last executing test programs: 9m59.187282652s ago: executing program 32 (id=235): ioperm(0x0, 0x40, 0x80) io_setup(0x1, &(0x7f00000004c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180500000000000000005a8c3b531cc252bb00006599a15b7a81a2f6bd32efbb92031881a82a4b9917fb23c0bb8fd6e9bb0343cfd9ee4c287b3329bf9531675612036dcf752241c2b0c45bb2dd47a5e11e052dd0b5"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46100) fallocate(r4, 0x0, 0x0, 0x1000) 4m16.445743387s ago: executing program 33 (id=1357): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xffe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) 2m42.778015133s ago: executing program 34 (id=1723): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r4 = mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={&(0x7f0000000200)="ce1f23add306af92d6d182920ea918d195c2434b04739a1de7da8ef340a9c339a2cdf92c29d55dccf3c04973908fad00e1f9f395887143ff29b96da7deafc645ea57d47899cf744a5cf9693f424345713fa72e550de344aa064a3957a343c2b49468bd6d3b1464907f2348ec3c70de41f73f3d912834b7be140bda482c62d2ad47b6622311283d2c2407709a6439", &(0x7f00000003c0)="4a8152dd2d844abba75051eee46cbb31086505f3ffe977b24ac00568ca659321dc28ba3b1ade97271f3a37b4c4ae3ca4144943df7ffbe177a6c1c385219e599f4aba0fd9fa88dbcc90b0acddbf06b0cface57f641481db85f68536c004a3427b9efc44b65b0bab348557f95451d91e409e8180722906976d547bfde8ee103fdeca957790a9c8b0dd0a7d6aa247313dc5f0213a0e12de200c563a41f2a1219402c44a1571f4e338773d5e92e91e3d88de43181cae7abe17222af6afaa1f435ddbedf76bf207824ac0d50b0afb640d65fe69761c1e79427b66fc0627c4f19cd8ce5f1b54ebaa1d"}}) mq_timedsend(r4, 0x0, 0x0, 0x67b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x7, 0x1, 0x10000, 0x10, r0, 0x3, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0xf, @void, @value, @void, @value}, 0x50) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x5c, 0x12, 0x201, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "00080000d7bcd9370d"}]}, 0x5c}}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000140)) 1m19.577341608s ago: executing program 1 (id=1991): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) socket$nl_route(0x10, 0x3, 0x0) setregid(r2, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m19.447547545s ago: executing program 1 (id=1992): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f030006000000"], 0x60}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 1m19.273373294s ago: executing program 1 (id=1993): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xfede, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001500)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}}, 0x44050) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m18.309487532s ago: executing program 6 (id=1997): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x20008085) write$FUSE_INIT(r2, &(0x7f0000000080)={0x4f}, 0xfffffdef) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x3, 0x0, 0x6, 0xa, 0xa, 0x6, 0xa1}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000000140), 0x4040) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000007d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x1) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = syz_usb_connect$cdc_ecm(0x1, 0x5f, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x30, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x6, 0x80, 0xe, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "e2"}, {0x5, 0x24, 0x0, 0x3ba}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0x3, 0x9}, [@mbim_extended={0x8, 0x24, 0x1c, 0x800, 0x7, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb, 0x1, 0xa6}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xb7, 0x5, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xc, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x2, 0xf2, 0x2, 0x40, 0x33}, 0x131, &(0x7f0000000300)={0x5, 0xf, 0x131, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xfd, "747aef882292049e76b35aa510a545cc"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0xf, 0x7, 0xff80}, @generic={0x101, 0x10, 0x3, "dfaea815df3a07551c8c352b493a179d0048153f1283b0e949a117b071af9cd5b854c2821dea5aed1c98bd4fa38b4357a5db8735a201d9c91edbe695a3d7a314addd0b7c74971ed346a86cb2a27f4badf866b3e844e68943862bfb1d1e1879cc09025f5e8891f894cbf19d4167b12a4e4f8cd040518bb0099465b56df2527686d1697a28067b0360af6595884fc66ae5d0df8c3504237f6867556679948edcf7f78bf5731288bfc5a54ce40d4aada5451d138e316979869d93902b4988c543971791ee16b184a45ca7a323d80d9d4111a827e91c4afb9d6e640b4bb0901c794b28ce126dc27f08c4465f28ab2b6d8aca0b8a305b202c01f3bb74f9365185"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x40, 0x7, 0x7ff}]}, 0x3, [{0x71, &(0x7f00000004c0)=@string={0x71, 0x3, "65ae39f9c776c6ff4ed53322538cb41599090a69a557096452c1f1e4178bfc54d1a29c09e258e6d1f82fcef5e2b82e808dd65b59fefee21d8fb694b883a1cba1a128dca68e0448fb232d0358302c7b2ab64d3237e21502dd2c7ee9a6fe03826c1b4336f3c57ba8ec7c92080cd5830d"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3401}}]}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000a40)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) setsockopt(r2, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) read$FUSE(r2, &(0x7f0000002000)={0x2020}, 0xfffffc7c) 1m15.494818998s ago: executing program 0 (id=2005): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 1m15.391007964s ago: executing program 1 (id=2006): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$netlink(0x10, 0x3, 0x0) r4 = mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0) r5 = dup2(r4, r4) mq_notify(r5, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={&(0x7f0000000200)="ce1f23add306af92d6d182920ea918d195c2434b04739a1de7da8ef340a9c339a2cdf92c29d55dccf3c04973908fad00e1f9f395887143ff29b96da7deafc645ea57d47899cf744a5cf9693f424345713fa72e550de344aa064a3957a343c2b49468bd6d3b1464907f2348ec3c70de41f73f3d912834b7be140bda482c62d2ad47b6622311283d2c2407709a6439", &(0x7f00000003c0)="4a8152dd2d844abba75051eee46cbb31086505f3ffe977b24ac00568ca659321dc28ba3b1ade97271f3a37b4c4ae3ca4144943df7ffbe177a6c1c385219e599f4aba0fd9fa88dbcc90b0acddbf06b0cface57f641481db85f68536c004a3427b9efc44b65b0bab348557f95451d91e409e8180722906976d547bfde8ee103fdeca957790a9c8b0dd0a7d6aa247313dc5f0213a0e12de200c563a41f2a1219402c44a1571f4e338773d5e92e91e3d88de43181cae7abe17222af6afaa1f435ddbedf76bf207824ac0d50b0afb640d65fe69761c1e79427b66fc0627c4f19cd8ce5f1b54ebaa1d"}}) mq_timedsend(r4, 0x0, 0x0, 0x67b, 0x0) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7fdce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x7, 0x1, 0x10000, 0x10, 0xffffffffffffffff, 0x3, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0xf, @void, @value, @void, @value}, 0x50) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000140)) 1m14.145226922s ago: executing program 0 (id=2007): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @null, 0x110}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x7}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d61637380050007000000000005000800db5107fbc728d23bba0000000000000000000076ebbca02fb75b25b320096d40d3a9aed7d758a134f4768c80501755649d36ec9ccf1c8c1c5cab02bec696beb04f299700d896135e46ae1f4def8e0bd5a05850443b851e01bec9dc1ff3c0786114c7c3f9ced9689581b7f8146a104d7c7c5a1243731724484f2c45641f0d85c00e32210931c393b86db26e400de9946e1250ec534f341297d04f29faf7ef392b25add40e7c6b9dfb5cc6610ecd148b85dd26ba55369905e8055e"], 0x44}, 0x1, 0x8}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0x6906, &(0x7f0000000080)={0x0, 0x5c67, 0x800, 0x2, 0x1eb}) creat(&(0x7f0000000140)='./file0\x00', 0x191) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x121000) io_uring_enter(r3, 0x704, 0xbfb8, 0x10, &(0x7f0000000100)={[0xffffffffffffff44]}, 0x8) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) write$P9_RGETATTR(r4, &(0x7f0000002300)={0xa0}, 0xa0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000001c0)=[{r4}], 0x1, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="018000002600000000002f907800000000ffffffff0000883e0012907802070000000000002b23"], 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x80201, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r5, 0x80044dfd, &(0x7f0000000040)) listen(0xffffffffffffffff, 0x8) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, 0x0) ioctl$IOMMU_DESTROY$ioas(r6, 0x3b80, &(0x7f0000000380)={0x8, r7}) socket$inet(0x2, 0x5, 0x4) 1m14.11421444s ago: executing program 3 (id=2008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) pidfd_getfd(0xffffffffffffffff, r3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r4, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x428100) r7 = socket$inet6(0xa, 0x3, 0x5) r8 = socket$l2tp6(0xa, 0x2, 0x73) r9 = dup2(r8, r7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x10) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r7, &(0x7f0000002c00)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000200)={0x81, 0x3, 0xfffffffd, 0x6133, 0x2, 0x6}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1m13.955841061s ago: executing program 7 (id=2009): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r0, 0x200000002, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4010408}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4000041) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000f00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x4000001) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000002c0)={&(0x7f0000000240)}, 0x1, 0x0, 0x0, 0x4040014}, 0x4040048) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) r7 = gettid() r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r8, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r8, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket(0x10, 0x3, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r9, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000001c0)={r6, 0x12, "c29bc5bdc4eaa3ecb4fb9f7547b30f4c5333"}, &(0x7f0000000100)=0x1a) 1m13.954966612s ago: executing program 6 (id=2010): ioperm(0x0, 0x5, 0x6) memfd_create(0x0, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = epoll_create1(0x0) r5 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r4}) io_uring_enter(r5, 0x9f7, 0x0, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x320e, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r11 = io_uring_setup(0x668f, &(0x7f0000002000)) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0x11, 0x20000000, r12) syz_io_uring_submit(r9, r10, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)='./file0\x00'}) io_uring_enter(r8, 0xb15, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r8, &(0x7f0000000400)={0x20000004}) close(r3) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r13, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x60, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x18, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x5, "03c0ab"}, @window={0x3, 0x3}, @mss={0x1e, 0x4, 0x10}, @sack_perm={0x4, 0x2}, @generic={0x0, 0xa, "8bfbd54ae56dd076"}, @timestamp={0x8, 0xa}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0xa, "111fad2ea7434823"}, @exp_fastopen={0xfe, 0x9, 0xf989, "b43eb61a1a"}]}}}}}}}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000037c0)={0x0, 0x38, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000eaff0500000000000300", @ANYRES32=r2, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) 1m12.940246864s ago: executing program 7 (id=2011): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) ioctl$EVIOCGABS3F(r1, 0x40084503, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c, 0x800) r2 = accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0xc061, 0x6, 0x690, 0x2a8, 0xe8, 0xe8, 0x0, 0x1b8, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [0x0, 0x0, 0x0, 0xffffffff], 'veth1_to_team\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x0, 0x3a010000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010102, @ipv6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x11, 0x1d, 0x3}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast2, @mcast1, [], [], [0xffffff00]}}]}, @HL={0x28}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x2b, 0x0, 0x40, 0x53, 0xe, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffff00, 0xffffff00], [0xffffff00], [0x0, 0xffffffff, 0xffffff, 0xffffff00], 0x306, 0x1000}}, @common=@srh={{0x30}, {0x2e, 0x1, 0x17, 0x5, 0x3, 0x24c}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x56c86a0f8448d217) 1m12.720525745s ago: executing program 6 (id=2012): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$netlink(0x10, 0x3, 0x0) r4 = mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0) r5 = dup2(r4, r4) mq_notify(r5, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={&(0x7f0000000200)="ce1f23add306af92d6d182920ea918d195c2434b04739a1de7da8ef340a9c339a2cdf92c29d55dccf3c04973908fad00e1f9f395887143ff29b96da7deafc645ea57d47899cf744a5cf9693f424345713fa72e550de344aa064a3957a343c2b49468bd6d3b1464907f2348ec3c70de41f73f3d912834b7be140bda482c62d2ad47b6622311283d2c2407709a6439", &(0x7f00000003c0)="4a8152dd2d844abba75051eee46cbb31086505f3ffe977b24ac00568ca659321dc28ba3b1ade97271f3a37b4c4ae3ca4144943df7ffbe177a6c1c385219e599f4aba0fd9fa88dbcc90b0acddbf06b0cface57f641481db85f68536c004a3427b9efc44b65b0bab348557f95451d91e409e8180722906976d547bfde8ee103fdeca957790a9c8b0dd0a7d6aa247313dc5f0213a0e12de200c563a41f2a1219402c44a1571f4e338773d5e92e91e3d88de43181cae7abe17222af6afaa1f435ddbedf76bf207824ac0d50b0afb640d65fe69761c1e79427b66fc0627c4f19cd8ce5f1b54ebaa1d"}}) mq_timedsend(r4, 0x0, 0x0, 0x67b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x7, 0x1, 0x10000, 0x10, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0xf, @void, @value, @void, @value}, 0x50) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x5c, 0x12, 0x201, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "00080000d7bcd9370d"}]}, 0x5c}}, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000140)) 1m12.71803848s ago: executing program 3 (id=2013): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000740)={0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0}) 1m12.629810753s ago: executing program 0 (id=2014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a280100001d0a1fffffff000000000000010000000900010073797a30000000000c000b400000000000010000e8000980e4000280140001800800015200000080080001400000000114000180080001400000000008000140020010001c000180080001400000000508000140000000040800014000000008440001800800014000000101080001400000008008000140000000070800014000001000080001400000000408000140000000020800014000000b9b0800014000000004440001800800014000000006080001408000000108000140000003ff0800014000000001080001400000000908000140000000090800014000000008080001400000000814000180080001400000010008000140000000710c0010"], 0x150}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x31, 0x0, @val=@tcx={@void, @value}}, 0x1c) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101341) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x9}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), r4) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000080)={0x0, 'tunl0\x00', {0x4}, 0xfffb}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000001240)={0x0, 0x11, 0x2, 0x7, 0xf0, 0x1, &(0x7f0000001100)="4b9af9b5921df7b75ec9df4f6878692bf004b9265252da6c8fff231ff694c8e43a580ac1537f7d739dae97090e6f608788da0c67367af9f2dbfc6c66ee62542084f9a8c5449dbd9fed1094ce79b6865344de43d76818a1a151a51615dbdbd68fbc984eaf844e48522cf0038ffa67fded6f7ef00860302c20b783a83a1a04d70550495e24c6f6fbb56b877d5b945b83c661000dc49ca2e2c872654be6a511381abe0db8dd84c6f7837ca62ae74b5a0626ac1423d5bff880f92ae6240aa24192f14aa96d359cde02f8f5ecfc90c645f27d6bb99684ab3efc616a4504c00a12e98b8d13b4832de1d93320e62a4081209504"}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000001040)={{0x0, 0x0, 0x1000, 0x7}, 'syz1\x00', 0x22}) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) chroot(&(0x7f0000000180)='./file0\x00') prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000180)) r8 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r8, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x1, @remote, 0x1}, 0x1c) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)="4fb76dd1a02be9b3c8f35502f3bd5dcf7b5e344c0224e7cd388c7da9e600b73018e0e5fe2979d51fce9a9fb826482a4e18fea8f2e5a8550a6acc79c822825e70aff8f639ad2526b73f2601f129a56f7a243edfc39cfb08e0b23d04fc0575d1183f0914c41d6c1f5764a3627d105793638538f000f51b800db2d8d6dc0cb479800a612cd51139842e4408cb80ce6e570eca0d204530640b3e557168d382b2a3fe4baf2b310d22", 0xa6}, {&(0x7f0000000180)="9a9dafc69705ffb41df84052a7af08f71ac6ffbf1b713d45fca928fecb47dedca705fc86e0ac0a17029cf16ded2fc92635c9cd603b8885cb58597d67aa35a409a943cf3572590b17a1b9b71393a00a2c2366b8463e094febe848043aa11d05b12c245f0cbc0bba57ab31a7f908221dc25ac8ac6a6568284eec298656cde48ed5e4280050727a194022e79cab3f7ec10b9c4b4faa1ae738de689074e12633edf4239c93fbd14f588001", 0xa9}, {&(0x7f0000000280)="151971fa91e54374759ebe8d9744b9817e89a5827da2658a0e40d1d4ad855ccc6634f5892e16dd3599785736b32af1273ba1f57c4ca9a536cb5a99c1090d114ff9a694a5013a0602fb0cc7f511cb23f9be27411c13e94ed3a29defacd72233bb4d8f75885ec9d85628c722634ee1ee061d907a73e5e72e416ed98fdef71e31be8609c486302738b0", 0x88}, {&(0x7f0000000340)="5f9603f80687170bc7d7300af820b399070d2a2c68e366ae5a6527657bc7429856b73d3a95406e621fad75b9978630cbe4f4b01b97e5cc4fe8e6a579154fc1a7baa8464482d51599a9a451", 0x4b}], 0x5, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @mark={{0x14, 0x1, 0x24, 0xffffff0d}}, @txtime={{0x18, 0x1, 0x3d, 0x2e2b}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x78}}, {{&(0x7f00000004c0)=@hci={0x1f, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)="c9e2644f93d900d1451a1dc2e346de684bc13100268865413e58b2baabaed6a186029028e63c2660e79155dfa5109a7d460bc2f514cc27943b0992b743bb3776b0e5baa6f364ab71753106d5d5671f029ed97f2010efc3a4baddf9c09c40a0dba5f318ebdcda2fea8c4c5b544fd60a862a", 0x71}, {&(0x7f00000005c0)="c2f4e3bbeee4f10acd2f6a42b44ecd51b0f5a707ca66587fdc345d12c66c7d2fabb3bd9c1ffe48333f384e66261049f814edfc81c7f6b64ef78fe14449657ce6ac34d508c375c88d1daf", 0x4a}, {&(0x7f0000000640)="a9f6eee22c5ac159d9a95699b332b19f3ccf7272b2e013461be149b8b59e9639e7f40c2ade4ebaddee4f6cda85b0860e199f04341fcccd199647506bdb6d0a8cac8539a7827825bbcf4a4295cdbc638f8b3c2dfbfe3e68f9930646483a14c2f721a6590077fbe05b7f7a9a5656ee5562929edb7891570d98c6f9e6538736ce6b3a2f5e880f9e77edbc0ba6cdcbd150e8aa769fe967da4a2f03c84a8e56e6a8a7215721859afd03758e8a7e1d68a6d4d02e222ec81273a741c20085467711ac7ca68ffcef", 0xc4}, {&(0x7f0000000740)="54b0edfe1b1d2811d75a4f0757b3f1b4cec07824a3d6f28553e27f667d7e555b8cccd66b66fa85dedbae6e13d06b16c3a42a45973dfeac72bfbc4b6415", 0x3d}], 0x4, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x8001}}], 0x30}}, {{&(0x7f0000000800)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000880)="6714ff7d6bd394ac4e290c7521980545944c1b71a6a5905234a68ca670c61fe82ec615becba5fc99fd8bf76b03c13a5a75922bb3bcd139cc7677918717a2d2fc38308ed286bf8ff1eacf543aa9cef10dc07c4f356149d18e0ea2edb63c5adbd0010d77693c5b026ca02c9bb1410e31278082a419a2111616fdaade5a0e3d9a324dfa0a79ea391f644cc6ac916cbf316ad8227ea9eadc3c5c2848352df40a2dd66056096aee725b3896a1a696e0f458b83e9ba4c9178cfb46e76830ba53", 0xbd}, {&(0x7f0000000940)="9100436c032467e5d4954d8cc2d8915fd202905641220f38858d72ab06d52bd1f39a4aed0055a210ff7e946e4885d7b512060d58f8aa929289ab3a15291ee93e709c8b14ce9ab35d65394ce2adb301b53a96bfb23a07f292f5816844c487be158e8c61086e286c8709839e1c88b40f846514734993d46872628ba8a652e286e3516375570d7e2b1276cc1144b9c9420ecbaaa240b39a06abd2348809d93f08d801cda72d831b27c0de7a7d7366c368f47005419635097499b3f098761f4c9bddacb9292791c7cce561403fab1671cc266e7bf509b75333b36b930fe6a52eb652103223f6a4ca37bcd7c29e8b1b496cbf753ccf9ac2fb", 0xf6}, {&(0x7f0000000a40)="7cf52dccae5f93e79d24b4678e7ab7528d36fc8ba37c846d31eaab464e546bad1f24a3726a7fb3b7f4882a5345989ec304ab", 0x32}], 0x3, &(0x7f0000000ac0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xdc}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x90}}, {{&(0x7f0000000b80)=@qipcrtr={0x2a, 0xffffffff, 0x2}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000c00)="07e435a1143d079693bf6960e863caa2626d84a25ccd1e31cc97cca0c19cc9fa74cbd0c92a61ec416c0ae0484a84db4286d1", 0x32}], 0x1, &(0x7f0000000c80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x5b}}, @mark={{0x14, 0x1, 0x24, 0xb488}}, @mark={{0x14, 0x1, 0x24, 0xa}}], 0x60}}, {{&(0x7f0000000d00)=@pptp={0x18, 0x2, {0xfffc, @loopback}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d80)="85c40c3b31a37225aa5c9b3859a6106fd86de6f8cb94435cf2c7574ee86e0456fc4d7cc846441d82bfceb8b5963c77cf606784407659465ec578dbe6f71a6dcceca50bf5c568aa4ecd2e363bfed6e0158cb7c6c57da4786130e7443926d5c97e78aad5e465b2a0315ab09062a3d458d5359d720690a1c1e7f8319fe57fb107b1fd8c50cebce02d06b71ba500d8ad401aead80d92137ce6abb0431aeb18318744d1e4f7626c673e0922169efb6692dae7c5f7556017ce194cdc0c", 