14, 0x1, 0x24, 0x49}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xa}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0xc0}}, {{&(0x7f0000001bc0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x3, 0x1, 0x4, 0x2}}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000001c40)="318ea87c", 0x4}, {&(0x7f0000001c80)="e49299923c97f9efc6302ace8bbf6166c03d06440d1e2a7bf3178595cf98f28df4abb6e05a5e712b960b3872c34fd4c7b99a5f259ff0e8829d14af8c68f3b9b3c2f1a266b4093b6bde6b409775bc288d40711a7f8408a235cd30d2d823c1ce2929a686c2487c4845efac2458d659da1eaaff219f95ad50d7b868260101cac9d097320db94409a3a83e3a4ea0a7e392fecf60435ec8f3d8b3c476df4a39345e4f46c5cb09de8ca1", 0xa7}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000002d40)="dffa909e13c9b10fa8e407c509e9c66bc75eeee71608b22f64967afd64b9e45222030cd9e4a2d84dec9a8ec4db6202bc85214dc387e1c9bae88f0001392e4e53281632346e9afa1b764bc59e1f32ccccc57ae88c53577f2158b91259ba", 0x5d}, {&(0x7f0000002dc0)="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", 0x1000}, {&(0x7f0000003dc0)="32d4cb7f062b39d5fb895f3738b8605f1a02a54bfafc778c000c5f05c15de2d9bab8a416e7f6de75e81a6fa54ac099ba96f030a77d635bc5fae9265da2aeedf1ac9b63a3f87aaf24a2de20a5ec47bab168a21a51d62b3e58ea83f084c197ba5f7d4b2e4b1697be29a6d84a3bf114ff4162e2a3f2fd98bd411e3fa6fcbdd68f2b62fcadc403f5ba18e4e07f33dc02ee7ca8d37511b34714ca89761d0e3f2c44", 0x9f}], 0x6}}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000003f00)="fe70911ad48bee05decdbf0dd0dc8903e8c740e5026d6665acaa59cb0ec0c6712ff84aa7e7fb3c49dac0a0cf8a8d317b90049efc83490cf86a2401e7807d547c49858e6d4800f2f97ec53b7591d550668b37d1c4bc98ac8b740e3070eb076ab32211b1c4a907adb7e63fcee446a0081e1349f4c70769ef6f2a", 0x79}], 0x1, &(0x7f0000003fc0)=[@timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @mark={{0x14, 0x1, 0x24, 0xe4}}], 0x30}}, {{&(0x7f0000004000)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004080)="a55aa1058b3eab82e449f0e141a34deba35bf71843f3433a9a487973a25ddd4707991e1ff458051c3575d7674e80ef5c8587efd32935ace62ed7b03120ebf3440cd66252c880f9abe539ea3deafaf0723e864161c36e5a7ee3d4bb64db303f906bb12a54c1e4a4ae4a4f1bdf56c03cb31884a9a2944e8c1c351b539f3045eb0bf1ed4e4c3a382d30410589deed6d", 0x8e}], 0x1, &(0x7f0000004180)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}], 0x30}}, {{&(0x7f00000048c0)=@xdp={0x2c, 0xa, r9, 0x1b}, 0x80, &(0x7f0000004a80)=[{0x0}, {&(0x7f0000004a00)="4e4437954133196cb4f4ffbbab3d28deac825775237cd8e03c58cb0ed3dcc6f9b78a55e3eed0c4a33ff8af587eb1f3a30f509071acfead", 0x37}], 0x2, &(0x7f0000004ac0)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x48}}, {{&(0x7f0000004b40)=@caif=@dgm={0x25, 0x4, 0x80}, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004bc0)="ec34d7bc66d598abbf1a003dd72115c06e6e7727c3c2fa886bc9", 0x1a}, {&(0x7f0000004c00)="e00c38436048dd1484850dba25b589361a84fd3c91e2dd5a9dfa15627adc5f5219970a587b931914508148345f21f48adc8a4dc4a088aff202cfaabf40f91c66b05b56dafb5248f1a1de6f0baf925589c9dc5b26c0dd2a5883ed2e2f9ad3b22a4d6bebb0d85221584c94a0488d293b09f8f3fcd2187166a5d1e6f59b875d8685d1675853df789b93ae1ff4be976acd45960f159edfb30d329c1b89ed40295e20c9cf3026bafe15090a4f05535ad1c0af62dcf2a9f84f90688da70474035b8eefa2cb158bd8fc878366b10299301b3978560d3e6bb8c891ab7455f91a36b789", 0xdf}, {&(0x7f0000004d00)="ed390e06ee3455d5332ee1b9d1dbabbf552304ad7c91ec7a101e0b8ab5de6aa9ba36cfcac8de01db53c20dabfafa69d5c226c3b2f2c36b58050273d2e07bb2f019c611ad", 0x44}], 0x3, &(0x7f0000004dc0)=[@mark={{0x14, 0x1, 0x24, 0x13079420}}], 0x18}}], 0x8, 0xc000) sendmsg$nl_route_sched(r4, &(0x7f00000062c0)={&(0x7f0000006200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000006280)={&(0x7f0000006240)=@newtclass={0x34, 0x28, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf, 0xfff1}, {0xfff2, 0x7}, {0x2, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x3}}, @tclass_kind_options=@c_sfb={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008010) 11m43.003765022s ago: executing program 0 (id=1875): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x850}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={r5}, &(0x7f0000000140)=0x8) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000a00)=@urb_type_iso={0x0, {0x7, 0x1}, 0x9, 0x40, &(0x7f0000000300)="064534e70dc38ba3e47a19fe16245dec436aaa3da842fa54ff88e2915781e2c37b35bacfa4", 0x25, 0x4, 0xbe8d, 0x42, 0xe70d, 0x5, &(0x7f0000000340)="925f3ac478638d5806b19ab09eba6d1c767073f6e29b836483c164ae33dc2c73dc2529fdf2b46b57fb47a89632b2aa5790e69c1be201f39213522c37550547eb50c1830e2c43", [{0x8, 0x7, 0x7}, {0xca, 0x4, 0x4}, {0x209990dd, 0x6, 0x1}, {0x0, 0xfffffff8, 0xb}, {0xb8, 0x4, 0x6}, {0x8, 0x10000, 0x6}, {0x2, 0x5, 0x7}, {0x8, 0x9, 0x2}, {0x9, 0x1, 0x8}, {0x9, 0x3ff}, {0x10000, 0x1, 0x1}, {0x4, 0x7, 0xfffffffb}, {0x48d66f4c, 0xffffff71, 0x4}, {0x93, 0x9, 0xf}, {0x7, 0x3, 0xaabd}, {0xfffffffb, 0x1000, 0x2}, {0x800, 0xe0, 0x2}, {0xfff, 0x45a, 0x3}, {0xe4, 0xffffffff, 0x21a21209}, {0x5, 0x3, 0x8}, {0x2, 0xfff, 0x2}, {0x1, 0xd, 0x8}, {0x9, 0xe53a, 0x4}, {0x7, 0x3, 0x9}, {0x3, 0x7ff, 0x7fffffff}, {0x7, 0xfffffe26, 0x3ff}, {0x64, 0x3ff, 0x80000000}, {0x400, 0x1, 0xd}, {0x1, 0x2, 0x8}, {0x7, 0x7, 0x1ff}, {0x7abf, 0xff}, {0x9, 0x80, 0xffff}, {0xf1, 0x9, 0x2}, {0x1, 0x5f, 0x66d}, {0x56, 0x9, 0x29a1}, {0x2fbf, 0x7, 0x2}, {0x0, 0xffffffff, 0x7f}, {0x100, 0x5, 0x9}, {0x4, 0x8, 0xfffff800}, {0x4, 0xfffffa95, 0x7f95}, {0xf8, 0x0, 0xfffff000}, {0x8, 0xcc2, 0x9}, {0x6, 0x5, 0x5}, {0x1000, 0x10001, 0x4b1}, {0x4, 0x9, 0x7}, {0x0, 0x6, 0x4}, {0xe6a0, 0x1570400, 0x897e}, {0x3, 0x5, 0xd13a}, {0xdd5d, 0x2, 0x2}, {0x4f, 0x1, 0xfffffff7}, {0x6, 0x1, 0x8}, {0x6, 0x10, 0xcb55}, {0x9, 0xf900, 0x9}, {0x7fff, 0x9, 0xe163}, {0x8001, 0x38, 0x7}, {0xfff, 0x7, 0xf}, {0xfffffffb, 0xca5, 0x7}, {0x1, 0x6}, {0x2, 0xffff, 0x4}, {0x7, 0x6, 0x7}, {0x7fffffff, 0x7, 0x7}, {0x0, 0xa97, 0x1}, {0x8, 0x8, 0x2}, {0xd911, 0x2, 0xee}, {0x86c, 0x93, 0x4}, {0x10, 0x1}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071107d000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = semget$private(0x0, 0x1, 0x2a8) semctl$GETZCNT(r7, 0x2, 0xf, 0x0) 11m40.824445809s ago: executing program 2 (id=1876): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x19, 0x1, 0x1, "3a8e07ca5de21f0077ab7a4d8601acc620004b5c000000000000002100", 0x3231564e}) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x802, 0x2, 0xbfdffffc}, &(0x7f0000000100), &(0x7f0000000280)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) socket(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, r6, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r8, 0xd01c4813, &(0x7f0000000580)={{0x1, 0x100, 0x4, 0x1, 0x81, 0x9}, 0x97, [0x4, 0x4, 0x3, 0xe9f5, 0x7, 0xfff, 0x40, 0x3ff, 0x7, 0xfa44, 0x1, 0x6, 0x6, 0xec, 0x7fffffff, 0x168, 0x4, 0x100, 0xb, 0x0, 0x9, 0x7, 0xad2a, 0x3, 0x2, 0x2b0, 0x80, 0xfff, 0x10000, 0xf, 0x1000, 0x7, 0x46e0, 0x5, 0x8, 0x6, 0x6, 0xffffff2b, 0x4, 0x10000, 0x8, 0xb7, 0x3, 0x4, 0x1, 0x9, 0x6, 0x10000, 0x2, 0xff, 0x6, 0xc, 0x3, 0x0, 0x8, 0x6dab, 0x1, 0x6, 0x1, 0x9, 0x2, 0x4, 0x1, 0x947, 0x1, 0x1, 0x1, 0xfffffff9, 0x8, 0x9, 0x7ff, 0xf3, 0x2, 0xdd5, 0x562, 0x61, 0x74720e6a, 0x0, 0x7, 0x5, 0xfffffffe, 0x7, 0xde8, 0x2c, 0x101, 0x4, 0x9, 0x8, 0xc3bf, 0x7fffffff, 0x5, 0xd, 0x8000, 0x2f63, 0x4, 0x6, 0x1, 0x1, 0x2, 0x80000000, 0xffff4104, 0xfff, 0x5, 0xff, 0x0, 0x10000, 0x9, 0x3ff, 0x7, 0x7, 0x8, 0x8000, 0x3, 0x6, 0xf, 0x8, 0xfffffffc, 0x100, 0x8, 0x8, 0x33, 0x2, 0x6, 0x6, 0x4, 0x0, 0x4c5, 0xb794, 0x7, 0x4, 0x4f42, 0x4, 0x8c4, 0x2, 0xa, 0x710, 0x6, 0x80000001, 0x8, 0x5d13, 0x8001, 0x2, 0x7b, 0x64, 0x9, 0x6, 0xf5f0, 0x4, 0x5, 0x100, 0x1, 0x8, 0x8, 0x200, 0x5, 0x2, 0x115, 0x8000, 0x80000000, 0x8, 0x6, 0x7, 0x4, 0x4, 0x80000000, 0x36f, 0x6, 0x7, 0x6, 0x10, 0x5, 0x7, 0x401, 0x6, 0x601, 0x6, 0x5, 0x3, 0x9, 0x60, 0x8, 0x7, 0x0, 0x6, 0x8, 0x0, 0x1ff, 0x6, 0x0, 0xc70, 0x7b, 0x3, 0x7, 0x6, 0x5, 0x3, 0x4, 0x80000001, 0x7, 0xa, 0x9, 0x123a00, 0x6, 0x0, 0x200, 0x80000000, 0x1, 0x81, 0x8001, 0x61c00000, 0xb7, 0x0, 0x6, 0x7f, 0x1000, 0x3, 0x40, 0x80000001, 0x7fffffff, 0x2, 0x18, 0x8, 0x2, 0x5, 0x4, 0x3, 0x9, 0x9, 0x1, 0x5, 0x9, 0xfff, 0x6, 0x7, 0x6, 0x3, 0x8, 0x2, 0x10000, 0x3, 0x6, 0x80000001, 0xfffffc00, 0x3, 0x5, 0x401, 0x800, 0x6, 0x8, 0x400, 0x9, 0x2fa, 0x200, 0x7, 0x8, 0xa9, 0x5, 0x90e, 0xfffffffd, 0x1, 0x0, 0x5c3, 0x40a7c427, 0x8001, 0x45d1, 0x1ff, 0x6, 0x2f, 0x5, 0x56c4, 0x6, 0x7, 0xfdce, 0x9, 0x3, 0x5, 0x4, 0xffffffff, 0x1, 0x0, 0x4, 0x80, 0x8, 0x1d, 0xb, 0x40, 0x400, 0xcd93, 0xfffffffe, 0x6, 0x36, 0xe, 0x9, 0xfffffffb, 0x4, 0x7fff, 0x8, 0x9, 0xff, 0x8000, 0x36, 0x4, 0x68, 0x0, 0xfffffffe, 0x77466976, 0xe, 0x0, 0x1, 0x9, 0x7ff, 0x5, 0xec, 0x6, 0x8, 0x2, 0x8, 0x9, 0x17f5, 0x3, 0x6e, 0x5, 0x6, 0x4, 0x8001, 0x608, 0x5, 0x9e, 0x1, 0x6, 0x5, 0x8, 0x7f, 0x100, 0x81, 0x5, 0x5, 0x4, 0x9, 0x0, 0x52b, 0x1, 0x8, 0x1, 0x9, 0x4, 0x2, 0x4, 0x100, 0x5, 0x2, 0x4, 0x40, 0x40, 0x0, 0xb, 0x9, 0xb, 0x0, 0x4, 0x2, 0xec2, 0xa, 0x7ff, 0x9, 0x7fff, 0x2e32, 0x7ff, 0xb3, 0x22, 0xfeb9, 0x8, 0x3, 0x0, 0x19, 0x83, 0x0, 0xffffffff, 0x4698d2d7, 0x5, 0x0, 0x7, 0x3, 0x0, 0x0, 0x4, 0x6, 0x401, 0x1, 0x200, 0x8, 0x7ff, 0x8, 0x9, 0x8, 0x10, 0xfffffffa, 0x1, 0x8, 0x66e, 0x10001, 0x3, 0x4, 0x5, 0x8, 0x4, 0x40d7, 0x5, 0x0, 0x0, 0xfc, 0xd800, 0x1, 0x9, 0x5, 0x2, 0x9, 0x7, 0x6, 0xff, 0x7, 0x2, 0x400, 0xfffffffb, 0x0, 0x3, 0x1, 0x4, 0x0, 0x3, 0x6, 0xfff, 0x0, 0x6, 0xf, 0x1, 0x4, 0x2, 0x4, 0x8, 0x77, 0x7, 0x101, 0x4, 0xffffffff, 0x4, 0xfffffbdd, 0x0, 0x1, 0x10, 0x3ff, 0x0, 0x6, 0x3f0, 0x1000, 0x5, 0x4, 0x5, 0x4, 0x8bc, 0x1, 0xfffffffd, 0x81, 0x9, 0x0, 0xb2, 0x3, 0x31, 0xfffffff8, 0x5, 0x8000, 0x7, 0x100, 0x3, 0x3, 0x5, 0xfffff001, 0x4, 0x7f, 0x3c, 0x0, 0x3, 0x0, 0x3f6d, 0xaec, 0x0, 0x31ec, 0x7, 0xfffffab3, 0x8a7, 0x7ff, 0x7, 0x2, 0x1, 0x1, 0x7fe, 0xb, 0x6, 0xd, 0x0, 0x44, 0x9, 0x6, 0x8, 0x8001, 0x1, 0x3ff, 0x9, 0xa, 0x6, 0x2, 0x2, 0x9, 0xe, 0xd26, 0x4, 0xfffff2f8, 0x6, 0x6, 0x80, 0x4, 0x7e6bee85, 0x7ff, 0x7fff, 0x5, 0x9, 0x482, 0x7, 0x80000000, 0x1, 0x4, 0xfffffffa, 0x7, 0x8, 0x2, 0x3, 0x698d, 0x0, 0x122, 0xffff6f36, 0x3, 0xffff, 0x4, 0x6, 0x10001, 0xfffffffd, 0x6, 0x7, 0x2, 0x9, 0x0, 0xfff, 0x8, 0x9, 0x400, 0x4, 0x9, 0x3ff, 0x4, 0x0, 0x9, 0x6, 0x5, 0x8, 0x45, 0x2, 0x6, 0x7, 0x3ff, 0x8a8, 0x401, 0x4, 0x0, 0x1ff, 0x5, 0xbf, 0xfffffff8, 0x6, 0x2, 0xe32f, 0x0, 0xffffffff, 0x7, 0x0, 0x4, 0x4, 0x6, 0x8, 0x8, 0x0, 0x8000, 0x9, 0x9, 0x7, 0x7, 0x3, 0x7fffffff, 0x3, 0xfffffff5, 0x6, 0x8001, 0x81, 0x4, 0x3, 0x8000, 0x1, 0xfffffff8, 0x92, 0x7, 0xc, 0xa, 0x4, 0x0, 0x8000, 0xe5, 0x1, 0x6, 0x6, 0x3, 0x9, 0x1, 0x4, 0x5, 0x8, 0x9, 0x252, 0x5, 0x6, 0x1, 0xf204, 0x2, 0x1, 0x5, 0x8001, 0x7, 0x5, 0x5, 0x1, 0x1, 0x5, 0x9, 0xfffffff8, 0x4, 0x7fffffff, 0x6, 0x6, 0x1, 0x9, 0x9, 0x0, 0xc39f, 0x1, 0x3, 0x9, 0x3, 0x7, 0x800, 0xd, 0x5, 0xdc4b, 0x6, 0x9, 0x4fb, 0x5, 0x5, 0x0, 0x4, 0x4, 0x7f, 0x6, 0x5, 0x1000, 0xf, 0x3, 0xb8, 0xffff, 0x0, 0xffffffff, 0x86f, 0x3, 0x2, 0x7fffffff, 0x5, 0x3, 0x4, 0xff, 0x5, 0x0, 0x226c5e59, 0x4, 0x7, 0x3, 0x5, 0x3, 0x1, 0x3, 0x3, 0x50, 0x8858, 0x6, 0x8000, 0xe, 0x6, 0x9, 0x6, 0xffffb3cd, 0x4, 0x3a1a, 0xa4, 0x6, 0x9, 0x44a, 0x3, 0xb1b, 0x3, 0x92be, 0x10, 0x7fffffff, 0xd6b6, 0x7, 0xd7, 0x3, 0x90, 0x0, 0x9, 0x6, 0x2, 0xb95b, 0x5, 0x7, 0x482d, 0x1, 0x3ff, 0x8, 0x8, 0x200, 0x20000, 0x9, 0x280, 0x0, 0x64a5c8f, 0x0, 0x3, 0xffffffff, 0x7, 0x100, 0x9, 0x3, 0x8, 0x5, 0xfb31, 0x4, 0x7ff, 0x3, 0x1, 0x2, 0x6363fcbf, 0xbd, 0x0, 0x3ff, 0x40, 0x4, 0x0, 0x5, 0x8, 0x5, 0x5e3, 0xd82, 0x1, 0xfffff001, 0x1, 0x1000, 0x4, 0x0, 0x72, 0x7fffffff, 0x94d, 0x8, 0x4, 0xf, 0x6, 0x2, 0x3ff, 0xa, 0x80, 0xb, 0x5, 0x0, 0x9, 0x9, 0x8001, 0x284, 0x8000, 0x6, 0xffffb6ab, 0x2, 0x1, 0x7, 0x80000000, 0xffffffff, 0x2, 0x3, 0x6, 0x3fbfd950, 0xfffffff7, 0x0, 0x1, 0x4, 0x2, 0x2, 0x5, 0x2, 0x8, 0x0, 0x6, 0x3, 0x7fffffff, 0x7, 0x702, 0x99, 0x2, 0x9, 0x58d, 0x8, 0x2, 0x2, 0x5, 0x1, 0x3c21, 0xd53c, 0xf, 0x5, 0x8, 0x8, 0x3, 0x9, 0x5, 0x7fff, 0x2, 0x2, 0x1, 0x8, 0xfffffffc, 0x4, 0x10, 0x2, 0x2, 0xfff, 0x8, 0x4, 0x51c, 0x4bd50, 0x0, 0x1, 0x57b, 0xffffffaf, 0x9, 0x9, 0x1, 0x2, 0x7f, 0xfcd, 0x10000, 0x6, 0xa0, 0x1, 0x3, 0xfffffff8, 0x4, 0x9, 0x1, 0x7, 0x9, 0xfff, 0x5, 0x8, 0x8, 0xc, 0xfa, 0x1, 0xf287, 0x6d8, 0x81, 0xd, 0x5730, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x9, 0xe64, 0x8000, 0x3, 0x6, 0x1000, 0x4, 0x1, 0x10000, 0x800, 0x10, 0xf, 0x3d7, 0x0, 0x4, 0x1, 0x2a, 0x4, 0xf7cd, 0x68, 0xfffffff9, 0x1, 0x81, 0x7, 0x1000, 0x9403, 0x6, 0x7, 0x401, 0xe, 0xfffffffc, 0x7, 0x1, 0x1, 0xd, 0x3, 0x3, 0x40, 0x4, 0x1, 0xffff701c, 0x3, 0xcc, 0x3, 0x7, 0x9, 0x9, 0x1, 0x0, 0x6, 0x8, 0xc686, 0x56a3, 0x9, 0xdf, 0x1, 0x4, 0x8, 0xc, 0x5, 0x5, 0x7, 0xfff, 0xd, 0xfff, 0x3, 0x1ff, 0xc42, 0x40, 0x5, 0x1, 0x8, 0xbb, 0x2, 0x3, 0x2, 0xfffff801, 0x4c, 0x5, 0x7, 0x10, 0x2, 0x8, 0x101, 0x1, 0x2, 0xfffffff9, 0x3, 0x4, 0x80000, 0xc0000000, 0x0, 0x0, 0x1, 0x1, 0xffff, 0x1, 0x2, 0x9, 0x7fff, 0x81, 0x1, 0x0, 0x5, 0x1, 0x1a, 0x3, 0xfffff7d4, 0x4, 0x28f4, 0x9, 0xfffffe01, 0x6, 0x6, 0x0, 0x18, 0x3, 0x1ff, 0x6, 0x2, 0x9, 0x1, 0xffff2653, 0xfffffff9, 0x3f9e, 0x6, 0x3, 0x400, 0x8, 0x3, 0xe, 0x10, 0x8, 0xffffff81]}) socket$nl_generic(0x10, 0x3, 0x10) 11m40.749712764s ago: executing program 3 (id=1877): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062dcc3047d9c51975cf8614406d0470084761000000010902"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x24, 0x0, &(0x7f0000000180)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df86dd", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000100)={0x9c9, 0x3, 0x51b48a53}) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r3) socket$alg(0x26, 0x5, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20048085) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r6, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}, 0x181}], 0x1, 0x40012002, 0x0) syz_open_procfs(0x0, &(0x7f0000002400)='gid_map\x00') 11m37.459646371s ago: executing program 32 (id=1869): syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, 0x0, 0x0) fsopen(&(0x7f0000000300)='jfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x440400, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) r4 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xeb9e, 0x400, 0x20001, 0x3}) r5 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x6967, 0x0, 0x3, 0x28b}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r4], 0x1) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r8 = dup(r2) read$FUSE(r8, &(0x7f0000003c40)={0x2020}, 0xffffff0a) 11m34.267508796s ago: executing program 2 (id=1880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={r6}, &(0x7f0000000140)=0x8) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000a00)=@urb_type_iso={0x0, {0x7, 0x1}, 0x9, 0x40, &(0x7f0000000300)="064534e70dc38ba3e47a19fe16245dec436aaa3da842fa54ff88e2915781e2c37b35bacfa4", 0x25, 0x4, 0xbe8d, 0x42, 0xe70d, 0x5, &(0x7f0000000340)="925f3ac478638d5806b19ab09eba6d1c767073f6e29b836483c164ae33dc2c73dc2529fdf2b46b57fb47a89632b2aa5790e69c1be201f39213522c37550547eb50c1830e2c43", [{0x8, 0x7, 0x7}, {0xca, 0x4, 0x4}, {0x209990dd, 0x6, 0x1}, {0x0, 0xfffffff8, 0xb}, {0xb8, 0x4, 0x6}, {0x8, 0x10000, 0x6}, {0x2, 0x5, 0x7}, {0x8, 0x9, 0x2}, {0x9, 0x1, 0x8}, {0x9, 0x3ff}, {0x10000, 0x1, 0x1}, {0x4, 0x7, 0xfffffffb}, {0x48d66f4c, 0xffffff71, 0x4}, {0x93, 0x9, 0xf}, {0x7, 0x3, 0xaabd}, {0xfffffffb, 0x1000, 0x2}, {0x800, 0xe0, 0x2}, {0xfff, 0x45a, 0x3}, {0xe4, 0xffffffff, 0x21a21209}, {0x5, 0x3, 0x8}, {0x2, 0xfff, 0x2}, {0x1, 0xd, 0x8}, {0x9, 0xe53a, 0x4}, {0x7, 0x3, 0x9}, {0x3, 0x7ff, 0x7fffffff}, {0x7, 0xfffffe26, 0x3ff}, {0x64, 0x3ff, 0x80000000}, {0x400, 0x1, 0xd}, {0x1, 0x2, 0x8}, {0x7, 0x7, 0x1ff}, {0x7abf, 0xff}, {0x9, 0x80, 0xffff}, {0xf1, 0x9, 0x2}, {0x1, 0x5f, 0x66d}, {0x56, 0x9, 0x29a1}, {0x2fbf, 0x7, 0x2}, {0x0, 0xffffffff, 0x7f}, {0x100, 0x5, 0x9}, {0x4, 0x8, 0xfffff800}, {0x4, 0xfffffa95, 0x7f95}, {0xf8, 0x0, 0xfffff000}, {0x8, 0xcc2, 0x9}, {0x6, 0x5, 0x5}, {0x1000, 0x10001, 0x4b1}, {0x4, 0x9, 0x7}, {0x0, 0x6, 0x4}, {0xe6a0, 0x1570400, 0x897e}, {0x3, 0x5, 0xd13a}, {0xdd5d, 0x2, 0x2}, {0x4f, 0x1, 0xfffffff7}, {0x6, 0x1, 0x8}, {0x6, 0x10, 0xcb55}, {0x9, 0xf900, 0x9}, {0x7fff, 0x9, 0xe163}, {0x8001, 0x38, 0x7}, {0xfff, 0x7, 0xf}, {0xfffffffb, 0xca5, 0x7}, {0x1, 0x6}, {0x2, 0xffff, 0x4}, {0x7, 0x6, 0x7}, {0x7fffffff, 0x7, 0x7}, {0x0, 0xa97, 0x1}, {0x8, 0x8, 0x2}, {0xd911, 0x2, 0xee}, {0x86c, 0x93, 0x4}, {0x10, 0x1}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071107d000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = semget$private(0x0, 0x1, 0x2a8) semctl$GETZCNT(r8, 0x2, 0xf, 0x0) 11m34.227636762s ago: executing program 3 (id=1881): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-arm64\x00'}, 0x58) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x8, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd408205140099bb0000000109022400011b00001009040000022a3e74000905015e01031d101109050b36"], 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x0, 0x0}) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) fcntl$lock(r3, 0x5, &(0x7f00000031c0)={0x1, 0x1, 0x0, 0x4}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 11m33.489785523s ago: executing program 0 (id=1882): socket(0x2c, 0x2, 0x0) socket(0x11, 0x80d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x84100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000003c0)=0xfff, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x20980) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x1009, 0xaf4, 0xffffffff, 0x100000, 0x8, 0x1}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf6ed4a7fd1ce5563, 0x12, r7, 0xbc7e9000) 10m34.337864421s ago: executing program 33 (id=1879): sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x10000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r1, @ANYBLOB="30002f800c0002000203aaaaaaaaaaaa20000380140003800800020003eeffff0500010003000000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40800) 10m34.09850043s ago: executing program 34 (id=1882): socket(0x2c, 0x2, 0x0) socket(0x11, 0x80d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x84100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000003c0)=0xfff, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x20980) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x1009, 0xaf4, 0xffffffff, 0x100000, 0x8, 0x1}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf6ed4a7fd1ce5563, 0x12, r7, 0xbc7e9000) 10m33.930561823s ago: executing program 35 (id=1880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={r6}, &(0x7f0000000140)=0x8) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000a00)=@urb_type_iso={0x0, {0x7, 0x1}, 0x9, 0x40, &(0x7f0000000300)="064534e70dc38ba3e47a19fe16245dec436aaa3da842fa54ff88e2915781e2c37b35bacfa4", 0x25, 0x4, 0xbe8d, 0x42, 0xe70d, 0x5, &(0x7f0000000340)="925f3ac478638d5806b19ab09eba6d1c767073f6e29b836483c164ae33dc2c73dc2529fdf2b46b57fb47a89632b2aa5790e69c1be201f39213522c37550547eb50c1830e2c43", [{0x8, 0x7, 0x7}, {0xca, 0x4, 0x4}, {0x209990dd, 0x6, 0x1}, {0x0, 0xfffffff8, 0xb}, {0xb8, 0x4, 0x6}, {0x8, 0x10000, 0x6}, {0x2, 0x5, 0x7}, {0x8, 0x9, 0x2}, {0x9, 0x1, 0x8}, {0x9, 0x3ff}, {0x10000, 0x1, 0x1}, {0x4, 0x7, 0xfffffffb}, {0x48d66f4c, 0xffffff71, 0x4}, {0x93, 0x9, 0xf}, {0x7, 0x3, 0xaabd}, {0xfffffffb, 0x1000, 0x2}, {0x800, 0xe0, 0x2}, {0xfff, 0x45a, 0x3}, {0xe4, 0xffffffff, 0x21a21209}, {0x5, 0x3, 0x8}, {0x2, 0xfff, 0x2}, {0x1, 0xd, 0x8}, {0x9, 0xe53a, 0x4}, {0x7, 0x3, 0x9}, {0x3, 0x7ff, 0x7fffffff}, {0x7, 0xfffffe26, 0x3ff}, {0x64, 0x3ff, 0x80000000}, {0x400, 0x1, 0xd}, {0x1, 0x2, 0x8}, {0x7, 0x7, 0x1ff}, {0x7abf, 0xff}, {0x9, 0x80, 0xffff}, {0xf1, 0x9, 0x2}, {0x1, 0x5f, 0x66d}, {0x56, 0x9, 0x29a1}, {0x2fbf, 0x7, 0x2}, {0x0, 0xffffffff, 0x7f}, {0x100, 0x5, 0x9}, {0x4, 0x8, 0xfffff800}, {0x4, 0xfffffa95, 0x7f95}, {0xf8, 0x0, 0xfffff000}, {0x8, 0xcc2, 0x9}, {0x6, 0x5, 0x5}, {0x1000, 0x10001, 0x4b1}, {0x4, 0x9, 0x7}, {0x0, 0x6, 0x4}, {0xe6a0, 0x1570400, 0x897e}, {0x3, 0x5, 0xd13a}, {0xdd5d, 0x2, 0x2}, {0x4f, 0x1, 0xfffffff7}, {0x6, 0x1, 0x8}, {0x6, 0x10, 0xcb55}, {0x9, 0xf900, 0x9}, {0x7fff, 0x9, 0xe163}, {0x8001, 0x38, 0x7}, {0xfff, 0x7, 0xf}, {0xfffffffb, 0xca5, 0x7}, {0x1, 0x6}, {0x2, 0xffff, 0x4}, {0x7, 0x6, 0x7}, {0x7fffffff, 0x7, 0x7}, {0x0, 0xa97, 0x1}, {0x8, 0x8, 0x2}, {0xd911, 0x2, 0xee}, {0x86c, 0x93, 0x4}, {0x10, 0x1}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071107d000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = semget$private(0x0, 0x1, 0x2a8) semctl$GETZCNT(r8, 0x2, 0xf, 0x0) 10m33.673139552s ago: executing program 36 (id=1881): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-arm64\x00'}, 0x58) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x8, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd408205140099bb0000000109022400011b00001009040000022a3e74000905015e01031d101109050b36"], 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x0, 0x0}) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) fcntl$lock(r3, 0x5, &(0x7f00000031c0)={0x1, 0x1, 0x0, 0x4}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4m21.367159801s ago: executing program 8 (id=2931): openat$dsp(0xffffffffffffff9c, 0x0, 0x177981, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x8, 0x5, 0x624, 0x138, 0x138, 0xffffffff, 0x0, 0x138, 0x55c, 0x55c, 0xffffffff, 0x55c, 0x55c, 0x5, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'gretap0\x00', 'wg2\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hl={{0x24}}, @common=@unspec=@addrtype1={{0x28}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@loopback, @gre_key}}}, {{@ipv6={@private2, @dev, [], [], 'macvlan0\x00', 'veth0_to_team\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@private, @ipv6=@dev, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [0xffffffff], 'veth1_to_hsr\x00', 'veth0_vlan\x00'}, 0x0, 0x204, 0x24c, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0x9, 0xb}}, @common=@rt={{0x138}, {0x91, [0xde, 0xffffab11], 0x7fff, 0x20, 0x4, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @empty, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @empty, @local, @dev={0xfe, 0x80, '\x00', 0x15}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2a}, @mcast1], 