last executing test programs: 5m14.234594912s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet6_sctp(0xa, 0x1, 0x84) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020) 5m13.969435952s ago: executing program 3 (id=10): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe78, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) socket$kcm(0x29, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000100)={0x0, 0xf786, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="84010000000000009c110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f541cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebebf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff8279421778d4a914512ca803da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef00000000000000000000373494cd59e8ba04ec8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a4af7464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f952b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf41ba88c7eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d4f237dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b8667b4dd0c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) io_setup(0x8, &(0x7f0000004200)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12f, 0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) 5m13.387849844s ago: executing program 3 (id=14): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r0, 0x22, 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$unix(r3, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x8001) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000b80)={0x4, "310d9249af541f2c12e38ad6b12cd6232fb76aa71d871825694d0d3fcd4e8d96eef2dacd97c5e6d65edbcdde5cecfca8e95ee9e40643d9f63054ad6dcfcdfb8b", {0x0, 0x3ff}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) 5m12.350049788s ago: executing program 32 (id=14): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r0, 0x22, 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$unix(r3, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x8001) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000b80)={0x4, "310d9249af541f2c12e38ad6b12cd6232fb76aa71d871825694d0d3fcd4e8d96eef2dacd97c5e6d65edbcdde5cecfca8e95ee9e40643d9f63054ad6dcfcdfb8b", {0x0, 0x3ff}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) 2m41.353671615s ago: executing program 2 (id=406): socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1c9c03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00003e4000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x3e1300, 0x0) socket(0x28, 0xe5c8065fcaa8837b, 0x3ff) write(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8010, r4, 0x1000) timer_create(0x2, &(0x7f0000000080)={0x0, 0xf, 0x0, @thr={0x0, 0x0}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x14, 0x2096, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9d, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000e40)={0x2020}, 0xffffffffffffff74) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) 2m40.767947463s ago: executing program 2 (id=407): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2001}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x4}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, 0x0, 0x0) listen(r2, 0x3) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r3, 0x101, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept4$bt_l2cap(r2, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000300000000000000000000f851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000ff00006600020000000000180000000000000000000000000f00009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000500)=""/229, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x33}, 0x78) openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 2m40.59394702s ago: executing program 2 (id=408): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005a000d03"], 0x1c}], 0x1}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=0x0], 0x48) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000340), 0xa040, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 2m39.504646453s ago: executing program 2 (id=412): chdir(0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x28a100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$read(0xb, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) 2m35.246858213s ago: executing program 2 (id=421): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x62, 0x0, 0x0) 2m34.424357795s ago: executing program 2 (id=423): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x8}, 0x18) openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0xa0100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) lstat(&(0x7f00000004c0)='./bus\x00', &(0x7f0000002400)) socket$nl_generic(0x10, 0x3, 0x10) 2m33.826739551s ago: executing program 33 (id=423): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x8}, 0x18) openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0xa0100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) lstat(&(0x7f00000004c0)='./bus\x00', &(0x7f0000002400)) socket$nl_generic(0x10, 0x3, 0x10) 13.202237124s ago: executing program 5 (id=857): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0xb}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x24, &(0x7f0000000580)=""/36, 0x0, 0x40}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000280)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000380)={0x60, 0x1, &(0x7f00007e0000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xeb, 0x0, 0x12, 0x3, 0x53, 0x8, 0x1a, 0xc5}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000010c0009800800014000008f"], 0xfc}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/resume', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0xff, @remote, 0x6}, 0x1c) setsockopt$inet6_tcp_buf(r6, 0x29, 0x4e, 0x0, 0xe80167985de45f57) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000001c0)=0x81) ioctl$TCSETA(r7, 0x5406, &(0x7f0000000100)={0xfefd, 0xd15, 0x1fff, 0x3, 0xc, "73765633184c1f53"}) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000006c0)=0x16) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000190001002dbd7000fcdbdf250a2014000004fe09000e000008001e0005000000140005"], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x44000) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="fc", 0x7}]) getpeername$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c) 12.483990248s ago: executing program 1 (id=859): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x13d102) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x80, 0x2af63) socket$nl_generic(0x10, 0x3, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc, 0xfffc], [0x0, 0x4]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB='\x00'/10, @ANYRES64=r3], 0x4}}, 0x0) sendfile(r5, r0, 0x0, 0x100000000) 12.162197244s ago: executing program 6 (id=861): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x20) bind$unix(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x20000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x6}, &(0x7f00000001c0)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) 12.065628655s ago: executing program 4 (id=862): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) fcntl$setsig(r2, 0xa, 0x800020) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, {0xa, 0x4e24, 0x10001, @mcast1}, 0xffffffffffffffff, {[0x4, 0x3ff, 0x8, 0x400, 0x3, 0x0, 0x3, 0xe5d]}}, 0x5c) 11.910470613s ago: executing program 1 (id=863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="180000004200110affffffff000600000000c70039000000466f76047ad72581fcc9984a3e8d3031faac9bd27e68fb06fde6673796ecfc3563865ec956e4a126fd56d8b089c33e1950c60cd1a306990fb08ac712c0a33259df73c3687cbed7c6b6dcf39abb8d0d356b3e957315a00000000000000096711f406b64820330fba3d4e84227852129f9688e5a98718d7ae6a4024ec2b670c622dce192eef15a08d78d495489a4426b338d28dc298167619e26dbc5fcebe9f98d241ef7b5b8aa430c0ae66e7075248a3ffbe3f94adb7745b12db0b641b54c88055e68259ecc194ebe27bf3aa5111e8f321621c622e8"], 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000040), 0x0, 0x0, &(0x7f0000000180)=""/34, 0x22}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000bf660000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000db60000b70300000000008385000000710000009500000000000000", @ANYRESOCT=r2], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffce7, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) sendmmsg$inet6(r3, &(0x7f0000002380)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x9, @remote, 0x80000000}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x28}}, {{&(0x7f0000000280)={0xa, 0x4e20, 0x6d3e, @private2, 0x2}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000780)="ea9814123c4fe14d627b356adaffedd0ed946829c05c6b7f8f53a8459654ce7c48d3d36d93a537bf86533db94d040912ef22ca38086cc8405934b84255e0031c076bf5c31b29f32644f53ef82f9d2ff8bdb23afc825aebef01e9fc584d4ee369b32e6410ab4fc0447c8f61874f39ea91dae5bc473424a8b9f6043cb90297ea43d68d2fa0fcf52e9e9087084e9327712e60f3", 0x92}, {&(0x7f0000000440)="8391c9e38c0a73c149a39986f822dc64cd02f625f74d51a1e53f85504155a7e434bb2e92fcf3b7ee61c97739a6fc1e3f0dd34faace8f97df11397c4d29310d7342dca6f34f69dd6b2d7ce41cb55d5ffaa86ebc943c2373725bb043daed7ea5f0d87878ad75b5", 0x66}, {&(0x7f0000000840)="9e9ff8c9dd9113c2cf44804f2178f713513d82436d7716392342ba29eac6e773d050f9259706a1b36ed03248087266a1a940447583afd6e49c5c4cf709a9f12b79eda160df93f061118a9ffa576abf5b8147a775", 0x54}, {&(0x7f00000008c0)="db6392332d69dc47d9b0fd64fb899ddaddcc47e18dd50d1abfb048cbab9d80086ff31a375a6420df3379581b5ca1a10a1615b7d36c40cdfef7df1a94888ac9610d185db9a1d432339c52067ee9617ffab18e9c6f6f4bf11cfa3cb924c6d0788375703e6bf4aa25843ecb30edf013e2ec25cf", 0x72}, {&(0x7f0000000940)="e1440bad92e3a4448c98c67f9fac791b9cf1", 0x12}, {&(0x7f0000000980)="a9309932e6caf418951a73bcce1f785c9b6b66720786aaf7567a72e4dd090082238513b799223bb08f963c769bea8366a3b39c58ceb7c7bf8d6da1dea4824e44a3b480d1ac19afa90c443cf020bb3242fd65b9cebae5840b2a376605ed392b80e6f4342655b4379c21dc71085d0221b10cb880830c22cc9798dfeb8dd32514ee6be0bb88a2295429c60d689844dc34aa9d92cc254af9455c5c9a8ad26b62e83bf81b9f193025402e796e7514b124e946697be594a90dd3576eec8caf95ae0214e6868a4ca6f354345d53f89904d0639410b8b8e5e4d9e6a18f856cc7983fff63f0e889d67cc844b9ecce", 0xea}, {&(0x7f0000000a80)="5f6ed0a616a937480794dfc5f20acce4dbf5f16970d3e4888ef41d3034816a301948f64b9d757f99695cbdfb2225e67e17c212e3938e43d6d588a01d4dc8c385c34986d264dabb9ccddd6a428b89f364fdb4fb9f49afbb98dc8a17695bfc39bdb6bbcb91cde68e45eef6569c5cad195c4d38165fb2c219c86254409f675ada7848e96e5ad473d9172e2db04a9791b4eeb2a0c1a9d6951197cef21017e7016484e6765271ae4d329edb4c96e4f0f72f7fb7ac84a3c329d3c6fe68168ea5a2fd390d0c29806e9f4eef14c29c7a71771e06dd9ed6e7c95a78850b1f5df66943f76ff12f49bb5ceb63be8257e6678bbcd5e0de8061f80c4255c0c1", 