0xba}], 0x1, &(0x7f0000000e80)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x30}}], 0x5, 0x4000) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000010c0)=0x1, 0x4) 1m12.366646075s ago: executing program 3 (id=2015): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 1m12.189343445s ago: executing program 0 (id=2016): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xfede, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001500)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}}, 0x44050) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m12.151139151s ago: executing program 7 (id=2017): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_io_uring_setup(0x430d, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x3, 0x40000000}, &(0x7f0000000240)=0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m12.123777836s ago: executing program 3 (id=2018): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="1c005e800800050000000000080006"], 0x38}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85edaca03000000002eb5f354a094b4c68f7456dad4bd6cac935186aaf6"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0xe24, 0x109040) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="94010000", @ANYRES16=r8, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000180)={0x1, 0x100}) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x20, 0xfd, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x4, 0x5, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7f, 0x7, 0xa}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x403, 0x4, 0x80, 0x6, 0x10, 0x7a}, 0xd3, &(0x7f00000002c0)={0x5, 0xf, 0xd3, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "40b5b08a46e8ae3b7bac00ad6f54bf3e"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x24, 0x6d, 0x3, 0x2, 0xd}, @generic={0x88, 0x10, 0xb, "24e69dcb127f740ff6a8213a16b235a308e3c66e264c329e1f0da977adb9423a0e960bd504d24bceaa8740e3851a104352e357040dbce102877c4a1e6e91e689b77d5c04161ebfaab4a652175a8b271569ba2d398d9de411f38394606bf84946ddc02a1e9bcb6619937f980edc2a0938fe296baf9e7b07b28df584f9af0161fb8740cc66b7"}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0xff, 0xf, 0x101, [0xc0, 0x180, 0xff0000, 0x3f00, 0xcf]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x1, 0xff}]}, 0x2, [{0xbe, &(0x7f00000003c0)=@string={0xbe, 0x3, "f6d3bd5ce49ff700c4405cde4b9474a0db390591e423ebcce5db1187aa8854535585124ce5d5c443091cee5c540488808c88f5741c6fae138c73a9b7a507c5ae15a14750ab5e5cf023f6bf7b8d4a88b1f641b02762263ae34261265a8d5dc3ae314257eb343baea257917159347e5a407a4cf5a3ed287396ad7f41f69c54f25901df1b0d45da407a95c8869a9e52d3de05876a961a42f3f993e1adbd7c66e31b79943739731bfe7c4136fb9eb7544343216cc0ecf87a8845c65698ba"}}, {0x5f, &(0x7f0000000200)=@string={0x5f, 0x3, "a96065ae917fd01df4ed5a8d92a30b2263d5c0702b3dc842a541e3b676c0904858d429861062a65d55e30cfdb38a26e8ceb418b164c0b74d9dd1ec3bdf11270dc17acbd1d161948455db417c838908affe5aec08243e3cfa0ed6f97c72"}}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700383a00fe880000000000000000000000000001ff02000000000000000000000000000103009078000000050000006300003a00ff0200000000006cec6fcb6e7f8ec09600000000000000000100000000000000000000ffffac1414aa1e520b4cb51ee12e381c84dc047d638bd4775f87f137a4f8da3e57237d533847f7aead84ee29c196cc6a57bdbb49325f91924da91fe032edd88b92dee7b342f9df4bc8aa32dc3b4f36d2e3010cfe99c0fde58b98626ba448c798edcad7c3215c7fa010033dfe7618cc1a64df701557af061ddf291732149850e3aa949aaf6ed1b734"], 0x0) 1m11.913222786s ago: executing program 7 (id=2019): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000200)={0xa000000a}) finit_module(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000000100)='0:,:\x00', 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000dc0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="2764711e125e118566f395e4e725940000000000"], 0x2c}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e010000082402010202050503"], 0x0) 1m9.735834006s ago: executing program 1 (id=2020): r0 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) fstat(0xffffffffffffffff, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000140)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x1, 0x5, 0xffffffff}) io_setup(0x6, &(0x7f00000003c0)=0x0) r7 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000200)={{r7}, 0x401, 0x8, 0x5}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000300)={0x0, &(0x7f0000000280)=""/116}) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x0, @SEQ_NOTEON=@special}) ioctl$SNDCTL_TMR_TEMPO(r7, 0xc0045405, &(0x7f0000000100)=0x77) 1m8.72794176s ago: executing program 7 (id=2021): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r0, 0x200000002, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4010408}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4000041) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000f00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x4000001) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000002c0)={&(0x7f0000000240)}, 0x1, 0x0, 0x0, 0x4040014}, 0x4040048) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) r7 = gettid() r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r8, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r8, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket(0x10, 0x3, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r9, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000001c0)={r6, 0x12, "c29bc5bdc4eaa3ecb4fb9f7547b30f4c5333"}, &(0x7f0000000100)=0x1a) 1m8.653302022s ago: executing program 3 (id=2022): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x18, &(0x7f0000000080), 0x8) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000006240)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x90, 0x0, 0x5, {0x1, 0x1, 0xfffffffffefffffd, 0xb56, 0xfffffe00, 0x0, {0x6, 0x0, 0x80000000, 0x80000000, 0x6, 0x0, 0x3ec, 0x80000001, 0xfffffffe, 0x8000, 0x0, r3, 0x0, 0xfffffffc, 0x812}}}, 0x0, 0x0, 0x0, 0x0}) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f00000001c0)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x2088}}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c8, 0x2e0, 0x9403, 0x3002, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) r5 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19\x15\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93\xb5\xaa\xe6\x05\x04\x00\x00\x00\x00\x00\x00\x00\xaa\t9$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0)`\x0eq.+[\x00\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\xadN\x8c\x1d\xc5\xca\xa9\x01\x84\\/y\xfb\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\x00'/385, 0x6) fallocate(r5, 0x300, 0x200000000000, 0x400001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup, 0x11, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) getpid() 1m8.594341216s ago: executing program 1 (id=2023): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet_tcp(0x2, 0x1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000240), &(0x7f00000003c0)=r10}, 0x20) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r11, 0x3b86, &(0x7f0000000040)={0x18, r12, 0x2}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r6, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x5a, &(0x7f0000000340)={@multicast, @remote, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "ec7ab49f42266b558197758939c3a67064eb2413deb6d588b153902f5348321b2aa24fcea6549a091e651e6c1d3053eef4b8f189054244df8c1353433e834d4c"}}}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) 1m8.593586156s ago: executing program 7 (id=2024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) gettid() syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000001bc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000001cc0)=@string={0x2}}, {0x6, &(0x7f0000001d80)=@string={0x6, 0x3, "62da85da"}}]}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0) writev(r0, &(0x7f0000001580)=[{&(0x7f0000000140)='Q', 0x1}, {0x0}], 0x2) close_range(r0, r0, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x3a, &(0x7f0000000ac0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x2}]}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) setxattr$security_ima(0x0, &(0x7f0000000100), &(0x7f0000000180)=ANY=[], 0x8, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000380)={0x980914, 0x6, "bf79ab49d3eab05ba8f3d821da1e4a93f69292f8a89563f67327a6fb21508937", 0x8, 0x9, 0xffff108b, 0x2, 0x247}) r5 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000)=0x100) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000d8, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r6}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe3, 0xe1, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4008, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r8, 0x0, &(0x7f0000000180)=""/78}, 0x20) 1m8.428809171s ago: executing program 3 (id=2025): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x9004) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x0, 0x2000, 0x0, 0x54a, 0xfff}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff}}]}]}}}]}, 0x64}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f0000000380)="44c394f305916c4516999da22f02", 0xe, 0x10000000, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) 1m8.313668376s ago: executing program 0 (id=2026): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) unshare(0x22020400) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, 0x0) 1m8.223199345s ago: executing program 6 (id=2027): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) ioctl$EVIOCGABS3F(r2, 0x40084503, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c, 0x800) r3 = accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0xc061, 0x6, 0x690, 0x2a8, 0xe8, 0xe8, 0x0, 0x1b8, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [0x0, 0x0, 0x0, 0xffffffff], 'veth1_to_team\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x0, 0x3a010000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010102, @ipv6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x11, 0x1d, 0x3}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast2, @mcast1, [], [], [0xffffff00]}}]}, @HL={0x28}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x2b, 0x0, 0x40, 0x53, 0xe, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffff00, 0xffffff00], [0xffffff00], [0x0, 0xffffffff, 0xffffff, 0xffffff00], 0x306, 0x1000}}, @common=@srh={{0x30}, {0x2e, 0x1, 0x17, 0x5, 0x3, 0x24c}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x56c86a0f8448d217) 1m8.143013993s ago: executing program 0 (id=2028): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@broadcast, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @extra_flags={0x8, 0x18, 0x5}]}, 0x140}}, 0x0) syz_usb_connect(0x6, 0xfb, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x99, 0xe3, 0xbe, 0x8, 0x12d1, 0x3370, 0x864, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe9, 0x1, 0x7f, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0x35, 0x0, 0x0, 0xff, 0x1, 0x6e, 0x0, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x870, 0x80, 0x5, "31fb4ba0c9db19"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf, 0x3, 0x7, 0x5, "d366"}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "1c322c877cb2"}, {0x5, 0x24, 0x0, 0xfbff}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x2, 0x2c24, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0xf8, 0x0, 0x0, 0xf9}, @mdlm={0x15, 0x24, 0x12, 0x7}, @country_functional={0xe, 0x24, 0x7, 0x0, 0x0, [0x7fff, 0x5, 0x235, 0x40]}, @obex={0x5, 0x24, 0x15, 0x1}, @mdlm_detail={0x6c, 0x24, 0x13, 0x8, "0bb1549e0f11ac2e32f867a0a338edccda55e1fd6f4471e60c3cd66d41462a0509dd525017cff7ad2cc6886025201d3312eafafaafff2041ab9b8fff9590c334b7053eb85c6af231cb7a1ae9b919923ed30f0ff94e7528b2521db56ebe957fb0d11a9d628ea9db7c"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}]}]}}]}}]}}, 0x0) 1m7.884642893s ago: executing program 6 (id=2029): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_io_uring_setup(0x430d, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x3, 0x40000000}, &(0x7f0000000240)=0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m7.753320905s ago: executing program 6 (id=2030): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) ftruncate(0xffffffffffffffff, 0xffffffffffff9a3b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001024250000000000000000000000000a20000000000a01"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 34.480883463s ago: executing program 35 (id=2028): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@broadcast, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @extra_flags={0x8, 0x18, 0x5}]}, 0x140}}, 0x0) syz_usb_connect(0x6, 0xfb, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x99, 0xe3, 0xbe, 0x8, 0x12d1, 0x3370, 0x864, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe9, 0x1, 0x7f, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0x35, 0x0, 0x0, 0xff, 0x1, 0x6e, 0x0, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x870, 0x80, 0x5, "31fb4ba0c9db19"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf, 0x3, 0x7, 0x5, "d366"}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "1c322c877cb2"}, {0x5, 0x24, 0x0, 0xfbff}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x2, 0x2c24, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0xf8, 0x0, 0x0, 0xf9}, @mdlm={0x15, 0x24, 0x12, 0x7}, @country_functional={0xe, 0x24, 0x7, 0x0, 0x0, [0x7fff, 0x5, 0x235, 0x40]}, @obex={0x5, 0x24, 0x15, 0x1}, @mdlm_detail={0x6c, 0x24, 0x13, 0x8, "0bb1549e0f11ac2e32f867a0a338edccda55e1fd6f4471e60c3cd66d41462a0509dd525017cff7ad2cc6886025201d3312eafafaafff2041ab9b8fff9590c334b7053eb85c6af231cb7a1ae9b919923ed30f0ff94e7528b2521db56ebe957fb0d11a9d628ea9db7c"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}]}]}}]}}]}}, 0x0) 34.352714355s ago: executing program 36 (id=2023): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet_tcp(0x2, 0x1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000240), &(0x7f00000003c0)=r10}, 0x20) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r11, 0x3b86, &(0x7f0000000040)={0x18, r12, 0x2}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r6, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x5a, &(0x7f0000000340)={@multicast, @remote, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "ec7ab49f42266b558197758939c3a67064eb2413deb6d588b153902f5348321b2aa24fcea6549a091e651e6c1d3053eef4b8f189054244df8c1353433e834d4c"}}}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) 34.304941636s ago: executing program 37 (id=2024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) gettid() syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000001bc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000001cc0)=@string={0x2}}, {0x6, &(0x7f0000001d80)=@string={0x6, 0x3, "62da85da"}}]}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0) writev(r0, &(0x7f0000001580)=[{&(0x7f0000000140)='Q', 0x1}, {0x0}], 0x2) close_range(r0, r0, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x3a, &(0x7f0000000ac0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x2}]}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) setxattr$security_ima(0x0, &(0x7f0000000100), &(0x7f0000000180)=ANY=[], 0x8, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000380)={0x980914, 0x6, "bf79ab49d3eab05ba8f3d821da1e4a93f69292f8a89563f67327a6fb21508937", 0x8, 0x9, 0xffff108b, 0x2, 0x247}) r5 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000)=0x100) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000d8, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r6}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe3, 0xe1, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4008, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r8, 0x0, &(0x7f0000000180)=""/78}, 0x20) 34.134736355s ago: executing program 38 (id=2025): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x9004) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x0, 0x2000, 0x0, 0x54a, 0xfff}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff}}]}]}}}]}, 0x64}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f0000000380)="44c394f305916c4516999da22f02", 0xe, 0x10000000, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) 33.743381642s ago: executing program 39 (id=2030): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) ftruncate(0xffffffffffffffff, 0xffffffffffff9a3b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001024250000000000000000000000000a20000000000a01"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 20.559478511s ago: executing program 5 (id=2035): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) recvmmsg(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x2fd}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000016c0)=""/77, 0x4d}, {&(0x7f0000001880)=""/178, 0xb2}, {&(0x7f0000001940)=""/4118, 0x1016}, {&(0x7f0000000640)=""/228, 0xe4}, {&(0x7f0000001740)=""/180, 0xb4}, {&(0x7f0000002ac0)=""/214, 0xd6}, {&(0x7f0000000300)=""/170, 0xaa}], 0x7}, 0x1}], 0x3, 0x40000002, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x75, 0x0, 0x0, 0x0, 0xfffffffffffffe94}, 0xffff}, {{0x0, 0x900, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6e5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffded}, 0x8001}, {{0x0, 0x0, 0x0}, 0x80000002}], 0x5db, 0x2000, 0x0) 19.299463469s ago: executing program 4 (id=2034): r0 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) fstat(0xffffffffffffffff, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000140)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x1, 0x5, 0xffffffff}) io_setup(0x6, &(0x7f00000003c0)=0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000300)={0x0, &(0x7f0000000280)=""/116}) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x0, @SEQ_NOTEON=@special}) ioctl$SNDCTL_TMR_TEMPO(r7, 0xc0045405, &(0x7f0000000100)=0x77) 18.381723441s ago: executing program 5 (id=2035): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) recvmmsg(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x2fd}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000016c0)=""/77, 0x4d}, {&(0x7f0000001880)=""/178, 0xb2}, {&(0x7f0000001940)=""/4118, 0x1016}, {&(0x7f0000000640)=""/228, 0xe4}, {&(0x7f0000001740)=""/180, 0xb4}, {&(0x7f0000002ac0)=""/214, 0xd6}, {&(0x7f0000000300)=""/170, 0xaa}], 0x7}, 0x1}], 0x3, 0x40000002, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x75, 0x0, 0x0, 0x0, 0xfffffffffffffe94}, 0xffff}, {{0x0, 0x900, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6e5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffded}, 0x8001}, {{0x0, 0x0, 0x0}, 0x80000002}], 0x5db, 0x2000, 0x0) 16.888942798s ago: executing program 4 (id=2034): r0 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) fstat(0xffffffffffffffff, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000140)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x1, 0x5, 0xffffffff}) io_setup(0x6, &(0x7f00000003c0)=0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000300)={0x0, &(0x7f0000000280)=""/116}) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x0, @SEQ_NOTEON=@special}) ioctl$SNDCTL_TMR_TEMPO(r7, 0xc0045405, &(0x7f0000000100)=0x77) 15.272974735s ago: executing program 5 (id=2035): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) recvmmsg(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x2fd}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000016c0)=""/77, 0x4d}, {&(0x7f0000001880)=""/178, 0xb2}, {&(0x7f0000001940)=""/4118, 0x1016}, {&(0x7f0000000640)=""/228, 0xe4}, {&(0x7f0000001740)=""/180, 0xb4}, {&(0x7f0000002ac0)=""/214, 0xd6}, {&(0x7f0000000300)=""/170, 0xaa}], 0x7}, 0x1}], 0x3, 0x40000002, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x75, 0x0, 0x0, 0x0, 0xfffffffffffffe94}, 0xffff}, {{0x0, 0x900, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6e5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffded}, 0x8001}, {{0x0, 0x0, 0x0}, 0x80000002}], 0x5db, 0x2000, 0x0) 14.375740314s ago: executing program 4 (id=2034): r0 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) fstat(0xffffffffffffffff, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000140)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x1, 0x5, 0xffffffff}) io_setup(0x6, &(0x7f00000003c0)=0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000300)={0x0, &(0x7f0000000280)=""/116}) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x0, @SEQ_NOTEON=@special}) ioctl$SNDCTL_TMR_TEMPO(r7, 0xc0045405, &(0x7f0000000100)=0x77) 13.5805602s ago: executing program 9 (id=2032): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000280)="2f1537a8574fa7cd", 0x8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x1}, 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x4161, 