0xd}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x2, @ipv6=@dev, @ipv6=@loopback, @icmp_id, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @local, [0x0, 0x0, 0xffffffff], [], 'vlan0\x00', 'macvtap0\x00'}, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x19, @ipv6=@mcast2, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @port=0x4e24, @port=0x4e23}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x680) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c40)={'gre0\x00', &(0x7f0000000b80)={'syztnl0\x00', 0x0, 0x7800, 0x10, 0x1ff, 0x0, {{0x1d, 0x4, 0x3, 0x4, 0x74, 0x66, 0x0, 0x2, 0xae379b71a3a4911b, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@ssrr={0x89, 0x1f, 0xa3, [@empty, @loopback, @dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010101, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast2]}, @lsrr={0x83, 0x3, 0x6a}, @ssrr={0x89, 0x7, 0x5a, [@private=0xa010101]}, @generic={0x86, 0x4, "c99e"}, @timestamp_addr={0x44, 0xc, 0x65, 0x1, 0x1, [{@rand_addr=0x64010101, 0xffffffff}]}, @lsrr={0x83, 0x27, 0x44, [@multicast2, @loopback, @remote, @multicast1, @remote, @loopback, @private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 4m20.427913977s ago: executing program 8 (id=2936): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x1500) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000340)='./file1\x00', 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff00000000000000008500000017000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='rcu_utilization\x00', r0, 0x0, 0x3000000}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES16=r1]) 3m49.989565193s ago: executing program 7 (id=2995): syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe0002) syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r0 = getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a1180002", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x198) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='cachefiles_ref\x00', r5}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400008a, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071123200000000009500000000000000410d5a538f0606ae05b9b78481dbf5f42f0f64ec6d31765d125c077b9005af5b3c7b1d0355d1db0e0786f3b61b90ed031cccae5b4ec4ec1e93dbb0d9a9c63cdba29fd41cee1fba5562e7367138c333ba61f1947ffca82396198b2a3bfb37ab085b9c094e99e7a174196dbefa6b2df853d464ea2a6962e95af269a6c64b2b8b4ca4acf21186ca07454e84bc05ea7807501a66e7719b27e15708bd16eb1c0c108b211532bca3b41f0118bf0a4523640a32d69b20636c5df2a2b8a706b28bd8ac3eb514b012"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_channels={0x3d, 0x1ff, 0x3, 0x8, 0x3a, 0xfffeff02, 0x8000, 0x401, 0xc}}) r7 = socket(0x1d, 0x80000, 0x7ff) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe4}}, 0x220408d4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) msgget$private(0x0, 0xfffffffffffffbf5) shmget(0x3, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) 3m47.504532665s ago: executing program 7 (id=2997): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8, 0x0, 0x0, 0x0, 0x778, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x1, 0x0, 0x100000001}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000800)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m47.23163565s ago: executing program 7 (id=2998): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r1 = fanotify_init(0x200, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(r1, 0x1, 0x40001043, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707b, 0x0, 0x0, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x300, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x1) fchdir(r8) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000040)={'geneve0\x00', @multicast}) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) (async) fanotify_init(0x200, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) (async) fanotify_mark(r1, 0x1, 0x40001043, r0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707b, 0x0, 0x0, 0x288}, &(0x7f0000000340), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r4, 0x3516, 0x300, 0x0, 0x0, 0x0) (async) fsopen(&(0x7f0000000180)='proc\x00', 0x1) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r7, 0x1, 0x1) (async) fchdir(r8) (async) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000040)={'geneve0\x00', @multicast}) (async) 3m44.822462952s ago: executing program 7 (id=3003): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x8, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x140000, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000080)={0x19, 0x5, 0x8, 0x4, 0xaa9d}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x88080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a68765a6c733a8eb6df29", 0x18, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000012, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {0xffff, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xba35}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0x1}, {0x9, 0x7, 0x1, 0x2, 0x3, 0x1, 0x2}}}]}]}]}}]}, 0x5c}}, 0x0) r13 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x4, 0xeeee8000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) 3m41.212052375s ago: executing program 7 (id=3010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000000040000000800000008000000000000000d2dbbaa5b17f70870dccfe5bb02efe02ea09242c754f5939863f35b1308a1bc4fe92c01933f9c0d265daf0ba58af87af600d0346d32de16a5602842c54a011dc7ec1df779d30ac3dcbb4fdc61819401c87e0b6bc03f2c0e03e46f3606da67fb6052fbd3378659ad4a53861b30c361a33b88275f2ba1930de0a3369ca8ed5e30e2a497e0485fa954a22681e3f42893807f7c6aa1c90452d279de", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x8, @none, 0x2}, 0xe) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x8000, 0x80, 0x7, 0x5, {{0x2b, 0x4, 0x1, 0x2b, 0xac, 0x64, 0x0, 0xe8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x7f, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff8}, {@private=0xa010101, 0xe}]}, @ssrr={0x89, 0xf, 0x81, [@dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @dev={0xac, 0x14, 0x14, 0xa}]}, @cipso={0x86, 0x3b, 0x3, [{0x7, 0x11, "f656424c20943c1f4714b087b2898d"}, {0x2, 0x2}, {0x7, 0x2}, {0x4, 0xe, "e6d72faf4f582372bf864970"}, {0x6, 0x2}, {0x2, 0x10, "fb05101ea9a52c81259904cb739f"}]}, @cipso={0x86, 0x1d, 0x2, [{0x5, 0x2}, {0x5, 0x9, "e2915f1952a714"}, {0x1, 0x4, "1060"}, {0x6, 0x8, "8c07439da674"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x19, 0x3, 0x7, [{@loopback, 0x6}]}, @timestamp_prespec={0x44, 0xc, 0x6c, 0x3, 0xe, [{@loopback, 0x400}]}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@mcast2, @private1, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7, 0xe, 0xd, 0x400, 0x0, 0x10000, r2}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m38.69179172s ago: executing program 7 (id=3016): socket$inet6(0xa, 0x5, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') read$FUSE(r4, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 3m38.517023761s ago: executing program 37 (id=3016): socket$inet6(0xa, 0x5, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') read$FUSE(r4, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 2m43.334503824s ago: executing program 8 (id=2936): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x1500) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000340)='./file1\x00', 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff00000000000000008500000017000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='rcu_utilization\x00', r0, 0x0, 0x3000000}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES16=r1]) 2m15.714250761s ago: executing program 4 (id=3198): write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa980, 0x0) r3 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x400}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x200008, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r8}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) 2m15.553764214s ago: executing program 8 (id=2936): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x1500) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000340)='./file1\x00', 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff00000000000000008500000017000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='rcu_utilization\x00', r0, 0x0, 0x3000000}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES16=r1]) 2m11.476624725s ago: executing program 4 (id=3205): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000000000000060027000500000008001d0009000000080001000600000005001900020000000c0020000700000000000000050026000000000006000900800000000500160001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setscheduler(r1, 0x0, &(0x7f00000000c0)=0x401) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x0) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000140)={0x1, 0x1, 0x1a, 0x12, 0x87, &(0x7f0000000200)}) 2m10.220230857s ago: executing program 4 (id=3209): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xf, 0x100000) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prctl$PR_SET_TIMERSLACK(0x1d, 0x4) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0xf) r4 = syz_io_uring_setup(0x6a59, &(0x7f00000000c0)={0x0, 0x2a0e, 0x1, 0x2, 0x38}, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f00000001c0)={0xd0, 0xe2}, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) prlimit64(r5, 0xd, &(0x7f0000000280)={0x7, 0x6}, &(0x7f00000002c0)) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000340)=0x4) r7 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x67, &(0x7f0000000440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) sendmsg$can_bcm(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x1d, r8}, 0x10, &(0x7f0000000780)={&(0x7f0000000700)={0x4, 0x804, 0x3, {r9, r10/1000+10000}, {}, {}, 0x1, @can={{0x1}, 0x7, 0x1, 0x0, 0x0, "e71e700f4f27f813"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x3, r5, 0x1, &(0x7f0000000800)) socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SET_TIMERSLACK(0x1d, 0xfa) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000980)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x66, 0x66, 0xa, [@float={0x1, 0x0, 0x0, 0x10, 0x10}, @datasec={0x1, 0x1, 0x0, 0xf, 0x2, [{0x2, 0x8, 0x10}], "9f28"}, @ptr={0xb, 0x0, 0x0, 0x2, 0x5}, @fwd={0x3}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x78, 0x0, 0x1d}, @float={0x7, 0x0, 0x0, 0x10, 0x4}, @volatile={0x8}]}, {0x0, [0x0, 0x30, 0x2e, 0x0, 0x5f, 0x71, 0x0, 0x61]}}, &(0x7f0000000900)=""/48, 0x8a, 0x30, 0x1, 0x80, 0x10000, @value=r11}, 0x28) prctl$PR_SET_TIMERSLACK(0x1d, 0xf) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f00000009c0)=""/246, 0xf6, 0x40000020, &(0x7f0000000b00)=@nfc={0x27, r12, 0x1, 0x2}, 0x80) prctl$PR_SET_TIMERSLACK(0x1d, 0x9) getrlimit(0x8, &(0x7f0000000b80)) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000bc0)={0x8001, 0x9, 0x5, 0x4, 0x1a, 0x100000000}) pselect6(0x40, &(0x7f0000000c00)={0x0, 0x4, 0x4, 0x7, 0xc, 0xb22, 0x3a, 0x4}, &(0x7f0000000c40)={0x5, 0xa46, 0xbd2, 0x40, 0x8001, 0x0, 0x4, 0xcf}, &(0x7f0000000c80)={0xffffffffffffffff, 0x7, 0x7fff, 0x6, 0x290e3f20, 0xff, 0x480000000000000, 0x7fff}, &(0x7f0000000d00), &(0x7f0000000d80)={&(0x7f0000000d40)={[0x5]}, 0x8}) 2m9.89147492s ago: executing program 4 (id=3212): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='fdinfo/3\x00') pread64(r0, &(0x7f0000000300)=""/246, 0xf6, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2}}) syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockname(r3, 0x0, &(0x7f0000000240)) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000180)=[r5], 0x1) getdents(r6, &(0x7f0000001280)=""/4075, 0xffb) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xc0000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2d, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff80, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@alu={0x4, 0x1, 0x0, 0x0, 0x0, 0x20, 0x8}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x9, 0x1, 0x0, r6}, @map_val={0x18, 0x8, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}, @exit, @cb_func={0x18, 0x7, 0x4, 0x0, 0x5}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r9}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m7.484236118s ago: executing program 4 (id=3216): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1) r3 = syz_io_uring_setup(0x3edf, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000ffd000)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newaddr={0x5c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x28, 0x2, @remote}, @IFA_CACHEINFO={0x14}]}, 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x510, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xe000000000000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r6, r6, 0x0, 0x400000000003f) r7 = dup(r6) fallocate(r7, 0x10, 0x0, 0x200) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1, {[@generic={0x44, 0x8, "7ab6c99fbd04"}, @ra={0x94, 0x4, 0x1}]}}, @address_request={0x11, 0x0, 0x0, 0x5}}}}}, 0x0) 2m6.843366012s ago: executing program 4 (id=3220): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) time(&(0x7f0000001100)) 2m5.977490147s ago: executing program 38 (id=3220): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) time(&(0x7f0000001100)) 1m19.009901723s ago: executing program 8 (id=2936): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x1500) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000340)='./file1\x00', 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff00000000000000008500000017000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='rcu_utilization\x00', r0, 0x0, 0x3000000}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES16=r1]) 36.091843296s ago: executing program 8 (id=2936): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x1500) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000340)='./file1\x00', 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff00000000000000008500000017000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='rcu_utilization\x00', r0, 0x0, 0x3000000}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES16=r1]) 12.462212375s ago: executing program 5 (id=3443): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000001880)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRES16=r1, @ANYBLOB="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", @ANYRESDEC=r1, @ANYRES8=r0, @ANYRES64=r0, @ANYRES64], 0x50) pwrite64(r1, &(0x7f0000000380)="6f0232ef877584c41e0d86f7725ab85e97ae3689303f48bd0a06ff7b242b557b2c5b8a4dc585b18c6d4af408451060ce48e77c289057fe01c26d8b3f3773566eb226458052556b319c07cbac9114ee50e23cdc671479750d49d12449d6fa7e8542e96fbb564aff8b963373519927286d0123dbb46888d75b0f8191b052c595413afe060e7da9af1a818d9bdf14ea", 0x8e, 0xfffffffffffeffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x27}) 12.121119829s ago: executing program 1 (id=3447): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 12.03716634s ago: executing program 1 (id=3448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x47}, 0x1, 0x0, 0x0, 0x2004044}, 0x48096) 11.820007375s ago: executing program 1 (id=3449): pipe(0x0) syz_open_dev$loop(0x0, 0xd79, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0xcb, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800950600fc000000000000000000000000000001fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='Px\x00'], 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8}) socket(0x2, 0x3, 0xff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents64(r5, 0x0, 0x43) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) close_range(r4, 0xffffffffffffffff, 0x0) 10.868352467s ago: executing program 1 (id=3452): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000", @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x7, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b16df9f80fedfa09"}}, 0x48}}, 0x0) 10.779899738s ago: executing program 5 (id=3454): modify_ldt$write(0x1, &(0x7f0000000180)={0x9, 0x20000000, 0x3000}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0}) 9.784308852s ago: executing program 5 (id=3456): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000300)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "d6b4a2c27febaed4b1b9ac68da30f186547ca30f7098c3da", "6ec543b1c0bc10955f8f22202d5eca64135205a1c734c1647b0d3b6c06239297"}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000045c0), 0x0, 0x61, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e20, 0x3, 'lc\x00', 0x0, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0xfffffffe, 0x12d5c, 0x12d5c}}, 0x44) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r1, 0x2a4fe0200000000, 0xfea000, 0x2000402) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 9.241300839s ago: executing program 6 (id=3461): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd18, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() restart_syscall() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') chroot(&(0x7f0000000040)='./file1\x00') 8.210667603s ago: executing program 6 (id=3463): syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="80000000080211000001080211000000aa09b799c0d70000000000000000000064000110000602020202020201010b"], 0xb5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 7.753103794s ago: executing program 1 (id=3465): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x1800000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000db67629374d2360900000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000009a0700b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/123], 0x110) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) 7.630643889s ago: executing program 5 (id=3467): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x480) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) close(0x3) preadv(0xffffffffffffffff, &(0x7f0000002740)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x6, 0x6) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) 6.337729374s ago: executing program 5 (id=3469): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000007cc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="f3ffdf2cd9ba", 0x6}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000b00)="25c1417b", 0x4}], 0x1, 0x0, 0x0, 0x40011}}], 0x2, 0x40000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0xfffffffd) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x2) writev(r0, &(0x7f0000001500)=[{&(0x7f00000013c0)="f0", 0x1}], 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x8012, r0, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x103) 6.224363215s ago: executing program 6 (id=3470): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) r2 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000600)=0xe8) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r0, 0x2, &(0x7f0000004200)={0x10001, 0xca}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002880)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000002980)=0xe8) getgroups(0x5, &(0x7f00000029c0)=[0xee00, 0x0, 0xffffffffffffffff, 0xee00, 0xee01]) fstat(0xffffffffffffffff, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000002d00)) lstat(&(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000880)="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", 0x2000, &(0x7f0000003040)={&(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x3, {0x7, 0x2b, 0xa, 0x1501400, 0x8, 0x7, 0x9, 0x77, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000000c0)={0x18, 0x0, 0x7}, &(0x7f0000000100)={0x18, 0xffffffffffffffda, 0x50000, {0x6}}, 0x0, &(0x7f0000000180)={0x18, 0x0, 0x9, {0x10000}}, &(0x7f00000001c0)={0x28, 0x0, 0x8, {{0x8000, 0x5, 0x1, r0}}}, &(0x7f0000000200)={0x60, 0x0, 0x2, {{0x7ff, 0x2, 0x7, 0x3, 0x6, 0x4, 0x9789, 0x4}}}, &(0x7f0000000280)={0x18, 0xffffffffffffffda, 0x2, {0x3}}, &(0x7f0000000340)={0x12, 0x0, 0x2, {'\\\x00'}}, &(0x7f00000003c0)={0x20, 0xffffffffffffffda, 0xb}, &(0x7f0000000440)={0x78, 0x0, 0x9, {0xa80a, 0x4, 0x0, {0x6, 0x9, 0x1, 0x0, 0x9, 0x10001, 0x1ff, 0x13, 0xfffffff8, 0x6000, 0x7, r1, r2, 0x5, 0x8001}}}, &(0x7f0000000640)={0x90, 0x0, 0x3, {0x3, 0x3, 0x7fff, 0x2, 0x0, 0x0, {0x6, 0x9, 0x5, 0x1, 0x7, 0x0, 0x7fff, 0x8, 0xa, 0xa000, 0x441b, r3, r5, 0x400, 0x9963}}}, &(0x7f0000000700)={0x128, 0xfffffffffffffff5, 0x1d74, [{0x5, 0xdf94, 0x12, 0xf3a, '/dev/snd/midiC#D#\x00'}, {0x5, 0x4, 0x12, 0xb776, '/dev/snd/midiC#D#\x00'}, {0x0, 0x9, 0x4, 0x8, '--^@'}, {0x3, 0x5, 0x0, 0x2}, {0x2, 0x2, 0xf, 0xb6, '/dev/sequencer\x00'}, {0x6, 0x4, 0xf, 0x4, '/dev/sequencer\x00'}, {0x0, 0x4, 0x12, 0x4, '/dev/snd/midiC#D#\x00'}]}, &(0x7f0000002a80)={0x158, 0x0, 0x0, [{{0x0, 0x0, 0x9, 0x5, 0x8001, 0xf, {0x2, 0x400, 0x1, 0x4, 0x8, 0x5, 0xfffffffc, 0x8000, 0x100, 0x1000, 0x3ba1f9ee, r6, r7, 0x9, 0x7f}}, {0x4, 0x9, 0xf, 0x1000, '/dev/sequencer\x00'}}, {{0x6, 0x3, 0x1, 0x7e0d, 0xd2, 0x1, {0x2, 0x1, 0x100000000, 0xdd0, 0x0, 0x2, 0x30, 0x0, 0xb, 0x1000, 0x7cc8, r8, 0xffffffffffffffff, 0x6, 0x10001}}, {0x6, 0xde53, 0x1, 0xc, '('}}]}, &(0x7f0000002d40)={0xa0, 0x0, 0x4, {{0x5, 0x1, 0x8, 0x9, 0x6, 0xfffffff7, {0x6, 0x10, 0x82, 0xfffffffffffffffb, 0x8, 0x9, 0x5, 0x8, 0x101, 0x8000, 0x40, 0x0, 0xee00, 0x9, 0x6}}, {0x0, 0x19}}}, &(0x7f0000002e00)={0x20, 0xffffffffffffffda, 0x5, {0x2, 0x4, 0x7, 0xa9c1}}, &(0x7f0000002f00)={0x130, 0x0, 0x400, {0x7, 0x2b, 0x0, '\x00', {0x20, 0x5, 0x3, 0xa4b4, 0xee01, r9, 0x4000, '\x00', 0x8, 0x1, 0x8, 0x8eca, {0x6, 0x5}, {0xa5, 0x3}, {0xbd2, 0x200}, {0x0, 0x6}, 0x1, 0xfffffffd, 0x0, 0x1}}}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xa0200, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100004400010000000000ffdbdf25010100800c00000000000000000000001400010001"], 0x114}], 0x1}, 0x0) 6.120054749s ago: executing program 5 (id=3471): r0 = syz_io_uring_setup(0x4a97, &(0x7f0000000600)={0x0, 0x8000c791, 0x800, 0x0, 0xf}, &(0x7f0000000200)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket(0x2a, 0x16, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x14e}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffeee, &(0x7f0000000540)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r6 