0xf9}, {&(0x7f0000001300)="1d5b7ae157ef482f9b850adfebbb5ff14732ec5b2dd8c7eb02b74b415e1c4cb33232d8cbdcba1085f2fa9d4695a752d7d108b39dcd6c4f7434fff47a4bf8f82d6b6d160278547c37a96406c64c45c70c11f7ed48c48f7974c278bda7c19dcb37556ccdfe128f979fe3d64881187c379084f8ed1086a165fb2a00cc5839068c7110187c39d5aad382c624ca9f735aaaba124b38e479ca0cf36e8c0cfb52debc46860d2d9f71184474462f63c95f8e7f7eb9c5a5e6d22a1a06f180f94c4e8458db21e118ebb1faa9ea5c91e4b94a09934df5ab8f36648ef31db495f50327b1e479ec79d521278eaa8e674d669b51a2b73de2f6161c83df9a2a76e48d8c12ab1df4d02300b115881ef3c5318d4f051e02c70defc7dcc993e864ceb5b52f1f1a34cd665be41145734142d197615915b68b383fe1c886cdf0a1960f3ea0919bc904a6cf6b0c8401617c082d1ae3ce60ec887e9932065602dc4464c180e0ce0b053195d88ef04db695358f1efac0c53ba162bd412251a9f403f90773c85ed67635ac6b12ee2807587ded0271aa9a36b4f702ae96f69793fce78e67100afb9f281477f883d6d1fc2d009d71ce2928dad9bc2147d079722a536cb88e2401c7405376f7db7af2835ca29dbce8ed7fc5e742a421b4883a3e6523c85a5bad765a470d8ba9faa8d023d81fd2e9c8918eac2331d7fb7c0ba16787c1e837802479e4358e62b99f3e477afd93d5504977a98269d9a9900decffa3b85d9a2be11d98f88bb71cada7690a28d4e9f21356031da5caf2bc94a6448562c1af1b5a0b9c4a1c6c7872adf47c3750b9b517acfd8273fc22e882319062a44cea04625a884b83daa4748e6fa5d914135e464a0be0eacb5fcc8a6af679c8c5ea1e257e803847693c1fe1875495ef19ee2d630588eb01110ff47dc90d7e73c68cf674a8f121016625e52ead246d1cadf80fe8781e37cb17d047e4ef2089ef711e958ba67460ea8cd1ea77a5f377b49e7885baea0c9c646c83dfbc8a077cd368020afe0899e7e9b9d8ffeecf1531cd05741310f74a21807715cea1b846bb46e1b49da32cc657549d8afe02ed1e818a3840d9a0055d7db0884244c30de07365e42e4c28aedc41ca71f6d1ed3284b2ef04eb55b307858872015242954a69a253f8408d62dc10c8ebf921cc7bd735801f19a689505aaac15803e56d0e30b08fea9353d498504223e110ff0fce057701b36356617322561fbad8d2e0c377557d95a0f0ddf12faeda959ffb7fe6be375dd5acd72f9167c052cfa8c251d56cc09476b89fbc1e049c9829a2a2aabe826fdcea804a8e57f0b01f3ce53486d2b72cbe9f2303fbeb2cdddfb7ace6db4c1685f917e0bed52ac036935aaa510c8bda62359a05476d88b3f18065c242fa1569f6196bfc6f5b87eb0a0a9283f08df6f07eab27649870fb9e5f5b2b7c173de218b0c99118dde19e409e95817c7864ba2435effbfd6393465993817f77c896babbe95a66e940d0eae496c9c18f5939750ee70dec2d6a0e1e0d6232fecd4960ce3e45127276d05f5f4ba4a157971d52a47753402287a1687287dbce3b3d3974d0c8cfeed76490e7aae89ab9cc6479d9b85f136301571cb4fc9f0373b8b2648afc701fbe87be75dad00585b2f73b6aed3b7b657ce2376e864aeb725d9ceb153bc382613ccbc77155d4ca021f0b26c48b2def12d281366b4ef0b279fba31689a914425c06d2b3814a45f70cc7ab17787046438f4dbe01fee453abf97dfc96c93394e06f524e8833aa72119ff39174b6c0c322e769dff8f2e303790d0c70b7691f3b1a5e9a59207480e91ad52a72fcc3fc2d03a2a03aafae688812a088225266f009ae9be98d73821d7e52f5f7ed03578421c137bcc369f33fd884cc8083998f47088a40b41261407a06682ee3aa149bea1814f98cf42614738c26a3f93fe1961f40c2f9de796260416ecf058b567d81fc81b03c35d205b1b895862a642bc235670b3d110368ecaccfbb812776750af5f9d4661272b7c74bd8b6e0ce71ab1807e6c471fc859689c1bee0f5adcb618259246b74124bcf1f9b0aa516ede42f0b369390a4f0c635d897de7046d134d476f64c2069bff2a7c3907379f3d1a267a6965f2f7da065fa95308f4b14fdc826bee79ea05474e60bed4451af0ea9c895341f744232ffd1ea29864ad4b49849f1a53d3bd667d9fdbe5d1b60adc6f98dd759d71012b2fcb981f985d929bea5fb32745ff2ca6ce335efd4e10ad16fd25aba30fd6ced17daa3b832c47a2ae38f5e037326853886366819abd13c1965c45a5fc1527d03c9dd8ba4d108b2b42abc2575b846514475b2f4dbdcf6a79a025185031f133cb86b0ba21e13d59c9d2c50ecf484fbab76f24bfe30d2fbcadc1eb32644be6ac337197885e98827ab235b822509c86bab5d18b21e0c37f23446bcc4e8099af62aed3b62e9b0600646f33fd0ba48a9e4eff2a408f21d518c937d74ba8ae73800f3bd402846b01d9d6078ffa5c8ddd193d1da94fa839c681c7b7bbe719ab43cfaab21019140ae7c42181bb22db4ef5abf4c6454048108567777fc4eb03c607b4e517d336eabb13fa76157ba8ea5a550c91e53a200bbba7fddd884233ca292fca7f4d23abf31be227f531b706364ce71f0c18fd581ba9baa16c8f338efff156c9261a0962190888e2cba56ee90375623bd7f81a56a183b523a90c555b2de78dca84fffdf5f3f685df974f990fa3e885aa335fef027ce0b1152ae2169acd38583cc0336b6a75e5f714d01330b015e3bdfa883d831a56dacfdfcb3d1c755c206a0e8ab6e56f62b816d7960044c471b668a9778db297034ef62199ccc1da4fb7c7e10f02c04a770deca204715a5eb2f95dc32d459d0b2e00efbf55441467051e1e5b85843d719900c5e27fd702989d21c0d60651f344d615f4a86e82e09965dbf25ee50f0541b3a59a035e8bece8385b257c86fbb3d25156f41b22055285cf54b3baff89bf407fa51eb0f29ec82eb6361799b48484621ca1f03742f62c439f998ede632f48ea76ce322f5eb7d8c81e1a553a769c97994dfeda4eed981507c67902d33d0327d5eeb11c02b644e6b50e452d7ce73bce3154f144967cbe4cceab46f86c7914cd993e001d08b7d92b0c8af47ac08048a6c1ec10930ad6667f865611f8d5dab4db6bd493eb4afb1de8eeccb7a4cf12c20204bd1077714136255d14a3a7ac74fe3e6cb8e48c5feb7c81d0a9880782986e27802d843d994fd66c8cc2fed00a06aedd2559b6936a619b0c36b7a194c911570f5f526c7fe926eb93512926d12374da1821dfdc165907928ffc3df06a314e1f4f947388ce533b35c78596abeb24a85afe483d5320ca22a1ffaf13ac7de0d8a8d9677a4636d678be75e1c9f9f5b25bc49d986cf47621b90e190792854573a4a87f90fafc25b9af13a2ec8e25cf4a5259c3725451e940646930ff521b8594c87733239196aef99b0878b0de2e1facba0ae7b14d472939d833b4731b9265f475666cd932f8b18987fb582b0dd1cda0ea89babfca74f35eb0355f72fbb84dd0cde51b7cef99c79447506906c65a7239cf00c8060b42e01eb0ea35c945aa5deafc53f0ab5d79f9a73202075f08f1c4c7c5f3c8ad6614991dbc8086726070e9583799c933f019866ea78e00586721a02f8ff6c67207693405f96ba0150781d048a137711b60d5fda015d97ccfa405d179441e59c692502ad2d485847a7ee47f086a45562c492d02761e371904cd22080375062a72683028a6bd8b4713139adffc145f0973be519cd4b4a9978ed384e42a72b9fa233694ff74358c0bdb37b3924646063c14d9487d1b55b6ef005405d6752e87c7b2c8a057a18853373ee6f5c7c4214e7cf4634d7e6c3ff487441c9a70c923be50e3976528004160c37635531c443d822308aea4c3d0f6c53d25fbfe9b7ae3e5cb0a2e0b9c8dd93e05775bf3d769758d321cf74fe96ccd0db8e1103e06c6ffc9fd3eab7a72b1805d0e924383c255106cc5b4bdf92f6f842c06ec846946b41d02f59dd7eb64817c806cdd001bf0b2e1920b73828eea854c2eb8c4b8af3e5536df943a0fed25e91ca7aa1657bb9879d76b9e775adff97aa9311257694eee85a7476aafd2ec8774012a7dd0a661fb195a74657cded8294f8240dc6039e4be54d62c70e94fc4baa47734a5d57f4dc63239c24e6dbbf4e83aaa0d11927712d84aa1445e69680a129fcd5565f2bcd1e6bf2df7ef31f90f86c05ffe450128dca82388cee6e9f8d97f276a58fc19d9521e1561a34f4befcd1ec713e44d419c04ad6eae0104775a97e5283a37c48f41718353f217195c90dcf5278651eee3a56ba091745d4e8f541089b1907180c47376328c3d6ca320375d040abcd8780c641124bceedb2c9029a157dfa4d3aef2a4c24a14a9388fd5279f7fabe1e59733278245bfc3a99806b672adab6f81e7fe6f068a2ab9378af1a3f99457eb23f6b3181c835e7da019049be3edb60b3fb382d852a7261f608b6ac9694b2f021172d4f256817b1010e67ce602ee12ab3265d3f21a2d5f8c4737e1bf4d74d07df40449db50b70a509398e0bde6d7ccc03e878076f61b428ff76097967a8030d6d65a2324b4d56bb5487a477221a6444ba701589c08d8bc829232954b95be23d101d7dfaebd8c90df5bd685d0df4154532fbf75053e5ae374da25ddbfd7a34adf2938288517f6b1dbb9c9e20cf87e8d8acd80c5d97d2fc1dfe151a1dcd27cb9b627c59d6ef43f564a8e504a855f6d456b704ebd6f7055624f01d3db34ed824ea4d209aaf1304d2dfa6432ade0c41d58e9e75cf326feebcb4d05c68f56afdf6aa91863083c75dd89f4a666267c26bb14b4f9b64a36ea61a3cb3354c6fdbb5371d2121c47fc1f16c429050e53463dfab7af7eee82f0e309631d2b9478fbc0982a3163f71e83207f543f207137ded5369188180a5c0563ca8e75ef0ae3b0b761710de295f0df557bc299faa733741dfe915b44a700852fde3fd02ac5492f9b71389518174b3d4a5daed9037b8269f63a356876d7471d64ffb6531db9928ac919fb5164b23697dd88fc27c3339de7d2677090352bf4fa7bc724b9cafbc2e193b8de8bcfceb9a27190b890c6cb5a8b4c09e702a2319eef8d09a10999ca3007a4267129a8c1eab20ceef37343793e632a15cc7679614b1c74944f3513c0d37ae5eba3bac8daf25ec78050288b852aafd0517fec29ece68e6f020af697c69d83702167fd3d062a5b6ba7407ee7c38e78559b08458114b11a3623bffcb8ea25f2b5e9dc9d46a2161536a2cd0ca5325aeba97bf7bc296266251d5b289bba222531733d21c57ecb226888c2383e8ee3a6d7ae6d6ca0b1656e43867b8b33155570acbf3d00a2de29a95706aafe50c697bb5c0dbe2c6afafc09656aa9e9f610f53acfded6b8296cc0b297c47f4059fbfe77795295da29e8f5292ca32018e3885aca1868033e46fa5850a9dfd78c6d24026df487d804858d286ab27b3e234ad35c06e0397fdae8ea81d05c6c1dd8fcd01fab0f48f87990e92dc7290ce053cd992139061674e4f5be91e663133670090ef5cdcbf96376713b9ea47f8e9960417a3d61fd2c9a0797b1b75bdabdc54c9946d25bfce0b59cd84bfa75aab0dde64252b3087c0aa44fda5f2c05f167542e242f56cafa101ec3c3ea39d9050101efd2d33488facb1415101f319eec02974fcef1d09e4bfc97f21b8bc9020cda2c8d6b8355e1523b104f7ecd09518d5a4aa4803168abaea776ec7f91611a9c6069b819e54f938be437ff8052097f39d4ced90a7758c4100", 0x1000}, {&(0x7f0000000b80)="033b8c6266252f53f54efbf2edad393bccfd9c48e9875ba039acbdee807095e82fdfaed70880fb7b7326d320965c06d1c9cd865b5102a1726c655c60d2a6ed851b0319f454c2270f6b662aa74293459de532fb5a4a1f918170127091b7d87052a11a38c623a37e03af4d1d75184d7ef464ff5312600473a271cd4c8bdf703acb9d950a6d8e46eced65376d9f01361df459a36ac7299a44129cb81263281c72ab93b9a488a95a69931e502d1a0d5b3c98c9eec989095612a7b57fdd4695c3af04f0d05bffdee1d9dd7959f640e7d54853f21b6247da41aab753f11ce46fd3365c0838e1397b11a476d6a676b6", 0xec}], 0x9, &(0x7f0000002440)=ANY=[@ANYBLOB="300000000000000029000000360000003a02000000000000040105c910fe88000000000000000000000000000100000024000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="000000e2e7c5d03cd6629da4e3077b2f2a71f1353e91c585538e0783091da8e8865068c2009f66e2206c5726d6b4c0d6481f68c20e9d311a3b03e862c63510e55a391645375dfdab349c2af691d3e6e893bbae9fe7622b8b806545232b5235de06ac5e"], 0x58}}, {{&(0x7f0000000ec0)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000f00)="9ad77b7128d6197d0228f38049780e0212c1532a2cbfdf8892bc6b9cbd14ca45cb6d09db02e1", 0x26}, {&(0x7f0000000f40)="4de8ede876c50b3468a7d3ecbfa6fe2e57bf17dd7617f5c3c2f96a5ea44c45fc7d66b5a68634920ef610623acb8cafef93567b40211a072af57526b55e8290601b28b048301641004c3aca0de8cd79437839140a47a0f1443a2e39274fa5c696c6e642ccf797177d204901dac02ad31c4dc82110a4b83e1bfb6a35fc707d619fa899cb4388f4e7a1f9005f6495f351415217511237995d6373f49d8e6eaf58b51d87d9a6837663e9731415c09191", 0xae}, {&(0x7f0000001000)="eb1bc61fbd7d965db648e6567cb1b071626eb4536a84b5b25e3ac49cf621b6c91ed1c1e4", 0x24}, {&(0x7f0000001040)="28419449905041862efc430dc96091f61896bd005459014652fd9cb31241b277e544b103e121f4771c6584ddedd0401e8fe44e2e25c39f30508875e3792d4fee85e36a9eb635c540e5bdc8fbcc52abf13de4aeebe809284bec1f693767988ee04b2094b5", 0x64}, {&(0x7f00000010c0)="ec385a1d4a93ffdad8ca2c5953ed23491dacc9f1b765e40d52eb091ac2350ea33ddfe2", 0x23}, {&(0x7f0000001100)="7406e4dccf06ff11fb208bd900061afe32e73a5b3f1274955afb0288238211708d1b6da4cb96bc328678f8cd80b771f3d168b11865cef417b5c90c52ad11d48e63860ea83644ef42a472cb5578b124322227721fb13f36261f99832cce5866653882c9d700835a80cc8a066917325138cb461269833a898d34eed073bd053d053931ee69edc17a183c17b6b81f01dc2a1d10f507e857f4a86f9d1483a0c363efc1c9206cd980cb6db750ac2e7cc7d17e33af68fb4b486317607b198b3bc61a64c5ce4f3f9d58437a2870ea1e1ec225d9f3ed836cae0d8504660b503f6c69e245", 0xe0}], 0x6, &(0x7f0000000d40)=ANY=[@ANYBLOB="780000000000000029000000390000c00070d638c8dd3d2eab4c57f79e00320c000900000000ff010000000000000000000000000001ff010000000000000000000000000001fc02000000000000000000000000000000000000000000000000000000000000188000000000000000000000000000aafe80590464a42b78b711e3cb81f53fc3e693207dc8e88734d2b4ece273b7c190f9414667b859757fa8c03de15d9494083a38b29744a8bc4aa047bc208b0060f93ce74c4ede"], 0x78}}], 0x3, 0x24004004) r6 = socket(0x0, 0x80000, 0x6) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x40040) getpid() 11.07168432s ago: executing program 4 (id=864): syz_open_dev$usbfs(&(0x7f0000000100), 0x8, 0x40200) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan4\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_genetlink_get_family_id$nfc(&(0x7f0000000780), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000000000000000000b02000029"], 0x0, 0x34, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 10.300100151s ago: executing program 5 (id=865): write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 10.243013983s ago: executing program 0 (id=866): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x120) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004140)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a302f328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d1ae7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13766204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edce6c85cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) read$FUSE(r0, &(0x7f0000008140)={0x2020}, 