0x0) 12.899331305s ago: executing program 2 (id=2033): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff0000000071101d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x44240, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="d457236d2c99e375e756a444c436978060e51c91f9ce7866dc6e9a41be13ea3da79a1e46462b0851853022cb152d1a42e9f087e794baddd5c189bbbcb0fc69b38df50e85740c4822fa741e1980bf6d7232114f3a38c5ecf129e97153c66aa8366fe317367b7fbe5ea24c304ab986000000000000000a00"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 12.215771617s ago: executing program 5 (id=2035): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) recvmmsg(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x2fd}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000016c0)=""/77, 0x4d}, {&(0x7f0000001880)=""/178, 0xb2}, {&(0x7f0000001940)=""/4118, 0x1016}, {&(0x7f0000000640)=""/228, 0xe4}, {&(0x7f0000001740)=""/180, 0xb4}, {&(0x7f0000002ac0)=""/214, 0xd6}, {&(0x7f0000000300)=""/170, 0xaa}], 0x7}, 0x1}], 0x3, 0x40000002, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x75, 0x0, 0x0, 0x0, 0xfffffffffffffe94}, 0xffff}, {{0x0, 0x900, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6e5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffded}, 0x8001}, {{0x0, 0x0, 0x0}, 0x80000002}], 0x5db, 0x2000, 0x0) 11.612043981s ago: executing program 8 (id=2031): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000200)={0xa000000a}) finit_module(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000dc0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="2764711e125e118566f395e4e725940000000000"], 0x2c}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e010000082402010202050503"], 0x0) 11.128652568s ago: executing program 9 (id=2032): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000280)="2f1537a8574fa7cd", 0x8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x1}, 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x4161, 0x0) 10.51373564s ago: executing program 2 (id=2033): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff0000000071101d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x44240, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="d457236d2c99e375e756a444c436978060e51c91f9ce7866dc6e9a41be13ea3da79a1e46462b0851853022cb152d1a42e9f087e794baddd5c189bbbcb0fc69b38df50e85740c4822fa741e1980bf6d7232114f3a38c5ecf129e97153c66aa8366fe317367b7fbe5ea24c304ab986000000000000000a00"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 10.07884087s ago: executing program 4 (id=2034): r0 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) fstat(0xffffffffffffffff, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000140)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x1, 0x5, 0xffffffff}) io_setup(0x6, &(0x7f00000003c0)=0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000300)={0x0, &(0x7f0000000280)=""/116}) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x0, @SEQ_NOTEON=@special}) ioctl$SNDCTL_TMR_TEMPO(r7, 0xc0045405, &(0x7f0000000100)=0x77) 9.527587746s ago: executing program 8 (id=2031): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000200)={0xa000000a}) finit_module(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000dc0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="2764711e125e118566f395e4e725940000000000"], 0x2c}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e010000082402010202050503"], 0x0) 8.881161772s ago: executing program 9 (id=2032): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000280)="2f1537a8574fa7cd", 0x8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x1}, 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x4161, 0x0) 8.2275133s ago: executing program 2 (id=2033): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff0000000071101d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x44240, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="d457236d2c99e375e756a444c436978060e51c91f9ce7866dc6e9a41be13ea3da79a1e46462b0851853022cb152d1a42e9f087e794baddd5c189bbbcb0fc69b38df50e85740c4822fa741e1980bf6d7232114f3a38c5ecf129e97153c66aa8366fe317367b7fbe5ea24c304ab986000000000000000a00"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 7.681326505s ago: executing program 5 (id=2035): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) recvmmsg(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x2fd}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000016c0)=""/77, 0x4d}, {&(0x7f0000001880)=""/178, 0xb2}, {&(0x7f0000001940)=""/4118, 0x1016}, {&(0x7f0000000640)=""/228, 0xe4}, {&(0x7f0000001740)=""/180, 0xb4}, {&(0x7f0000002ac0)=""/214, 0xd6}, {&(0x7f0000000300)=""/170, 0xaa}], 0x7}, 0x1}], 0x3, 0x40000002, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x75, 0x0, 0x0, 0x0, 0xfffffffffffffe94}, 0xffff}, {{0x0, 0x900, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6e5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffded}, 0x8001}, {{0x0, 0x0, 0x0}, 0x80000002}], 0x5db, 0x2000, 0x0) 6.952019933s ago: executing program 8 (id=2031): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000200)={0xa000000a}) finit_module(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000dc0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="2764711e125e118566f395e4e725940000000000"], 0x2c}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e010000082402010202050503"], 0x0) 6.348467525s ago: executing program 9 (id=2032): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000280)="2f1537a8574fa7cd", 0x8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x1}, 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x4161, 0x0) 5.758571278s ago: executing program 2 (id=2033): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff0000000071101d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x44240, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="d457236d2c99e375e756a444c436978060e51c91f9ce7866dc6e9a41be13ea3da79a1e46462b0851853022cb152d1a42e9f087e794baddd5c189bbbcb0fc69b38df50e85740c4822fa741e1980bf6d7232114f3a38c5ecf129e97153c66aa8366fe317367b7fbe5ea24c304ab986000000000000000a00"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 5.158263726s ago: executing program 4 (id=2034): r0 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) fstat(0xffffffffffffffff, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000140)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x1, 0x5, 0xffffffff}) io_setup(0x6, &(0x7f00000003c0)=0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000300)={0x0, &(0x7f0000000280)=""/116}) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x0, @SEQ_NOTEON=@special}) ioctl$SNDCTL_TMR_TEMPO(r7, 0xc0045405, &(0x7f0000000100)=0x77) 4.654062304s ago: executing program 8 (id=2031): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000200)={0xa000000a}) finit_module(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000dc0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="2764711e125e118566f395e4e725940000000000"], 0x2c}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e010000082402010202050503"], 0x0) 4.120490873s ago: executing program 9 (id=2032): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000280)="2f1537a8574fa7cd", 0x8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x1}, 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x4161, 0x0) 3.507927766s ago: executing program 2 (id=2033): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff0000000071101d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x44240, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="d457236d2c99e375e756a444c436978060e51c91f9ce7866dc6e9a41be13ea3da79a1e46462b0851853022cb152d1a42e9f087e794baddd5c189bbbcb0fc69b38df50e85740c4822fa741e1980bf6d7232114f3a38c5ecf129e97153c66aa8366fe317367b7fbe5ea24c304ab986000000000000000a00"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2.88614257s ago: executing program 5 (id=2035): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) recvmmsg(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x2fd}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000016c0)=""/77, 0x4d}, {&(0x7f0000001880)=""/178, 0xb2}, {&(0x7f0000001940)=""/4118, 0x1016}, {&(0x7f0000000640)=""/228, 0xe4}, {&(0x7f0000001740)=""/180, 0xb4}, {&(0x7f0000002ac0)=""/214, 0xd6}, {&(0x7f0000000300)=""/170, 0xaa}], 0x7}, 0x1}], 0x3, 0x40000002, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x75, 0x0, 0x0, 0x0, 0xfffffffffffffe94}, 0xffff}, {{0x0, 0x900, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6e5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffded}, 0x8001}, {{0x0, 0x0, 0x0}, 0x80000002}], 0x5db, 0x2000, 0x0) 2.310125283s ago: executing program 8 (id=2031): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000200)={0xa000000a}) finit_module(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000dc0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="2764711e125e118566f395e4e725940000000000"], 0x2c}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e010000082402010202050503"], 0x0) 1.630980804s ago: executing program 9 (id=2032): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000280)="2f1537a8574fa7cd", 0x8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x1}, 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x4161, 0x0) 1.060631678s ago: executing program 2 (id=2033): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff0000000071101d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x44240, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="d457236d2c99e375e756a444c436978060e51c91f9ce7866dc6e9a41be13ea3da79a1e46462b0851853022cb152d1a42e9f087e794baddd5c189bbbcb0fc69b38df50e85740c4822fa741e1980bf6d7232114f3a38c5ecf129e97153c66aa8366fe317367b7fbe5ea24c304ab986000000000000000a00"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 459.600094ms ago: executing program 4 (id=2034): r0 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) fstat(0xffffffffffffffff, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000140)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x1, 0x5, 0xffffffff}) io_setup(0x6, &(0x7f00000003c0)=0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000300)={0x0, &(0x7f0000000280)=""/116}) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x0, @SEQ_NOTEON=@special}) ioctl$SNDCTL_TMR_TEMPO(r7, 0xc0045405, &(0x7f0000000100)=0x77) 0s ago: executing program 8 (id=2031): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000200)={0xa000000a}) finit_module(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000dc0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="2764711e125e118566f395e4e725940000000000"], 0x2c}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e010000082402010202050503"], 0x0) kernel console output (not intermixed with test programs): ode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.970776][T11967] RSP: 002b:00007f75d0be0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.979215][T11967] RAX: ffffffffffffffda RBX: 00007f75cff36058 RCX: 00007f75cfd7e719 [ 588.987201][T11967] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000006 [ 588.995186][T11967] RBP: 00007f75d0be0090 R08: 0000000000000000 R09: 0000000000000000 [ 589.003170][T11967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.011149][T11967] R13: 0000000000000000 R14: 00007f75cff36058 R15: 00007ffebad73728 [ 589.019160][T11967] [ 589.050896][ T5875] ath6kl: Failed to submit usb control message: -71 [ 589.055092][T11968] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 589.085545][ T5875] ath6kl: unable to send the bmi data to the device: -71 [ 589.112266][ T5875] ath6kl: Unable to send get target info: -71 [ 589.155309][ T5875] ath6kl: Failed to init ath6kl core: -71 [ 589.193561][ T5875] ath6kl_usb 6-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 589.244936][ T5875] usb 6-1: USB disconnect, device number 36 [ 589.318695][ T29] audit: type=1326 audit(1730303154.208:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11975 comm="syz.5.1663" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fceb017e719 code=0x0 [ 589.780475][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1664'. [ 590.493287][ T3067] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 590.729609][ T3067] usb 4-1: config 0 has an invalid interface number: 170 but max is 0 [ 590.806895][ T3067] usb 4-1: config 0 has no interface number 0 [ 590.952894][ T3067] usb 4-1: config 0 interface 170 altsetting 68 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.996282][ T29] audit: type=1326 audit(1730303155.888:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12001 comm="syz.5.1673" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fceb017e719 code=0x0 [ 590.997506][ T3067] usb 4-1: config 0 interface 170 altsetting 68 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.029724][ T3067] usb 4-1: config 0 interface 170 has no altsetting 0 [ 591.036865][ T3067] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 591.046646][ T3067] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.060806][ T3067] usb 4-1: config 0 descriptor?? [ 591.352844][ T9] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 591.482417][ T3067] uclogic 0003:5543:004D.000A: interface is invalid, ignoring [ 591.504941][ T9] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 591.522782][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 591.540750][ T9] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 591.554861][ T9] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 591.566270][ T9] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 591.580141][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 591.587675][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1677'. [ 591.595437][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 591.606122][ T9] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 591.614832][ T9] usb 6-1: Product: syz [ 591.619034][ T9] usb 6-1: Manufacturer: syz [ 591.627325][ T9] usb 6-1: SerialNumber: syz [ 591.637664][ T9] usb 6-1: config 0 descriptor?? [ 591.653609][T12005] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 591.665956][ T9] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 591.698681][ T9] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 592.401569][T12025] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 593.174982][ T5875] usb 4-1: USB disconnect, device number 53 [ 593.303416][ T3067] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 593.345907][T12038] fuse: Invalid rootmode [ 593.506069][ T3067] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 593.523103][ T3067] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.547294][ T3067] usb 2-1: config 0 has no interface number 0 [ 593.558930][ T3067] usb 2-1: config 0 interface 64 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 593.582292][ T3067] usb 2-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 594.093447][ T3067] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 594.140044][ T3067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=75 [ 594.147224][ T9] usb 6-1: USB disconnect, device number 37 [ 594.148538][ T3067] usb 2-1: Product: syz [ 594.158322][ T3067] usb 2-1: Manufacturer: syz [ 594.163603][ T3067] usb 2-1: SerialNumber: syz [ 594.168592][ T9] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 594.181108][ T3067] usb 2-1: config 0 descriptor?? [ 594.240597][ T3067] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 594.298180][T12056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1688'. [ 594.402345][ T62] usb 2-1: Failed to submit usb control message: -71 [ 594.410197][ T3067] usb 2-1: USB disconnect, device number 49 [ 594.417002][ T62] usb 2-1: unable to send the bmi data to the device: -71 [ 594.438776][ T62] usb 2-1: unable to get target info from device [ 594.484752][ T62] usb 2-1: could not get target info (-71) [ 594.777374][ T62] usb 2-1: could not probe fw (-71) [ 595.581509][T12075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1692'. [ 595.892989][ T3067] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 596.064723][ T3067] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 596.169181][ T3067] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 596.202896][ T3067] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 596.245400][ T3067] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 596.276650][ T3067] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 596.330923][ T3067] usb 4-1: config 0 interface 0 has no altsetting 0 [ 596.361336][ T3067] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 596.381187][ T3067] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 596.401539][ T3067] usb 4-1: Product: syz [ 596.417393][ T3067] usb 4-1: Manufacturer: syz [ 596.427246][ T3067] usb 4-1: SerialNumber: syz [ 596.442737][ T3067] usb 4-1: config 0 descriptor?? [ 596.454275][T12074] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 596.484926][ T3067] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 596.512450][ T3067] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 597.889794][T12120] trusted_key: syz.6.1707 sent an empty control message without MSG_MORE. [ 597.981925][T12125] tmpfs: Unknown parameter 'h' [ 598.952039][T12120] ceph: No mds server is up or the cluster is laggy [ 598.960646][ T3067] libceph: connect (1)[c::]:6789 error -101 [ 598.969294][ T3067] libceph: mon0 (1)[c::]:6789 connect error [ 598.991216][ T5875] usb 4-1: USB disconnect, device number 54 [ 598.999273][ T5875] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 599.191668][T12137] vlan2: entered promiscuous mode [ 599.213099][T12137] team0: entered promiscuous mode [ 599.223591][T12137] team_slave_0: entered promiscuous mode [ 599.238917][T12137] team_slave_1: entered promiscuous mode [ 599.522984][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1714'. [ 599.788562][T12152] libceph: resolve '0' (ret=-3): failed [ 599.989656][T12155] fuse: Bad value for 'fd' [ 600.136476][ T5875] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 600.342670][ T5875] usb 7-1: Using ep0 maxpacket: 16 [ 600.355053][ T5875] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 600.375667][ T5875] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.468406][ T6778] bond0: (slave syz_tun): Releasing backup interface [ 600.615097][ T5875] usb 7-1: config 0 has no interface number 0 [ 600.624367][ T5875] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 600.633626][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.642501][ T5875] usb 7-1: Product: syz [ 600.646874][ T5875] usb 7-1: Manufacturer: syz [ 600.651520][ T5875] usb 7-1: SerialNumber: syz [ 600.658446][ T5875] usb 7-1: config 0 descriptor?? [ 600.851322][T12172] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 600.949348][ T7338] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.142448][ T7338] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.287013][ T7338] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.597148][ T7338] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.800041][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 601.813708][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 601.822813][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 601.832956][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 601.843191][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 601.852329][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 601.870456][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 601.878066][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 601.909183][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 601.926388][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 601.947761][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 601.955744][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 602.568485][ T5889] usb 7-1: USB disconnect, device number 14 [ 602.748071][T12188] lo speed is unknown, defaulting to 1000 [ 602.792146][ T7338] bridge_slave_1: left allmulticast mode [ 602.803138][ T7338] bridge_slave_1: left promiscuous mode [ 602.808938][ T7338] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.849565][ T7338] bridge_slave_0: left allmulticast mode [ 602.860002][ T7338] bridge_slave_0: left promiscuous mode [ 602.887971][ T7338] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.066675][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1729'. [ 603.375491][T12210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.485348][T12210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.062491][ T5850] Bluetooth: hci0: command tx timeout [ 604.377486][T12216] Falling back ldisc for pts0. [ 604.542498][ T7338] bond0 (unregistering): left promiscuous mode [ 604.551368][ T7338] bond_slave_1: left promiscuous mode [ 604.563537][ T7338] team0: Port device bond0 removed [ 604.570949][ T7338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.586155][ T7338] bond0 (unregistering): Released all slaves [ 604.600431][ T7338] ÿÿÿÿ (unregistering): Released all slaves [ 604.618102][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1729'. [ 605.605865][ T7338] tipc: Left network mode [ 606.855738][ T5850] Bluetooth: hci0: command 0x041b tx timeout [ 607.112819][T12188] chnl_net:caif_netlink_parms(): no params data found [ 608.784560][T12268] FAULT_INJECTION: forcing a failure. [ 608.784560][T12268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.806336][T12268] CPU: 0 UID: 0 PID: 12268 Comm: syz.1.1745 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 608.812203][T12188] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.817144][T12268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 608.817164][T12268] Call Trace: [ 608.817173][T12268] [ 608.817184][T12268] dump_stack_lvl+0x241/0x360 [ 608.817221][T12268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 608.817251][T12268] ? __pfx__printk+0x10/0x10 [ 608.817284][T12268] ? snprintf+0xda/0x120 [ 608.817317][T12268] should_fail_ex+0x3b0/0x4e0 [ 608.817348][T12268] _copy_to_user+0x31/0xb0 [ 608.817386][T12268] simple_read_from_buffer+0xca/0x150 [ 608.817420][T12268] proc_fail_nth_read+0x1e9/0x250 [ 608.826084][T12188] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.834522][T12268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 608.834565][T12268] ? rw_verify_area+0x568/0x6f0 [ 608.834592][T12268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 608.834623][T12268] vfs_read+0x1fc/0xb70 [ 608.834654][T12268] ? fdget_pos+0x24e/0x320 [ 608.834687][T12268] ? __pfx_vfs_read+0x10/0x10 [ 608.834720][T12268] ? __fget_files+0x3f3/0x470 [ 608.834759][T12268] ? fdget_pos+0x24e/0x320 [ 608.834794][T12268] ksys_read+0x183/0x2b0 [ 608.834825][T12268] ? __pfx_ksys_read+0x10/0x10 [ 608.834854][T12268] ? do_syscall_64+0x100/0x230 [ 608.834884][T12268] ? do_syscall_64+0xb6/0x230 [ 608.838702][T12188] bridge_slave_0: entered allmulticast mode [ 608.841125][T12268] do_syscall_64+0xf3/0x230 [ 608.847621][T12188] bridge_slave_0: entered promiscuous mode [ 608.850977][T12268] ? clear_bhb_loop+0x35/0x90 [ 608.857797][T12188] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.859792][T12268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.864874][T12188] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.868862][T12268] RIP: 0033:0x7fa900f7d15c [ 608.874499][T12188] bridge_slave_1: entered allmulticast mode [ 608.879250][T12268] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 608.887529][T12188] bridge_slave_1: entered promiscuous mode [ 608.891797][T12268] RSP: 002b:00007fa901cad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 609.028210][T12268] RAX: ffffffffffffffda RBX: 00007fa901135f80 RCX: 00007fa900f7d15c [ 609.036196][T12268] RDX: 000000000000000f RSI: 00007fa901cad0a0 RDI: 0000000000000003 [ 609.044182][T12268] RBP: 00007fa901cad090 R08: 0000000000000000 R09: 0000000000000000 [ 609.052167][T12268] R10: 0000000000002040 R11: 0000000000000246 R12: 0000000000000001 [ 609.060147][T12268] R13: 0000000000000000 R14: 00007fa901135f80 R15: 00007fff19af7228 [ 609.068155][T12268] [ 609.073686][ T5844] Bluetooth: hci0: command 0x041b tx timeout [ 609.212935][ T9] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 609.261936][T12188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.281401][T12188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.313471][ T7338] hsr_slave_0: left promiscuous mode [ 609.320994][ T7338] hsr_slave_1: left promiscuous mode [ 609.328510][ T7338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.336644][ T7338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.346054][ T7338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.358094][ T7338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.382891][ T9] usb 4-1: device descriptor read/64, error -71 [ 609.398227][ T7338] team0: left promiscuous mode [ 609.404351][ T7338] team_slave_0: left promiscuous mode [ 609.409877][ T7338] team_slave_1: left promiscuous mode [ 609.420059][T12281] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 609.431099][ T7338] veth1_macvtap: left promiscuous mode [ 609.449499][T12282] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 609.457121][ T7338] veth0_macvtap: left promiscuous mode [ 609.463792][ T7338] veth1_vlan: left promiscuous mode [ 609.473502][T12282] PKCS7: Only support pkcs7_signedData type [ 609.482338][ T7338] veth0_vlan: left promiscuous mode [ 609.622903][ T9] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 609.752780][ T9] usb 4-1: device descriptor read/64, error -71 [ 610.662229][ T9] usb usb4-port1: attempt power cycle [ 611.377784][ T5844] Bluetooth: hci0: command 0x041b tx timeout [ 612.149818][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1753'. [ 612.342094][T12301] FAULT_INJECTION: forcing a failure. [ 612.342094][T12301] name failslab, interval 1, probability 0, space 0, times 0 [ 612.355981][T12301] CPU: 1 UID: 0 PID: 12301 Comm: syz.0.1754 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 612.366811][T12301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 612.376924][T12301] Call Trace: [ 612.380250][T12301] [ 612.383243][T12301] dump_stack_lvl+0x241/0x360 [ 612.387994][T12301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.393259][T12301] ? __pfx__printk+0x10/0x10 [ 612.397909][T12301] ? __kmalloc_node_noprof+0xb7/0x440 [ 612.403349][T12301] ? __pfx___might_resched+0x10/0x10 [ 612.408705][T12301] should_fail_ex+0x3b0/0x4e0 [ 612.413443][T12301] should_failslab+0xac/0x100 [ 612.418190][T12301] __kmalloc_node_noprof+0xdf/0x440 [ 612.423447][T12301] ? __kvmalloc_node_noprof+0x72/0x190 [ 612.429015][T12301] ? hash_ipportnet_create+0x2fa/0x1040 [ 612.434628][T12301] __kvmalloc_node_noprof+0x72/0x190 [ 612.440002][T12301] hash_ipportnet_create+0x3de/0x1040 [ 612.445469][T12301] ? __pfx_hash_ipportnet_create+0x10/0x10 [ 612.451351][T12301] ip_set_create+0xa5c/0x1900 [ 612.456085][T12301] ? ip_set_create+0x45e/0x1900 [ 612.460991][T12301] ? trace_raw_output_contention_end+0x42/0xd0 [ 612.467215][T12301] ? __pfx_ip_set_create+0x10/0x10 [ 612.472377][T12301] ? trace_contention_end+0x3c/0x120 [ 612.477754][T12301] ? nfnetlink_rcv_msg+0x225/0x1180 [ 612.483016][T12301] nfnetlink_rcv_msg+0xbec/0x1180 [ 612.488105][T12301] ? nfnetlink_rcv_msg+0x225/0x1180 [ 612.493384][T12301] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 612.498993][T12301] netlink_rcv_skb+0x1e3/0x430 [ 612.503817][T12301] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 612.509337][T12301] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 612.514659][T12301] ? __sanitizer_cov_trace_pc+0x37/0x70 [ 612.520239][T12301] ? bpf_lsm_capable+0x9/0x10 [ 612.524961][T12301] ? security_capable+0x7e/0x2d0 [ 612.529922][T12301] nfnetlink_rcv+0x297/0x2ab0 [ 612.534629][T12301] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 612.540634][T12301] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 612.547022][T12301] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 612.552945][T12301] ? lockdep_hardirqs_on+0x99/0x150 [ 612.558156][T12301] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 612.563284][T12301] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 612.569204][T12301] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 612.575592][T12301] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 612.582214][T12301] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 612.589176][T12301] ? rcu_is_watching+0x15/0xb0 [ 612.593985][T12301] ? rcu_read_unlock_special+0x497/0x570 [ 612.599635][T12301] ? netlink_deliver_tap+0x2e/0x1b0 [ 612.604931][T12301] ? skb_clone+0x240/0x390 [ 612.609365][T12301] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 612.615361][T12301] ? __netlink_deliver_tap+0x77e/0x7c0 [ 612.620851][T12301] ? __rcu_read_unlock+0xa1/0x110 [ 612.625897][T12301] netlink_unicast+0x7f6/0x990 [ 612.630687][T12301] ? __pfx_netlink_unicast+0x10/0x10 [ 612.636014][T12301] ? __check_object_size+0x48e/0x900 [ 612.641324][T12301] netlink_sendmsg+0x8e4/0xcb0 [ 612.646111][T12301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.651419][T12301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.656746][T12301] __sock_sendmsg+0x221/0x270 [ 612.661450][T12301] ____sys_sendmsg+0x52a/0x7e0 [ 612.666242][T12301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 612.671556][T12301] __sys_sendmsg+0x292/0x380 [ 612.676204][T12301] ? __pfx___sys_sendmsg+0x10/0x10 [ 612.681380][T12301] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 612.687730][T12301] ? do_syscall_64+0x100/0x230 [ 612.692549][T12301] ? do_syscall_64+0xb6/0x230 [ 612.697262][T12301] do_syscall_64+0xf3/0x230 [ 612.701779][T12301] ? clear_bhb_loop+0x35/0x90 [ 612.706465][T12301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.712365][T12301] RIP: 0033:0x7f74dab7e719 [ 612.716787][T12301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.736405][T12301] RSP: 002b:00007f74db8dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 612.744836][T12301] RAX: ffffffffffffffda RBX: 00007f74dad35f80 RCX: 00007f74dab7e719 [ 612.752818][T12301] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 612.760801][T12301] RBP: 00007f74db8dc090 R08: 0000000000000000 R09: 0000000000000000 [ 612.768795][T12301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 612.776904][T12301] R13: 0000000000000000 R14: 00007f74dad35f80 R15: 00007ffea6164158 [ 612.785044][T12301] [ 613.483354][ T5844] Bluetooth: hci0: command 0x041b tx timeout [ 614.066536][ T7338] team0 (unregistering): Port device team_slave_1 removed [ 614.147115][ T7338] team0 (unregistering): Port device team_slave_0 removed [ 614.954989][T12280] netlink: 'syz.1.1749': attribute type 10 has an invalid length. [ 615.021049][T12188] team0: Port device team_slave_0 added [ 615.066998][T12188] team0: Port device team_slave_1 added [ 615.347498][T12188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.423805][T12188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.900295][T12188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.964724][T12342] fuse: Bad value for 'rootmode' [ 616.064442][T12188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.071454][T12188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.179120][T12188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.259457][T12346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1765'. [ 616.319327][T12349] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1765'. [ 616.430916][T12350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1766'. [ 616.546449][T12188] hsr_slave_0: entered promiscuous mode [ 616.575851][T12188] hsr_slave_1: entered promiscuous mode [ 616.591624][T12188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 616.606919][T12188] Cannot create hsr debugfs directory [ 616.712748][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 616.882009][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 616.902006][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.940068][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 616.959093][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 616.971701][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.030789][ T9] usb 2-1: config 0 descriptor?? [ 617.352939][T12371] overlayfs: failed to resolve './file1': -2 [ 617.454258][T12350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.494076][T12350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.520302][ T9] kye 0003:0458:0138.000B: unknown main item tag 0x0 [ 617.546266][ T9] kye 0003:0458:0138.000B: unknown main item tag 0x0 [ 617.567504][ T9] kye 0003:0458:0138.000B: unexpected long global item [ 617.586308][ T9] kye 0003:0458:0138.000B: parse failed [ 617.592200][ T9] kye 0003:0458:0138.000B: probe with driver kye failed with error -22 [ 617.635409][ T29] audit: type=1326 audit(1730303182.518:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12361 comm="syz.0.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74dab7e719 code=0x7fc00000 [ 617.676262][ T29] audit: type=1326 audit(1730303182.528:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12361 comm="syz.0.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74dab7e719 code=0x7fc00000 [ 617.677159][T12188] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 617.704587][ T29] audit: type=1326 audit(1730303182.528:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12361 comm="syz.0.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74dab7e719 code=0x7fc00000 [ 617.758458][T12188] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 617.795730][T12188] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 617.888984][T12188] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 617.907816][T12376] netlink: 'syz.3.1776': attribute type 9 has an invalid length. [ 617.937654][T12376] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1776'. [ 619.236616][ T5941] usb 2-1: USB disconnect, device number 50 [ 619.348591][T12378] netlink: 'syz.3.1776': attribute type 9 has an invalid length. [ 619.408919][T12378] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1776'. [ 619.678706][T12188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.682809][ T5941] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 619.778198][T12188] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.809691][ T7474] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.816938][ T7474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.961189][ T5941] usb 2-1: Using ep0 maxpacket: 8 [ 620.068589][ T7474] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.075800][ T7474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.199408][ T5941] usb 2-1: unable to get BOS descriptor or descriptor too short [ 620.513037][ T5941] usb 2-1: config 7 has an invalid interface number: 142 but max is 0 [ 620.521287][ T5941] usb 2-1: config 7 has no interface number 0 [ 620.559327][ T5941] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 620.568615][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.577069][ T5941] usb 2-1: Product: syz [ 620.581281][ T5941] usb 2-1: Manufacturer: syz [ 620.586267][ T5941] usb 2-1: SerialNumber: syz [ 620.620448][T12393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.671690][T12405] vlan2: entered promiscuous mode [ 620.688920][T12405] team0: entered promiscuous mode [ 620.696590][T12405] team_slave_0: entered promiscuous mode [ 620.738723][T12405] team_slave_1: entered promiscuous mode [ 620.739077][T12393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.753075][T12405] bond0: entered promiscuous mode [ 620.766780][T12405] bond_slave_0: entered promiscuous mode [ 620.776234][T12405] bond_slave_1: entered promiscuous mode [ 620.842535][T12393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.905921][ T5941] usb 2-1: USB disconnect, device number 51 [ 621.470126][T12408] netlink: 'syz.3.1783': attribute type 9 has an invalid length. [ 621.481386][T12407] delete_channel: no stack [ 621.502775][T12188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.519367][T12414] overlayfs: failed to resolve './file1': -2 [ 621.848218][T12428] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1788'. [ 621.858013][ T5889] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 622.004856][T12188] veth0_vlan: entered promiscuous mode [ 622.029299][T12188] veth1_vlan: entered promiscuous mode [ 622.042483][ T5889] usb 4-1: config 56 has an invalid interface number: 24 but max is 3 [ 622.070669][ T5889] usb 4-1: config 56 has an invalid descriptor of length 1, skipping remainder of the config [ 622.103735][ T5889] usb 4-1: config 56 has 1 interface, different from the descriptor's value: 4 [ 622.126144][T12188] veth0_macvtap: entered promiscuous mode [ 622.136089][ T5889] usb 4-1: config 56 has no interface number 0 [ 622.151617][T12188] veth1_macvtap: entered promiscuous mode [ 622.158669][ T5889] usb 4-1: config 56 interface 24 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 622.175402][T12435] netlink: 'syz.0.1789': attribute type 10 has an invalid length. [ 622.176609][ T5889] usb 4-1: config 56 interface 24 altsetting 5 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 622.205524][T12435] bond0: left promiscuous mode [ 622.205733][ T5889] usb 4-1: config 56 interface 24 altsetting 5 endpoint 0xD has invalid maxpacket 983, setting to 64 [ 622.215262][T12435] bond_slave_0: left promiscuous mode [ 622.224195][ T5889] usb 4-1: config 56 interface 24 altsetting 5 endpoint 0x8 has an invalid bInterval 243, changing to 7 [ 622.240852][T12436] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 622.244709][ T5889] usb 4-1: config 56 interface 24 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 622.259525][T12435] bond_slave_1: left promiscuous mode [ 622.274188][ T5889] usb 4-1: config 56 interface 24 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 622.296322][ T5889] usb 4-1: config 56 interface 24 altsetting 5 has 8 endpoint descriptors, different from the interface descriptor's value: 13 [ 622.326853][T12188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.341700][T12188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.353496][ T5889] usb 4-1: config 56 interface 24 has no altsetting 0 [ 622.360663][T12188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.371612][T12188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.382278][T12188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.396376][T12188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.407956][ T5889] usb 4-1: Dual-Role OTG device on HNP port [ 622.415415][ T5889] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10b4, bcdDevice=ee.0c [ 622.426730][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.437608][T12188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.449538][ T5889] usb 4-1: Product: æ¹È‘ꭊ䋿借í‚䑬틾⛜ç®î«žâ’’符볟ⴓ㘃è”尯箊쀆볈과鵣齦慠漆س肦ꢅ㋯Ѩ죌쌢ë’è°±í‚轭ࣇá‚嘜ଃ䈎ቾ᎛ [ 622.477854][T12188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.488823][ T5889] usb 4-1: Manufacturer: 䙩㕑ߺ窄᢭벪秼煞薖뻚홋汮꫒틺躪㶧벃㒲녫砦ᶋ黙㜉禚ꜣ㽹༳씴㚅퀪籾棂骇氨ᵔè‰æ¨¶ã¿‘꜖ë–裭᱃è°ì¯­é¦“鳚ꘅ᧩몽ꓑ웧ï›ç´«èƒ† [ 622.510515][T12188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.520644][T12188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.533979][ T5889] usb 4-1: SerialNumber: îµ¢è«ã­°ë´­á§„㭉ᚕ䮪魪㻆秃퇚㒓ü桇澎◔쵇쓦꫊á³æŒ€ãª”Ɨꓜ葊䑻죺뉛䬄鲱ᒢ穎㰴⎧䆿å´å¼«í葂뜙ì†å‚€à§â¶©ì§à´³î”ªï¯–ã䛪셓âšâž´ì·Šä“ﱟ鎭艴â¡éµˆé‚‰ë¡ã‰¡é­™ã¥¸æ¥¬ìº›ë­Ÿá«¨å©™ì¡‚é‡ã³¹ãŸ”⊔겒쾟䑾Ҕì©ã¯­ [ 622.566493][T12188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.577948][T12188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.619611][T12188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.629224][T12440] overlayfs: failed to resolve './file1': -2 [ 622.644607][T12188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.689858][T12188] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.699524][T12188] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.722781][T12188] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.740639][T12188] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.761068][T12442] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 622.775484][T12442] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 622.877924][ T7338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.893186][ T7338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.903858][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'. [ 622.961128][T12449] FAULT_INJECTION: forcing a failure. [ 622.961128][T12449] name failslab, interval 1, probability 0, space 0, times 0 [ 622.970914][ T9040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.974817][T12449] CPU: 0 UID: 0 PID: 12449 Comm: syz.1.1795 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 622.982752][ T9040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.992722][T12449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 622.992742][T12449] Call Trace: [ 622.992752][T12449] [ 622.992763][T12449] dump_stack_lvl+0x241/0x360 [ 622.992800][T12449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 623.026381][T12449] ? __pfx__printk+0x10/0x10 [ 623.031040][T12449] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 623.036560][T12449] ? __pfx___might_resched+0x10/0x10 [ 623.041911][T12449] should_fail_ex+0x3b0/0x4e0 [ 623.046649][T12449] should_failslab+0xac/0x100 [ 623.051379][T12449] ? mpi_alloc+0x52/0x140 [ 623.055763][T12449] __kmalloc_cache_noprof+0x6c/0x2c0 [ 623.061112][T12449] mpi_alloc+0x52/0x140 [ 623.065329][T12449] dh_compute_value+0x9f/0x3e0 [ 