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r6, 0x409, 0xb) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) r8 = dup(r7) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r10 = fcntl$dupfd(r8, 0x0, r5) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r9}, 0x0, &(0x7f0000000240)=r10}, 0x20) ioctl$KVM_HAS_DEVICE_ATTR_vm(r10, 0x4018aee3, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x1, 0x1}}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000001e00)={0x1, r8}) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) syz_emit_vhci(0x0, 0xa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) 5.214285725s ago: executing program 6 (id=3473): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) writev(r1, &(0x7f0000002680)=[{&(0x7f00000025c0)='8', 0x1}, {0x0, 0x2}], 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x0, 0x18, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup(0xffffffffffffffff) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x0, 0x85, 0x1000004f}, 0x2c) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000100)={0x1, 0x4}, 0x0) landlock_restrict_self(r4, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010000000009045f00020103df000905050008000200e509050102"], 0x0) 2.659046815s ago: executing program 9 (id=3474): pipe(0x0) syz_open_dev$loop(0x0, 0xd79, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0xcb, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800950600fc000000000000000000000000000001fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='Px\x00'], 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8}) socket(0x2, 0x3, 0xff) getdents(0xffffffffffffffff, &(0x7f00000002c0)=""/35, 0x23) getdents64(0xffffffffffffffff, 0x0, 0x43) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) close_range(r4, 0xffffffffffffffff, 0x0) 1.587967844s ago: executing program 9 (id=3475): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) unshare(0x22020600) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r2, 0x0, r0, 0x0, 0x46) socket$inet6(0xa, 0x800000000000002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) open(&(0x7f0000000480)='./bus\x00', 0x14927e, 0x23) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a320000000005000100070000001400078008001340000000"], 0x64}}, 0x0) 1.51008155s ago: executing program 6 (id=3476): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000", @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x7, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b16df9f80fedfa09"}}, 0x48}}, 0x0) 1.212880797s ago: executing program 9 (id=3477): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807ffa600a600000000000000080008001d000000", 0x24) 948.273345ms ago: executing program 9 (id=3478): socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES32=r0, @ANYRES16=r0], 0x0) 346.053447ms ago: executing program 9 (id=3479): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x480) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) sendto$inet(r2, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) close(0x3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000005c0)=@get={0x1, &(0x7f00000018c0)=""/4096, 0x3d}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f0000002740)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x6, 0x6) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x0) 252.534735ms ago: executing program 1 (id=3480): syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="80000000080211000001080211000000aa09b799c0d70000000000000000000064000110000602020202020201010b"], 0xb5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 141.746465ms ago: executing program 6 (id=3481): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="26d54c64383ec91048bd85f293b72f29a24a0e793c7c81f984ba94d59e4726dc41e81fcd0df9bfbe2d8ba67ffd0a1380c45f3c17fdb6ec28526fe36bf6c21b6424fa763a936026c5b64a4103c86ffce533914beafb9f1a85b0443c81920f128dd1f07ed580ab5b49c9d90d9929d61fb27cbfab28963b60b523f1560c9eb8ba55655cfe043d45f80959a6b1718ad265cf651a20f8a09df8c373c8c64dcf53aef843dea7494ce3aea784befa63611b934fcd80a9c7c1474e40788163046aef84f709bd5b87d9e659a18ef6b6a560939fd3523436752e6eac383eb99a3eec6d8989cdae7ec6ef83a94777a9", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000380)=ANY=[]) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="1600000010000000", @ANYRES32, @ANYBLOB, @ANYRES64=r1, @ANYRES8=r0, @ANYRES16=r2], 0x20) r3 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900090000000000000000001c140000fe000001000000001400120002"], 0x30}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000180)='nicvf0\x00') pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r7 = fanotify_init(0x200, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(r7, 0x1, 0x40001043, r6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707b, 0x1b21038f81429afa, 0x0, 0x288}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x20, 0x4007, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r10, 0x3519, 0x302, 0x6c, 0x0, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x25, &(0x7f0000000340)=0x7fffffff, 0x4) r13 = getpid() sched_setscheduler(r13, 0x2, &(0x7f0000000200)=0x4) 0s ago: executing program 9 (id=3482): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x480) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) close(0x3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000005c0)=@get={0x1, &(0x7f00000018c0)=""/4096, 0x3d}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f0000002740)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x6, 0x6) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x0) kernel console output (not intermixed with test programs): 357.002319][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1357.033766][T12607] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1357.105543][T12607] usb 6-1: device descriptor read/8, error -71 [ 1357.177415][T10315] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1357.356661][T12607] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1358.173837][T12607] usb 6-1: device descriptor read/8, error -71 [ 1358.247585][T17462] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1358.304059][T12607] usb usb6-port1: unable to enumerate USB device [ 1358.467718][T17462] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1358.617665][T17462] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1358.716200][T17732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1359.288594][T17727] FAULT_INJECTION: forcing a failure. [ 1359.288594][T17727] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.301327][T17727] CPU: 1 UID: 0 PID: 17727 Comm: syz.6.3100 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1359.301346][T17727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1359.301356][T17727] Call Trace: [ 1359.301362][T17727] [ 1359.301369][T17727] dump_stack_lvl+0x189/0x250 [ 1359.301395][T17727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1359.301415][T17727] ? __pfx__printk+0x10/0x10 [ 1359.301442][T17727] ? __pfx___might_resched+0x10/0x10 [ 1359.301468][T17727] should_fail_ex+0x414/0x560 [ 1359.301488][T17727] should_failslab+0xa8/0x100 [ 1359.301503][T17727] __kmalloc_cache_noprof+0x70/0x3d0 [ 1359.301526][T17727] ? ucma_alloc_ctx+0x4e/0x2d0 [ 1359.301550][T17727] ucma_alloc_ctx+0x4e/0x2d0 [ 1359.301571][T17727] ucma_create_id+0x1bb/0x360 [ 1359.301592][T17727] ? __pfx_ucma_create_id+0x10/0x10 [ 1359.301624][T17727] ucma_write+0x246/0x2e0 [ 1359.301644][T17727] ? __pfx_ucma_write+0x10/0x10 [ 1359.301662][T17727] ? security_file_permission+0x75/0x290 [ 1359.301680][T17727] ? rw_verify_area+0x258/0x650 [ 1359.301700][T17727] ? __pfx_ucma_write+0x10/0x10 [ 1359.301719][T17727] vfs_write+0x27e/0xa90 [ 1359.301747][T17727] ? __pfx_vfs_write+0x10/0x10 [ 1359.301769][T17727] ? __fget_files+0x2a/0x420 [ 1359.301785][T17727] ? __fget_files+0x2a/0x420 [ 1359.301798][T17727] ? __fget_files+0x3a0/0x420 [ 1359.301810][T17727] ? __fget_files+0x2a/0x420 [ 1359.301830][T17727] ksys_write+0x145/0x250 [ 1359.301849][T17727] ? rcu_is_watching+0x15/0xb0 [ 1359.301877][T17727] ? __pfx_ksys_write+0x10/0x10 [ 1359.301900][T17727] ? do_syscall_64+0xba/0x210 [ 1359.301923][T17727] do_syscall_64+0xf6/0x210 [ 1359.301943][T17727] ? clear_bhb_loop+0x60/0xb0 [ 1359.301961][T17727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.301975][T17727] RIP: 0033:0x7f4a1638e969 [ 1359.301989][T17727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1359.302002][T17727] RSP: 002b:00007f4a1711c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1359.302017][T17727] RAX: ffffffffffffffda RBX: 00007f4a165b5fa0 RCX: 00007f4a1638e969 [ 1359.302028][T17727] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000004 [ 1359.302038][T17727] RBP: 00007f4a1711c090 R08: 0000000000000000 R09: 0000000000000000 [ 1359.302047][T17727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1359.302055][T17727] R13: 0000000000000000 R14: 00007f4a165b5fa0 R15: 00007ffee9d5e3b8 [ 1359.302078][T17727] [ 1359.544892][ C1] vkms_vblank_simulate: vblank timer overrun [ 1359.836471][T17462] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1360.382788][T17291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1360.410039][T17737] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 1361.026769][T17462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.141519][T17756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.195998][T17462] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.258571][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.265943][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.352360][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.359630][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.609673][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.616344][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.492084][T17291] veth0_vlan: entered promiscuous mode [ 1363.510464][T17291] veth1_vlan: entered promiscuous mode [ 1363.835684][T17793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1364.283420][T17291] veth0_macvtap: entered promiscuous mode [ 1364.450150][T17291] veth1_macvtap: entered promiscuous mode [ 1364.570314][T17802] lo speed is unknown, defaulting to 1000 [ 1364.663587][T17802] lo speed is unknown, defaulting to 1000 [ 1364.682785][T17291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1365.308314][T17291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1365.552675][T17291] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.576450][T17291] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.588285][T17291] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.608253][T17291] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.686683][T17462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1365.847449][ T5915] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1365.982584][T10118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.001528][T10118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.041243][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1366.083259][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1366.095509][T12480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.106858][T12480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.129001][ T5915] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1366.171262][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.225660][ T5915] usb 6-1: config 0 descriptor?? [ 1367.253685][T17462] veth0_vlan: entered promiscuous mode [ 1367.281809][T17462] veth1_vlan: entered promiscuous mode [ 1367.386238][ T5915] razer 0003:1532:010E.0031: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.5-1/input0 [ 1367.492706][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3117'. [ 1367.580808][ T5875] usb 6-1: USB disconnect, device number 32 [ 1367.763606][T17840] fido_id[17840]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1367.806403][T17462] veth0_macvtap: entered promiscuous mode [ 1367.852021][T17462] veth1_macvtap: entered promiscuous mode [ 1368.149928][T17837] lo speed is unknown, defaulting to 1000 [ 1368.190811][T17837] lo speed is unknown, defaulting to 1000 [ 1368.208088][T17462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1368.642987][T17462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.764694][T17462] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.800354][T17462] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.843752][T17462] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.879197][T17462] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.172599][T17861] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3120'. [ 1369.228992][T17866] syz.9.3116: attempt to access beyond end of device [ 1369.228992][T17866] loop19: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1369.293207][T17866] FAT-fs (loop19): unable to read boot sector [ 1369.353883][ T5875] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1369.580522][T17874] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1370.131777][ T5875] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1370.148325][ T5875] usb 6-1: config 15 has an invalid interface number: 240 but max is 0 [ 1370.174093][ T5875] usb 6-1: config 15 has no interface number 0 [ 1370.190477][ T5875] usb 6-1: config 15 interface 240 altsetting 1 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1370.274431][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.293782][ T5875] usb 6-1: config 15 interface 240 has no altsetting 0 [ 1370.316321][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.352521][ T5875] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=3e.58 [ 1370.379922][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.391404][ T5875] usb 6-1: Product: syz [ 1370.407542][T17867] syzkaller1: entered promiscuous mode [ 1370.411707][ T5875] usb 6-1: Manufacturer: syz [ 1370.419539][T17867] syzkaller1: entered allmulticast mode [ 1370.427978][ T5875] usb 6-1: SerialNumber: syz [ 1370.464771][T12434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.506950][T12434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.706770][ T5875] usb 6-1: no audio or video endpoints found [ 1370.774069][ T5875] usb 6-1: USB disconnect, device number 33 [ 1374.543858][T12473] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 1374.848255][T17933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1374.867568][T12473] usb 10-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.907357][T12473] usb 10-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1374.944531][T12473] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.974602][T12473] usb 10-1: Product: syz [ 1374.996527][T12473] usb 10-1: Manufacturer: syz [ 1375.001323][T12473] usb 10-1: SerialNumber: syz [ 1375.146534][ T5960] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.282434][T17911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.286574][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1375.306816][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1375.368208][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1375.379946][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1375.392625][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1375.427359][T17911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.463631][T17911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.501005][T17911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.525126][T12473] hub 10-1:5.0: bad descriptor, ignoring hub [ 1375.541666][T12473] hub 10-1:5.0: probe with driver hub failed with error -5 [ 1375.614768][T12473] comedi comedi0: Wrong number of endpoints [ 1375.663012][T12473] ni6501 10-1:5.0: driver 'ni6501' failed to auto-configure device. [ 1375.727730][T12473] usb 10-1: USB disconnect, device number 27 [ 1375.940257][ T5960] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.156689][T17942] lo speed is unknown, defaulting to 1000 [ 1376.331291][ T5960] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.404711][T17964] ipt_ECN: cannot use operation on non-tcp rule [ 1376.435790][T17942] lo speed is unknown, defaulting to 1000 [ 1376.599534][ T5960] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.725251][T17974] ./cgroup: Can't lookup blockdev [ 1376.941360][T17976] dlm: no local IP address has been set [ 1376.970359][T17976] dlm: cannot start dlm midcomms -107 [ 1377.239362][ T5960] bridge_slave_1: left allmulticast mode [ 1377.263423][ T5960] bridge_slave_1: left promiscuous mode [ 1377.293471][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.410309][ T5960] bridge_slave_0: left allmulticast mode [ 1377.433925][ T5960] bridge_slave_0: left promiscuous mode [ 1377.445202][T10315] Bluetooth: hci3: command tx timeout [ 1377.473231][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.573761][ T59] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1377.756441][ T59] usb 10-1: config 0 has an invalid interface number: 69 but max is 0 [ 1377.778928][T17997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1377.807181][ T59] usb 10-1: config 0 has no interface number 0 [ 1377.838547][ T59] usb 10-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1377.891586][ T59] usb 10-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1377.921587][ T59] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1377.947416][ T59] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.976344][ T59] usb 10-1: Product: syz [ 1377.990240][ T59] usb 10-1: Manufacturer: syz [ 1378.005369][ T59] usb 10-1: SerialNumber: syz [ 1378.040458][ T59] usb 10-1: config 0 descriptor?? [ 1378.065939][T17986] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1378.094493][ T59] cyberjack 10-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1378.132602][ T59] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1378.364391][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1378.586070][ T59] usb 10-1: USB disconnect, device number 28 [ 1378.598742][ T59] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1378.637530][ T59] cyberjack 10-1:0.69: device disconnected [ 1379.031080][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1379.051473][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1379.061985][ T5960] bond0 (unregistering): Released all slaves [ 1379.525253][T10315] Bluetooth: hci3: command tx timeout [ 1380.500874][T18025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3154'. [ 1380.994172][ T5915] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1381.173840][ T5915] usb 10-1: device descriptor read/64, error -71 [ 1381.296109][T17942] chnl_net:caif_netlink_parms(): no params data found [ 1381.327982][T18040] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3157'. [ 1381.369293][T18040] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3157'. [ 1381.424501][ T5915] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1381.519000][T18040] syz_tun: entered promiscuous mode [ 1381.567637][T18040] syz_tun: left promiscuous mode [ 1381.609966][T10315] Bluetooth: hci3: command tx timeout [ 1381.623936][ T5915] usb 10-1: device descriptor read/64, error -71 [ 1381.713575][ T5960] hsr_slave_0: left promiscuous mode [ 1381.978159][ T5915] usb usb10-port1: attempt power cycle [ 1382.076343][ T5960] hsr_slave_1: left promiscuous mode [ 1382.121059][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1382.129666][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1382.143401][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1382.154923][T18061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1382.187488][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.460153][ T5960] veth1_macvtap: left promiscuous mode [ 1382.467278][ T5960] veth0_macvtap: left promiscuous mode [ 1382.473232][ T5960] veth1_vlan: left promiscuous mode [ 1382.479117][ T5960] veth0_vlan: left promiscuous mode [ 1382.483792][ T5915] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1382.514775][ T5915] usb 10-1: device descriptor read/8, error -71 [ 1382.784077][ T5915] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1382.844842][ T5915] usb 10-1: device descriptor read/8, error -71 [ 1382.944179][ T5915] usb usb10-port1: unable to enumerate USB device [ 1383.631161][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 1383.696640][T10315] Bluetooth: hci3: command tx timeout [ 1383.758596][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 1386.931669][T18123] netlink: 'syz.6.3170': attribute type 1 has an invalid length. [ 1387.134703][T18135] netlink: 'syz.6.3170': attribute type 10 has an invalid length. [ 1387.187697][T17942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.220286][T17942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.350458][T17942] bridge_slave_0: entered allmulticast mode [ 1387.362626][T17942] bridge_slave_0: entered promiscuous mode [ 1387.382722][T18135] team0: Cannot enslave team device to itself [ 1387.400835][T17942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.408586][ T8703] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1387.444417][T17942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.451752][T17942] bridge_slave_1: entered allmulticast mode [ 1387.473803][T17942] bridge_slave_1: entered promiscuous mode [ 1387.583732][ T8703] usb 6-1: Using ep0 maxpacket: 32 [ 1387.618049][ T8703] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.678038][ T8703] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1387.718092][ T8703] usb 6-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1387.753968][T12473] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 1387.908084][ T8703] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1388.023405][T12473] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1388.058701][ T8703] usb 6-1: config 0 interface 0 has no