0x2020) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.613241947s ago: executing program 1 (id=867): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x8, 0x80000) mkdir(0x0, 0x13b) syz_open_dev$sndmidi(&(0x7f0000003640), 0x2, 0x20042) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e0000", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 8.966115415s ago: executing program 5 (id=868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x0, &(0x7f0000004540)) syz_usb_connect(0x1, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x46, 0x36, 0x56, 0x8, 0x4b4, 0x8613, 0x958f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd1, 0x6e, 0xa5}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000002000000000000000000000d0a00000000000000010000060400000000000e01"], &(0x7f0000001f40)=""/4092, 0x86, 0xffc, 0x8}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r4}, 0x18) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) mremap(&(0x7f00000ae000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 8.368618825s ago: executing program 4 (id=869): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r0, 0x22, 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$unix(r3, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x8001) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000b80)={0x4, "310d9249af541f2c12e38ad6b12cd6232fb76aa71d871825694d0d3fcd4e8d96eef2dacd97c5e6d65edbcdde5cecfca8e95ee9e40643d9f63054ad6dcfcdfb8b", {0x0, 0x3ff}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) 7.370776228s ago: executing program 4 (id=870): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 7.22924251s ago: executing program 0 (id=871): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xcc1c, 0x40, 0x12, 0x7}, {0x6, 0xaa, 0xb7, 0x9}]}) 7.096037754s ago: executing program 4 (id=872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8fe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r5}}], 0x20, 0x2400e044}, 0x0) 7.039312424s ago: executing program 0 (id=873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0xe00) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000a00)={'nr0\x00', &(0x7f0000000340)=@ethtool_per_queue_op={0x4b, 0xe, [0xf8b, 0x6, 0x8, 0xf, 0x2e41, 0x6, 0x5d, 0x8001, 0xf7, 0x6d4, 0x5, 0x3, 0x0, 0x10, 0x1e1, 0x35762774, 0x200, 0x1e46, 0x8000, 0x7, 0x2, 0x24, 0x80, 0x1, 0x4, 0x247, 0x2, 0x3ff, 0x2, 0xfffffffc, 0xe, 0x8, 0x1372, 0x4, 0x7, 0xffffff72, 0x4, 0x2, 0x3, 0x6, 0xffff, 0x8000, 0x8, 0xffffb3e3, 0x5, 0x9, 0x3, 0x80000000, 0x3, 0x8, 0x4, 0xa, 0x80000001, 0x6, 0x9, 0x4, 0x2, 0x5, 0x9, 0x825, 0x2, 0x3, 0x4, 0x3, 0x401, 0xfffffffb, 0x1000, 0x0, 0x9, 0x3, 0x5721, 0x1, 0x3, 0x9, 0xc, 0x40, 0x45, 0x4, 0x4, 0x3, 0x3, 0x69a0, 0x200, 0x1000, 0x400, 0x3, 0x8, 0x8, 0x3ff, 0x10001, 0x5, 0x0, 0x5, 0x6, 0x10001, 0x10, 0x5, 0x1000, 0x41a7, 0x9, 0x200, 0xac9, 0xfe, 0x0, 0x2, 0x7, 0x9, 0x5, 0x2, 0xae7, 0xfffffffb, 0x8, 0x3, 0x8000, 0x4, 0x4, 0x8, 0x5, 0xfffffff7, 0xfffffffa, 0x10001, 0x8001, 0xfffffffd, 0x2008, 0x401, 0x2, 0x1, 0x4], "884d545be0944519696250dcf8710140e9c1b1a86f29339740486769de79f6db8ddb4af71445709e3105e598d8cc8ba7ace06afa30fe39c4b8018cc262836cfdbe891516c2f8a09d124377b4"}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000880), 0x125001, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={r4, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000580)={r4, 0x1, 0x6, @local}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB="1c0000001c000104000000000000e9ff2d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x80) syz_open_procfs(0x0, &(0x7f0000000600)='comm\x00') 6.977074766s ago: executing program 6 (id=874): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r9, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}}, 0x0) 6.791794738s ago: executing program 4 (id=875): openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300), 0x0) (async) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() sched_setscheduler(r3, 0x3, &(0x7f0000000040)=0xfffffffd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000fc0), r4) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) (async) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3000002, 0x6031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f00000003c0)={0x1}) syz_open_dev$cec(0x0, 0x0, 0x0) (async) syz_open_dev$cec(0x0, 0x0, 0x0) socket(0x1d, 0x6, 0x6) syz_io_uring_setup(0x36b2, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x3, 0x5000032f, 0x0, r0}, &(0x7f00000006c0), &(0x7f0000000140)) (async) r7 = syz_io_uring_setup(0x36b2, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x3, 0x5000032f, 0x0, r0}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) (async) sendto$inet6(r5, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 6.652951202s ago: executing program 6 (id=876): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) ioperm(0x7, 0x1, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40000) syz_open_dev$evdev(0x0, 0x2, 0x822b01) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003000000020fc0290780000001ce00003000306907800fa000945f4fff60065000501e3ff020a010102ac1414aa"], 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) 6.419588742s ago: executing program 5 (id=877): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x800) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840), 0x0) setreuid(0xee01, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x50, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x9, 0x1, {0xffffffffffffffff}, {0xee00}, 0x8001, 0xffffffff}) r1 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r2, r1}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) 5.655789806s ago: executing program 6 (id=878): openat$autofs(0xffffffffffffff9c, 0x0, 0x10000, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f0000000240)={0x0, &(0x7f00000000c0)}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x6040015) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg0\x00'}) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r5) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r8, &(0x7f0000000340)={'#! ', './file0'}, 0xb) 5.620898143s ago: executing program 0 (id=879): syz_open_dev$usbfs(&(0x7f0000000100), 0x8, 0x40200) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan4\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_genetlink_get_family_id$nfc(&(0x7f0000000780), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000000000000000000b02000029"], 0x0, 0x34, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 4.183485301s ago: executing program 5 (id=880): r0 = syz_io_uring_setup(0x422, &(0x7f00000000c0)={0x0, 0x20079af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120825", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r9 = socket$kcm(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r9, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0, 0x801}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.608566412s ago: executing program 5 (id=881): syz_io_uring_setup(0x3047, &(0x7f0000000000)={0x0, 0x2aa8, 0x8000, 0x0, 0xb6}, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x59, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000120000000000000001"]) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0xfffffffffffffd0a, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r3}, 0x10) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x4, 0x2, 0xffff, 0x3, 0x1, 0xfffffffffffffffd, 0x0, 0x36a, 0x20003f}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000020605000000010000000000070000001400078008001140000000000800124000000c8f0500010006000000050005000200000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700025ac3b0b050f9e1ff5f8e21ef9247b400179de89c9f055b7b2e24afb1a32ecd8c00826725aa70a8a370ba9cf4c5f37c1e6cafecc48d4f1e6663b52dbc60803cecb4c45eab64fce283a323645e8061b92f6333b7233"], 0x60}}, 0x20004000) io_setup(0x1, &(0x7f0000000b80)=0x0) write$bt_hci(r4, &(0x7f00000002c0)={0x1, @reject_conn_req={{0x40a, 0x7}, {@any, 0x2}}}, 0xb) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_test={0x1a, 0x5, 0xce0, 0x2, [0x6717ffa8, 0x9]}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.508629159s ago: executing program 0 (id=882): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000480), 0x0) capset(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x22, 0x0) read$msr(r0, &(0x7f000001b000)=""/102384, 0x18ff0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x41) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='loginuid\x00') close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYRES8=r3], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) write$vhost_msg_v2(r2, &(0x7f0000002840)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) r4 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000004c0)={0x1, @bcast, @netrom={'nr', 0x0}, 0xfffffe4c, 'syz1\x00', @null, 0x5, 0x5, [@bcast, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000005a80)={0x2, 0x0, {&(0x7f00000003c0)=""/110, 0x6e, 0x0, 0x1, 0x2}}, 0x48) gettid() 1.506907845s ago: executing program 1 (id=883): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) (fail_nth: 4) 1.472169644s ago: executing program 6 (id=884): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x85) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x2, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)}}], 0x2, 0x4008040) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r2, &(0x7f0000000100)='-1\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/warn_count', 0x40801, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) r5 = userfaultfd(0x80801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(0x0, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) mount$bind(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1006080, 0x0) syz_open_dev$usbmon(0x0, 0x4, 0x8e001) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x5520, 0x8, 0x9, 0x31e}, &(0x7f0000000240), 0x0) 1.351992426s ago: executing program 1 (id=885): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x3032344d, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}) socket$inet(0x2, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141102) (async) writev(r1, &(0x7f0000000640), 0x0) (async) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00'}, 0x18) accept$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xffffffffffffffff) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0x0, 0x1, 0x5f, 0xff, 0x0, 0xa6, 0x2, 0x5}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x4, 0xfe, 0x5, 0x0, 0x0, 0x4}]}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c7b849d30000000000fb0000140012ff6872d3af4d8c8b6ac29495c3f150", @ANYRES32=0x0, @ANYBLOB='\b\x00(\x00\x00\x00\x00\x00'], 0x44}}, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d226ed98068646e8a687ac3eb5f16e4efe04b190b12b61ca4ad1c0212096e7afa6f444526c7d41b7fbfcb545a7ba180bc61ecc145a4daccc63b12d78e78aef10b6c227037d354349336908edcbdc9bf1", @ANYRES32=0x0, @ANYBLOB="8304050000000000800012800e00010069703665727370616e0000006c000280140006002001000000000000000000000000000214000600fc020000000000000000000000000001060002000030000014000700fc020000000000000000000400001200050008004b0000000800010000000000", @ANYRES64=r3, @ANYRESHEX, @ANYRES16=r2], 0xa0}, 0x1, 0x0, 0x0, 0x20000041}, 