623.070167][T12449] ? __pfx_dh_compute_value+0x10/0x10 [ 623.075600][T12449] ? __keyctl_dh_compute+0x7f5/0xf50 [ 623.080935][T12449] ? rcu_is_watching+0x15/0xb0 [ 623.085758][T12449] ? __keyctl_dh_compute+0x7f5/0xf50 [ 623.091091][T12449] ? __keyctl_dh_compute+0x7f5/0xf50 [ 623.096423][T12449] ? __kmalloc_noprof+0x21a/0x400 [ 623.101510][T12449] __keyctl_dh_compute+0x955/0xf50 [ 623.106708][T12449] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 623.112403][T12449] ? get_pid_task+0x23/0x1f0 [ 623.117064][T12449] keyctl_dh_compute+0x107/0x160 [ 623.122034][T12449] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 623.127532][T12449] ? vfs_write+0x730/0xd30 [ 623.131976][T12449] __se_sys_keyctl+0x3f3/0x910 [ 623.136773][T12449] ? __mutex_unlock_slowpath+0x21d/0x750 [ 623.142441][T12449] ? __pfx___se_sys_keyctl+0x10/0x10 [ 623.147762][T12449] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 623.153770][T12449] ? __fget_files+0x3f3/0x470 [ 623.158483][T12449] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 623.164492][T12449] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 623.170845][T12449] ? do_syscall_64+0x100/0x230 [ 623.175634][T12449] ? __x64_sys_keyctl+0x20/0xc0 [ 623.180516][T12449] do_syscall_64+0xf3/0x230 [ 623.185038][T12449] ? clear_bhb_loop+0x35/0x90 [ 623.189732][T12449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.195647][T12449] RIP: 0033:0x7fa900f7e719 [ 623.200077][T12449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.219698][T12449] RSP: 002b:00007fa901cad038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 623.228143][T12449] RAX: ffffffffffffffda RBX: 00007fa901135f80 RCX: 00007fa900f7e719 [ 623.236136][T12449] RDX: 00000000200000c0 RSI: 0000000020000140 RDI: 0000000000000017 [ 623.244128][T12449] RBP: 00007fa901cad090 R08: 0000000000000000 R09: 0000000000000000 [ 623.252114][T12449] R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000000002 [ 623.260100][T12449] R13: 0000000000000000 R14: 00007fa901135f80 R15: 00007fff19af7228 [ 623.268119][T12449] [ 623.383389][ T5886] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 623.405174][T12451] overlayfs: failed to resolve './file1': -2 [ 623.466866][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'. [ 623.478242][T12455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1797'. [ 623.682714][ T5886] usb 7-1: Using ep0 maxpacket: 8 [ 623.691045][ T5886] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 623.701271][ T5886] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 623.711551][ T5886] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 623.716292][ T5889] usb 4-1: USB disconnect, device number 58 [ 623.721828][ T5886] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 623.788985][ T5886] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 623.852657][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.971842][T12458] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1797'. [ 624.317285][ T5886] usb 7-1: usb_control_msg returned -32 [ 624.367364][ T5886] usbtmc 7-1:16.0: can't read capabilities [ 624.520680][T12468] netlink: 'syz.1.1799': attribute type 10 has an invalid length. [ 624.550196][T12468] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 624.588728][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.595915][ T5850] Bluetooth: hci0: command 0x041b tx timeout [ 624.796595][T12473] libceph: resolve '0' (ret=-3): failed [ 625.553644][ T5886] usb 7-1: USB disconnect, device number 15 [ 625.560906][T12475] overlayfs: failed to resolve './file1': -2 [ 625.605898][T12477] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1802'. [ 625.790524][T12477] IPVS: Scheduler module ip_vs_sip not found [ 625.913808][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1806'. [ 626.319865][T12501] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1809'. [ 626.662743][ T5850] Bluetooth: hci0: command 0x041b tx timeout [ 627.050458][T12511] netlink: 'syz.3.1813': attribute type 10 has an invalid length. [ 627.137671][T12511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.311645][T12514] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 627.331143][T12511] team0: Device bond0 failed to register rx_handler [ 628.239217][T12525] overlayfs: failed to resolve './file1': -2 [ 628.460293][T12530] fuse: Unknown parameter 'user_i00000000000000000000' [ 628.648863][T12533] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1819'. [ 628.658737][T12533] openvswitch: netlink: Key type 103 is out of range max 32 [ 629.545224][T12536] netlink: 'syz.6.1820': attribute type 1 has an invalid length. [ 629.602821][T12536] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1820'. [ 629.836406][T12550] 9pnet_fd: Insufficient options for proto=fd [ 630.443061][ T5875] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 630.713613][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 631.017969][ T5875] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 631.306017][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 631.379761][ T5875] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 631.384366][T12559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1826'. [ 631.390160][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 631.845654][ T5875] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 631.890827][ T5875] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 631.922734][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.930804][ T5875] usb 2-1: Product: syz [ 631.965732][ T5875] usb 2-1: Manufacturer: syz [ 631.980848][T12562] netlink: 'syz.6.1828': attribute type 10 has an invalid length. [ 631.989068][ T5875] usb 2-1: SerialNumber: syz [ 631.996491][ T5875] usb 2-1: config 0 descriptor?? [ 632.009651][ T5875] kvaser_usb 2-1:0.0: error -EMSGSIZE: Cannot get software info [ 632.021712][T12562] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 632.030328][ T5875] kvaser_usb 2-1:0.0: probe with driver kvaser_usb failed with error -90 [ 632.254828][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1830'. [ 632.863450][T12575] fuse: Unknown parameter 'user_id00000000000000000000' [ 633.072816][T12578] FAULT_INJECTION: forcing a failure. [ 633.072816][T12578] name failslab, interval 1, probability 0, space 0, times 0 [ 633.813047][T12578] CPU: 0 UID: 0 PID: 12578 Comm: syz.6.1834 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 633.823909][T12578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 633.834019][T12578] Call Trace: [ 633.837347][T12578] [ 633.840317][T12578] dump_stack_lvl+0x241/0x360 [ 633.845055][T12578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.850304][T12578] ? __pfx__printk+0x10/0x10 [ 633.854956][T12578] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 633.860552][T12578] ? __pfx___might_resched+0x10/0x10 [ 633.865908][T12578] ? can_vma_merge_right+0x1c9/0x500 [ 633.871253][T12578] should_fail_ex+0x3b0/0x4e0 [ 633.875980][T12578] ? vm_area_alloc+0x24/0x1d0 [ 633.880715][T12578] should_failslab+0xac/0x100 [ 633.885457][T12578] ? vm_area_alloc+0x24/0x1d0 [ 633.890180][T12578] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 633.895601][T12578] vm_area_alloc+0x24/0x1d0 [ 633.900157][T12578] mmap_region+0x1134/0x2940 [ 633.904801][T12578] ? __pfx_mmap_region+0x10/0x10 [ 633.909784][T12578] ? hugetlb_get_unmapped_area+0x40b/0xbb0 [ 633.915610][T12578] ? __pfx_hugetlb_get_unmapped_area+0x10/0x10 [ 633.921808][T12578] ? mtree_load+0x23a/0x9c0 [ 633.926420][T12578] ? bpf_lsm_mmap_addr+0x9/0x10 [ 633.931280][T12578] ? security_mmap_addr+0x6f/0x250 [ 633.936402][T12578] ? __get_unmapped_area+0x2ed/0x350 [ 633.941701][T12578] do_mmap+0x8f0/0x1000 [ 633.945873][T12578] ? mtree_load+0x23a/0x9c0 [ 633.950409][T12578] ? __pfx_do_mmap+0x10/0x10 [ 633.955016][T12578] ? __pfx_down_write_killable+0x10/0x10 [ 633.960771][T12578] __se_sys_remap_file_pages+0x98f/0xbb0 [ 633.966427][T12578] ? __pfx___se_sys_remap_file_pages+0x10/0x10 [ 633.972620][T12578] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 633.978670][T12578] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 633.985021][T12578] ? do_syscall_64+0x100/0x230 [ 633.989822][T12578] ? __x64_sys_remap_file_pages+0x20/0xc0 [ 633.995563][T12578] do_syscall_64+0xf3/0x230 [ 634.000084][T12578] ? clear_bhb_loop+0x35/0x90 [ 634.004776][T12578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.010685][T12578] RIP: 0033:0x7f75cfd7e719 [ 634.015110][T12578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.024465][ T5875] usb 2-1: USB disconnect, device number 52 [ 634.034728][T12578] RSP: 002b:00007f75d0c01038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 634.049209][T12578] RAX: ffffffffffffffda RBX: 00007f75cff35f80 RCX: 00007f75cfd7e719 [ 634.057240][T12578] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020800000 [ 634.065262][T12578] RBP: 00007f75d0c01090 R08: 0000000000000000 R09: 0000000000000000 [ 634.073282][T12578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.081273][T12578] R13: 0000000000000000 R14: 00007f75cff35f80 R15: 00007ffebad73728 [ 634.089269][T12578] [ 634.114924][T12587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1835'. [ 634.124755][T12587] openvswitch: netlink: Key type 103 is out of range max 32 [ 636.253659][T12615] fuse: Unknown parameter 'user_id00000000000000000000' [ 637.606459][T12626] overlayfs: missing 'lowerdir' [ 637.778840][ T5850] Bluetooth: hci5: sending frame failed (-49) [ 637.788251][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 637.980382][T12637] libceph: resolve '0' (ret=-3): failed [ 639.009639][T12647] vlan3: entered promiscuous mode [ 639.025401][T12647] team0: entered promiscuous mode [ 639.032285][T12647] batadv0: entered promiscuous mode [ 639.061843][T12647] bond0: entered promiscuous mode [ 639.069547][T12647] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 639.112785][ T5888] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 639.274446][ T5888] usb 4-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 639.288107][ T5888] usb 4-1: config 1 interface 0 has no altsetting 0 [ 639.304441][ T5888] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.40 [ 639.325960][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.337564][ T5888] usb 4-1: Product: syz [ 639.341840][ T5888] usb 4-1: Manufacturer: syz [ 639.352484][ T5888] usb 4-1: SerialNumber: syz [ 639.447684][T12654] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 639.460949][T12654] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 640.376010][ T5888] usbhid 4-1:1.0: can't add hid device: -71 [ 640.386938][ T5888] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 640.399884][ T5888] usb 4-1: USB disconnect, device number 59 [ 640.502017][T12662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1858'. [ 640.565972][T12662] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1858'. [ 640.809037][T12669] libceph: resolve '0' (ret=-3): failed [ 643.332873][ T5889] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 643.364218][T12692] Bluetooth: MGMT ver 1.23 [ 643.692785][ T5889] usb 2-1: device not accepting address 53, error -71 [ 644.066974][T12706] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1871'. [ 644.096385][T12706] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1871'. [ 644.209088][T12711] FAULT_INJECTION: forcing a failure. [ 644.209088][T12711] name failslab, interval 1, probability 0, space 0, times 0 [ 644.222038][T12711] CPU: 0 UID: 0 PID: 12711 Comm: syz.3.1873 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 644.232867][T12711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 644.242962][T12711] Call Trace: [ 644.246277][T12711] [ 644.249253][T12711] dump_stack_lvl+0x241/0x360 [ 644.253988][T12711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.259239][T12711] ? __pfx__printk+0x10/0x10 [ 644.263879][T12711] ? fs_reclaim_acquire+0x93/0x130 [ 644.269049][T12711] ? __pfx___might_resched+0x10/0x10 [ 644.274405][T12711] should_fail_ex+0x3b0/0x4e0 [ 644.279154][T12711] ? tomoyo_encode+0x26f/0x540 [ 644.283978][T12711] should_failslab+0xac/0x100 [ 644.288712][T12711] ? tomoyo_encode+0x26f/0x540 [ 644.293533][T12711] __kmalloc_noprof+0xd8/0x400 [ 644.298371][T12711] tomoyo_encode+0x26f/0x540 [ 644.303111][T12711] tomoyo_realpath_from_path+0x59e/0x5e0 [ 644.308912][T12711] tomoyo_path_number_perm+0x23a/0x880 [ 644.308967][T12711] ? tomoyo_path_number_perm+0x208/0x880 [ 644.320101][T12711] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 644.326147][T12711] ? __fget_files+0x29/0x470 [ 644.330796][T12711] ? __fget_files+0x3f3/0x470 [ 644.335513][T12711] security_file_ioctl+0xc6/0x2a0 [ 644.340555][T12711] __se_sys_ioctl+0x47/0x170 [ 644.345154][T12711] do_syscall_64+0xf3/0x230 [ 644.349669][T12711] ? clear_bhb_loop+0x35/0x90 [ 644.354356][T12711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.360255][T12711] RIP: 0033:0x7f0b3bd7e719 [ 644.364676][T12711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.384321][T12711] RSP: 002b:00007f0b3cbe8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 644.392787][T12711] RAX: ffffffffffffffda RBX: 00007f0b3bf35f80 RCX: 00007f0b3bd7e719 [ 644.392813][T12711] RDX: 00000000200003c0 RSI: 00000000c0d05604 RDI: 0000000000000003 [ 644.392831][T12711] RBP: 00007f0b3cbe8090 R08: 0000000000000000 R09: 0000000000000000 [ 644.392856][T12711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.392869][T12711] R13: 0000000000000000 R14: 00007f0b3bf35f80 R15: 00007fff2672d0c8 [ 644.392901][T12711] [ 644.445676][T12711] ERROR: Out of memory at tomoyo_realpath_from_path. [ 644.732028][T12718] overlayfs: failed to resolve './file1': -2 [ 645.204053][T12723] overlayfs: missing 'lowerdir' [ 645.516270][T12728] libceph: resolve '0' (ret=-3): failed [ 646.658579][T12744] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1882'. [ 646.672405][T12744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1882'. [ 646.682724][T12744] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1882'. [ 646.692169][T12744] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1882'. [ 646.822470][T12747] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1884'. [ 646.875042][T12747] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1884'. [ 647.346451][T12752] random: crng reseeded on system resumption [ 647.360373][T12754] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1887'. [ 648.262199][T12761] 9pnet_fd: Insufficient options for proto=fd [ 648.705793][T12767] overlayfs: missing 'lowerdir' [ 648.833977][T12765] overlayfs: failed to resolve './file1': -2 [ 649.971197][ T5889] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 650.050221][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1895'. [ 650.076694][T12783] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1895'. [ 650.157399][T12785] FAULT_INJECTION: forcing a failure. [ 650.157399][T12785] name failslab, interval 1, probability 0, space 0, times 0 [ 650.170946][T12785] CPU: 0 UID: 0 PID: 12785 Comm: syz.1.1894 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 650.181757][T12785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 650.191848][T12785] Call Trace: [ 650.195159][T12785] [ 650.198118][T12785] dump_stack_lvl+0x241/0x360 [ 650.202842][T12785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 650.208080][T12785] ? __pfx__printk+0x10/0x10 [ 650.212711][T12785] ? irqentry_exit+0x63/0x90 [ 650.217332][T12785] ? lockdep_hardirqs_on+0x99/0x150 [ 650.222568][T12785] should_fail_ex+0x3b0/0x4e0 [ 650.227294][T12785] should_failslab+0xac/0x100 [ 650.232022][T12785] ? sctp_add_bind_addr+0x89/0x3a0 [ 650.237180][T12785] __kmalloc_cache_noprof+0x6c/0x2c0 [ 650.242522][T12785] sctp_add_bind_addr+0x89/0x3a0 [ 650.247525][T12785] sctp_copy_local_addr_list+0x311/0x500 [ 650.253206][T12785] ? sctp_copy_local_addr_list+0xab/0x500 [ 650.258965][T12785] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 650.265162][T12785] ? sctp_v4_is_any+0x35/0x60 [ 650.269887][T12785] sctp_bind_addr_copy+0xad/0x3b0 [ 650.274952][T12785] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 650.281318][T12785] sctp_connect_new_asoc+0x2f3/0x6c0 [ 650.286641][T12785] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 650.292478][T12785] ? __rcu_read_unlock+0xa1/0x110 [ 650.297554][T12785] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 650.303472][T12785] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 650.309403][T12785] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 650.314988][T12785] sctp_sendmsg+0x219a/0x3520 [ 650.319746][T12785] ? __pfx_sctp_sendmsg+0x10/0x10 [ 650.324818][T12785] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 650.331638][T12785] ? inet_sendmsg+0x330/0x390 [ 650.336354][T12785] __sock_sendmsg+0x1a6/0x270 [ 650.341095][T12785] __sys_sendto+0x39b/0x4f0 [ 650.345636][T12785] ? __pfx___sys_sendto+0x10/0x10 [ 650.350724][T12785] ? lockdep_hardirqs_on+0x99/0x150 [ 650.355973][T12785] __x64_sys_sendto+0xde/0x100 [ 650.360777][T12785] do_syscall_64+0xf3/0x230 [ 650.365335][T12785] ? clear_bhb_loop+0x35/0x90 [ 650.370063][T12785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.375989][T12785] RIP: 0033:0x7fa900f7e719 [ 650.380434][T12785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.400082][T12785] RSP: 002b:00007fa9009de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 650.408573][T12785] RAX: ffffffffffffffda RBX: 00007fa901136130 RCX: 00007fa900f7e719 [ 650.416586][T12785] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000005 [ 650.424595][T12785] RBP: 00007fa9009de090 R08: 0000000020000380 R09: 0000000000000010 [ 650.432600][T12785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 650.440608][T12785] R13: 0000000000000000 R14: 00007fa901136130 R15: 00007fff19af7228 [ 650.448626][T12785] [ 650.782688][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 650.794086][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 650.810688][ T5889] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 650.821307][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 650.830119][ T5889] usb 4-1: Product: syz [ 650.834469][ T5889] usb 4-1: Manufacturer: syz [ 650.839100][ T5889] usb 4-1: SerialNumber: syz [ 651.132749][ T5889] usb 4-1: config 0 descriptor?? [ 651.138788][T12769] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 651.243754][T12792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'. [ 651.541119][T12796] libceph: resolve '0' (ret=-3): failed [ 652.423204][ T5889] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 652.444333][ T5886] usb 4-1: USB disconnect, device number 60 [ 652.692718][ T5889] usb 7-1: Using ep0 maxpacket: 16 [ 652.699592][ T5889] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 652.708331][ T5889] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.719516][ T5889] usb 7-1: config 0 has no interface number 0 [ 652.728546][ T5889] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 652.738140][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.748357][ T5889] usb 7-1: Product: syz [ 652.756711][ T5889] usb 7-1: Manufacturer: syz [ 652.763168][ T5889] usb 7-1: SerialNumber: syz [ 652.806278][T12806] libceph: resolve '0' (ret=-3): failed [ 652.893792][ T5889] usb 7-1: config 0 descriptor?? [ 653.068780][ T5875] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 653.299920][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 653.423789][ T5875] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 653.560546][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.588315][ T5875] usb 4-1: config 0 has no interface number 0 [ 653.598226][ T5875] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 653.654919][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.663959][ T5875] usb 4-1: Product: syz [ 653.668278][ T5875] usb 4-1: Manufacturer: syz [ 653.673160][ T5875] usb 4-1: SerialNumber: syz [ 653.679998][ T5875] usb 4-1: config 0 descriptor?? [ 653.723002][T12809] overlayfs: missing 'lowerdir' [ 654.619574][ T5889] usb 7-1: USB disconnect, device number 16 [ 654.623117][T12815] overlayfs: failed to resolve './file1': -2 [ 656.443181][ T5889] usb 4-1: USB disconnect, device number 61 [ 656.501069][T12828] netlink: 4140 bytes leftover after parsing attributes in process `syz.1.1905'. [ 656.511761][T12828] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 657.274876][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1913'. [ 657.392478][T12853] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1913'. [ 657.469417][T12856] overlay: filesystem on ./bus not supported as upperdir [ 658.682204][T12872] overlay: Unknown parameter 'fscontext' [ 660.183971][T12888] loop2: detected capacity change from 0 to 7 [ 660.238208][T12888] Dev loop2: unable