altsetting 1 [ 1388.181845][ T8703] usb 6-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 1388.271655][T12473] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1388.297611][T17942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1388.320930][ T8703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.332300][T12473] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.347613][T17942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1388.364269][ T8703] usb 6-1: Product: syz [ 1388.368509][ T8703] usb 6-1: Manufacturer: syz [ 1388.373126][ T8703] usb 6-1: SerialNumber: syz [ 1388.392237][T12473] usb 10-1: config 0 descriptor?? [ 1388.424505][T18143] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1388.463500][ T8703] usb 6-1: config 0 descriptor?? [ 1388.490180][ T8703] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1388.499664][ T8703] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1388.632032][T18145] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1389.608951][ T8703] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1389.662425][ T8703] usb 6-1: USB disconnect, device number 34 [ 1389.672849][T17942] team0: Port device team_slave_0 added [ 1389.718296][T15740] udevd[15740]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1389.747469][T17942] team0: Port device team_slave_1 added [ 1389.779015][T12473] elan 0003:04F3:0755.0032: unknown main item tag 0x1 [ 1389.878644][T12473] elan 0003:04F3:0755.0032: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 1390.121154][T17942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.161092][T17942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.227093][T17942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.261696][T17942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.268917][T17942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.298718][T17942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.353469][T17942] hsr_slave_0: entered promiscuous mode [ 1390.362544][T17942] hsr_slave_1: entered promiscuous mode [ 1390.370185][T17942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1390.378233][T17942] Cannot create hsr debugfs directory [ 1390.514021][T12605] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1390.702512][T12605] usb 5-1: Using ep0 maxpacket: 8 [ 1390.717952][T12605] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1390.785542][T12605] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1390.795340][T12605] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1390.837820][T12605] usb 5-1: Product: syz [ 1390.845440][T12605] usb 5-1: Manufacturer: syz [ 1390.871273][T12605] usb 5-1: SerialNumber: syz [ 1390.893695][T18165] FAULT_INJECTION: forcing a failure. [ 1390.893695][T18165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1390.907323][T18165] CPU: 0 UID: 0 PID: 18165 Comm: syz.5.3178 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1390.907352][T18165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1390.907365][T18165] Call Trace: [ 1390.907375][T18165] [ 1390.907384][T18165] dump_stack_lvl+0x189/0x250 [ 1390.907421][T18165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1390.907464][T18165] should_fail_ex+0x414/0x560 [ 1390.907490][T18165] _copy_from_user+0x2d/0xb0 [ 1390.907519][T18165] memdup_user+0x5e/0xd0 [ 1390.907546][T18165] strndup_user+0x68/0xd0 [ 1390.907571][T18165] __keyctl_dh_compute+0x411/0xca0 [ 1390.907603][T18165] ? __pfx___resched_curr+0x10/0x10 [ 1390.907648][T18165] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1390.907694][T18165] ? __might_fault+0xb0/0x130 [ 1390.907748][T18165] keyctl_dh_compute+0x109/0x160 [ 1390.907769][T18165] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 1390.907796][T18165] ? rcu_is_watching+0x15/0xb0 [ 1390.907826][T18165] ? trace_sched_exit_tp+0x38/0x120 [ 1390.907855][T18165] __se_sys_keyctl+0x423/0x910 [ 1390.907883][T18165] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1390.907916][T18165] ? schedule+0x165/0x360 [ 1390.907943][T18165] ? __pfx___schedule+0x10/0x10 [ 1390.907969][T18165] ? irqentry_exit+0x74/0x90 [ 1390.908002][T18165] ? do_syscall_64+0xba/0x210 [ 1390.908027][T18165] ? __x64_sys_keyctl+0x20/0xc0 [ 1390.908053][T18165] do_syscall_64+0xf6/0x210 [ 1390.908079][T18165] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1390.908100][T18165] ? clear_bhb_loop+0x60/0xb0 [ 1390.908126][T18165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.908145][T18165] RIP: 0033:0x7f4f4938e969 [ 1390.908164][T18165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1390.908182][T18165] RSP: 002b:00007f4f4a23b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1390.908203][T18165] RAX: ffffffffffffffda RBX: 00007f4f495b6080 RCX: 00007f4f4938e969 [ 1390.908219][T18165] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017 [ 1390.908232][T18165] RBP: 00007f4f4a23b090 R08: 0000200000000180 R09: 0000000000000000 [ 1390.908246][T18165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1390.908259][T18165] R13: 0000000000000000 R14: 00007f4f495b6080 R15: 00007ffceb4eb398 [ 1390.908291][T18165] [ 1391.224268][ T8703] usb 10-1: reset full-speed USB device number 33 using dummy_hcd [ 1391.721211][T12605] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 1391.730633][T12605] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1391.760613][T12605] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1391.771261][T12605] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1391.992410][T18171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1392.038474][T12605] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 1392.157443][T12473] usb 10-1: USB disconnect, device number 33 [ 1392.159860][T12605] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1392.480413][T12605] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1392.832089][T18178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3181'. [ 1392.865697][ T5915] usb 5-1: USB disconnect, device number 87 [ 1392.875313][T18177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1392.877091][T17942] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1392.899635][ T5915] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1392.928733][T17942] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1392.945523][ T5915] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1392.948517][T17942] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1392.968533][ T5915] visor 5-1:1.0: device disconnected [ 1392.992405][T17942] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1393.110989][T17942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.156010][T12473] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1393.161055][T17942] 8021q: adding VLAN 0 to HW filter on device team0 [ 1393.208493][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.215782][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.233718][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.240899][ T5976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1393.346259][T12473] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.364930][T12473] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.379926][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1393.379946][ T30] audit: type=1326 audit(1747657725.015:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18179 comm="syz.6.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1638e969 code=0x7fc00000 [ 1393.388670][T12473] usb 10-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1393.428199][T12473] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.448567][T12473] usb 10-1: config 0 descriptor?? [ 1393.479910][ T30] audit: type=1326 audit(1747657725.025:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18179 comm="syz.6.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1638e969 code=0x7fc00000 [ 1393.689364][T18176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.724206][T18176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.878974][T17942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1393.903955][ T5877] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1393.958754][T12473] razer 0003:1532:010E.0033: item fetching failed at offset 3/5 [ 1394.034625][T12473] razer 0003:1532:010E.0033: probe with driver razer failed with error -22 [ 1394.074808][ T5877] usb 6-1: Using ep0 maxpacket: 8 [ 1394.112648][ T5877] usb 6-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1394.160572][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.202583][ T5877] usb 6-1: Product: syz [ 1394.209373][ T5915] usb 10-1: USB disconnect, device number 34 [ 1394.227668][ T5877] usb 6-1: Manufacturer: syz [ 1394.232349][ T5877] usb 6-1: SerialNumber: syz [ 1394.261660][ T5877] usb 6-1: config 0 descriptor?? [ 1394.296338][ T5877] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1394.711366][T17942] veth0_vlan: entered promiscuous mode [ 1394.750029][T17942] veth1_vlan: entered promiscuous mode [ 1394.917823][T17942] veth0_macvtap: entered promiscuous mode [ 1394.961900][T17942] veth1_macvtap: entered promiscuous mode [ 1395.062250][T17942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1395.126374][ T5877] gspca_sonixj: reg_r err -32 [ 1395.412873][T17942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1395.684392][T17942] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.744042][T17942] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.812872][T17942] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.277163][T17942] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.429667][ T5877] sonixj 6-1:0.0: probe with driver sonixj failed with error -32 [ 1398.493400][ T5877] usb 6-1: USB disconnect, device number 35 [ 1398.652352][T18216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1399.006276][T10118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.028584][T10118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1399.208478][T18221] netlink: 'syz.5.3194': attribute type 3 has an invalid length. [ 1399.217240][T18221] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3194'. [ 1399.249379][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.268139][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1399.852274][T18226] Falling back ldisc for ptm0. [ 1399.904038][T12605] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1400.023213][ T64] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.110523][T12605] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1400.128352][T12605] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1400.139796][T12605] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1400.152724][T12605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.193001][T18232] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1400.207417][T12605] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1400.332531][ T64] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.430978][ T5877] usb 5-1: USB disconnect, device number 88 [ 1400.542379][ T64] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.721738][ T64] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.025252][ T64] bridge_slave_1: left allmulticast mode [ 1401.031031][ T64] bridge_slave_1: left promiscuous mode [ 1401.091888][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.112002][ T64] bridge_slave_0: left allmulticast mode [ 1401.131889][ T64] bridge_slave_0: left promiscuous mode [ 1401.158133][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.284079][T12697] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1401.494127][T12697] usb 10-1: Using ep0 maxpacket: 8 [ 1401.553596][T12697] usb 10-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1401.562840][T12697] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.328058][T12697] usb 10-1: Product: syz [ 1402.332776][T12697] usb 10-1: Manufacturer: syz [ 1402.338525][T12697] usb 10-1: SerialNumber: syz [ 1402.346655][T12697] usb 10-1: config 0 descriptor?? [ 1402.373143][T12697] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1402.752044][T18257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1402.778972][ T30] audit: type=1800 audit(1747657734.425:433): pid=18255 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.3203" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1403.110897][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1403.124663][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1403.138419][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1403.170650][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1403.178919][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1403.206810][T12697] gspca_sonixj: reg_r err -32 [ 1403.238949][T12697] sonixj 10-1:0.0: probe with driver sonixj failed with error -32 [ 1403.314884][T12697] usb 10-1: USB disconnect, device number 35 [ 1404.286125][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1404.817800][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1404.829541][ T64] bond0 (unregistering): Released all slaves [ 1405.283941][T10315] Bluetooth: hci3: command tx timeout [ 1405.577473][T12605] IPVS: starting estimator thread 0... [ 1405.904200][T18291] IPVS: using max 24 ests per chain, 57600 per kthread [ 1407.047353][T18260] lo speed is unknown, defaulting to 1000 [ 1407.119602][T18260] lo speed is unknown, defaulting to 1000 [ 1407.441219][T10315] Bluetooth: hci3: command tx timeout [ 1408.395639][T18317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1408.724751][ T8703] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1408.888917][ T8703] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1408.966555][ T8703] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1408.987051][ T8703] usb 10-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1409.043820][ T8703] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.174868][ T8703] usb 10-1: config 0 descriptor?? [ 1409.424360][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3222'. [ 1409.433565][T18324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1409.512303][ T64] hsr_slave_0: left promiscuous mode [ 1409.518957][ T64] hsr_slave_1: left promiscuous mode [ 1409.524484][T10315] Bluetooth: hci3: command tx timeout [ 1409.532636][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1409.540463][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1409.635503][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1409.703071][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1409.790222][ T64] veth1_macvtap: left promiscuous mode [ 1409.796664][ T64] veth0_macvtap: left promiscuous mode [ 1409.802524][ T64] veth1_vlan: left promiscuous mode [ 1409.808525][ T64] veth0_vlan: left promiscuous mode [ 1409.957978][ T8703] razer 0003:1532:010E.0034: failed to enable macro keys: -71 [ 1410.225063][ T8703] razer 0003:1532:010E.0034: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.9-1/input0 [ 1410.304066][ T8703] usb 10-1: USB disconnect, device number 36 [ 1410.944167][T18335] fido_id[18335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1411.150937][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1411.161761][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1411.172192][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1411.185374][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1411.196649][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1411.344119][T12605] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 1411.816713][T10315] Bluetooth: hci3: command tx timeout [ 1412.326634][ T64] team0 (unregistering): Port device team_slave_1 removed [ 1412.405447][ T64] team0 (unregistering): Port device team_slave_0 removed [ 1413.293786][T10315] Bluetooth: hci2: command tx timeout [ 1413.424154][T18260] chnl_net:caif_netlink_parms(): no params data found [ 1413.788061][T18344] lo speed is unknown, defaulting to 1000 [ 1413.851484][T18344] lo speed is unknown, defaulting to 1000 [ 1414.284185][T18260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.322536][T18260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.493958][T18260] bridge_slave_0: entered allmulticast mode [ 1414.502000][T18260] bridge_slave_0: entered promiscuous mode [ 1414.512921][T18372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1414.540728][T12605] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1414.647338][T18260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.707689][T18260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.743945][T18260] bridge_slave_1: entered allmulticast mode [ 1414.755778][T12605] usb 10-1: too many configurations: 130, using maximum allowed: 8 [ 1414.771530][T18260] bridge_slave_1: entered promiscuous mode [ 1414.789762][T12605] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1414.824078][T12605] usb 10-1: can't read configurations, error -61 [ 1414.846990][T12605] usb usb10-port1: attempt power cycle [ 1415.166911][T18260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1415.366413][T10315] Bluetooth: hci2: command tx timeout [ 1415.811326][T12605] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1415.955755][T12605] usb 10-1: too many configurations: 130, using maximum allowed: 8 [ 1415.969427][T12605] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1415.977413][T12605] usb 10-1: can't read configurations, error -61 [ 1416.050118][T18385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1416.097286][T18260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.127405][T12605] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1416.165758][T12605] usb 10-1: too many configurations: 130, using maximum allowed: 8 [ 1416.191270][T12605] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1416.217526][T12605] usb 10-1: can't read configurations, error -61 [ 1416.226479][T18381] sp0: Synchronizing with TNC [ 1416.247460][T12605] usb usb10-port1: unable to enumerate USB device [ 1416.361056][ T64] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.118613][ T64] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.230579][T18260] team0: Port device team_slave_0 added [ 1417.258314][T18393] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1417.443934][ T5820] Bluetooth: hci2: command tx timeout [ 1417.578085][ T64] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.655869][T18403] FAULT_INJECTION: forcing a failure. [ 1417.655869][T18403] name failslab, interval 1, probability 0, space 0, times 0 [ 1417.669292][T18403] CPU: 1 UID: 0 PID: 18403 Comm: syz.5.3242 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1417.669321][T18403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1417.669335][T18403] Call Trace: [ 1417.669344][T18403] [ 1417.669354][T18403] dump_stack_lvl+0x189/0x250 [ 1417.669391][T18403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1417.669420][T18403] ? __pfx__printk+0x10/0x10 [ 1417.669459][T18403] ? __pfx___might_resched+0x10/0x10 [ 1417.669498][T18403] should_fail_ex+0x414/0x560 [ 1417.669527][T18403] should_failslab+0xa8/0x100 [ 1417.669549][T18403] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1417.669581][T18403] ? zswap_store+0xbc8/0x1be0 [ 1417.669608][T18403] zswap_store+0xbc8/0x1be0 [ 1417.669637][T18403] ? __lock_acquire+0xaac/0xd20 [ 1417.669663][T18403] ? zswap_store+0x727/0x1be0 [ 1417.669690][T18403] ? __pfx_zswap_store+0x10/0x10 [ 1417.669709][T18403] ? do_raw_spin_lock+0x121/0x290 [ 1417.669744][T18403] ? do_raw_spin_unlock+0x122/0x240 [ 1417.669770][T18403] ? _raw_spin_unlock+0x28/0x50 [ 1417.669792][T18403] ? folio_free_swap+0x289/0x430 [ 1417.669824][T18403] swap_writepage+0x6b5/0xda0 [ 1417.669856][T18403] shrink_folio_list+0x33a9/0x4e00 [ 1417.669918][T18403] ? __pfx_shrink_folio_list+0x10/0x10 [ 1417.669960][T18403] ? __page_table_check_zero+0xba/0x510 [ 1417.669995][T18403] ? __page_table_check_zero+0xba/0x510 [ 1417.670068][T18403] ? __lock_acquire+0xaac/0xd20 [ 1417.670139][T18403] ? __lock_acquire+0xaac/0xd20 [ 1417.670206][T18403] reclaim_folio_list+0xeb/0x500 [ 1417.670233][T18403] ? cgroup_rstat_updated+0x144/0xb50 [ 1417.670279][T18403] ? __pfx_reclaim_folio_list+0x10/0x10 [ 1417.670313][T18403] ? rcu_is_watching+0x15/0xb0 [ 1417.670348][T18403] reclaim_pages+0x49a/0x5b0 [ 1417.670380][T18403] ? __pfx_reclaim_pages+0x10/0x10 [ 1417.670405][T18403] ? madvise_cold_or_pageout_pte_range+0x1975/0x1d20 [ 1417.670434][T18403] madvise_cold_or_pageout_pte_range+0x199e/0x1d20 [ 1417.670479][T18403] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1417.670503][T18403] ? cgroup_rstat_updated+0x144/0xb50 [ 1417.670543][T18403] walk_pgd_range+0xc82/0x1790 [ 1417.670605][T18403] ? __pfx_walk_pgd_range+0x10/0x10 [ 1417.670649][T18403] __walk_page_range+0x14c/0x710 [ 1417.670684][T18403] ? find_vma+0xe7/0x160 [ 1417.670703][T18403] ? __pfx_find_vma+0x10/0x10 [ 1417.670733][T18403] walk_page_range_mm+0x42d/0x620 [ 1417.670773][T18403] ? __pfx_walk_page_range_mm+0x10/0x10 [ 1417.670807][T18403] ? mlock_drain_local+0x79/0x490 [ 1417.670837][T18403] ? walk_page_range+0x6b/0x90 [ 1417.670869][T18403] madvise_do_behavior+0x2898/0x3500 [ 1417.670900][T18403] ? __lock_acquire+0xaac/0xd20 [ 1417.670947][T18403] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1417.670988][T18403] ? __lock_acquire+0xaac/0xd20 [ 1417.671026][T18403] ? get_pid_task+0x20/0x1f0 [ 1417.671103][T18403] ? __lock_acquire+0xaac/0xd20 [ 1417.671141][T18403] ? madvise_lock+0xda/0x200 [ 1417.671204][T18403] __x64_sys_madvise+0x10c/0x150 [ 1417.671230][T18403] do_syscall_64+0xf6/0x210 [ 1417.671259][T18403] ? clear_bhb_loop+0x60/0xb0 [ 1417.671285][T18403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.671306][T18403] RIP: 0033:0x7f4f4938e969 [ 1417.671326][T18403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1417.671344][T18403] RSP: 002b:00007f4f4a25c038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1417.671367][T18403] RAX: ffffffffffffffda RBX: 00007f4f495b5fa0 RCX: 