0x8000) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x46) r9 = syz_io_uring_setup(0x9e, 0x0, 0x0, &(0x7f00000001c0)) io_uring_enter(r9, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) eventfd(0x9) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='\t\x00\x00\x00\t\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB="0000000000000000de2828a0dd1ec46500000000a4ff1d41073902017d4ce69ccbe88e4c1985bcb64ee2974b1a80d4748e696d3d04731eada0aba20e17969cfe277f58dcd4cd13a3a86480800cf1eea99539266fe2529644eceb51f05bd8c8cfff0df12df977e370209f6e08feacb5d60be4be6ad59331210a9d4f0799d3482126e19276955ed13c01aac45273503fa10967e16ee6f736f26133bcb337a82ae81cb5ba68c16abcb6f63581be7f1f88abf5ea4d24dde6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)="d04cd774e1d5", &(0x7f0000000000), 0x8a, r10}, 0x38) 180.49677ms ago: executing program 1 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380000003e000701fefffffffcffffff017c000008004280040008000c00018006000600894f000010000280"], 0x38}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000100000000300000000000000000000001000000000000000200000000000000079bf9679cdf59a25b42ffb5d8d5dd5a6aa327a285dad8f5535f41bebd7262bd70f03f484453c3a008cf2ac8c25681828d1c68515a31cf10d775aadd98834df98df39ec5d39bf1c0d27f40103cf250d"], 0x24, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x1000) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380000000000019078ac1e0001ac1414aa0b009078030000004500000000000000002f0000ac14140ae0000001040086dd0000ffffdfa4455d08b4b7b507a20c33e4ce24e51b911a11dc57c8d970ba234bb2136b151efea1c2a3da6c52a73ee69b8417bcf4cc758112ba800e34522b4662f960dc8c1436581bb1ca6fefb9f7377b53515ff67d8ac54be5a521348e0da14f9a5db409c6d0d232c3b21c7b17bd9b37bc6f74f010f67cc64f72692009578977b6a27db15874bdefdd3d000000000000000000000000f15fca42886060700140392a5d"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) syz_emit_ethernet(0x1ce, &(0x7f0000000b00)={@broadcast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x198, 0x3a, 0x0, @remote, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "e597c5", 0x9ac, 0x6c, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x20}, [@dstopts={0x73, 0x9, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x7e, 0xc, [0x8001, 0x7, 0xa, 0x170, 0x0, 0x1]}}, @hao={0xc9, 0x10, @remote}]}, @dstopts={0x2, 0x20, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x20, {0x0, 0x6, 0x3, 0x0, [0x3f, 0x2, 0x9]}}, @generic={0x5, 0x52, "8d5c56dd9a4ec7134359e2040175cf6c0b966de90917dd875f82ccb45fb0f20c743d4812ba21b210981d76462af4220d6bcde7ef179c74e8a90d40d5c94f6e96e4204ca51d9c3ea152dd05abe6877a43de16"}, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0x4}, @generic={0x6, 0x79, "e72769b313190bb67c0c51f00d083a7c111b8e266bee609cd5e80fec1a6ed4d07c8e79f3fbb29ee42c98e65ce2c56559f33e54c716c6e3542d2092e04d38719c89ae8cb79a311bcfdde19149c64a7c2bb3bc987ccc900ebb2ff8cafde23b3dacdf459f7cbb26a7d2fc90840da73f61aea9002b3b2e30ac6cee"}, @enc_lim={0x4, 0x1, 0x81}]}], "cc8790a4d5ee3a09"}}}}}}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, 0x0) write(r4, &(0x7f0000000000)="0a000000010001", 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1e, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000200000071a4"], 0x0}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 105.780114ms ago: executing program 0 (id=887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xae6, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000500)={0x1, [[0x7, 0x7, 0x7, 0x4, 0x8, 0x3fe, 0x1], [0x9, 0xf, 0xffffff15, 0x5, 0x1, 0x7, 0x8, 0x1], [0x10000, 0xfffffffa, 0x9, 0x6, 0x10000, 0x7, 0x4, 0x800]], '\x00', [{0x9, 0x984a, 0x0, 0x1}, {0x4, 0x61331e2, 0x0, 0x0, 0x1}, {0xe66, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x87, 0x0, 0x0, 0x1, 0x1}, {0x7, 0xe}, {0x401, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x5, 0x1, 0x1, 0x0, 0x1}, {0x40, 0xffffff9b, 0x1}, {0x2, 0x9, 0x0, 0x1, 0x1}, {0x52, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x3, 0x1, 0x1, 0x1, 0x1}, {0x80, 0x7, 0x0, 0x0, 0x0, 0x1}], '\x00', 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/235, 0xeb}, {&(0x7f0000000140)=""/76, 0x4c}, {&(0x7f00000001c0)=""/214, 0xd6}], 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000300"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r9}, 0x10) syz_emit_ethernet(0xd81, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045"], 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=888): socket$inet(0x2, 0x5, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x10, 0x1412, 0x1, 0x70bd25, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(&(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x7ffffffc) close(r3) mount$overlay(0x0, &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0), 0xa0000c, &(0x7f0000000780)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'GPL\x00E\x92\xfd\x91\xb3G\x00\xcfD\xbb!\f\x04\xd2\xd7\xba^m\xaf\xd6\a\xef\xb7y2'}}]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40046f41, &(0x7f0000000440)=0x1f) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r6, 0x101, 0x70bd26, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x200400c4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) kernel console output (not intermixed with test programs): - 0 [ 128.546588][ T6032] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.578642][ T6032] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.598492][ T6032] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.647596][ T6437] team0: No ports can be present during mode change [ 128.696183][ T6440] Smack: duplicate mount options [ 128.913230][ T6447] overlayfs: failed to clone upperpath [ 130.184882][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.193017][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.689437][ T6459] bridge2: entered promiscuous mode [ 131.998227][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.006062][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.075029][ T6472] sctp: [Deprecated]: syz.2.118 (pid 6472) Use of int in max_burst socket option deprecated. [ 132.075029][ T6472] Use struct sctp_assoc_value instead [ 132.365026][ T6476] netlink: 420 bytes leftover after parsing attributes in process `syz.1.119'. [ 132.890221][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.901125][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.137957][ T6478] overlayfs: missing 'workdir' [ 133.299168][ T6484] Smack: duplicate mount options [ 133.898237][ T6493] Smack: duplicate mount options [ 134.491972][ T6498] team0: No ports can be present during mode change [ 134.830908][ T6505] bridge3: entered promiscuous mode [ 135.356955][ T6509] netlink: 52 bytes leftover after parsing attributes in process `syz.2.128'. [ 135.802680][ T6518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.961676][ T6524] netlink: 420 bytes leftover after parsing attributes in process `syz.2.130'. [ 138.691484][ T6540] sctp: [Deprecated]: syz.4.135 (pid 6540) Use of int in max_burst socket option deprecated. [ 138.691484][ T6540] Use struct sctp_assoc_value instead [ 139.148133][ T30] audit: type=1326 audit(1755845939.092:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6558 comm="syz.2.136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c2458ebe9 code=0x0 [ 139.847944][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 140.218298][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 140.244583][ T9] usb 6-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 140.284785][ T9] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 140.788028][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.796159][ T9] usb 6-1: Product: syz [ 140.837077][ T9] usb 6-1: Manufacturer: syz [ 140.855528][ T9] usb 6-1: SerialNumber: syz [ 140.864312][ T9] usb 6-1: config 0 descriptor?? [ 140.874692][ T9] cdc_ether 6-1:0.0: probe with driver cdc_ether failed with error -22 [ 140.894757][ T9] usb 6-1: unsupported MDLM descriptors [ 142.237458][ T6596] netlink: 420 bytes leftover after parsing attributes in process `syz.1.143'. [ 143.100573][ T5843] usb 6-1: USB disconnect, device number 2 [ 143.211114][ T5854] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 143.224852][ T5854] CPU: 0 UID: 0 PID: 5854 Comm: kworker/u9:5 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 143.224881][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.224894][ T5854] Workqueue: hci3 hci_rx_work [ 143.224933][ T5854] Call Trace: [ 143.224945][ T5854] [ 143.224954][ T5854] dump_stack_lvl+0x189/0x250 [ 143.224980][ T5854] ? kernfs_path_from_node+0x2c/0x260 [ 143.225005][ T5854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.225027][ T5854] ? __pfx__printk+0x10/0x10 [ 143.225055][ T5854] ? kernfs_path_from_node+0x2c/0x260 [ 143.225077][ T5854] ? kernfs_path_from_node+0x2c/0x260 [ 143.225101][ T5854] ? kernfs_path_from_node+0x22c/0x260 [ 143.225124][ T5854] ? kernfs_path_from_node+0x2c/0x260 [ 143.225151][ T5854] sysfs_create_dir_ns+0x259/0x280 [ 143.225177][ T5854] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 143.225202][ T5854] ? do_raw_spin_unlock+0x122/0x240 [ 143.225234][ T5854] kobject_add_internal+0x59f/0xb40 [ 143.225269][ T5854] kobject_add+0x155/0x220 [ 143.225298][ T5854] ? __pfx_kobject_add+0x10/0x10 [ 143.225322][ T5854] ? _raw_spin_unlock+0x28/0x50 [ 143.225356][ T5854] ? get_device_parent+0x366/0x3a0 [ 143.225390][ T5854] device_add+0x408/0xb50 [ 143.225418][ T5854] hci_conn_add_sysfs+0xd5/0x1e0 [ 143.225451][ T5854] le_conn_complete_evt+0xc3a/0x1220 [ 143.225489][ T5854] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 143.225516][ T5854] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 143.225535][ T5854] ? __asan_memcpy+0x40/0x70 [ 143.225588][ T5854] ? __pfx___mutex_lock+0x10/0x10 [ 143.225610][ T5854] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.225631][ T5854] ? skb_pull_data+0xfb/0x200 [ 143.225663][ T5854] hci_le_conn_complete_evt+0x187/0x450 [ 143.225709][ T5854] hci_event_packet+0x78c/0x1200 [ 143.225734][ T5854] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 143.225769][ T5854] ? __pfx_hci_event_packet+0x10/0x10 [ 143.225791][ T5854] ? kcov_remote_start+0x4d3/0x7f0 [ 143.225819][ T5854] ? lockdep_hardirqs_on+0x90/0x150 [ 143.225843][ T5854] ? hci_send_to_monitor+0xe2/0x570 [ 143.225874][ T5854] hci_rx_work+0x46a/0xe80 [ 143.225906][ T5854] ? process_scheduled_works+0x9ef/0x17b0 [ 143.225928][ T5854] process_scheduled_works+0xade/0x17b0 [ 143.225974][ T5854] ? __pfx_process_scheduled_works+0x10/0x10 [ 143.226007][ T5854] worker_thread+0x8a0/0xda0 [ 143.226049][ T5854] kthread+0x70e/0x8a0 [ 143.226074][ T5854] ? __pfx_worker_thread+0x10/0x10 [ 143.226093][ T5854] ? __pfx_kthread+0x10/0x10 [ 143.226116][ T5854] ? _raw_spin_unlock_irq+0x23/0x50 [ 143.226130][ T5854] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.226146][ T5854] ? __pfx_kthread+0x10/0x10 [ 143.226172][ T5854] ret_from_fork+0x3fc/0x770 [ 143.226193][ T5854] ? __pfx_ret_from_fork+0x10/0x10 [ 143.226219][ T5854] ? __switch_to_asm+0x39/0x70 [ 143.226242][ T5854] ? __switch_to_asm+0x33/0x70 [ 143.226264][ T5854] ? __pfx_kthread+0x10/0x10 [ 143.226290][ T5854] ret_from_fork_asm+0x1a/0x30 [ 143.226332][ T5854] [ 143.509914][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.541757][ T5854] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 143.567857][ T5854] Bluetooth: hci3: failed to register connection device [ 144.008062][ T6603] netlink: 52 