to read RDB block 7 [ 660.260981][T12888] loop2: unable to read partition table [ 660.282381][T12888] loop2: partition table beyond EOD, truncated [ 660.296212][T12888] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 661.047963][ T5888] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 661.059137][T12896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.113057][T12896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.129329][T12896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.138848][T12896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.171599][T12899] netlink: 'syz.7.1925': attribute type 1 has an invalid length. [ 661.212830][ T5886] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 661.228833][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1926'. [ 661.252369][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 661.270867][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 661.284063][ T5888] usb 4-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 661.305473][T12903] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1926'. [ 661.314608][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.331659][ T5888] usb 4-1: Product: syz [ 661.341767][ T5888] usb 4-1: Manufacturer: syz [ 661.351059][ T5888] usb 4-1: SerialNumber: syz [ 661.374086][ T5888] usb 4-1: config 0 descriptor?? [ 661.395042][ T5888] usb 4-1: Found UVC 0.00 device syz (468c:90ea) [ 661.409747][ T5888] usb 4-1: No valid video chain found. [ 661.597301][ T5888] usb 4-1: USB disconnect, device number 62 [ 662.172858][ T5886] usb 7-1: device descriptor read/64, error -71 [ 662.412834][ T5886] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 662.615900][ T5886] usb 7-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 662.659564][ T5886] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 662.686388][ T5886] usb 7-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 662.717155][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.760958][ T5886] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 663.024810][ T5886] gspca_sn9c2028: read1 error -32 [ 663.090128][ T5886] gspca_sn9c2028: read1 error -32 [ 663.506943][ T5941] usb 7-1: USB disconnect, device number 18 [ 665.892722][ T5888] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 665.935509][T12932] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 665.954955][T12932] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 666.052806][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 666.079558][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.110237][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.125893][ T5888] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 666.139711][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.155160][ T5888] usb 4-1: config 0 descriptor?? [ 666.203061][ T5886] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 666.383933][ T5886] usb 7-1: Using ep0 maxpacket: 8 [ 666.397488][ T5886] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 666.408932][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.480683][ T5886] usb 7-1: config 0 descriptor?? [ 666.572447][ T5888] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 666.672796][ T5889] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 666.792759][ T5888] ft260 0003:0403:6030.000C: failed to retrieve chip version [ 666.818128][ T5888] ft260 0003:0403:6030.000C: probe with driver ft260 failed with error -71 [ 666.840791][ T5888] usb 4-1: USB disconnect, device number 63 [ 667.063857][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.127526][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.213777][ T5889] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 667.261206][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.403765][ T5889] usb 2-1: config 0 descriptor?? [ 668.013849][ T5889] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 669.048741][T12969] tipc: Started in network mode [ 669.058791][T12969] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 669.066877][T12969] tipc: Enabled bearer , priority 10 [ 669.143300][ T5886] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 669.154514][ T5886] asix 7-1:0.0: probe with driver asix failed with error -71 [ 669.165191][ T5886] usb 7-1: USB disconnect, device number 19 [ 670.184722][ T9] tipc: Node number set to 15444650 [ 671.249019][ T5889] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device [ 671.274600][T12987] FAULT_INJECTION: forcing a failure. [ 671.274600][T12987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.292743][ T5889] pyra 0003:1E7D:2CF6.000D: couldn't install mouse [ 671.312330][ T5889] pyra 0003:1E7D:2CF6.000D: probe with driver pyra failed with error -71 [ 671.321424][T12987] CPU: 1 UID: 0 PID: 12987 Comm: syz.6.1950 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 671.332249][T12987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 671.342315][T12987] Call Trace: [ 671.345601][T12987] [ 671.348551][T12987] dump_stack_lvl+0x241/0x360 [ 671.353247][T12987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.358458][T12987] ? __pfx__printk+0x10/0x10 [ 671.363081][T12987] ? do_vfs_ioctl+0xf08/0x2e40 [ 671.367853][T12987] ? rfcomm_dev_ioctl+0x237/0x2220 [ 671.372994][T12987] should_fail_ex+0x3b0/0x4e0 [ 671.377700][T12987] _copy_from_user+0x31/0xe0 [ 671.382307][T12987] rfcomm_dev_ioctl+0x256/0x2220 [ 671.387268][T12987] ? tomoyo_path_number_perm+0x208/0x880 [ 671.392920][T12987] ? __pfx_lock_release+0x10/0x10 [ 671.397964][T12987] ? lockdep_hardirqs_on+0x99/0x150 [ 671.403184][T12987] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 671.408600][T12987] ? kfree+0x1a0/0x440 [ 671.412702][T12987] ? tomoyo_path_number_perm+0x68d/0x880 [ 671.418367][T12987] ? bt_sock_ioctl+0xe9/0x2c0 [ 671.423056][T12987] sock_do_ioctl+0x158/0x460 [ 671.427660][T12987] ? __pfx_smack_log+0x10/0x10 [ 671.432427][T12987] ? __pfx_sock_do_ioctl+0x10/0x10 [ 671.437572][T12987] ? smk_tskacc+0x300/0x370 [ 671.442086][T12987] ? smack_file_ioctl+0x29e/0x3a0 [ 671.447120][T12987] sock_ioctl+0x626/0x8e0 [ 671.451461][T12987] ? __pfx_sock_ioctl+0x10/0x10 [ 671.456334][T12987] ? __fget_files+0x3f3/0x470 [ 671.461033][T12987] ? __pfx_sock_ioctl+0x10/0x10 [ 671.465912][T12987] __se_sys_ioctl+0xf9/0x170 [ 671.470515][T12987] do_syscall_64+0xf3/0x230 [ 671.475047][T12987] ? clear_bhb_loop+0x35/0x90 [ 671.479740][T12987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.485647][T12987] RIP: 0033:0x7f75cfd7e719 [ 671.490077][T12987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.509714][T12987] RSP: 002b:00007f75d0c01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 671.518400][T12987] RAX: ffffffffffffffda RBX: 00007f75cff35f80 RCX: 00007f75cfd7e719 [ 671.526408][T12987] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 000000000000000b [ 671.534388][T12987] RBP: 00007f75d0c01090 R08: 0000000000000000 R09: 0000000000000000 [ 671.542365][T12987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.550350][T12987] R13: 0000000000000000 R14: 00007f75cff35f80 R15: 00007ffebad73728 [ 671.558345][T12987] [ 671.572726][ T5889] usb 2-1: USB disconnect, device number 55 [ 674.908354][T12964] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 675.871900][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1961'. [ 675.912709][T12964] usb 7-1: Using ep0 maxpacket: 16 [ 675.917992][T13021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1961'. [ 675.929470][T12964] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 675.937924][T12964] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.950347][T12964] usb 7-1: config 0 has no interface number 0 [ 676.580488][T12964] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 676.598605][T12964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.606823][T12964] usb 7-1: Product: syz [ 676.611199][T12964] usb 7-1: Manufacturer: syz [ 676.617929][T12964] usb 7-1: SerialNumber: syz [ 676.627123][T12964] usb 7-1: config 0 descriptor?? [ 677.212273][T13028] pim6reg: entered allmulticast mode [ 677.224808][T13028] pim6reg: left allmulticast mode [ 677.557724][T13035] overlay: filesystem on ./bus not supported as upperdir [ 677.911797][T12964] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 678.000891][ T5889] usb 7-1: USB disconnect, device number 20 [ 678.088539][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1970'. [ 678.098196][T13049] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1970'. [ 678.152712][T12964] usb 2-1: Using ep0 maxpacket: 32 [ 678.161611][T12964] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 678.177206][T12964] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 678.208747][T12964] usb 2-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 678.240408][T12964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.256682][T12964] usb 2-1: config 0 descriptor?? [ 678.542258][T13053] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1970'. [ 678.880648][T12964] usb 2-1: USB disconnect, device number 56 [ 680.191319][T13079] overlay: filesystem on ./bus not supported as upperdir [ 681.550657][T12964] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 681.682900][ T3067] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 681.723369][T12964] usb 2-1: Using ep0 maxpacket: 16 [ 681.730400][T12964] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 681.770345][T12964] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.812197][T12964] usb 2-1: config 0 has no interface number 0 [ 681.852892][ T3067] usb 4-1: Using ep0 maxpacket: 16 [ 681.867296][T12964] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 681.891089][ T3067] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 681.910104][ T3067] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.919115][T12964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.934304][ T3067] usb 4-1: Product: syz [ 681.938918][ T3067] usb 4-1: Manufacturer: syz [ 681.949339][T12964] usb 2-1: Product: syz [ 681.962367][T12964] usb 2-1: Manufacturer: syz [ 681.962440][ T3067] usb 4-1: SerialNumber: syz [ 681.973677][T12964] usb 2-1: SerialNumber: syz [ 681.995338][ T3067] usb 4-1: config 0 descriptor?? [ 682.002440][T12964] usb 2-1: config 0 descriptor?? [ 682.041154][ T3067] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 682.230328][ T3514] usb 4-1: Failed to submit usb control message: -71 [ 682.230714][T12964] usb 4-1: USB disconnect, device number 64 [ 682.238284][ T3514] usb 4-1: unable to send the bmi data to the device: -71 [ 682.253782][ T3514] usb 4-1: unable to get target info from device [ 682.261529][ T3514] usb 4-1: could not get target info (-71) [ 682.268157][ T3514] usb 4-1: could not probe fw (-71) [ 683.212906][ T5886] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 683.396771][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.408692][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.419477][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.433620][ T5886] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 683.443590][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.528475][ T3067] usb 2-1: USB disconnect, device number 57 [ 683.528546][ T5886] usb 4-1: config 0 descriptor?? [ 684.320546][ T5886] playstation 0003:054C:0BA0.000E: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0 [ 684.393325][ T5886] playstation 0003:054C:0BA0.000E: Failed to retrieve feature with reportID 18: -71 [ 684.403124][ T5886] playstation 0003:054C:0BA0.000E: Failed to retrieve DualShock4 pairing info: -71 [ 684.420752][ T5886] playstation 0003:054C:0BA0.000E: Failed to get MAC address from DualShock4 [ 684.431440][ T5886] playstation 0003:054C:0BA0.000E: Failed to create dualshock4. [ 684.443066][ T5886] playstation 0003:054C:0BA0.000E: probe with driver playstation failed with error -71 [ 684.455682][ T5886] usb 4-1: USB disconnect, device number 65 [ 684.469367][T13125] overlayfs: missing 'workdir' [ 684.954260][T13132] FAULT_INJECTION: forcing a failure. [ 684.954260][T13132] name failslab, interval 1, probability 0, space 0, times 0 [ 684.969583][T13132] CPU: 0 UID: 0 PID: 13132 Comm: syz.3.1994 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 684.980403][T13132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 684.990517][T13132] Call Trace: [ 684.993811][T13132] [ 684.996781][T13132] dump_stack_lvl+0x241/0x360 [ 685.001477][T13132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 685.006693][T13132] ? __pfx__printk+0x10/0x10 [ 685.011296][T13132] ? fs_reclaim_acquire+0x93/0x130 [ 685.016423][T13132] ? __pfx___might_resched+0x10/0x10 [ 685.021734][T13132] should_fail_ex+0x3b0/0x4e0 [ 685.026445][T13132] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 685.032207][T13132] should_failslab+0xac/0x100 [ 685.036905][T13132] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 685.042646][T13132] __kmalloc_noprof+0xd8/0x400 [ 685.047447][T13132] tomoyo_realpath_from_path+0xcf/0x5e0 [ 685.053037][T13132] tomoyo_path_number_perm+0x23a/0x880 [ 685.058553][T13132] ? tomoyo_path_number_perm+0x208/0x880 [ 685.064234][T13132] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 685.070268][T13132] ? __pfx_lock_release+0x10/0x10 [ 685.075409][T13132] ? __pfx_bpf_trace_run2+0x10/0x10 [ 685.080657][T13132] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 685.086682][T13132] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 685.093264][T13132] security_file_ioctl+0xc6/0x2a0 [ 685.098343][T13132] __se_sys_ioctl+0x47/0x170 [ 685.102965][T13132] do_syscall_64+0xf3/0x230 [ 685.107519][T13132] ? clear_bhb_loop+0x35/0x90 [ 685.112244][T13132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.118187][T13132] RIP: 0033:0x7f0b3bd7e719 [ 685.122648][T13132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.142307][T13132] RSP: 002b:00007f0b3cbe8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.150773][T13132] RAX: ffffffffffffffda RBX: 00007f0b3bf35f80 RCX: 00007f0b3bd7e719 [ 685.158771][T13132] RDX: 0000000020000100 RSI: 000000004068aea3 RDI: 0000000000000004 [ 685.166764][T13132] RBP: 00007f0b3cbe8090 R08: 0000000000000000 R09: 0000000000000000 [ 685.174789][T13132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.182773][T13132] R13: 0000000000000000 R14: 00007f0b3bf35f80 R15: 00007fff2672d0c8 [ 685.190771][T13132] [ 685.202943][T13132] ERROR: Out of memory at tomoyo_realpath_from_path. [ 685.672698][ T5941] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 685.822653][ T5941] usb 4-1: Using ep0 maxpacket: 8 [ 685.860595][ T5941] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 685.870872][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.883197][ T5941] usb 4-1: config 0 descriptor?? [ 686.035309][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.038930][ T3067] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 686.142777][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1996'. [ 686.165989][T13135] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 686.219063][T13135] sctp: [Deprecated]: syz.3.1996 (pid 13135) Use of int in max_burst socket option. [ 686.219063][T13135] Use struct sctp_assoc_value instead [ 686.422821][ T3067] usb 7-1: Using ep0 maxpacket: 16 [ 686.446233][ T3067] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 687.646895][ T3067] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 687.657497][ T3067] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.742200][ T3067] usb 7-1: Product: syz [ 687.813669][ T3067] usb 7-1: Manufacturer: syz [ 687.818491][ T3067] usb 7-1: SerialNumber: syz [ 687.853995][ T3067] usb 7-1: config 0 descriptor?? [ 687.863443][ T3067] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 687.879823][ T3067] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 688.398790][T12964] usb 4-1: USB disconnect, device number 66 [ 688.467579][ T3067] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 689.546730][T13171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.575987][T13171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.734435][ T3067] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 689.743123][ T3067] em28xx 7-1:0.0: board has no eeprom [ 689.802686][ T3067] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 689.811064][ T3067] em28xx 7-1:0.0: dvb set to bulk mode. [ 689.843434][ T5917] em28xx 7-1:0.0: Binding DVB extension [ 689.877567][ T3067] usb 7-1: USB disconnect, device number 21 [ 689.897052][ T3067] em28xx 7-1:0.0: Disconnecting em28xx [ 689.909567][T13176] sctp: [Deprecated]: syz.0.2007 (pid 13176) Use of struct sctp_assoc_value in delayed_ack socket option. [ 689.909567][T13176] Use struct sctp_sack_info instead [ 689.928822][T13176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2007'. [ 689.973508][ T5917] em28xx 7-1:0.0: Registering input extension [ 689.980067][ T3067] em28xx 7-1:0.0: Closing input extension [ 690.079689][ T3067] em28xx 7-1:0.0: Freeing device [ 690.118069][T13187] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2010'. [ 691.364595][T13202] binder: 13201:13202 ioctl c018620c 20000740 returned -22 [ 691.429869][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2014'. [ 691.926785][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 692.324654][ T3067] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 693.205294][ T3067] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.226669][ T3067] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 693.267676][ T3067] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 693.309736][ T3067] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.348090][ T3067] usb 4-1: config 0 descriptor?? [ 693.788738][ T3067] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 693.818460][ T3067] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 693.870862][ T3067] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 694.046578][T13215] netlink: 'syz.3.2018': attribute type 3 has an invalid length. [ 694.063259][T13215] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2018'. [ 694.097637][ T5941] usb 4-1: USB disconnect, device number 67 [ 695.426052][T13229] xt_CT: You must specify a L4 protocol and not use inversions on it [ 695.565520][T13237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2025'. [ 695.973015][T13244] block nbd0: server does not support multiple connections per device. [ 695.997904][T13243] block nbd0: shutting down sockets [ 730.217691][T13262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 730.245892][T13262] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 730.464280][T13262] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 730.491845][T13264] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 730.500512][T13264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 730.525242][T13266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 730.553701][T13266] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 730.576581][T13266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 730.588158][T13271] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 730.595559][T13266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 730.608536][T13271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 730.616127][T13266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 730.630295][T13266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 730.633371][T13272] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 730.642338][T13271] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 730.644599][T13272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 730.651972][T13271] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 730.667800][T13271] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 730.681221][T13271] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 730.689112][T13271] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 730.698486][T13271] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 730.698564][T13266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 730.705707][T13271] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 730.718599][T13272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 730.729593][T13266] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 730.761416][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 730.931054][T10043] bond0: (slave syz_tun): Releasing backup interface [ 730.973028][T13266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 730.980434][T13266] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 730.990057][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 730.991408][T13266] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 731.315927][ T5842] syz-executor (5842) used greatest stack depth: 18384 bytes left [ 