00007f4f4938e969 [ 1417.671383][T18403] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 1417.671397][T18403] RBP: 00007f4f4a25c090 R08: 0000000000000000 R09: 0000000000000000 [ 1417.671410][T18403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1417.671423][T18403] R13: 0000000000000000 R14: 00007f4f495b5fa0 R15: 00007ffceb4eb398 [ 1417.671457][T18403] [ 1418.315080][T18260] team0: Port device team_slave_1 added [ 1418.596338][ T64] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.195522][T18260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.222221][T18260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.272689][T18260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1419.364564][T18260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1419.371593][T18260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.415781][T18260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1419.523872][ T5820] Bluetooth: hci2: command tx timeout [ 1419.728848][T18260] hsr_slave_0: entered promiscuous mode [ 1419.750586][T18260] hsr_slave_1: entered promiscuous mode [ 1419.757713][T18260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1419.765896][T18260] Cannot create hsr debugfs directory [ 1420.076276][ T30] audit: type=1800 audit(1747657752.719:434): pid=18421 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.3246" name="bus" dev="overlay" ino=1622 res=0 errno=0 [ 1420.986343][ T64] bridge_slave_1: left allmulticast mode [ 1420.992132][ T64] bridge_slave_1: left promiscuous mode [ 1421.101257][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.199195][ T64] bridge_slave_0: left allmulticast mode [ 1421.218712][ T64] bridge_slave_0: left promiscuous mode [ 1421.250262][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.372803][T18433] program syz.5.3249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1423.054061][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.060553][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.340535][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1423.356566][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1423.368729][ T64] bond0 (unregistering): Released all slaves [ 1423.422093][T18436] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1423.489661][T18344] chnl_net:caif_netlink_parms(): no params data found [ 1423.934143][T12697] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1424.117593][T12697] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1424.151456][T12697] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1424.197572][T12697] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1424.273937][T12697] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1424.317390][T12697] usb 10-1: SerialNumber: syz [ 1424.942881][T12697] usb 10-1: 0:2 : does not exist [ 1425.014044][T12697] usb 10-1: USB disconnect, device number 41 [ 1425.162327][T15740] udevd[15740]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1426.248608][T18480] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3260'. [ 1426.685667][T18344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.693493][T18344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.701136][T18344] bridge_slave_0: entered allmulticast mode [ 1426.717010][T18344] bridge_slave_0: entered promiscuous mode [ 1426.785631][T18344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.792847][T18344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.820185][T18344] bridge_slave_1: entered allmulticast mode [ 1426.862599][T18344] bridge_slave_1: entered promiscuous mode [ 1426.981416][T18482] FAULT_INJECTION: forcing a failure. [ 1426.981416][T18482] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.026223][T18482] CPU: 0 UID: 0 PID: 18482 Comm: syz.6.3262 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1427.026255][T18482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1427.026269][T18482] Call Trace: [ 1427.026278][T18482] [ 1427.026287][T18482] dump_stack_lvl+0x189/0x250 [ 1427.026321][T18482] ? dev_get_by_index+0x22/0x2e0 [ 1427.026343][T18482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1427.026371][T18482] ? __pfx__printk+0x10/0x10 [ 1427.026411][T18482] ? ref_tracker_alloc+0x318/0x460 [ 1427.026440][T18482] should_fail_ex+0x414/0x560 [ 1427.026468][T18482] should_failslab+0xa8/0x100 [ 1427.026490][T18482] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1427.026520][T18482] ? skb_clone+0x212/0x3a0 [ 1427.026555][T18482] skb_clone+0x212/0x3a0 [ 1427.026589][T18482] __netlink_deliver_tap+0x404/0x850 [ 1427.026628][T18482] ? netlink_deliver_tap+0x2e/0x1b0 [ 1427.026655][T18482] netlink_deliver_tap+0x19c/0x1b0 [ 1427.026681][T18482] __netlink_sendskb+0x47/0x90 [ 1427.026703][T18482] netlink_dump+0xa5c/0xe70 [ 1427.026741][T18482] ? __pfx_netlink_dump+0x10/0x10 [ 1427.026784][T18482] ? __asan_memset+0x22/0x50 [ 1427.026810][T18482] ? genl_start+0x499/0x6c0 [ 1427.026849][T18482] __netlink_dump_start+0x5cb/0x7e0 [ 1427.026883][T18482] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 1427.026918][T18482] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1427.026956][T18482] ? rcu_is_watching+0x15/0xb0 [ 1427.026995][T18482] ? __pfx_genl_start+0x10/0x10 [ 1427.027022][T18482] ? __pfx_genl_dumpit+0x10/0x10 [ 1427.027048][T18482] ? __pfx_genl_done+0x10/0x10 [ 1427.027082][T18482] ? bpf_lsm_capable+0x9/0x20 [ 1427.027109][T18482] ? security_capable+0x7e/0x2e0 [ 1427.027145][T18482] genl_rcv_msg+0x5da/0x790 [ 1427.027182][T18482] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1427.027211][T18482] ? __pfx_batadv_dat_cache_dump+0x10/0x10 [ 1427.027235][T18482] ? ref_tracker_free+0x63a/0x7d0 [ 1427.027256][T18482] ? __copy_skb_header+0xa7/0x550 [ 1427.027296][T18482] netlink_rcv_skb+0x21c/0x490 [ 1427.027321][T18482] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1427.027353][T18482] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1427.027405][T18482] ? down_read+0x1ad/0x2e0 [ 1427.027437][T18482] genl_rcv+0x28/0x40 [ 1427.027464][T18482] netlink_unicast+0x758/0x8d0 [ 1427.027499][T18482] netlink_sendmsg+0x805/0xb30 [ 1427.027521][T18482] ? is_bpf_text_address+0x26/0x2b0 [ 1427.027557][T18482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1427.027589][T18482] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1427.027610][T18482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1427.027635][T18482] __sock_sendmsg+0x219/0x270 [ 1427.027659][T18482] ____sys_sendmsg+0x505/0x830 [ 1427.027693][T18482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1427.027731][T18482] ? import_iovec+0x74/0xa0 [ 1427.027763][T18482] ___sys_sendmsg+0x21f/0x2a0 [ 1427.027793][T18482] ? __pfx____sys_sendmsg+0x10/0x10 [ 1427.027860][T18482] ? __fget_files+0x2a/0x420 [ 1427.027878][T18482] ? __fget_files+0x3a0/0x420 [ 1427.027908][T18482] __x64_sys_sendmsg+0x19b/0x260 [ 1427.027939][T18482] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1427.027992][T18482] ? do_syscall_64+0xba/0x210 [ 1427.028023][T18482] do_syscall_64+0xf6/0x210 [ 1427.028049][T18482] ? clear_bhb_loop+0x60/0xb0 [ 1427.028074][T18482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.028093][T18482] RIP: 0033:0x7f4a1638e969 [ 1427.028112][T18482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1427.028129][T18482] RSP: 002b:00007f4a1711c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1427.028151][T18482] RAX: ffffffffffffffda RBX: 00007f4a165b5fa0 RCX: 00007f4a1638e969 [ 1427.028166][T18482] RDX: 0000000020000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1427.028180][T18482] RBP: 00007f4a1711c090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.028192][T18482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1427.028203][T18482] R13: 0000000000000000 R14: 00007f4a165b5fa0 R15: 00007ffee9d5e3b8 [ 1427.028237][T18482] [ 1427.032287][ T64] hsr_slave_0: left promiscuous mode [ 1428.356671][ T64] hsr_slave_1: left promiscuous mode [ 1428.394327][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1428.441471][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1428.515602][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1428.531909][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1428.700530][ T64] veth1_macvtap: left promiscuous mode [ 1428.713367][ T64] veth0_macvtap: left promiscuous mode [ 1428.720334][ T64] veth1_vlan: left promiscuous mode [ 1428.730469][ T64] veth0_vlan: left promiscuous mode [ 1430.522960][ T64] team0 (unregistering): Port device team_slave_1 removed [ 1430.648922][ T64] team0 (unregistering): Port device team_slave_0 removed [ 1431.423440][T18486] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1431.648479][T18344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1431.820619][T18344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1434.326891][T18344] team0: Port device team_slave_0 added [ 1434.348671][T18344] team0: Port device team_slave_1 added [ 1435.166220][T18344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1435.173246][T18344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1435.457752][T18344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1435.475862][T18517] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1435.489308][T18526] overlay: ./file0 is not a directory [ 1435.554909][T18516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1435.729713][T18516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.822198][T18344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1435.834113][T18344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1435.952775][T18344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1436.046948][T18528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3274'. [ 1436.085417][T18528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3274'. [ 1436.401767][T18344] hsr_slave_0: entered promiscuous mode [ 1436.408863][T18344] hsr_slave_1: entered promiscuous mode [ 1436.415489][T18344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1436.423178][T18344] Cannot create hsr debugfs directory [ 1436.666081][T18536] random: crng reseeded on system resumption [ 1437.500468][T18260] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1437.552215][T18260] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1437.929408][T18260] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1438.186711][T18260] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1438.761642][T18551] binder: BINDER_SET_CONTEXT_MGR already set [ 1438.793055][T18551] binder: 18550:18551 ioctl 4018620d 2000000000c0 returned -16 [ 1438.957198][T18551] binder: BINDER_SET_CONTEXT_MGR already set [ 1438.972703][T18551] binder: 18550:18551 ioctl 4018620d 200000000040 returned -16 [ 1439.017408][T18344] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.039136][T18551] binder: 18550:18551 ioctl c0306201 200000001a80 returned -11 [ 1439.048336][T18344] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.438662][T18344] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.449544][T18344] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.573482][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3280'. [ 1440.339678][T18344] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1440.399181][T18344] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.518203][T18260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.553282][T18344] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1440.569829][T18344] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.628847][T18260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.642325][T12477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.649617][T12477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1440.732123][T12480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.739366][T12480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1442.214407][T18581] new mount options do not match the existing superblock, will be ignored [ 1442.245660][T18581] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 1442.783848][T18580] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1443.286927][T18344] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1443.454942][T18344] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1443.703543][T18344] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1443.858977][T18344] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1443.939927][T10315] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1443.955085][T10315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1443.967276][T10315] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1443.979218][T10315] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1443.987307][T10315] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1445.051901][T18592] lo speed is unknown, defaulting to 1000 [ 1445.135434][T18592] lo speed is unknown, defaulting to 1000 [ 1445.240770][T18344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1445.460559][T18260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1445.645630][T18609] random: crng reseeded on system resumption [ 1446.206039][T10315] Bluetooth: hci0: command tx timeout [ 1446.359316][T18611] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1446.697809][T18344] 8021q: adding VLAN 0 to HW filter on device team0 [ 1446.822750][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.829998][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1446.893659][T10118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.900887][T10118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1448.261152][T10315] Bluetooth: hci0: command tx timeout [ 1448.385265][T18344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1449.288805][T18260] veth0_vlan: entered promiscuous mode [ 1449.637162][T18260] veth1_vlan: entered promiscuous mode [ 1450.342811][T10315] Bluetooth: hci0: command tx timeout [ 1450.602914][T18344] veth0_vlan: entered promiscuous mode [ 1450.659363][T18344] veth1_vlan: entered promiscuous mode [ 1450.677620][T18592] chnl_net:caif_netlink_parms(): no params data found [ 1451.383190][T18260] veth0_macvtap: entered promiscuous mode [ 1451.493493][T18260] veth1_macvtap: entered promiscuous mode [ 1451.562513][T18344] veth0_macvtap: entered promiscuous mode [ 1451.771942][T18592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.794208][T18592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.811869][T18592] bridge_slave_0: entered allmulticast mode [ 1451.833767][T18592] bridge_slave_0: entered promiscuous mode [ 1451.877484][T18344] veth1_macvtap: entered promiscuous mode [ 1451.912813][T18592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.934202][T18592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.972061][T18592] bridge_slave_1: entered allmulticast mode [ 1451.985935][T18592] bridge_slave_1: entered promiscuous mode [ 1452.221677][T18592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1452.376484][T18592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1452.444762][T18260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1452.653920][T10315] Bluetooth: hci0: command tx timeout [ 1452.934496][T18344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1452.976947][T18592] team0: Port device team_slave_0 added [ 1453.002537][T18260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1453.038884][T18592] team0: Port device team_slave_1 added [ 1453.054988][T18260] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.075418][T18260] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.086130][T18260] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.095307][T18260] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.112389][T18344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1453.180639][T18344] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.214010][T18344] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.246408][T18344] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.275721][T18344] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.291343][T18592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1453.305434][T18592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1453.348579][T18592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1453.379257][T18592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1453.397485][T18592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1453.425652][T18592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1453.652338][T18592] hsr_slave_0: entered promiscuous mode [ 1453.660656][T18592] hsr_slave_1: entered promiscuous mode [ 1453.668696][T18592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1453.709276][T18592] Cannot create hsr debugfs directory [ 1454.022380][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.046467][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.172909][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.185994][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.258344][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.271514][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.434560][T18684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3308'. [ 1455.039301][T18592] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.410028][T12477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1455.452237][T12477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1455.494464][T18688] tipc: Started in network mode [ 1455.499436][T18688] tipc: Node identity ac141417, cluster identity 4711 [ 1455.522839][T18688] tipc: Enabled bearer , priority 10 [ 1456.233262][T18696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3221'. [ 1456.301389][T18592] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.628995][ T64] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.654161][ T5915] tipc: Node number set to 2886997015 [ 1456.724447][T12473] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1456.749608][T18592] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.861683][ T64] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.888129][T12473] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.909321][T12473] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1456.937014][T12473] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1456.939503][T18592] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.954536][T12473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1456.983951][T12473] usb 6-1: SerialNumber: syz [ 1457.052970][ T64] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.191473][ T64] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.213017][T12473] usb 6-1: 0:2 : does not exist [ 1457.271927][T12473] usb 6-1: USB disconnect, device number 36 [ 1457.433579][T18592] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1457.448371][T15740] udevd[15740]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1457.604856][T18592] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1458.035574][T18592] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1458.077474][T18592] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1458.258610][ T64] bridge_slave_1: left allmulticast mode [ 1458.275665][ T64] bridge_slave_1: left promiscuous mode [ 1458.281524][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.374960][ T64] bridge_slave_0: left allmulticast mode [ 1459.074778][ T64] bridge_slave_0: left promiscuous mode [ 1459.080641][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.464990][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1459.465516][ T30] audit: type=1326 audit(1747657792.109:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18714 comm="syz.5.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4938e969 code=0x7ffc0000 [ 1459.477234][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1459.494166][ C0] vkms_vblank_simulate: vblank timer overrun [ 1459.512293][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1459.520743][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1459.531009][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1459.710909][ T30] audit: type=1326 audit(1747657792.109:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18714 comm="syz.5.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4938e969 code=0x7ffc0000 [ 1459.734803][ T30] audit: type=1326 audit(1747657792.139:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18714 comm="syz.5.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f4938e969 code=0x7ffc0000 [ 1459.757371][ T30] audit: type=1326 audit(1747657792.139:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18714 comm="syz.5.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4938e969 code=0x7ffc0000 [ 1459.792999][ T30] audit: type=1326 audit(1747657792.139:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18714 comm="syz.5.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4938e969 code=0x7ffc0000 [ 1460.473772][ T30] audit: type=1326 audit(1747657792.139:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18714 comm="syz.5.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4f4938e969 code=0x7ffc0000 [ 1460.523771][ T30] audit: type=1326 audit(1747657792.139:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18714 comm="syz.5.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4938e969 code=0x7ffc0000 [ 1460.583996][ T30] audit: type=1326 audit(1747657792.139:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18714 comm="syz.5.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4938e969 code=0x7ffc0000 [ 1460.614875][ T30] audit: type=1326 audit(1747657792.159:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18714 comm="syz.5.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4f4938e969 code=0x7ffc0000 [ 1460.702221][ T30] audit: type=1326 audit(1747657792.349:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18714 comm="syz.5.