bytes leftover after parsing attributes in process `syz.5.148'. [ 144.667215][ T6618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.273017][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 147.008794][ T6638] netlink: 56 bytes leftover after parsing attributes in process `syz.5.154'. [ 147.118790][ T30] audit: type=1326 audit(1755845947.072:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6641 comm="syz.1.155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe06b8ebe9 code=0x0 [ 147.564196][ T6654] netlink: 420 bytes leftover after parsing attributes in process `syz.4.157'. [ 148.479517][ T5931] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 148.718031][ T5931] usb 6-1: device descriptor read/64, error -71 [ 149.277807][ T5985] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 149.295861][ T6668] netlink: 52 bytes leftover after parsing attributes in process `syz.1.161'. [ 149.387820][ T5931] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 149.448158][ T5985] usb 5-1: Using ep0 maxpacket: 32 [ 149.476969][ T5985] usb 5-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 149.551278][ T5985] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 149.563712][ T5931] usb 6-1: device descriptor read/64, error -71 [ 149.600485][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.631743][ T5985] usb 5-1: Product: syz [ 149.635962][ T5985] usb 5-1: Manufacturer: syz [ 149.698208][ T5931] usb usb6-port1: attempt power cycle [ 149.797902][ T5985] usb 5-1: SerialNumber: syz [ 149.832468][ T5985] usb 5-1: config 0 descriptor?? [ 149.985954][ T5985] cdc_ether 5-1:0.0: probe with driver cdc_ether failed with error -22 [ 150.661921][ T5985] usb 5-1: unsupported MDLM descriptors [ 150.717761][ T5931] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 150.998089][ T5931] usb 6-1: device not accepting address 5, error -71 [ 151.957923][ T6710] netlink: 420 bytes leftover after parsing attributes in process `syz.0.168'. [ 152.027332][ T5948] usb 5-1: USB disconnect, device number 3 [ 152.816370][ T6717] batadv_slave_1: entered promiscuous mode [ 152.845001][ T6716] batadv_slave_1: left promiscuous mode [ 153.215363][ T6728] Smack: duplicate mount options [ 155.811342][ T6760] Smack: duplicate mount options [ 156.034280][ T6762] netlink: 420 bytes leftover after parsing attributes in process `syz.5.180'. [ 158.396820][ T6786] netlink: 420 bytes leftover after parsing attributes in process `syz.0.186'. [ 159.051790][ T6790] batadv_slave_1: entered promiscuous mode [ 159.069557][ T6788] batadv_slave_1: left promiscuous mode [ 159.213517][ T6794] sctp: [Deprecated]: syz.0.189 (pid 6794) Use of int in max_burst socket option deprecated. [ 159.213517][ T6794] Use struct sctp_assoc_value instead [ 159.706814][ T6806] netlink: 420 bytes leftover after parsing attributes in process `syz.4.192'. [ 161.272323][ T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 161.478053][ T43] usb 1-1: device descriptor read/64, error -71 [ 161.737897][ T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 161.968712][ T43] usb 1-1: device descriptor read/64, error -71 [ 162.167113][ T43] usb usb1-port1: attempt power cycle [ 162.630733][ T6838] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 162.649288][ T6838] cramfs: wrong magic [ 163.169296][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 163.213474][ T43] usb 1-1: device descriptor read/8, error -71 [ 164.466763][ T6862] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 167.597856][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 167.768044][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 167.790507][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 167.814811][ T24] usb 6-1: config 224 has an invalid interface number: 244 but max is 0 [ 167.838302][ T24] usb 6-1: config 224 has no interface number 0 [ 167.851648][ T24] usb 6-1: config 224 interface 244 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 167.865269][ T24] usb 6-1: config 224 interface 244 has no altsetting 0 [ 167.903373][ T24] usb 6-1: New USB device found, idVendor=0b95, idProduct=1780, bcdDevice=f6.7a [ 167.923589][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.939404][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 167.949370][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 167.949395][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.949408][ T51] Workqueue: hci2 hci_rx_work [ 167.949432][ T51] Call Trace: [ 167.949441][ T51] [ 167.949449][ T51] dump_stack_lvl+0x189/0x250 [ 167.949473][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 167.949500][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.949521][ T51] ? __pfx__printk+0x10/0x10 [ 167.949550][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 167.949571][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 167.949596][ T51] ? kernfs_path_from_node+0x22c/0x260 [ 167.949617][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 167.949663][ T51] sysfs_create_dir_ns+0x259/0x280 [ 167.949688][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 167.949711][ T51] ? do_raw_spin_unlock+0x122/0x240 [ 167.949742][ T51] kobject_add_internal+0x59f/0xb40 [ 167.949772][ T51] kobject_add+0x155/0x220 [ 167.949801][ T51] ? __pfx_kobject_add+0x10/0x10 [ 167.949825][ T51] ? _raw_spin_unlock+0x28/0x50 [ 167.949858][ T51] ? get_device_parent+0x366/0x3a0 [ 167.949890][ T51] device_add+0x408/0xb50 [ 167.949920][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 167.949953][ T51] le_conn_complete_evt+0xc3a/0x1220 [ 167.949993][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 167.950027][ T51] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 167.950049][ T51] ? __asan_memcpy+0x40/0x70 [ 167.950077][ T51] ? __pfx___mutex_lock+0x10/0x10 [ 167.950098][ T51] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 167.950119][ T51] ? skb_pull_data+0xfb/0x200 [ 167.950145][ T51] hci_le_conn_complete_evt+0x187/0x450 [ 167.950176][ T51] hci_event_packet+0x78c/0x1200 [ 167.950200][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 167.950228][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 167.950251][ T51] ? kcov_remote_start+0x4d3/0x7f0 [ 167.950278][ T51] ? lockdep_hardirqs_on+0x90/0x150 [ 167.950303][ T51] ? hci_send_to_monitor+0xe2/0x570 [ 167.950332][ T51] hci_rx_work+0x46a/0xe80 [ 167.950362][ T51] ? process_scheduled_works+0x9ef/0x17b0 [ 167.950386][ T51] process_scheduled_works+0xade/0x17b0 [ 167.950440][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 167.950480][ T51] worker_thread+0x8a0/0xda0 [ 167.950532][ T51] kthread+0x70e/0x8a0 [ 167.950560][ T51] ? __pfx_worker_thread+0x10/0x10 [ 167.950581][ T51] ? __pfx_kthread+0x10/0x10 [ 167.950605][ T51] ? _raw_spin_unlock_irq+0x23/0x50 [ 167.950622][ T51] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.950640][ T51] ? __pfx_kthread+0x10/0x10 [ 167.950667][ T51] ret_from_fork+0x3fc/0x770 [ 167.950689][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 167.950713][ T51] ? __switch_to_asm+0x39/0x70 [ 167.950735][ T51] ? __switch_to_asm+0x33/0x70 [ 167.950757][ T51] ? __pfx_kthread+0x10/0x10 [ 167.950783][ T51] ret_from_fork_asm+0x1a/0x30 [ 167.950819][ T51] [ 167.950847][ T51] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 167.982308][ T24] usb 6-1: Product: syz [ 167.987027][ T51] Bluetooth: hci2: failed to register connection device [ 168.031245][ T24] usb 6-1: Manufacturer: syz [ 168.424592][ T24] usb 6-1: SerialNumber: syz [ 169.079062][ T6900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.158468][ T6900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.177424][ T6900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.218441][ T6900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.318963][ T6900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.688331][ T6900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.729214][ T6900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.788357][ T6900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.797476][ T6900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.934539][ T6900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.278935][ T24] asix 6-1:224.244 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 170.303780][ T24] asix 6-1:224.244: probe with driver asix failed with error -71 [ 170.344773][ T24] usb 6-1: USB disconnect, device number 7 [ 170.408805][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 170.790323][ T9] usb 5-1: device descriptor read/64, error -71 [ 171.738080][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 172.858799][ T6970] bridge4: entered promiscuous mode [ 172.878100][ T9] usb 5-1: device descriptor read/64, error -71 [ 173.001305][ T9] usb usb5-port1: attempt power cycle [ 173.107935][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 173.417838][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 173.429968][ T24] usb 6-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 174.140438][ T24] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 174.237950][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.275945][ T24] usb 6-1: Product: syz [ 174.293189][ T24] usb 6-1: Manufacturer: syz [ 174.314980][ T24] usb 6-1: SerialNumber: syz [ 174.346028][ T24] usb 6-1: config 0 descriptor?? [ 174.374608][ T24] cdc_ether 6-1:0.0: probe with driver cdc_ether failed with error -22 [ 174.386117][ T24] usb 6-1: unsupported MDLM descriptors [ 174.677930][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 174.843604][ T9] usb 5-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 174.852811][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 174.862402][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.873516][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 174.874111][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.897040][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.912768][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 174.922252][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.934415][ T9] usb 5-1: config 0 descriptor?? [ 175.428291][ T7020] bridge2: entered promiscuous mode [ 175.769442][ T5948] usb 6-1: USB disconnect, device number 8 [ 176.108203][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 176.122656][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 176.183127][ T9] usb 5-1: USB disconnect, device number 7 [ 177.648258][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 177.945845][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 177.972104][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.997448][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 178.045163][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.112024][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.260475][ T7065] Smack: duplicate mount options [ 178.298113][ T5948] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 179.013788][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 179.023865][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.177840][ T5948] usb 1-1: Using ep0 maxpacket: 8 [ 179.292083][ T5948] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.635201][ T7070] bridge3: entered promiscuous mode [ 183.470354][ T5948] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 183.497799][ T5948] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 183.510501][ T9] usb 6-1: usb_control_msg