731.493124][T10873] bond0: (slave syz_tun): Releasing backup interface [ 731.629880][T13266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 731.656662][T13266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 731.701709][T13266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 731.743854][T13266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 731.755481][ T5833] bond0: (slave syz_tun): Releasing backup interface [ 731.768785][T13266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 731.787311][T13266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 731.993729][T13266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 732.004353][T13266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 732.034142][T13266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 732.053399][T13266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 732.061048][T13266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 732.068931][T13266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 732.159743][T13266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 732.171178][T13266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 732.180771][T13266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 732.220643][T13266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 732.233056][T13266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 732.240516][T13266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 732.476668][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.543515][T13266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 732.599038][T13266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 732.622715][T13266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 732.683192][T13264] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 732.694659][T13264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 732.704056][T13264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 732.717481][T13264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 732.747931][T13264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 732.752772][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 732.773793][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 732.781321][T13264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 732.790344][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 733.029072][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.164816][T13266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 733.176482][T13266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 733.186960][T13266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 733.201125][T13266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 733.209094][T13266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 733.225439][T13266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 733.353374][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.411842][T13266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 733.421694][T13266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 733.433730][T13266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 733.443192][T13266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 733.453884][T13266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 733.462790][T13266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 733.564086][T13266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 733.575168][T13266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 733.592890][T13266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 733.623606][T13266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 733.633010][T13266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 733.640442][T13266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 733.831519][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.085386][T13266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 734.098945][T13266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 734.123124][T13266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 734.191715][T13266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 734.217304][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 734.220624][T13264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 734.227905][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 734.234075][T13264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 734.240549][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 734.314826][T10926] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 734.325877][T10926] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 734.334364][T10926] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 734.341673][T10926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 734.352480][T10926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 734.359980][T13264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 734.372483][T13264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 734.372662][T10926] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 734.402489][T10926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 734.433233][ T11] bridge_slave_1: left allmulticast mode [ 734.438977][ T11] bridge_slave_1: left promiscuous mode [ 734.523294][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.613546][ T11] bridge_slave_0: left allmulticast mode [ 734.619279][ T11] bridge_slave_0: left promiscuous mode [ 734.663345][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.815279][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 734.825946][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 734.844390][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 734.872996][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 734.902812][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 734.912786][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 734.938761][T13264] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 734.949847][T13264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 734.958629][T13264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 734.966946][T13264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 735.029859][T13264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 735.037697][T13264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 735.684162][T13264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 735.695970][T13264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 735.708258][T13266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 735.739745][T13266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 735.747012][T13264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 735.764527][T13266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 735.765263][T13264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 735.791735][T13264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 735.799624][T13266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 735.799859][T13264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 735.815413][T13266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 735.823644][T13266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 735.995089][T13266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 736.012685][T13266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 736.025403][T13266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 736.060976][T13266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 736.092709][T13266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 736.102414][T13266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 736.548799][T13266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 736.565085][T13266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 736.573691][T13266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 736.595078][T10926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 736.606972][T10926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 736.624697][T10926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 736.644037][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 736.652775][T10926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 736.675066][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 736.682888][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 736.683095][T13264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 736.715216][T10926] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 737.027023][ T11] team0: Port device bond0 removed [ 737.137657][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.163789][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.181981][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 737.193520][ T11] bond0 (unregistering): Released all slaves [ 737.218539][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 737.228283][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 737.251851][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 737.284081][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 737.291463][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 737.372226][T10926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 737.409881][T10926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 737.446217][T10926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 737.496032][T10926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 737.532864][T10926] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 737.540318][T10926] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 737.674595][ T11] bond1 (unregistering): Released all slaves [ 737.793933][ T11] tipc: Left network mode [ 738.071128][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 738.083793][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 738.093391][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 738.102983][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 738.110746][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 738.119262][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 738.193260][T10926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 738.206051][T10926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 738.218553][T10926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 738.228126][ T11] mac80211_hwsim hwsim8 wlan0 (unregistering): left allmulticast mode [ 738.239527][T10926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 738.247891][T10926] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 738.272337][T10926] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 738.552700][ T11] hsr_slave_0: left promiscuous mode [ 738.590935][ T11] hsr_slave_1: left promiscuous mode [ 738.605362][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.622662][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.633657][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.641138][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.698005][ T11] veth1_macvtap: left promiscuous mode [ 738.713717][ T11] veth0_macvtap: left promiscuous mode [ 738.719686][ T11] veth1_vlan: left promiscuous mode [ 738.733051][ T11] veth0_vlan: left promiscuous mode [ 738.825171][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 738.842876][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 738.856865][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 738.868288][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 738.878237][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 738.887039][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 739.069227][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 739.079272][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 739.112842][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 739.139488][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 739.169280][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 739.183885][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 739.606375][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 739.628983][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 739.639726][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 739.663095][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 739.687452][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 739.695399][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 739.853312][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 739.865406][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 739.875159][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 739.889232][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 739.899128][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 739.906932][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 740.312074][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 740.331688][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 740.349190][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 740.392361][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 740.420453][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 740.442110][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 740.598992][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 740.624801][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 740.633969][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 740.644242][ T11] team0 (unregistering): Port device team_slave_1 removed [ 740.652448][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 740.660332][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 740.669377][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 740.888432][ T11] team0 (unregistering): Port device team_slave_0 removed [ 741.164828][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 741.176266][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 741.185425][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 741.225583][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 741.236489][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 741.244067][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 741.538362][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 741.562883][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 741.572083][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 741.603667][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 741.627113][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 741.643947][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 741.964770][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 742.005465][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 742.020971][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 742.043119][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 742.075805][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 742.103525][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 742.300029][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 742.315652][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 742.345734][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 742.355385][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 742.364197][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 742.374833][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 742.750411][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 742.770938][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 742.783064][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 742.815246][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 742.859754][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 742.869194][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 743.009305][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 743.020935][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 743.040611][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 743.070890][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 743.093877][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 743.101291][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 743.511061][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.549782][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 743.561528][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 743.587285][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 743.609791][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 743.627897][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.640035][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 743.655437][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 743.729559][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 743.798188][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 743.798842][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.824851][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 743.846011][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 743.860404][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 743.872850][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 744.030558][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.249242][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 744.260490][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 744.272059][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 744.285559][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 744.293849][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 744.301358][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 744.368650][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.410969][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.434017][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 744.445557][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 744.465307][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 744.485951][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 744.498601][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 744.511724][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 744.624943][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.682869][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.799784][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.832610][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.877886][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 744.892409][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 744.908767][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 744.919522][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 744.952058][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 744.952840][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.977787][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.977810][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 745.183304][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 745.196300][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 745.209053][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 745.218739][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 745.226902][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 745.252848][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 745.297591][ T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.465575][ T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.575687][ T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.675134][ T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.692232][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 745.704009][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 745.718423][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 745.737612][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 745.755358][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 745.768379][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 745.929022][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.976626][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 745.987742][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 746.001035][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 746.021700][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 746.046133][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 746.062759][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 746.110422][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.259450][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.404485][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.508645][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 746.520710][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 746.537303][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 746.555471][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 