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4938e969 code=0x7ffc0000 [ 1461.529288][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1461.557430][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1461.588216][ T64] bond0 (unregistering): Released all slaves [ 1461.684529][ T5820] Bluetooth: hci3: command tx timeout [ 1462.095836][T18744] nfs: Unknown parameter 'iso9660' [ 1462.304171][T18716] lo speed is unknown, defaulting to 1000 [ 1462.337370][T18716] lo speed is unknown, defaulting to 1000 [ 1462.403998][T18592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1462.541864][T18592] 8021q: adding VLAN 0 to HW filter on device team0 [ 1463.773738][ T5820] Bluetooth: hci3: command tx timeout [ 1464.027021][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.034306][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.152958][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.160179][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.262763][ T5877] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1464.262811][T17684] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1464.454107][T17684] usb 10-1: Using ep0 maxpacket: 8 [ 1464.512851][T17684] usb 10-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1464.621712][ T5877] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1464.679892][T17684] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.739427][ T5877] usb 2-1: config 0 has no interface number 0 [ 1464.764067][T17684] usb 10-1: Product: syz [ 1464.768420][T17684] usb 10-1: Manufacturer: syz [ 1464.773125][T17684] usb 10-1: SerialNumber: syz [ 1464.793459][ T5877] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1464.804656][ T5877] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1464.827360][T17684] usb 10-1: config 0 descriptor?? [ 1464.910907][T18592] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1464.926344][T18592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1464.926568][ T5877] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1464.956160][T17684] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1465.195059][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.212046][ T5877] usb 2-1: Product: syz [ 1465.216706][ T5877] usb 2-1: Manufacturer: syz [ 1465.221378][ T5877] usb 2-1: SerialNumber: syz [ 1465.834545][ T5877] usb 2-1: config 0 descriptor?? [ 1465.840620][T18757] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1465.854785][ T5820] Bluetooth: hci3: command tx timeout [ 1466.057980][T17684] usb 10-1: USB disconnect, device number 42 [ 1466.096183][ T5877] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1466.323972][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1466.760865][ T5877] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1466.816134][ T5877] usb 2-1: USB disconnect, device number 64 [ 1466.872502][T18592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1466.888968][ T5877] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1466.962045][ T5877] cyberjack 2-1:0.69: device disconnected [ 1467.106639][ T64] hsr_slave_0: left promiscuous mode [ 1467.146919][ T64] hsr_slave_1: left promiscuous mode [ 1467.163161][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1467.183253][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1467.204459][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1467.223828][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1467.328560][ T64] veth1_macvtap: left promiscuous mode [ 1467.334896][ T64] veth0_macvtap: left promiscuous mode [ 1467.342867][ T64] veth1_vlan: left promiscuous mode [ 1467.353948][ T64] veth0_vlan: left promiscuous mode [ 1467.924756][ T5820] Bluetooth: hci3: command tx timeout [ 1469.410388][ T64] team0 (unregistering): Port device team_slave_1 removed [ 1469.544388][ T64] team0 (unregistering): Port device team_slave_0 removed [ 1470.351410][T18800] pim6reg: entered allmulticast mode [ 1470.360565][T18802] pim6reg: left allmulticast mode [ 1471.305487][T18826] loop2: detected capacity change from 0 to 7 [ 1471.796682][T18826] Dev loop2: unable to read RDB block 7 [ 1471.802340][T18826] loop2: unable to read partition table [ 1471.808303][T18826] loop2: partition table beyond EOD, truncated [ 1471.814588][T18826] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1472.009536][T18716] chnl_net:caif_netlink_parms(): no params data found [ 1472.552865][T18837] FAULT_INJECTION: forcing a failure. [ 1472.552865][T18837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1472.567266][T18837] CPU: 0 UID: 0 PID: 18837 Comm: syz.5.3339 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1472.567294][T18837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1472.567308][T18837] Call Trace: [ 1472.567317][T18837] [ 1472.567326][T18837] dump_stack_lvl+0x189/0x250 [ 1472.567358][T18837] ? __lock_acquire+0xaac/0xd20 [ 1472.567389][T18837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1472.567417][T18837] ? __pfx__printk+0x10/0x10 [ 1472.567449][T18837] ? __might_fault+0xb0/0x130 [ 1472.567493][T18837] should_fail_ex+0x414/0x560 [ 1472.567520][T18837] _copy_to_iter+0x575/0x15a0 [ 1472.567560][T18837] ? __pfx__copy_to_iter+0x10/0x10 [ 1472.567583][T18837] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 1472.567621][T18837] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 1472.567660][T18837] __skb_datagram_iter+0x100/0x960 [ 1472.567692][T18837] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1472.567732][T18837] skb_copy_datagram_iter+0xc5/0x230 [ 1472.567767][T18837] netlink_recvmsg+0x2c9/0xe00 [ 1472.567802][T18837] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1472.567821][T18837] ? irqentry_exit+0x74/0x90 [ 1472.567845][T18837] ? lockdep_hardirqs_on+0x9c/0x150 [ 1472.567878][T18837] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1472.567908][T18837] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1472.567934][T18837] sock_recvmsg_nosec+0x186/0x1c0 [ 1472.567960][T18837] ____sys_recvmsg+0x3aa/0x460 [ 1472.567998][T18837] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1472.568045][T18837] ? import_iovec+0x74/0xa0 [ 1472.568077][T18837] ___sys_recvmsg+0x1b5/0x510 [ 1472.568112][T18837] ? __pfx____sys_recvmsg+0x10/0x10 [ 1472.568173][T18837] ? __might_fault+0xb0/0x130 [ 1472.568209][T18837] do_recvmmsg+0x307/0x760 [ 1472.568248][T18837] ? __pfx_do_recvmmsg+0x10/0x10 [ 1472.568303][T18837] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1472.568346][T18837] __x64_sys_recvmmsg+0x190/0x240 [ 1472.568375][T18837] ? rcu_is_watching+0x15/0xb0 [ 1472.568406][T18837] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1472.568441][T18837] ? do_syscall_64+0xba/0x210 [ 1472.568471][T18837] do_syscall_64+0xf6/0x210 [ 1472.568497][T18837] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1472.568517][T18837] ? clear_bhb_loop+0x60/0xb0 [ 1472.568542][T18837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.568561][T18837] RIP: 0033:0x7f4f4938e969 [ 1472.568580][T18837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1472.568598][T18837] RSP: 002b:00007f4f4a23b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1472.568619][T18837] RAX: ffffffffffffffda RBX: 00007f4f495b6080 RCX: 00007f4f4938e969 [ 1472.568634][T18837] RDX: 0000000000000005 RSI: 0000200000001d00 RDI: 0000000000000004 [ 1472.568648][T18837] RBP: 00007f4f4a23b090 R08: 0000000000000000 R09: 0000000000000000 [ 1472.568661][T18837] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 1472.568673][T18837] R13: 0000000000000000 R14: 00007f4f495b6080 R15: 00007ffceb4eb398 [ 1472.568705][T18837] [ 1473.501644][T18716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.513834][T18716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.521163][T18716] bridge_slave_0: entered allmulticast mode [ 1473.532968][T18716] bridge_slave_0: entered promiscuous mode [ 1473.568582][T18716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.594403][T18716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.601743][T18716] bridge_slave_1: entered allmulticast mode [ 1473.612937][T18716] bridge_slave_1: entered promiscuous mode [ 1473.674123][T18676] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1473.696054][T18716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.705372][ T8703] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1473.743231][T18716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.821569][T18592] veth0_vlan: entered promiscuous mode [ 1473.848766][T18716] team0: Port device team_slave_0 added [ 1473.874000][T18676] usb 6-1: Using ep0 maxpacket: 32 [ 1473.885023][T18676] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1473.894174][ T8703] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1473.902353][ T8703] usb 2-1: config 0 has no interface number 0 [ 1473.918564][T18716] team0: Port device team_slave_1 added [ 1473.924671][T18676] usb 6-1: config 0 has no interface number 0 [ 1473.930817][T18676] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1473.940291][ T8703] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1473.948184][T18845] FAULT_INJECTION: forcing a failure. [ 1473.948184][T18845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1473.955899][ T8703] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1473.971565][T18592] veth1_vlan: entered promiscuous mode [ 1473.982789][T18845] CPU: 0 UID: 0 PID: 18845 Comm: syz.9.3342 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1473.982819][T18845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1473.982833][T18845] Call Trace: [ 1473.982841][T18845] [ 1473.982851][T18845] dump_stack_lvl+0x189/0x250 [ 1473.982887][T18845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1473.982916][T18845] ? __pfx__printk+0x10/0x10 [ 1473.982950][T18845] ? __pfx_copy_data+0x10/0x10 [ 1473.982986][T18845] should_fail_ex+0x414/0x560 [ 1473.983014][T18845] _copy_to_user+0x31/0xb0 [ 1473.983043][T18845] ? __pfx_virtio_read+0x10/0x10 [ 1473.983068][T18845] rng_dev_read+0x3f2/0x770 [ 1473.983100][T18845] ? __pfx_rng_dev_read+0x10/0x10 [ 1473.983138][T18845] ? bpf_lsm_file_permission+0x9/0x20 [ 1473.983163][T18845] ? security_file_permission+0x75/0x290 [ 1473.983189][T18845] ? rw_verify_area+0x258/0x650 [ 1473.983222][T18845] vfs_readv+0x5a5/0x840 [ 1473.983242][T18845] ? __pfx_rng_dev_read+0x10/0x10 [ 1473.983272][T18845] ? __pfx_vfs_readv+0x10/0x10 [ 1473.983309][T18845] ? __fget_files+0x2a/0x420 [ 1473.983333][T18845] ? __fget_files+0x3a0/0x420 [ 1473.983351][T18845] ? __fget_files+0x2a/0x420 [ 1473.983380][T18845] __x64_sys_preadv+0x197/0x2a0 [ 1473.983410][T18845] ? rcu_is_watching+0x15/0xb0 [ 1473.983443][T18845] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1473.983477][T18845] ? do_syscall_64+0xba/0x210 [ 1473.983509][T18845] do_syscall_64+0xf6/0x210 [ 1473.983537][T18845] ? clear_bhb_loop+0x60/0xb0 [ 1473.983563][T18845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.983583][T18845] RIP: 0033:0x7f5d7b98e969 [ 1473.983605][T18845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1473.983622][T18845] RSP: 002b:00007f5d7c73a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1473.983644][T18845] RAX: ffffffffffffffda RBX: 00007f5d7bbb5fa0 RCX: 00007f5d7b98e969 [ 1473.983659][T18845] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1473.983671][T18845] RBP: 00007f5d7c73a090 R08: 0000000000000000 R09: 0000000000000000 [ 1473.983684][T18845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1473.983697][T18845] R13: 0000000000000000 R14: 00007f5d7bbb5fa0 R15: 00007ffccdc52918 [ 1473.983730][T18845] [ 1474.002526][T18676] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1474.224357][T18676] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.234617][T18676] usb 6-1: Product: syz [ 1474.240146][ T8703] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1474.251320][ T8703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.259867][T18676] usb 6-1: Manufacturer: syz [ 1474.264734][T18676] usb 6-1: SerialNumber: syz [ 1474.271320][ T8703] usb 2-1: Product: syz [ 1474.280024][ T8703] usb 2-1: Manufacturer: syz [ 1474.288548][T18676] usb 6-1: config 0 descriptor?? [ 1474.304312][ T8703] usb 2-1: SerialNumber: syz [ 1474.486570][ T8703] usb 2-1: config 0 descriptor?? [ 1474.505235][T18842] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1474.532193][ T8703] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1474.547671][T18676] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 1474.591242][ T8703] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1474.640357][T18676] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1474.677718][T18676] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1474.763324][T18676] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1474.767638][T18716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1474.774156][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1474.978796][T18716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1474.996994][T18676] usb 6-1: USB disconnect, device number 37 [ 1475.026174][ T8703] usb 2-1: USB disconnect, device number 65 [ 1475.043761][T18716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1475.091445][ T8703] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1475.115496][T18716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1475.139202][ T8703] cyberjack 2-1:0.69: device disconnected [ 1475.154982][T18716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1475.187843][T18716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1475.276850][T18592] veth0_macvtap: entered promiscuous mode [ 1475.325677][T18592] veth1_macvtap: entered promiscuous mode [ 1475.441795][T18856] netlink: 'syz.5.3344': attribute type 1 has an invalid length. [ 1475.450037][T18856] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3344'. [ 1476.332686][T18716] hsr_slave_0: entered promiscuous mode [ 1476.341795][T18716] hsr_slave_1: entered promiscuous mode [ 1476.349716][T18716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1476.358410][T18716] Cannot create hsr debugfs directory [ 1476.555434][T18592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1476.603052][T18592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1476.615816][T18592] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.624800][T18592] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.635754][T18592] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.645186][T18592] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.807177][T18866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1477.262631][T12605] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1477.304756][ T8703] usb 10-1: new full-speed USB device number 43 using dummy_hcd [ 1477.478250][ T8703] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1477.533762][T12605] usb 6-1: device descriptor read/64, error -71 [ 1477.534635][ T8703] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1478.185499][ T8703] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 65401, setting to 64 [ 1478.205864][ T8703] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1478.215543][T12605] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1478.227196][ T8703] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.236279][ T8703] usb 10-1: Product: syz [ 1478.240669][ T8703] usb 10-1: Manufacturer: syz [ 1478.249811][ T8703] usb 10-1: SerialNumber: syz [ 1478.258250][ T8703] usb 10-1: config 0 descriptor?? [ 1478.264226][T18867] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1478.272742][T18867] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1478.305237][ T8703] usb 10-1: ucan: probing device on interface #0 [ 1478.342147][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.362032][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.443488][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.452856][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.467114][T12605] usb 6-1: device descriptor read/64, error -71 [ 1478.529516][ T8703] usb 10-1: ucan: device protocol version 0 is not supported [ 1478.551416][ T8703] usb 10-1: ucan: probe failed; try to update the device firmware [ 1478.575886][T12605] usb usb6-port1: attempt power cycle [ 1478.603364][T18872] binder: BINDER_SET_CONTEXT_MGR already set [ 1478.610040][T18872] binder: 18870:18872 ioctl 4018620d 200000000040 returned -16 [ 1478.935578][T12605] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1479.255875][T12605] usb 6-1: device descriptor read/8, error -71 [ 1479.842872][ T5877] usb 10-1: USB disconnect, device number 43 [ 1482.567952][T18903] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1483.511549][T18716] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1483.562988][T18918] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3361'. [ 1483.585033][T18716] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1483.613352][T18716] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1483.660874][T18716] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1483.704641][T18922] netlink: 'syz.9.3362': attribute type 4 has an invalid length. [ 1484.492707][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.499536][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.204154][T18716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1485.808271][T18716] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.877118][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.884327][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.942385][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.949589][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1487.038284][T18948] FAULT_INJECTION: forcing a failure. [ 1487.038284][T18948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1487.052270][T18948] CPU: 0 UID: 0 PID: 18948 Comm: syz.1.3370 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1487.052289][T18948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1487.052299][T18948] Call Trace: [ 1487.052305][T18948] [ 1487.052312][T18948] dump_stack_lvl+0x189/0x250 [ 1487.052339][T18948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1487.052359][T18948] ? __pfx__printk+0x10/0x10 [ 1487.052392][T18948] should_fail_ex+0x414/0x560 [ 1487.052411][T18948] _copy_to_user+0x31/0xb0 [ 1487.052434][T18948] btf_new_fd+0x562/0xc90 [ 1487.052455][T18948] ? __pfx_btf_new_fd+0x10/0x10 [ 1487.052469][T18948] ? bpf_token_put+0x143/0x160 [ 1487.052485][T18948] ? bpf_btf_load+0x126/0x190 [ 1487.052506][T18948] __sys_bpf+0x635/0x860 [ 1487.052526][T18948] ? __pfx___sys_bpf+0x10/0x10 [ 1487.052553][T18948] ? ksys_write+0x1f0/0x250 [ 1487.052573][T18948] ? rcu_is_watching+0x15/0xb0 [ 1487.052604][T18948] __x64_sys_bpf+0x7c/0x90 [ 1487.052620][T18948] do_syscall_64+0xf6/0x210 [ 1487.052640][T18948] ? clear_bhb_loop+0x60/0xb0 [ 1487.052658][T18948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.052672][T18948] RIP: 0033:0x7fc585f8e969 [ 1487.052687][T18948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1487.052700][T18948] RSP: 002b:00007fc586d3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1487.052715][T18948] RAX: ffffffffffffffda RBX: 00007fc5861b6080 RCX: 00007fc585f8e969 [ 1487.052726][T18948] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 1487.052736][T18948] RBP: 00007fc586d3d090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.052745][T18948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1487.052754][T18948] R13: 0000000000000000 R14: 00007fc5861b6080 R15: 00007ffc00328bc8 [ 1487.052777][T18948] [ 1488.441076][T18967] Illegal XDP return value 4294967274 on prog (id 899) dev N/A, expect packet loss! [ 1489.169413][T18716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1489.348666][T17684] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1489.526536][T17684] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 1489.542740][T17684] usb 6-1: config 0 has no interface number 0 [ 1489.549284][T17684] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1489.580999][T17684] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1489.613477][T17684] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1489.636589][T17684] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.651676][T17684] usb 6-1: Product: syz [ 1489.659873][T17684] usb 6-1: Manufacturer: syz [ 1489.669754][T17684] usb 6-1: SerialNumber: syz [ 1489.697067][T17684] usb 6-1: config 0 descriptor?? [ 1489.712151][T18961] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1489.729327][T17684] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1490.535011][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1490.547385][T17684] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1490.717111][T17684] usb 6-1: USB disconnect, device number 42 [ 1490.748165][T17684] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1490.781228][T17684] cyberjack 6-1:0.69: device disconnected [ 1491.175088][T12605] usb 10-1: new full-speed USB device number 44 using dummy_hcd [ 1491.392095][T18716] veth0_vlan: entered promiscuous mode [ 1491.617157][T18716] veth1_vlan: entered promiscuous mode [ 1491.921365][T18716] veth0_macvtap: entered promiscuous mode [ 1491.936011][T12605] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1491.954547][T12605] usb 10-1: not running at top speed; connect to a high speed hub [ 1491.967403][T18716] veth1_macvtap: entered promiscuous mode [ 1492.006153][T12605] usb 10-1: config 129 has an invalid interface number: 28 but max is 0 [ 1492.042138][T12605] usb 10-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1492.068551][T18716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1492.088001][T12605] usb 10-1: config 129 has no interface number 0 [ 1492.253975][T12605] usb 10-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1492.286387][T18716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1492.294260][T18996] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1492.340630][T12605] usb 