returned -71 [ 183.516139][ T9] usbtmc 6-1:16.0: can't read capabilities [ 183.522330][ T5948] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.544447][ T5948] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 183.553726][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.593435][ T9] usb 6-1: USB disconnect, device number 9 [ 183.790938][ T5948] usb 1-1: can't set config #16, error -71 [ 183.827018][ T5948] usb 1-1: USB disconnect, device number 8 [ 184.584441][ T7079] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 185.318686][ T7111] overlayfs: failed to resolve './file1': -2 [ 187.182109][ T7131] bridge3: entered promiscuous mode [ 187.273942][ T7135] Smack: duplicate mount options [ 187.899797][ T7145] FAULT_INJECTION: forcing a failure. [ 187.899797][ T7145] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 187.959725][ T7145] CPU: 1 UID: 0 PID: 7145 Comm: syz.0.267 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 187.959752][ T7145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.959764][ T7145] Call Trace: [ 187.959772][ T7145] [ 187.959780][ T7145] dump_stack_lvl+0x189/0x250 [ 187.959815][ T7145] ? __pfx____ratelimit+0x10/0x10 [ 187.959833][ T7145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.959853][ T7145] ? __pfx__printk+0x10/0x10 [ 187.959879][ T7145] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.959907][ T7145] should_fail_ex+0x414/0x560 [ 187.959931][ T7145] _copy_to_user+0x31/0xb0 [ 187.959957][ T7145] __htab_map_lookup_and_delete_batch+0xfe4/0x13a0 [ 187.960022][ T7145] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 187.960058][ T7145] ? __pfx_htab_percpu_map_lookup_batch+0x10/0x10 [ 187.960084][ T7145] bpf_map_do_batch+0x25b/0x5f0 [ 187.960102][ T7145] ? security_bpf+0x7e/0x300 [ 187.960127][ T7145] __sys_bpf+0x70c/0x860 [ 187.960156][ T7145] ? __pfx___sys_bpf+0x10/0x10 [ 187.960193][ T7145] ? ksys_write+0x22a/0x250 [ 187.960213][ T7145] ? __pfx_ksys_write+0x10/0x10 [ 187.960235][ T7145] __x64_sys_bpf+0x7c/0x90 [ 187.960259][ T7145] do_syscall_64+0xfa/0x3b0 [ 187.960279][ T7145] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.960297][ T7145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.960316][ T7145] ? clear_bhb_loop+0x60/0xb0 [ 187.960340][ T7145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.960358][ T7145] RIP: 0033:0x7f5a7b98ebe9 [ 187.960381][ T7145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.960397][ T7145] RSP: 002b:00007f5a7c757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 187.960424][ T7145] RAX: ffffffffffffffda RBX: 00007f5a7bbb6090 RCX: 00007f5a7b98ebe9 [ 187.960438][ T7145] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 187.960457][ T7145] RBP: 00007f5a7c757090 R08: 0000000000000000 R09: 0000000000000000 [ 187.960473][ T7145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.960483][ T7145] R13: 00007f5a7bbb6128 R14: 00007f5a7bbb6090 R15: 00007ffc05be3f28 [ 187.960513][ T7145] [ 188.227809][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 188.378099][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 188.427988][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.465497][ T30] audit: type=1326 audit(1755845988.412:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7151 comm="syz.2.271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c2458ebe9 code=0x0 [ 188.488609][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.512115][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 189.030708][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.095391][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 189.117959][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.452644][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 189.468154][ T9] usbtmc 5-1:16.0: can't read capabilities [ 189.821123][ T7175] FAULT_INJECTION: forcing a failure. [ 189.821123][ T7175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.835658][ T7175] CPU: 0 UID: 0 PID: 7175 Comm: syz.5.274 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 189.835683][ T7175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.835694][ T7175] Call Trace: [ 189.835702][ T7175] [ 189.835710][ T7175] dump_stack_lvl+0x189/0x250 [ 189.835736][ T7175] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.835758][ T7175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.835779][ T7175] ? __pfx__printk+0x10/0x10 [ 189.835817][ T7175] should_fail_ex+0x414/0x560 [ 189.835843][ T7175] _copy_to_user+0x31/0xb0 [ 189.835871][ T7175] simple_read_from_buffer+0xe1/0x170 [ 189.835896][ T7175] proc_fail_nth_read+0x1df/0x250 [ 189.835923][ T7175] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.835950][ T7175] ? rw_verify_area+0x258/0x650 [ 189.835978][ T7175] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.836003][ T7175] vfs_read+0x200/0x980 [ 189.836037][ T7175] ? __pfx___mutex_lock+0x10/0x10 [ 189.836059][ T7175] ? __pfx_vfs_read+0x10/0x10 [ 189.836089][ T7175] ? __fget_files+0x2a/0x420 [ 189.836115][ T7175] ? __fget_files+0x3a0/0x420 [ 189.836135][ T7175] ? __fget_files+0x2a/0x420 [ 189.836166][ T7175] ksys_read+0x145/0x250 [ 189.836186][ T7175] ? __pfx_ksys_read+0x10/0x10 [ 189.836217][ T7175] do_syscall_64+0xfa/0x3b0 [ 189.836239][ T7175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.836258][ T7175] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 189.836276][ T7175] ? clear_bhb_loop+0x60/0xb0 [ 189.836299][ T7175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.836318][ T7175] RIP: 0033:0x7f0634d8d5fc [ 189.836343][ T7175] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 189.836359][ T7175] RSP: 002b:00007f0632ff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.836378][ T7175] RAX: ffffffffffffffda RBX: 00007f0634fb6180 RCX: 00007f0634d8d5fc [ 189.836392][ T7175] RDX: 000000000000000f RSI: 00007f0632ff60a0 RDI: 0000000000000008 [ 189.836404][ T7175] RBP: 00007f0632ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 189.836416][ T7175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.836427][ T7175] R13: 00007f0634fb6218 R14: 00007f0634fb6180 R15: 00007ffc4b2263c8 [ 189.836459][ T7175] [ 190.780439][ T9] usb 5-1: USB disconnect, device number 8 [ 192.343061][ T7190] bridge4: entered promiscuous mode [ 193.466823][ T7196] Smack: duplicate mount options [ 193.515435][ T7193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.108077][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.283'. [ 194.312907][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.319789][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.877827][ T30] audit: type=1326 audit(1755845994.812:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7229 comm="syz.4.285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9788b8ebe9 code=0x0 [ 195.422639][ T7205] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 195.588516][ T5854] Bluetooth: hci0: command 0x0401 tx timeout [ 195.770314][ T7246] FAULT_INJECTION: forcing a failure. [ 195.770314][ T7246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.815687][ T7246] CPU: 1 UID: 0 PID: 7246 Comm: syz.0.287 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 195.815713][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.815724][ T7246] Call Trace: [ 195.815732][ T7246] [ 195.815740][ T7246] dump_stack_lvl+0x189/0x250 [ 195.815767][ T7246] ? __pfx____ratelimit+0x10/0x10 [ 195.815787][ T7246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.815807][ T7246] ? __pfx__printk+0x10/0x10 [ 195.815830][ T7246] ? __might_fault+0xb0/0x130 [ 195.815858][ T7246] should_fail_ex+0x414/0x560 [ 195.815890][ T7246] _copy_from_user+0x2d/0xb0 [ 195.815917][ T7246] x25_ioctl+0x148/0xf30 [ 195.815945][ T7246] ? __pfx_x25_ioctl+0x10/0x10 [ 195.815981][ T7246] ? kasan_quarantine_put+0xdd/0x220 [ 195.816017][ T7246] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 195.816038][ T7246] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 195.816059][ T7246] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 195.816078][ T7246] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 195.816099][ T7246] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 195.816130][ T7246] sock_do_ioctl+0xdc/0x300 [ 195.816154][ T7246] ? __pfx_sock_do_ioctl+0x10/0x10 [ 195.816173][ T7246] ? __lock_acquire+0xab9/0xd20 [ 195.816196][ T7246] ? __asan_memset+0x22/0x50 [ 195.816221][ T7246] ? smack_file_ioctl+0x24a/0x340 [ 195.816246][ T7246] sock_ioctl+0x576/0x790 [ 195.816269][ T7246] ? __pfx_sock_ioctl+0x10/0x10 [ 195.816289][ T7246] ? __fget_files+0x2a/0x420 [ 195.816310][ T7246] ? __fget_files+0x3a0/0x420 [ 195.816329][ T7246] ? __fget_files+0x2a/0x420 [ 195.816353][ T7246] ? bpf_lsm_file_ioctl+0x9/0x20 [ 195.816375][ T7246] ? __pfx_sock_ioctl+0x10/0x10 [ 195.816393][ T7246] __se_sys_ioctl+0xfc/0x170 [ 195.816423][ T7246] do_syscall_64+0xfa/0x3b0 [ 195.816443][ T7246] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.816463][ T7246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.816482][ T7246] ? clear_bhb_loop+0x60/0xb0 [ 195.816505][ T7246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.816523][ T7246] RIP: 0033:0x7f5a7b98ebe9 [ 195.816540][ T7246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.816556][ T7246] RSP: 002b:00007f5a7c778038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.816576][ T7246] RAX: ffffffffffffffda RBX: 00007f5a7bbb5fa0 RCX: 00007f5a7b98ebe9 [ 195.816590][ T7246] RDX: 0000200000000000 RSI: 00000000000089e3 RDI: 0000000000000004 [ 195.816602][ T7246] RBP: 00007f5a7c778090 R08: 0000000000000000 R09: 0000000000000000 [ 195.816614][ T7246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.816625][ T7246] R13: 00007f5a7bbb6038 R14: 00007f5a7bbb5fa0 R15: 00007ffc05be3f28 [ 195.816656][ T7246] [ 196.450433][ T5908] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 196.667813][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 196.687812][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 196.704638][ T5908] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.784677][ T5908] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.316114][ T5908] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 197.447858][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 197.461271][ T5908] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.462890][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.538055][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.548411][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 197.558773][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.572235][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 197.582218][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.630987][ T5908] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 197.819666][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 197.829461][ T9] usbtmc 1-1:16.0: can't read capabilities [ 197.849857][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.058145][ T7283] Smack: duplicate mount options [ 200.510290][ T5948] usb 1-1: USB disconnect, device number 9 [ 200.647949][ T5908] usb 3-1: usb_control_msg returned -71 [ 200.663848][ T5908] usbtmc 3-1:16.0: can't read capabilities [ 200.687780][ T5908] usb 3-1: USB disconnect, device number 2 [ 201.508125][ T5851] Bluetooth: hci0: command 0x0401 tx timeout [ 201.509843][ T5857] Bluetooth: hci4: command 0x0406 tx timeout [ 201.514361][ T5160] Bluetooth: hci3: command 0x0406 tx timeout [ 201.528181][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 202.024731][ T30] audit: type=1326 audit(1755846001.972:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7308 comm="syz.5.301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0634d8ebe9 code=0x0 [ 203.755480][ T5908] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 203.909042][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 203.914265][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 203.924847][ T5908] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.937422][ T5908] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.952839][ T5908] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 203.976136][ T5908] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.004395][ T5908] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 204.031266][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.070002][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 204.091611][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.101945][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 204.133092][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 204.174210][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.219950][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 204.254002][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.493860][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 204.534873][ T24] usbtmc 5-1:16.0: can't read capabilities [ 207.717861][ T5908] usb 1-1: usb_control_msg returned -71 [ 207.723519][ T5908] usbtmc 1-1:16.0: can't read capabilities [ 208.142269][ T5908] usb 1-1: USB disconnect, device number 10 [ 208.567949][ T24] usb 5-1: USB disconnect, device number 9 [ 209.025629][ T30] audit: type=1326 audit(1755846008.972:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.4.315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9788b8ebe9 code=0x0 [ 210.298752][ T7390] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 210.349863][ T7390] cramfs: wrong magic [ 210.567875][ T5948] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 210.713832][ T7401] Smack: duplicate mount options [ 210.728589][ T5948] usb 5-1: Using ep0 maxpacket: 8 [ 211.198125][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 211.478097][ T5948] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.497749][ T5948] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.507878][ T5948] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.517886][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 211.523196][ T5948] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.537996][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.539720][ T5948] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.557482][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.597762][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.652222][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.702962][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.840549][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.847894][ T5948] usb 5-1: GET_CAPABILITIES returned 0 [ 211.855272][ T5948] usbtmc 5-1:16.0: can't read capabilities [ 211.871839][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.874233][ T7410] batadv_slave_1: entered promiscuous mode [ 212.400884][ T5948] usb 5-1: USB disconnect, device number 10 [ 213.882834][ T7405] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 213.898241][ T7405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.959147][ T24] usb 1-1: usb_control_msg returned -71 [ 214.000825][ T7404] batadv_slave_1: left promiscuous mode [ 214.034746][ T24] usbtmc 1-1:16.0: can't read capabilities [ 214.257211][ T24] usb 1-1: USB disconnect, device number 11 [ 215.259720][ T7428] netlink: 'syz.0.328': attribute type 10 has an invalid length. [ 215.267536][ T7428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.328'. [ 215.473078][ T30] audit: type=1326 audit(1755846015.422:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7434 comm="syz.2.331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c2458ebe9 code=0x0 [ 215.518159][ T7428] team0: Port device geneve0 added [ 216.692213][ T7461] Smack: duplicate mount options [ 216.983572][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 220.363131][ T5858] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 220.372878][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: kworker/u9:7 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 220.372893][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.372900][ T5858] Workqueue: hci1 hci_rx_work [ 220.372918][ T5858] Call Trace: [ 220.372923][ T5858] [ 220.372929][ T5858] dump_stack_lvl+0x189/0x250 [ 220.372945][ T5858] ? kernfs_path_from_node+0x2c/0x260 [ 220.372959][ T5858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.372971][ T5858] ? __pfx__printk+0x10/0x10 [ 220.372985][ T5858] ? kernfs_path_from_node+0x2c/0x260 [ 220.372996][ T5858] ? kernfs_path_from_node+0x2c/0x260 [ 220.373010][ T5858] ? kernfs_path_from_node+0x22c/0x260 [ 220.373021][ T5858] ? kernfs_path_from_node+0x2c/0x260 [ 220.373035][ T5858] sysfs_create_dir_ns+0x259/0x280 [ 220.373049][ T5858] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 220.373062][ T5858] ? do_raw_spin_unlock+0x122/0x240 [ 220.373079][ T5858] kobject_add_internal+0x59f/0xb40 [ 220.373098][ T5858] kobject_add+0x155/0x220 [ 220.373112][ T5858] ? __pfx_kobject_add+0x10/0x10 [ 220.373125][ T5858] ? _raw_spin_unlock+0x28/0x50 [ 220.373143][ T5858] ? get_device_parent+0x366/0x3a0 [ 220.373161][ T5858] device_add+0x408/0xb50 [ 220.373178][ T5858] hci_conn_add_sysfs+0xd5/0x1e0 [ 220.373197][ T5858] le_conn_complete_evt+0xc3a/0x1220 [ 220.373219][ T5858] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 220.373232][ T5858] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 220.373243][ T5858] ? __asan_memcpy+0x40/0x70 [ 220.373258][ T5858] ? __pfx___mutex_lock+0x10/0x10 [ 220.373269][ T5858] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 220.373280][ T5858] ? skb_pull_data+0xfb/0x200 [ 220.373294][ T5858] hci_le_conn_complete_evt+0x187/0x450 [ 220.373311][ T5858] hci_event_packet+0x78c/0x1200 [ 220.373327][ T5858] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 220.373341][ T5858] ? __pfx_hci_event_packet+0x10/0x10 [ 220.373352][ T5858] ? kcov_remote_start+0x4d3/0x7f0 [ 220.373366][ T5858] ? lockdep_hardirqs_on+0x90/0x150 [ 220.373378][ T5858] ? hci_send_to_monitor+0xe2/0x570 [ 220.373394][ T5858] hci_rx_work+0x46a/0xe80 [ 220.373409][ T5858] ? process_scheduled_works+0x9ef/0x17b0 [ 220.373421][ T5858] process_scheduled_works+0xade/0x17b0 [ 220.373448][ T5858] ? __pfx_process_scheduled_works+0x10/0x10 [ 220.373468][ T5858] worker_thread+0x8a0/0xda0 [ 220.373494][ T5858] kthread+0x70e/0x8a0 [ 220.373509][ T5858] ? __pfx_worker_thread+0x10/0x10 [ 220.373520][ T5858] ? __pfx_kthread+0x10/0x10 [ 220.373534][ T5858] ? _raw_spin_unlock_irq+0x23/0x50 [ 220.373543][ T5858] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.373552][ T5858] ? __pfx_kthread+0x10/0x10 [ 220.373575][ T5858] ret_from_fork+0x3fc/0x770 [ 220.373587][ T5858] ? __pfx_ret_from_fork+0x10/0x10 [ 220.373601][ T5858] ? __switch_to_asm+0x39/0x70 [ 220.373613][ T5858] ? __switch_to_asm+0x33/0x70 [ 220.373625][ T5858] ? __pfx_kthread+0x10/0x10 [ 220.373638][ T5858] ret_from_fork_asm+0x1a/0x30 [ 220.373660][ T5858] [ 220.373678][ T5858] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 220.677615][ T5858] Bluetooth: hci1: failed to register connection device [ 221.395245][ T7515] [U]  [ 221.945060][ T7491] [U] [ 223.299042][ T5931] IPVS: starting estimator thread 0... [ 223.428096][ T7537] IPVS: using max 28 ests per chain, 67200 per kthread [ 224.773655][ T7556] Smack: duplicate mount options [ 225.841593][ T5854] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 225.851546][ T5854] CPU: 0 UID: 0 PID: 5854 Comm: kworker/u9:5 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 225.851573][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.851586][ T5854] Workqueue: hci4 hci_rx_work [ 225.851611][ T5854] Call Trace: [ 225.851619][ T5854] [ 225.851628][ T5854] dump_stack_lvl+0x189/0x250 [ 225.851656][ T5854] ? kernfs_path_from_node+0x2c/0x260 [ 225.851681][ T5854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.851704][ T5854] ? __pfx__printk+0x10/0x10 [ 225.851731][ T5854] ? kernfs_path_from_node+0x2c/0x260 [ 225.851753][ T5854] ? kernfs_path_from_node+0x2c/0x260 [ 225.851779][ T5854] ? kernfs_path_from_node+0x22c/0x260 [ 225.851801][ T5854] ? kernfs_path_from_node+0x2c/0x260 [ 225.851828][ T5854] sysfs_create_dir_ns+0x259/0x280 [ 225.851854][ T5854] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 225.851881][ T5854] ? do_raw_spin_unlock+0x122/0x240 [ 225.851912][ T5854] kobject_add_internal+0x59f/0xb40 [ 225.851948][ T5854] kobject_add+0x155/0x220 [ 225.851978][ T5854] ? __pfx_kobject_add+0x10/0x10 [ 225.852002][ T5854] ? _raw_spin_unlock+0x28/0x50 [ 225.852036][ T5854] ? get_device_parent+0x366/0x3a0 [ 225.852070][ T5854] device_add+0x408/0xb50 [ 225.852103][ T5854] hci_conn_add_sysfs+0xd5/0x1e0 [ 225.852146][ T5854] le_conn_complete_evt+0xc3a/0x1220 [ 225.852187][ T5854] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 225.852214][ T5854] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 225.852235][ T5854] ? __asan_memcpy+0x40/0x70 [ 225.852266][ T5854] ? __pfx___mutex_lock+0x10/0x10 [ 225.852289][ T5854] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 225.852309][ T5854] ? skb_pull_data+0xfb/0x200 [ 225.852337][ T5854] hci_le_conn_complete_evt+0x187/0x450 [ 225.852371][ T5854] hci_event_packet+0x78c/0x1200 [ 225.852396][ T5854] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 225.852425][ T5854] ? __pfx_hci_event_packet+0x10/0x10 [ 225.852448][ T5854] ? kcov_remote_start+0x4d3/0x7f0 [ 225.852475][ T5854] ? lockdep_hardirqs_on+0x90/0x150 [ 225.852499][ T5854] ? hci_send_to_monitor+0xe2/0x570 [ 225.852529][ T5854] hci_rx_work+0x46a/0xe80 [ 225.852560][ T5854] ? process_scheduled_works+0x9ef/0x17b0 [ 225.852584][ T5854] process_scheduled_works+0xade/0x17b0 [ 225.852635][ T5854] ? __pfx_process_scheduled_works+0x10/0x10 [ 225.852676][ T5854] worker_thread+0x8a0/0xda0 [ 225.852727][ T5854] kthread+0x70e/0x8a0 [ 225.852758][ T5854] ? __pfx_worker_thread+0x10/0x10 [ 225.852778][ T5854] ? __pfx_kthread+0x10/0x10 [ 225.852806][ T5854] ? _raw_spin_unlock_irq+0x23/0x50 [ 225.852824][ T5854] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.852842][ T5854] ? __pfx_kthread+0x10/0x10 [ 225.852869][ T5854] ret_from_fork+0x3fc/0x770 [ 225.852892][ T5854] ? __pfx_ret_from_fork+0x10/0x10 [ 225.852919][ T5854] ? __switch_to_asm+0x39/0x70 [ 225.852942][ T5854] ? __switch_to_asm+0x33/0x70 [ 225.852963][ T5854] ? __pfx_kthread+0x10/0x10 [ 225.852990][ T5854] ret_from_fork_asm+0x1a/0x30 [ 225.853033][ T5854] [ 225.853063][ T5854] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 226.167866][ T5854] Bluetooth: hci4: failed to register connection device [ 226.315367][ T7569] syz.2.358 uses obsolete (PF_INET,SOCK_PACKET) [ 226.329164][ T7569] netlink: 'syz.2.358': attribute type 3 has an invalid length. [ 227.645088][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 227.653965][ T7591] batadv_slave_1: entered promiscuous mode [ 227.685662][ T7589] fuse: Unknown