746.564202][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 746.571616][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 746.609222][ T11] bridge_slave_1: left allmulticast mode [ 746.622607][ T11] bridge_slave_1: left promiscuous mode [ 746.628434][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.656219][ T11] bridge_slave_0: left allmulticast mode [ 746.661946][ T11] bridge_slave_0: left promiscuous mode [ 746.679755][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.680638][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 746.702952][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 746.719225][ T11] bridge_slave_1: left allmulticast mode [ 746.725980][ T11] bridge_slave_1: left promiscuous mode [ 746.726058][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 746.731723][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.754371][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 746.762193][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 746.770574][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 746.771162][ T11] bridge_slave_0: left allmulticast mode [ 746.808195][ T11] bridge_slave_0: left promiscuous mode [ 746.833554][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.870712][ T11] bridge_slave_1: left allmulticast mode [ 746.911549][ T11] bridge_slave_1: left promiscuous mode [ 746.932923][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.955388][ T11] bridge_slave_0: left allmulticast mode [ 746.961120][ T11] bridge_slave_0: left promiscuous mode [ 746.984347][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.029457][ T11] tipc: Resetting bearer [ 747.209272][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 747.228822][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 747.241900][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 747.250336][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 747.260905][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 747.273871][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 747.383595][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 747.402580][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 747.410951][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 747.430327][T10926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 747.438900][T10926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 747.452972][T10926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 747.467656][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.779109][ T11] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 747.798605][ T11] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 748.012088][T10926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 748.034282][T10926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 748.059370][T10926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 748.100917][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 748.104455][T13264] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 748.118554][T13264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 748.123430][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 748.127576][T13264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 748.138841][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 748.140730][T13264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 748.154459][T13264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 748.161883][T13264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 748.548121][T13264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 748.560347][T13264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 748.576094][T13264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 748.596088][T13264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 748.603906][T13264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 748.612033][T13264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 749.105693][T13264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 749.134251][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 749.138783][T13266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 749.143190][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 749.153099][T13266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 749.164786][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 749.165579][T13266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 749.172449][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 749.180208][T13266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 749.194058][T13266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 749.198978][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 749.201397][T13266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 749.700040][ T11] tipc: Disabling bearer [ 749.920788][T13266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 749.928780][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 749.955820][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 749.966447][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 749.974927][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 749.975117][T13266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 749.992977][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 749.993556][T13266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 750.008313][T13266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 750.008338][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 750.016501][T13266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 750.044989][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 750.594984][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 750.607735][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 750.618438][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 750.642284][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 750.664698][T13266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 750.669778][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 750.680633][T13266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 750.696581][T13266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 750.701348][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 750.716053][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 750.723872][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 750.732999][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 751.015561][ T11] bond0 (unregistering): left promiscuous mode [ 751.022251][ T11] bond_slave_0: left promiscuous mode [ 751.030808][ T11] bond_slave_1: left promiscuous mode [ 751.046575][ T11] team0: Port device bond0 removed [ 751.072268][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.103571][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.126589][ T11] bond0 (unregistering): Released all slaves [ 751.147998][ T11] ÿÿÿÿ (unregistering): Released all slaves [ 751.350838][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 751.371449][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 751.394552][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 751.415952][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 751.448980][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 751.451007][ T11] bond1 (unregistering): Released all slaves [ 751.462492][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 751.764045][ T11] bond0 (unregistering): left promiscuous mode [ 751.770299][ T11] bond_slave_0: left promiscuous mode [ 751.781315][ T11] bond_slave_1: left promiscuous mode [ 751.820822][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.832424][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.843940][ T11] bond0 (unregistering): Released all slaves [ 751.857553][ T11] ÿÿÿÿ (unregistering): Released all slaves [ 752.065039][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 752.073210][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.083961][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 752.091648][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.100589][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 752.113093][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 752.127088][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 752.127412][ T11] bond0 (unregistering): Released all slaves [ 752.140710][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 752.154950][ T11] ÿÿÿÿ (unregistering): Released all slaves [ 752.521831][ T11] bond0 (unregistering): left promiscuous mode [ 752.522132][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 752.530193][ T11] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 752.546894][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 752.555949][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 752.556535][ T11] team0: Port device bond0 removed [ 752.570468][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 752.579114][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 752.595332][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 752.610384][ T11] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 752.638504][ T11] bond0 (unregistering): Released all slaves [ 752.651581][ T11] ÿÿÿÿ (unregistering): Released all slaves [ 752.806239][ T11] ɶƣ0GC¦!: left promiscuous mode [ 752.908239][ T11] tipc: Left network mode [ 752.940627][ T11] tipc: Left network mode [ 752.946610][ T11] tipc: Left network mode [ 753.128138][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 753.151754][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 753.162792][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 753.184880][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 753.202966][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 753.210661][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 753.528449][ T11] mac80211_hwsim hwsim3 wlan0 (unregistering): left allmulticast mode [ 753.608743][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 753.622259][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 753.631633][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 753.645514][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 753.663021][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 753.674010][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 754.006980][ T11] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode [ 754.038255][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 754.051816][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 754.061780][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 754.076273][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 754.084070][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 754.091450][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 754.537397][ T11] hsr_slave_0: left promiscuous mode [ 754.550683][ T11] hsr_slave_1: left promiscuous mode [ 754.558447][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.572392][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.580561][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.601863][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.619297][ T11] hsr_slave_0: left promiscuous mode [ 754.625707][ T11] hsr_slave_1: left promiscuous mode [ 754.631673][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.639418][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.647753][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.655373][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.671514][ T11] hsr_slave_0: left promiscuous mode [ 754.679637][ T11] hsr_slave_1: left promiscuous mode [ 754.686121][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.696844][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.705168][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 754.713707][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.721311][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.725474][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 754.741846][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 754.762679][ T11] hsr_slave_0: left promiscuous mode [ 754.768576][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 754.776818][ T11] hsr_slave_1: left promiscuous mode [ 754.783692][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 754.791113][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 754.891420][ T11] team0: left promiscuous mode [ 754.896377][ T11] team_slave_0: left promiscuous mode [ 754.902425][ T11] team_slave_1: left promiscuous mode [ 754.908805][ T11] veth1_macvtap: left promiscuous mode [ 754.914634][ T11] veth0_macvtap: left promiscuous mode [ 754.920367][ T11] veth1_vlan: left promiscuous mode [ 754.926042][ T11] veth0_vlan: left promiscuous mode [ 754.935032][ T11] team0: left promiscuous mode [ 754.939865][ T11] team_slave_0: left promiscuous mode [ 754.945651][ T11] team_slave_1: left promiscuous mode [ 754.951387][ T11] veth1_macvtap: left promiscuous mode [ 754.957128][ T11] veth0_macvtap: left promiscuous mode [ 754.962880][ T11] veth1_vlan: left promiscuous mode [ 754.968223][ T11] veth0_vlan: left promiscuous mode [ 754.975216][ T11] veth1_macvtap: left promiscuous mode [ 754.980798][ T11] veth0_macvtap: left promiscuous mode [ 754.988420][ T11] veth1_vlan: left promiscuous mode [ 754.994175][ T11] veth0_vlan: left promiscuous mode [ 755.000754][ T11] team0: left promiscuous mode [ 755.005707][ T11] batadv0: left promiscuous mode [ 755.011400][ T11] veth1_macvtap: left promiscuous mode [ 755.017064][ T11] veth0_macvtap: left promiscuous mode [ 755.022929][ T11] veth1_vlan: left promiscuous mode [ 755.028282][ T11] veth0_vlan: left promiscuous mode [ 755.385855][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 755.402869][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 755.412384][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 755.421577][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 755.438188][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 755.449577][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 755.501345][ T11] infiniband syz0: set down [ 755.954956][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 755.987584][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 755.999010][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 756.024980][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 756.044642][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 756.066617][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 756.385760][ T11] team0 (unregistering): Port device team_slave_1 removed [ 756.480022][ T11] team0 (unregistering): Port device team_slave_0 removed [ 756.571548][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 756.610456][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 756.639059][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 756.666308][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 756.687953][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 756.695401][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 757.257091][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 757.302652][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 757.315620][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 757.348393][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 757.363734][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 757.371355][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 757.841313][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 757.858253][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 757.888442][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 757.906980][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 757.919555][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 757.938538][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 758.228785][ T11] team0 (unregistering): Port device team_slave_1 removed [ 758.314699][ T11] team0 (unregistering): Port device team_slave_0 removed [ 758.472493][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 758.504983][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 758.534223][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 758.564761][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 758.581348][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 758.589445][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 758.997393][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 759.008750][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 759.028365][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 759.049161][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 759.074168][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 759.081808][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 759.518434][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 759.531296][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 759.540329][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 759.550102][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 759.565479][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 759.589605][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 760.060504][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 760.077463][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 760.106850][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 760.117738][ T11] team0 (unregistering): Port device team_slave_1 removed [ 760.130443][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 760.159742][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 760.167378][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 760.235411][ T11] team0 (unregistering): Port device team_slave_0 removed [ 760.739971][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 760.751070][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 760.771978][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 760.783918][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 760.800459][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 760.818532][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 761.259015][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 761.270996][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 761.308461][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 761.337880][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 761.349216][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 761.356686][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 762.000017][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 762.014616][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 762.034508][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 762.054791][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 762.062637][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 762.079787][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 762.539408][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 762.560059][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 762.577425][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 762.598424][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 762.606698][ T11] team0 (unregistering): Port device batadv0 removed [ 762.616847][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 762.624767][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 763.033246][ T12] smc: removing ib device syz0 [ 763.053293][ T5886] lo speed is unknown, defaulting to 1000 [ 763.165138][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 763.176213][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 763.214127][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 763.231716][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 763.247045][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 763.258027][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 763.682341][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 763.706929][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 763.727563][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 763.753348][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 763.774800][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 763.782244][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=8 req=2031 state=3 status=67 (errno 32: Broken pipe) [ 764.172693][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 764.184101][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 764.192714][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 764.216029][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 764.226840][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 764.235721][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2