10-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1492.464819][T18996] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1492.472421][T18996] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1492.480833][T18716] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.176398][T12605] usb 10-1: config 129 interface 28 has no altsetting 0 [ 1493.183998][T18996] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1493.202956][T18716] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.221941][T18996] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1493.301555][T18716] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.310738][T18996] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1493.333145][T12605] usb 10-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 1493.355296][T18996] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1493.363959][T18716] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.438194][T12605] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.536709][T18996] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1493.603919][T12605] usb 10-1: Product: syz [ 1493.608244][T12605] usb 10-1: Manufacturer: syz [ 1493.613056][T12605] usb 10-1: SerialNumber: syz [ 1493.614049][T18996] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1493.635468][T19005] netlink: 'syz.5.3381': attribute type 7 has an invalid length. [ 1493.643280][T19005] netlink: 'syz.5.3381': attribute type 8 has an invalid length. [ 1493.717256][T18996] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1493.818594][T19005] netlink: 'syz.5.3381': attribute type 15 has an invalid length. [ 1494.097028][T12605] etas_es58x 10-1:129.28: Starting syz syz (Serial Number syz) [ 1494.139769][T12605] etas_es58x 10-1:129.28: could not retrieve the product info string [ 1494.414811][T19018] hub 8-0:1.0: USB hub found [ 1494.424252][T19018] hub 8-0:1.0: 1 port detected [ 1495.288216][T19022] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1495.338106][T12605] usb 10-1: USB disconnect, device number 44 [ 1495.374908][T12605] etas_es58x 10-1:129.28: Disconnecting syz syz [ 1495.539590][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.548669][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1495.548688][ T30] audit: type=1326 audit(1747657828.189:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19027 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc585f8e969 code=0x7ffc0000 [ 1495.563896][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.582752][ T30] audit: type=1326 audit(1747657828.189:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19027 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc585f8e969 code=0x7ffc0000 [ 1495.625342][ T30] audit: type=1326 audit(1747657828.229:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19027 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc585f8e969 code=0x7ffc0000 [ 1495.653293][ T30] audit: type=1326 audit(1747657828.229:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19027 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc585f8e969 code=0x7ffc0000 [ 1495.785919][ T30] audit: type=1326 audit(1747657828.229:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19027 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc585f8e969 code=0x7ffc0000 [ 1495.855786][ T30] audit: type=1326 audit(1747657828.259:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19027 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc585f8e969 code=0x7ffc0000 [ 1495.881723][ T30] audit: type=1326 audit(1747657828.259:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19027 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc585f8e969 code=0x7ffc0000 [ 1495.988571][ T5915] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1496.648024][T12605] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1496.676458][ T30] audit: type=1326 audit(1747657828.259:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19027 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc585f8e969 code=0x7ffc0000 [ 1497.071579][T10118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.074807][ T30] audit: type=1326 audit(1747657828.259:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19027 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fc585f8e969 code=0x7ffc0000 [ 1497.103170][ T30] audit: type=1326 audit(1747657828.259:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19027 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc585f8e969 code=0x7ffc0000 [ 1497.153879][T12605] usb 10-1: Using ep0 maxpacket: 16 [ 1497.159999][ T5915] usb 6-1: config 0 has an invalid interface number: 144 but max is 0 [ 1497.168585][ T5915] usb 6-1: config 0 has no interface number 0 [ 1497.181335][ T5915] usb 6-1: too many endpoints for config 0 interface 144 altsetting 138: 68, using maximum allowed: 30 [ 1497.292798][T10118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.434223][T12605] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 1497.452801][ T5915] usb 6-1: config 0 interface 144 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 1497.468868][T12605] usb 10-1: config 0 has no interface number 0 [ 1497.476079][T12605] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1497.487922][ T5915] usb 6-1: config 0 interface 144 has no altsetting 0 [ 1497.495357][ T5915] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1497.505065][T12605] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1497.523710][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.552885][T12605] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1497.594323][ T5915] usb 6-1: config 0 descriptor?? [ 1497.600179][T12605] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1497.614565][ T5915] cp210x 6-1:0.144: cp210x converter detected [ 1497.621343][T12605] usb 10-1: Product: syz [ 1497.635441][T12605] usb 10-1: SerialNumber: syz [ 1497.661404][T12605] usb 10-1: config 0 descriptor?? [ 1497.693157][T12605] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 1497.717130][T12605] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input35 [ 1497.811621][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1497.821357][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1497.832289][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1497.839906][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1497.847430][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1497.856133][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1497.864436][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1497.871710][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1497.879073][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1497.886398][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1498.014426][T12605] usb 10-1: USB disconnect, device number 45 [ 1498.014509][ C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1498.289581][T12605] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1499.277435][T12477] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.390947][T19054] netlink: 1132 bytes leftover after parsing attributes in process `syz.1.3392'. [ 1499.474119][T12477] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.598267][T12477] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.738787][T12477] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.961446][T12477] bridge_slave_1: left allmulticast mode [ 1499.971293][T12477] bridge_slave_1: left promiscuous mode [ 1499.978472][T12477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.988874][T12477] bridge_slave_0: left allmulticast mode [ 1499.995056][T12477] bridge_slave_0: left promiscuous mode [ 1500.001642][T12477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.233393][ T5915] cp210x 6-1:0.144: failed to get vendor val 0x000e size 3: -71 [ 1500.280836][ T5915] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1500.323033][ T5915] usb 6-1: USB disconnect, device number 43 [ 1500.372306][ T5915] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1500.402997][ T5915] cp210x 6-1:0.144: device disconnected [ 1500.609514][T19065] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1500.726767][T12605] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1500.999850][T19061] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1501.253725][T12605] usb 2-1: Using ep0 maxpacket: 8 [ 1501.266599][T12605] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1501.282723][T12605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.291970][T12605] usb 2-1: Product: syz [ 1501.333101][T12605] usb 2-1: Manufacturer: syz [ 1501.378492][T12605] usb 2-1: SerialNumber: syz [ 1501.414899][T12605] usb 2-1: config 0 descriptor?? [ 1501.480998][T12605] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1501.820319][T19075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1501.854502][T19076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1501.902356][T19075] netlink: 'syz.6.3398': attribute type 10 has an invalid length. [ 1502.528435][T12605] gspca_sonixj: reg_w err -71 [ 1502.538265][T12605] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1502.688998][T10315] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1502.705933][T10315] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1502.720994][T10315] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1502.758444][T10315] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1502.770508][T12605] usb 2-1: USB disconnect, device number 66 [ 1502.783112][T10315] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1502.963157][T19088] program syz.9.3400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1503.099362][T12477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1503.144444][T12477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1503.170062][T12477] bond0 (unregistering): Released all slaves [ 1503.425015][ T59] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1503.453951][T19075] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1503.713919][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 1503.805562][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1503.949089][ T59] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1504.004504][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.023734][T12605] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1504.036836][T19084] lo speed is unknown, defaulting to 1000 [ 1504.046471][ T59] usb 6-1: config 0 descriptor?? [ 1504.821976][T12605] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.836160][T12605] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1504.846679][T12605] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1504.855849][T12605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1504.864033][T12605] usb 2-1: SerialNumber: syz [ 1504.883880][T10315] Bluetooth: hci3: command tx timeout [ 1505.036857][ T59] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1505.280149][T12605] usb 2-1: 0:2 : does not exist [ 1505.379555][T12605] usb 2-1: USB disconnect, device number 67 [ 1505.438869][T19084] lo speed is unknown, defaulting to 1000 [ 1505.598151][T19109] 9pnet_fd: Insufficient options for proto=fd [ 1506.173893][T15740] udevd[15740]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1506.478056][T19114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1506.973751][T10315] Bluetooth: hci3: command tx timeout [ 1507.008554][T17684] usb 6-1: USB disconnect, device number 44 [ 1507.054453][T19118] syz.1.3410: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1507.083007][T19118] CPU: 1 UID: 0 PID: 19118 Comm: syz.1.3410 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1507.083038][T19118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1507.083052][T19118] Call Trace: [ 1507.083061][T19118] [ 1507.083071][T19118] dump_stack_lvl+0x189/0x250 [ 1507.083109][T19118] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1507.083137][T19118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1507.083164][T19118] ? __pfx__printk+0x10/0x10 [ 1507.083197][T19118] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1507.083236][T19118] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1507.083278][T19118] warn_alloc+0x214/0x310 [ 1507.083302][T19118] ? __pfx___schedule+0x10/0x10 [ 1507.083332][T19118] ? __pfx_warn_alloc+0x10/0x10 [ 1507.083354][T19118] ? kasan_save_track+0x4f/0x80 [ 1507.083383][T19118] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 1507.083415][T19118] ? xskq_create+0x56/0x170 [ 1507.083442][T19118] ? __x64_sys_setsockopt+0x18b/0x220 [ 1507.083469][T19118] ? do_syscall_64+0xf6/0x210 [ 1507.083495][T19118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.083528][T19118] __vmalloc_node_range_noprof+0x125/0x12c0 [ 1507.083583][T19118] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1507.083603][T19118] ? xskq_create+0x56/0x170 [ 1507.083629][T19118] ? __kasan_kmalloc+0x93/0xb0 [ 1507.083665][T19118] vmalloc_user_noprof+0x74/0x80 [ 1507.083687][T19118] ? xskq_create+0xbf/0x170 [ 1507.083711][T19118] xskq_create+0xbf/0x170 [ 1507.083750][T19118] xsk_init_queue+0xb0/0x110 [ 1507.083778][T19118] xsk_setsockopt+0x43f/0x710 [ 1507.083804][T19118] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1507.083830][T19118] ? __lock_acquire+0xaac/0xd20 [ 1507.083866][T19118] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1507.083890][T19118] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1507.083915][T19118] do_sock_setsockopt+0x257/0x3e0 [ 1507.083947][T19118] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1507.083972][T19118] ? __fget_files+0x2a/0x420 [ 1507.083997][T19118] ? __fget_files+0x3a0/0x420 [ 1507.084016][T19118] ? __fget_files+0x2a/0x420 [ 1507.084045][T19118] __x64_sys_setsockopt+0x18b/0x220 [ 1507.084079][T19118] do_syscall_64+0xf6/0x210 [ 1507.084107][T19118] ? clear_bhb_loop+0x60/0xb0 [ 1507.084131][T19118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.084152][T19118] RIP: 0033:0x7fc585f8e969 [ 1507.084170][T19118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1507.084187][T19118] RSP: 002b:00007fc586d5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1507.084210][T19118] RAX: ffffffffffffffda RBX: 00007fc5861b5fa0 RCX: 00007fc585f8e969 [ 1507.084226][T19118] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1507.084240][T19118] RBP: 00007fc586010ab1 R08: 0000000000000052 R09: 0000000000000000 [ 1507.084254][T19118] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1507.084268][T19118] R13: 0000000000000000 R14: 00007fc5861b5fa0 R15: 00007ffc00328bc8 [ 1507.084303][T19118] [ 1507.374071][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.414508][T19118] Mem-Info: [ 1507.417931][T19118] active_anon:1591 inactive_anon:5060 isolated_anon:0 [ 1507.417931][T19118] active_file:23092 inactive_file:35953 isolated_file:0 [ 1507.417931][T19118] unevictable:768 dirty:296 writeback:0 [ 1507.417931][T19118] slab_reclaimable:6589 slab_unreclaimable:119428 [ 1507.417931][T19118] mapped:36017 shmem:2708 pagetables:931 [ 1507.417931][T19118] sec_pagetables:0 bounce:0 [ 1507.417931][T19118] kernel_misc_reclaimable:0 [ 1507.417931][T19118] free:1294555 free_pcp:654 free_cma:0 [ 1507.463546][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.496494][T19118] Node 0 active_anon:6364kB inactive_anon:23140kB active_file:91748kB inactive_file:143812kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146560kB dirty:1184kB writeback:0kB shmem:12196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11952kB pagetables:3724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1507.530280][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.543451][T19118] Node 1 active_anon:0kB inactive_anon:0kB active_file:620kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:308kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1507.575239][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.587409][T19118] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1507.615117][T19118] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 1507.620982][T19118] Node 0 DMA32 free:1249116kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:6360kB inactive_anon:28936kB active_file:91656kB inactive_file:143800kB unevictable:1536kB writepending:1180kB present:3129332kB managed:2564568kB mlocked:0kB bounce:0kB free_pcp:4132kB local_pcp:920kB free_cma:0kB [ 1507.651766][T19118] lowmem_reserve[]: 0 0 0 0 0 [ 1507.657587][T19118] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:92kB inactive_file:12kB unevictable:0kB writepending:4kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1507.684622][T19118] lowmem_reserve[]: 0 0 0 0 0 [ 1507.689381][T19118] Node 1 Normal free:3902860kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:620kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 1507.722046][T19118] lowmem_reserve[]: 0 0 0 0 0 [ 1507.738046][T19118] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1507.770676][T19118] Node 0 DMA32: 25*4kB (ME) 125*8kB (UME) 523*16kB (UM) 503*32kB (UME) 401*64kB (UME) 160*128kB (UME) 177*256kB (UME) 192*512kB (UME) 79*1024kB (UME) 24*2048kB (UME) 221*4096kB (M) = 1250588kB [ 1507.858000][T19118] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1507.925090][T19118] Node 1 Normal: 245*4kB (UME) 67*8kB (UME) 50*16kB (UME) 222*32kB (UME) 103*64kB (UME) 30*128kB (UME) 12*256kB (UM) 6*512kB (UME) 4*1024kB (UME) 5*2048kB (UME) 943*4096kB (M) = 3902860kB [ 1508.327901][T19118] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1508.359324][T19138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.570830][T19139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.719109][T19141] netlink: 'syz.5.3414': attribute type 10 has an invalid length. [ 1509.033987][T19118] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1509.044846][T10315] Bluetooth: hci3: command tx timeout [ 1509.077779][T19118] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1509.315266][T19118] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1509.345550][T19118] 66173 total pagecache pages [ 1509.939503][T19118] 0 pages in swap cache [ 1509.949681][T19118] Free swap = 124996kB [ 1509.958229][T19118] Total swap = 124996kB [ 1509.962617][T19118] 2097051 pages RAM [ 1509.967045][T19118] 0 pages HighMem/MovableOnly [ 1509.971851][T19118] 424250 pages reserved [ 1509.980196][T19118] 0 pages cma reserved [ 1510.997942][T12477] hsr_slave_0: left promiscuous mode [ 1511.137197][T10315] Bluetooth: hci3: command tx timeout [ 1511.209011][T12477] hsr_slave_1: left promiscuous mode [ 1511.232809][T12477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1511.446075][T12477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.644738][T12477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1511.680558][T12477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1511.799409][T19174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1511.820886][T12477] veth1_macvtap: left promiscuous mode [ 1511.852835][T12477] veth0_macvtap: left promiscuous mode [ 1512.161963][T12477] veth1_vlan: left promiscuous mode [ 1512.177762][T12477] veth0_vlan: left promiscuous mode [ 1512.983821][T12607] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1513.123825][T12607] usb 6-1: device descriptor read/64, error -71 [ 1513.170658][ T5875] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1513.369592][T12607] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1513.620746][ T5875] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1513.660405][ T5875] usb 2-1: config 0 has no interface number 0 [ 1513.735493][ T5875] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1513.775368][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.837703][ T5875] usb 2-1: Product: syz [ 1513.868098][ T5875] usb 2-1: Manufacturer: syz [ 1513.892451][ T5875] usb 2-1: SerialNumber: syz [ 1514.095489][T12607] usb 6-1: device descriptor read/64, error -71 [ 1514.146522][ T5875] usb 2-1: config 0 descriptor?? [ 1514.204167][T12607] usb usb6-port1: attempt power cycle [ 1514.366378][ T5875] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1514.530499][ T5875] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1514.547661][ T5875] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1514.567605][ T5875] usb 2-1: media controller created [ 1514.583976][T12607] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1514.615320][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1514.625791][T12607] usb 6-1: device descriptor read/8, error -71 [ 1514.891283][ T5875] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1514.891849][T12607] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1514.967791][T12607] usb 6-1: device descriptor read/8, error -71 [ 1515.095467][T12607] usb usb6-port1: unable to enumerate USB device [ 1515.114544][ T5875] usb 2-1: USB disconnect, device number 68 [ 1515.424766][T12477] team0 (unregistering): Port device team_slave_1 removed [ 1515.544067][T12477] team0 (unregistering): Port device team_slave_0 removed [ 1515.603427][T19197] fuse: Bad value for 'group_id' [ 1515.622807][T19197] fuse: Bad value for 'group_id' [ 1515.954719][T19199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1515.992669][T19200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1516.018618][T19199] netlink: 'syz.5.3430': attribute type 10 has an invalid length. [ 1516.187093][T19204] netlink: 'syz.9.3431': attribute type 1 has an invalid length. [ 1516.195083][T19204] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3431'. [ 1518.864841][T19224] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1520.517216][T19084] chnl_net:caif_netlink_parms(): no params data found [ 1522.129694][T19084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.139007][T19084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.174032][T19084] bridge_slave_0: entered allmulticast mode [ 1522.182330][T19084] bridge_slave_0: entered promiscuous mode [ 1522.763189][T19254] fuse: Bad value for 'fd' [ 1522.769311][T19084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.871983][T19084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.951389][T19084] bridge_slave_1: entered allmulticast mode [ 1522.990091][T19084] bridge_slave_1: entered promiscuous mode [ 1523.033457][T19262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1523.045524][T19263] FAULT_INJECTION: forcing a failure. [ 1523.045524][T19263] name failslab, interval 1, probability 0, space 0, times 0 [ 1523.058872][T19263] CPU: 1 UID: 0 PID: 19263 Comm: syz.1.3446 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1523.058902][T19263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1523.058916][T19263] Call Trace: [ 1523.058926][T19263] [ 1523.058935][T19263] dump_stack_lvl+0x189/0x250 [ 1523.058972][T19263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1523.059002][T19263] ? __pfx__printk+0x10/0x10 [ 1523.059053][T19263] should_fail_ex+0x414/0x560 [ 1523.059082][T19263] should_failslab+0xa8/0x100 [ 1523.059104][T19263] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1523.059137][T19263] ? __inet_hash_connect+0xdcc/0x2310 [ 1523.059167][T19263] __inet_hash_connect+0xdcc/0x2310 [ 1523.059197][T19263] ? __pfx___inet_check_established+0x10/0x10 [ 1523.059232][T19263] ? __inet_hash_connect+0x4fa/0x2310 [ 1523.059267][T19263] ? __pfx___inet_hash_connect+0x10/0x10 [ 1523.059302][T19263] ? inet_hash_connect+0x12f/0x240 [ 1523.059331][T19263] tcp_v4_connect+0xca2/0x1980 [ 1523.059382][T19263] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1523.059406][T19263] ? tcp_v6_connect+0x680/0x1830 [ 1523.059433][T19263] tcp_v6_connect+0xa94/0x1830 [ 1523.059469][T19263] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1523.059490][T19263] ? tomoyo_check_inet_address+0x275/0x8c0 [ 1523.059529][T19263] ? smack_ipv6host_label+0x824/0x8e0 [ 1523.059575][T19263] __inet_stream_connect+0x298/0xf10 [ 1523.059618][T19263] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1523.059651][T19263] ? __pfx___inet_stream_connect+0x10/0x10 [ 1523.059684][T19263] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1523.059716][T19263] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1523.059762][T19263] inet_stream_connect+0x66/0xa0 [ 1523.059798][T19263] __sys_connect+0x313/0x440 [ 1523.059823][T19263] ? __fget_files+0x3a0/0x420 [ 1523.059845][T19263] ? __pfx___sys_connect+0x10/0x10 [ 1523.059896][T19263] __x64_sys_connect+0x7a/0x90 [ 1523.059924][T19263] do_syscall_64+0xf6/0x210 [ 1523.059954][T19263] ? clear_bhb_loop+0x60/0xb0 [ 1523.059980][T19263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.060002][T19263] RIP: 0033:0x7fc585f8e969 [ 1523.060021][T19263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1523.060040][T19263] RSP: 002b:00007fc586d5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1523.060063][T19263] RAX: ffffffffffffffda RBX: 00007fc5861b5fa0 RCX: 00007fc585f8e969 [ 1523.060080][T19263] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 1523.060094][T19263] RBP: 00007fc586d5e090 R08: 0000000000000000 R09: 0000000000000000 [ 1523.060108][T19263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1523.060121][T19263] R13: 0000000000000000 R14: 00007fc5861b5fa0 R15: 00007ffc00328bc8 [ 1523.060155][T19263] [ 1523.073509][T19262] netlink: 'syz.9.3445': attribute type 10 has an invalid length. [ 1523.422541][T19262] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1524.498288][T19281] netlink: 'syz.6.3451': attribute type 1 has an invalid length. [ 1524.506260][T19281] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3451'. [ 1524.783367][T19084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1525.097212][T19084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1525.563179][T19084] team0: Port device team_slave_0 added [ 1525.620189][T19084] team0: Port device team_slave_1 added [ 1525.764130][T19084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.784030][T19084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.889031][T19084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.938390][T19084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.976676][T19084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1526.089477][T19084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1527.362629][T19084] hsr_slave_0: entered promiscuous mode [ 1527.376747][T19084] hsr_slave_1: entered promiscuous mode [ 1527.390458][T19084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1527.409002][T19084] Cannot create hsr debugfs directory [ 1527.431428][T19317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1527.472186][T19317] netlink: 'syz.6.3463': attribute type 10 has an invalid length. [ 1528.657738][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1528.657758][ T30] audit: type=1326 audit(1747657861.299:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7b98e969 code=0x7ffc0000 [ 1528.685599][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.873737][ T30] audit: type=1326 audit(1747657861.299:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7b98e969 code=0x7ffc0000 [ 1528.951854][ T30] audit: type=1326 audit(1747657861.339:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d7b98e969 code=0x7ffc0000 [ 1529.073759][ T30] audit: type=1326 audit(1747657861.339:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7b98e969 code=0x7ffc0000 [ 1529.159972][ T30] audit: type=1326 audit(1747657861.339:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7b98e969 code=0x7ffc0000 [ 1529.230932][ T30] audit: type=1326 audit(1747657861.339:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5d7b98e969 code=0x7ffc0000 [ 1529.354530][T19338] netlink: 'syz.6.3470': attribute type 1 has an invalid length. [ 1529.362626][T19338] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3470'. [ 1529.954522][ T30] audit: type=1326 audit(1747657861.339:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7b98e969 code=0x7ffc0000 [ 1530.136454][ T30] audit: type=1326 audit(1747657861.339:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d7b98e969 code=0x7ffc0000 [ 1530.212727][ T30] audit: type=1326 audit(1747657861.489:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7b98e969 code=0x7ffc0000 [ 1532.453706][ T30] audit: type=1326 audit(1747657861.489:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7b98e969 code=0x7ffc0000 [ 1532.573894][T18676] IPVS: starting estimator thread 0... [ 1532.804882][T19350] IPVS: using max 25 ests per chain, 60000 per kthread [ 1533.895881][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3475'. [ 1534.376381][T19084] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1534.414886][T19084] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1534.457032][T19084] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1534.479968][T19084] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1535.052665][T19368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1535.140449][T19370] netlink: 'syz.1.3480': attribute type 10 has an invalid length. [ 1535.320271][T19370] ================================================================== [ 1535.328409][T19370] BUG: KASAN: global-out-of-bounds in fib6_clean_node+0x35d/0x590 [ 1535.336269][T19370] Read of size 8 at addr ffffffff99ce9668 by task syz.1.3480/19370 [ 1535.344209][T19370] [ 1535.346582][T19370] CPU: 1 UID: 0 PID: 19370 Comm: syz.1.3480 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1535.346612][T19370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1535.346627][T19370] Call Trace: [ 1535.346635][T19370] [ 1535.346644][T19370] dump_stack_lvl+0x189/0x250 [ 1535.346678][T19370] ? __virt_addr_valid+0x18c/0x540 [ 1535.346706][T19370] ? rcu_is_watching+0x15/0xb0 [ 1535.346735][T19370] ? __kasan_check_byte+0x12/0x40 [ 1535.346767][T19370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1535.346793][T19370] ? rcu_is_watching+0x15/0xb0 [ 1535.346823][T19370] ? lock_release+0x4b/0x3e0 [ 1535.346852][T19370] ? __virt_addr_valid+0x18c/0x540 [ 1535.346877][T19370] ? __virt_addr_valid+0x469/0x540 [ 1535.346904][T19370] print_report+0xb4/0x290 [ 1535.346937][T19370] ? fib6_clean_node+0x35d/0x590 [ 1535.346963][T19370] kasan_report+0x118/0x150 [ 1535.346996][T19370] ? fib6_clean_node+0x35d/0x590 [ 1535.347025][T19370] fib6_clean_node+0x35d/0x590 [ 1535.347050][T19370] ? __pfx_fib6_clean_node+0x10/0x10 [ 1535.347078][T19370] ? fib6_walk_continue+0x5dd/0x910 [ 1535.347105][T19370] fib6_walk_continue+0x67b/0x910 [ 1535.347136][T19370] fib6_walk+0x149/0x290 [ 1535.347161][T19370] __fib6_clean_all+0x234/0x380 [ 1535.347183][T19370] ? __fib6_clean_all+0x9b/0x380 [ 1535.347207][T19370] ? __pfx_fib6_ifdown+0x10/0x10 [ 1535.347231][T19370] ? __pfx___fib6_clean_all+0x10/0x10 [ 1535.347257][T19370] ? __pfx_fib6_clean_node+0x10/0x10 [ 1535.347281][T19370] ? __pfx_fib6_ifdown+0x10/0x10 [ 1535.347307][T19370] ? __lock_acquire+0xaac/0xd20 [ 1535.347340][T19370] rt6_disable_ip+0x120/0x720 [ 1535.347370][T19370] ? rcu_is_watching+0x15/0xb0 [ 1535.347400][T19370] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1535.347431][T19370] addrconf_ifdown+0x15d/0x1880 [ 1535.347454][T19370] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1535.347485][T19370] ? __pfx___mutex_lock+0x10/0x10 [ 1535.347512][T19370] ? tls_dev_event+0x717/0xec0 [ 1535.347543][T19370] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1535.347572][T19370] addrconf_notify+0x1bc/0x1010 [ 1535.347601][T19370] notifier_call_chain+0x1b3/0x3e0 [ 1535.347626][T19370] __dev_notify_flags+0x18d/0x2e0 [ 1535.347656][T19370] ? __pfx___dev_notify_flags+0x10/0x10 [ 1535.347682][T19370] ? __dev_change_flags+0x4cc/0x6d0 [ 1535.347712][T19370] ? __pfx___dev_change_flags+0x10/0x10 [ 1535.347745][T19370] netif_change_flags+0xe8/0x1a0 [ 1535.347775][T19370] do_setlink+0xcb9/0x40d0 [ 1535.347810][T19370] ? __pfx_do_setlink+0x10/0x10 [ 1535.347834][T19370] ? do_raw_spin_lock+0x121/0x290 [ 1535.347864][T19370] ? lockdep_hardirqs_on+0x9c/0x150 [ 1535.347890][T19370] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1535.347924][T19370] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1535.347951][T19370] ? rcu_is_watching+0x15/0xb0 [ 1535.347984][T19370] ? __mutex_lock+0xa6d/0xe80 [ 1535.348011][T19370] ? __mutex_lock+0x51b/0xe80 [ 1535.348040][T19370] ? rtnl_newlink+0x8db/0x1c70 [ 1535.348065][T19370] ? __pfx___mutex_lock+0x10/0x10 [ 1535.348097][T19370] ? ns_capable+0x8a/0xf0 [ 1535.348129][T19370] ? rtnl_link_get_net_capable+0x16a/0x350 [ 1535.348158][T19370] rtnl_newlink+0x160b/0x1c70 [ 1535.348181][T19370] ? kasan_save_track+0x3e/0x80 [ 1535.348215][T19370] ? __pfx_rtnl_newlink+0x10/0x10 [ 1535.348253][T19370] ? kasan_quarantine_put+0xdd/0x220 [ 1535.348282][T19370] ? lockdep_hardirqs_on+0x9c/0x150 [ 1535.348310][T19370] ? nlmon_xmit+0xb0/0x100 [ 1535.348338][T19370] ? kmem_cache_free+0x192/0x3f0 [ 1535.348374][T19370] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1535.348405][T19370] ? lockdep_hardirqs_on+0x9c/0x150 [ 1535.348428][T19370] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1535.348459][T19370] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1535.348492][T19370] ? __dev_queue_xmit+0x27e/0x3a70 [ 1535.348523][T19370] ? __dev_queue_xmit+0x27e/0x3a70 [ 1535.348550][T19370] ? __dev_queue_xmit+0x27e/0x3a70 [ 1535.348583][T19370] ? __lock_acquire+0xaac/0xd20 [ 1535.348622][T19370] ? __pfx_rtnl_newlink+0x10/0x10 [ 1535.348644][T19370] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1535.348670][T19370] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1535.348693][T19370] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1535.348718][T19370] ? ref_tracker_free+0x63a/0x7d0 [ 1535.348741][T19370] ? __copy_skb_header+0xa7/0x550 [ 1535.348776][T19370] netlink_rcv_skb+0x21c/0x490 [ 1535.348801][T19370] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1535.348824][T19370] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1535.348858][T19370] ? netlink_deliver_tap+0x2e/0x1b0 [ 1535.348881][T19370] ? netlink_deliver_tap+0x2e/0x1b0 [ 1535.348908][T19370] netlink_unicast+0x758/0x8d0 [ 1535.348945][T19370] netlink_sendmsg+0x805/0xb30 [ 1535.348976][T19370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1535.349005][T19370] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1535.349028][T19370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1535.349053][T19370] __sock_sendmsg+0x219/0x270 [ 1535.349076][T19370] ____sys_sendmsg+0x505/0x830 [ 1535.349108][T19370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1535.349141][T19370] ? import_iovec+0x74/0xa0 [ 1535.349172][T19370] ___sys_sendmsg+0x21f/0x2a0 [ 1535.349202][T19370] ? __pfx____sys_sendmsg+0x10/0x10 [ 1535.349249][T19370] ? __fget_files+0x2a/0x420 [ 1535.349268][T19370] ? __fget_files+0x3a0/0x420 [ 1535.349293][T19370] __x64_sys_sendmsg+0x19b/0x260 [ 1535.349324][T19370] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1535.349361][T19370] ? do_syscall_64+0xba/0x210 [ 1535.349391][T19370] do_syscall_64+0xf6/0x210 [ 1535.349419][T19370] ? clear_bhb_loop+0x60/0xb0 [ 1535.349443][T19370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.349464][T19370] RIP: 0033:0x7fc585f8e969 [ 1535.349482][T19370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1535.349502][T19370] RSP: 002b:00007fc586d3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1535.349525][T19370] RAX: ffffffffffffffda RBX: 00007fc5861b6080 RCX: 00007fc585f8e969 [ 1535.349542][T19370] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 1535.349556][T19370] RBP: 00007fc586010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1535.349571][T19370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1535.349584][T19370] R13: 0000000000000000 R14: 00007fc5861b6080 R15: 00007ffc00328bc8 [ 1535.349609][T19370] [ 1535.349617][T19370] [ 1535.944870][T19370] The buggy address belongs to the variable: [ 1535.950862][T19370] binder_devices+0x8/0x20 [ 1535.955278][T19370] [ 1535.957596][T19370] The buggy address belongs to the physical page: [ 1535.964002][T19370] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19ce9 [ 1535.972760][T19370] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1535.980659][T19370] raw: 00fff00000002000 ffffea0000673a48 ffffea0000673a48 0000000000000000 [ 1535.989258][T19370] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1535.997845][T19370] page dumped because: kasan: bad access detected [ 1536.004259][T19370] page_owner info is not present (never set?) [ 1536.010338][T19370] [ 1536.012662][T19370] Memory state around the buggy address: [ 1536.018296][T19370] ffffffff99ce9500: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 1536.026359][T19370] ffffffff99ce9580: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 1536.034423][T19370] >ffffffff99ce9600: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 1536.042484][T19370] ^ [ 1536.049940][T19370] ffffffff99ce9680: 00 00 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 1536.058047][T19370] ffffffff99ce9700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1536.066121][T19370] ================================================================== [ 1536.074275][T19370] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1536.081489][T19370] CPU: 1 UID: 0 PID: 19370 Comm: syz.1.3480 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1536.091828][T19370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1536.101888][T19370] Call Trace: [ 1536.105170][T19370] [ 1536.108114][T19370] dump_stack_lvl+0x99/0x250 [ 1536.112714][T19370] ? __asan_memcpy+0x40/0x70 [ 1536.117307][T19370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1536.122517][T19370] ? __pfx__printk+0x10/0x10 [ 1536.127135][T19370] panic+0x2db/0x790 [ 1536.131038][T19370] ? __pfx_panic+0x10/0x10 [ 1536.135460][T19370] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1536.141383][T19370] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1536.147298][T19370] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1536.153642][T19370] ? print_memory_metadata+0x314/0x400 [ 1536.159124][T19370] ? fib6_clean_node+0x35d/0x590 [ 1536.164083][T19370] check_panic_on_warn+0x89/0xb0 [ 1536.169030][T19370] ? fib6_clean_node+0x35d/0x590 [ 1536.173991][T19370] end_report+0x78/0x160 [ 1536.178272][T19370] kasan_report+0x129/0x150 [ 1536.182789][T19370] ? fib6_clean_node+0x35d/0x590 [ 1536.187746][T19370] fib6_clean_node+0x35d/0x590 [ 1536.192527][T19370] ? __pfx_fib6_clean_node+0x10/0x10 [ 1536.197817][T19370] ? fib6_walk_continue+0x5dd/0x910 [ 1536.203046][T19370] fib6_walk_continue+0x67b/0x910 [ 1536.208086][T19370] fib6_walk+0x149/0x290 [ 1536.212336][T19370] __fib6_clean_all+0x234/0x380 [ 1536.217200][T19370] ? __fib6_clean_all+0x9b/0x380 [ 1536.222141][T19370] ? __pfx_fib6_ifdown+0x10/0x10 [ 1536.227089][T19370] ? __pfx___fib6_clean_all+0x10/0x10 [ 1536.232477][T19370] ? __pfx_fib6_clean_node+0x10/0x10 [ 1536.237786][T19370] ? __pfx_fib6_ifdown+0x10/0x10 [ 1536.242731][T19370] ? __lock_acquire+0xaac/0xd20 [ 1536.247608][T19370] rt6_disable_ip+0x120/0x720 [ 1536.252290][T19370] ? rcu_is_watching+0x15/0xb0 [ 1536.257060][T19370] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1536.262263][T19370] addrconf_ifdown+0x15d/0x1880 [ 1536.267112][T19370] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1536.272770][T19370] ? __pfx___mutex_lock+0x10/0x10 [ 1536.277807][T19370] ? tls_dev_event+0x717/0xec0 [ 1536.282581][T19370] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1536.287877][T19370] addrconf_notify+0x1bc/0x1010 [ 1536.292732][T19370] notifier_call_chain+0x1b3/0x3e0 [ 1536.297847][T19370] __dev_notify_flags+0x18d/0x2e0 [ 1536.302878][T19370] ? __pfx___dev_notify_flags+0x10/0x10 [ 1536.308423][T19370] ? __dev_change_flags+0x4cc/0x6d0 [ 1536.313638][T19370] ? __pfx___dev_change_flags+0x10/0x10 [ 1536.319213][T19370] netif_change_flags+0xe8/0x1a0 [ 1536.324181][T19370] do_setlink+0xcb9/0x40d0 [ 1536.328613][T19370] ? __pfx_do_setlink+0x10/0x10 [ 1536.333463][T19370] ? do_raw_spin_lock+0x121/0x290 [ 1536.338579][T19370] ? lockdep_hardirqs_on+0x9c/0x150 [ 1536.343786][T19370] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1536.349690][T19370] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1536.356020][T19370] ? rcu_is_watching+0x15/0xb0 [ 1536.360792][T19370] ? __mutex_lock+0xa6d/0xe80 [ 1536.365566][T19370] ? __mutex_lock+0x51b/0xe80 [ 1536.370248][T19370] ? rtnl_newlink+0x8db/0x1c70 [ 1536.375014][T19370] ? __pfx___mutex_lock+0x10/0x10 [ 1536.380060][T19370] ? ns_capable+0x8a/0xf0 [ 1536.384418][T19370] ? rtnl_link_get_net_capable+0x16a/0x350 [ 1536.390230][T19370] rtnl_newlink+0x160b/0x1c70 [ 1536.394955][T19370] ? kasan_save_track+0x3e/0x80 [ 1536.399819][T19370] ? __pfx_rtnl_newlink+0x10/0x10 [ 1536.404889][T19370] ? kasan_quarantine_put+0xdd/0x220 [ 1536.410179][T19370] ? lockdep_hardirqs_on+0x9c/0x150 [ 1536.415468][T19370] ? nlmon_xmit+0xb0/0x100 [ 1536.419888][T19370] ? kmem_cache_free+0x192/0x3f0 [ 1536.424838][T19370] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1536.430218][T19370] ? lockdep_hardirqs_on+0x9c/0x150 [ 1536.435506][T19370] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1536.440890][T19370] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1536.446619][T19370] ? __dev_queue_xmit+0x27e/0x3a70 [ 1536.451737][T19370] ? __dev_queue_xmit+0x27e/0x3a70 [ 1536.456858][T19370] ? __dev_queue_xmit+0x27e/0x3a70 [ 1536.461977][T19370] ? __lock_acquire+0xaac/0xd20 [ 1536.466839][T19370] ? __pfx_rtnl_newlink+0x10/0x10 [ 1536.471885][T19370] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1536.476831][T19370] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1536.481941][T19370] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1536.487418][T19370] ? ref_tracker_free+0x63a/0x7d0 [ 1536.492464][T19370] ? __copy_skb_header+0xa7/0x550 [ 1536.497506][T19370] netlink_rcv_skb+0x21c/0x490 [ 1536.502277][T19370] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1536.507827][T19370] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1536.513120][T19370] ? netlink_deliver_tap+0x2e/0x1b0 [ 1536.518320][T19370] ? netlink_deliver_tap+0x2e/0x1b0 [ 1536.523520][T19370] netlink_unicast+0x758/0x8d0 [ 1536.528285][T19370] netlink_sendmsg+0x805/0xb30 [ 1536.533127][T19370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1536.538435][T19370] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1536.543727][T19370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1536.549043][T19370] __sock_sendmsg+0x219/0x270 [ 1536.553722][T19370] ____sys_sendmsg+0x505/0x830 [ 1536.558498][T19370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1536.563789][T19370] ? import_iovec+0x74/0xa0 [ 1536.568297][T19370] ___sys_sendmsg+0x21f/0x2a0 [ 1536.572977][T19370] ? __pfx____sys_sendmsg+0x10/0x10 [ 1536.578200][T19370] ? __fget_files+0x2a/0x420 [ 1536.582793][T19370] ? __fget_files+0x3a0/0x420 [ 1536.587469][T19370] __x64_sys_sendmsg+0x19b/0x260 [ 1536.592410][T19370] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1536.597878][T19370] ? do_syscall_64+0xba/0x210 [ 1536.602557][T19370] do_syscall_64+0xf6/0x210 [ 1536.607064][T19370] ? clear_bhb_loop+0x60/0xb0 [ 1536.611761][T19370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.617670][T19370] RIP: 0033:0x7fc585f8e969 [ 1536.622088][T19370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1536.641698][T19370] RSP: 002b:00007fc586d3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1536.650124][T19370] RAX: ffffffffffffffda RBX: 00007fc5861b6080 RCX: 00007fc585f8e969 [ 1536.658137][T19370] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 1536.666121][T19370] RBP: 00007fc586010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1536.674098][T19370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1536.682086][T19370] R13: 0000000000000000 R14: 00007fc5861b6080 R15: 00007ffc00328bc8 [ 1536.690066][T19370] [ 1536.693358][T19370] Kernel Offset: disabled [ 1536.697685][T19370] Rebooting in 86400 seconds..