parameter '0x0000000000000003' [ 227.956031][ T5854] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 228.059464][ T7596] futex_wake_op: syz.4.366 tries to shift op by -1; fix this program [ 228.074904][ T7583] batadv_slave_1: left promiscuous mode [ 228.507183][ T7600] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.366'. [ 228.619227][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.368'. [ 228.730310][ T7608] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 229.959529][ T30] audit: type=1326 audit(1755846029.892:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7b98ebe9 code=0x7ffc0000 [ 230.067389][ T30] audit: type=1326 audit(1755846029.892:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5a7b98ebe9 code=0x7ffc0000 [ 230.243859][ T30] audit: type=1326 audit(1755846029.892:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7b98ebe9 code=0x7ffc0000 [ 230.975107][ T30] audit: type=1326 audit(1755846029.892:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f5a7b98ebe9 code=0x7ffc0000 [ 231.004842][ T30] audit: type=1326 audit(1755846029.892:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7b98ebe9 code=0x7ffc0000 [ 231.026150][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.346691][ T30] audit: type=1326 audit(1755846029.892:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a7b98ebe9 code=0x7ffc0000 [ 231.373526][ T5908] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 231.467818][ T30] audit: type=1326 audit(1755846029.892:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7b98ebe9 code=0x7ffc0000 [ 231.489225][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.580012][ T7661] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 231.612684][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 231.708586][ T30] audit: type=1326 audit(1755846029.892:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a7b98ebe9 code=0x7ffc0000 [ 231.752816][ T5908] usb 1-1: config 0 has an invalid interface number: 79 but max is 0 [ 232.238356][ T5908] usb 1-1: config 0 has no interface number 0 [ 232.341031][ T30] audit: type=1326 audit(1755846029.892:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7b98ebe9 code=0x7ffc0000 [ 232.371751][ T5858] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 232.414009][ T7670] batadv_slave_1: entered promiscuous mode [ 232.436756][ T5908] usb 1-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 232.445917][ T30] audit: type=1326 audit(1755846029.892:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5a7b98ebe9 code=0x7ffc0000 [ 232.643287][ T7665] batadv_slave_1: left promiscuous mode [ 232.736712][ T5908] usb 1-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 232.753558][ T5908] usb 1-1: Product: syz [ 232.807766][ T5908] usb 1-1: Manufacturer: syz [ 232.827765][ T5908] usb 1-1: SerialNumber: syz [ 232.849434][ T5908] usb 1-1: config 0 descriptor?? [ 233.153588][ T7687] netlink: del zone limit has 4 unknown bytes [ 233.299399][ T7683] netlink: set zone limit has 4 unknown bytes [ 233.636707][ T5908] usb 1-1: can't set config #0, error -71 [ 233.672231][ T5908] usb 1-1: USB disconnect, device number 12 [ 234.213342][ T7702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.971188][ T7728] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 236.191560][ T7730] overlayfs: failed to clone upperpath [ 237.267969][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 237.267987][ T30] audit: type=1326 audit(1755846037.182:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7737 comm="syz.0.393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a7b98ebe9 code=0x0 [ 237.401623][ T7745] batadv_slave_1: entered promiscuous mode [ 237.905936][ T7742] batadv_slave_1: left promiscuous mode [ 238.096930][ T7755] FAULT_INJECTION: forcing a failure. [ 238.096930][ T7755] name failslab, interval 1, probability 0, space 0, times 1 [ 238.110482][ T7755] CPU: 0 UID: 0 PID: 7755 Comm: syz.4.396 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 238.110506][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.110516][ T7755] Call Trace: [ 238.110523][ T7755] [ 238.110530][ T7755] dump_stack_lvl+0x189/0x250 [ 238.110559][ T7755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.110580][ T7755] ? __pfx__printk+0x10/0x10 [ 238.110616][ T7755] should_fail_ex+0x414/0x560 [ 238.110640][ T7755] ? xt_alloc_table_info+0x3b/0xa0 [ 238.110658][ T7755] should_failslab+0xa8/0x100 [ 238.110680][ T7755] __kvmalloc_node_noprof+0x161/0x5f0 [ 238.110700][ T7755] ? xt_alloc_table_info+0x3b/0xa0 [ 238.110718][ T7755] ? do_ip6t_set_ctl+0x7e6/0xce0 [ 238.110749][ T7755] xt_alloc_table_info+0x3b/0xa0 [ 238.110768][ T7755] do_ip6t_set_ctl+0x88a/0xce0 [ 238.110805][ T7755] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 238.110830][ T7755] ? rcu_is_watching+0x15/0xb0 [ 238.110851][ T7755] ? trace_irq_disable+0x37/0x110 [ 238.110876][ T7755] ? preempt_schedule_irq+0xde/0x150 [ 238.110905][ T7755] ? irqentry_exit+0x74/0x90 [ 238.110923][ T7755] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.110950][ T7755] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 238.110987][ T7755] nf_setsockopt+0x26c/0x290 [ 238.111026][ T7755] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 238.111052][ T7755] do_sock_setsockopt+0x179/0x1b0 [ 238.111084][ T7755] __x64_sys_setsockopt+0x13f/0x1b0 [ 238.111116][ T7755] do_syscall_64+0xfa/0x3b0 [ 238.111139][ T7755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.111156][ T7755] ? asm_sysvec_call_function_single+0x1a/0x20 [ 238.111175][ T7755] ? clear_bhb_loop+0x60/0xb0 [ 238.111197][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.111214][ T7755] RIP: 0033:0x7f9788b8ebe9 [ 238.111231][ T7755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.111247][ T7755] RSP: 002b:00007f9789974038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 238.111266][ T7755] RAX: ffffffffffffffda RBX: 00007f9788db6090 RCX: 00007f9788b8ebe9 [ 238.111279][ T7755] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 238.111290][ T7755] RBP: 00007f9789974090 R08: 00000000000005e0 R09: 0000000000000000 [ 238.111302][ T7755] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 238.111313][ T7755] R13: 00007f9788db6128 R14: 00007f9788db6090 R15: 00007ffcf02855f8 [ 238.111342][ T7755] [ 239.575835][ T7778] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 240.087455][ T5908] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 240.658198][ T5908] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 240.668294][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.705863][ T5908] usb 6-1: config 0 descriptor?? [ 241.213492][ T5908] cp210x 6-1:0.0: cp210x converter detected [ 241.266454][ T5854] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 241.408632][ T5908] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 241.416266][ T5908] cp210x 6-1:0.0: querying part number failed [ 241.463520][ T5908] usb 6-1: cp210x converter now attached to ttyUSB0 [ 241.592460][ T30] audit: type=1326 audit(1755846041.542:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.1.409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe06b8ebe9 code=0x0 [ 241.641459][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 242.219412][ T7806] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 242.234177][ T7806] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 242.412756][ T7807] netlink: 'syz.0.411': attribute type 10 has an invalid length. [ 242.505424][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.668484][ T7807] bridge_slave_1: left allmulticast mode [ 242.674209][ T7807] bridge_slave_1: left promiscuous mode [ 242.681796][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.132824][ T43] usb 6-1: USB disconnect, device number 10 [ 243.321557][ T7821] 9pnet_fd: Insufficient options for proto=fd [ 243.372657][ T7821] fuse: Bad value for 'fd' [ 243.754369][ T7807] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 244.307995][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 244.335993][ T43] cp210x 6-1:0.0: device disconnected [ 244.929390][ T7833] capability: warning: `syz.0.415' uses deprecated v2 capabilities in a way that may be insecure [ 246.601259][ T5931] IPVS: starting estimator thread 0... [ 246.830211][ T7851] IPVS: using max 29 ests per chain, 69600 per kthread [ 247.620221][ T2986] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.814082][ T7861] ipvlan2: entered promiscuous mode [ 247.942222][ T2986] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.122280][ T2986] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.242815][ T7868] Illegal XDP return value 4294967274 on prog (id 90) dev N/A, expect packet loss! [ 248.296676][ T2986] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.775136][ T7876] netlink: 420 bytes leftover after parsing attributes in process `syz.0.427'. [ 249.685304][ T7881] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 250.192913][ T2986] bridge_slave_1: left allmulticast mode [ 250.309098][ T2986] bridge_slave_1: left promiscuous mode [ 250.435195][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.711091][ T2986] bridge_slave_0: left allmulticast mode [ 250.716912][ T2986] bridge_slave_0: left promiscuous mode [ 250.721729][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.723406][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.749113][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.760753][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.850812][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.862349][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.948033][ T5858] Bluetooth: hci2: command tx timeout [ 253.074829][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.104799][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.135843][ T2986] bond0 (unregistering): Released all slaves [ 254.749055][ T7929] netlink: 420 bytes leftover after parsing attributes in process `syz.5.439'. [ 255.064090][ T5858] Bluetooth: hci2: command tx timeout [ 255.873866][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.029573][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 256.264673][ T7938] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 256.297780][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 256.305826][ T9] usb 1-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 256.491182][ T9] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 256.535210][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.569142][ T9] usb 1-1: Product: syz [ 256.573494][ T9] usb 1-1: Manufacturer: syz [ 256.585878][ T9] usb 1-1: SerialNumber: syz [ 256.609206][ T9] usb 1-1: config 0 descriptor?? [ 256.618448][ T9] cdc_ether 1-1:0.0: probe with driver cdc_ether failed with error -22 [ 256.627622][ T9] usb 1-1: unsupported MDLM descriptors [ 256.875770][ T7953] ip6gre0: Master is either lo or non-ether device [ 257.224313][ T2986] hsr_slave_0: left promiscuous mode [ 257.244677][ T2986] hsr_slave_1: left promiscuous mode [ 257.266409][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.296959][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.326497][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.346223][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.426040][ T2986] veth1_macvtap: left promiscuous mode [ 257.451396][ T2986] veth0_macvtap: left promiscuous mode [ 257.469076][ T2986] veth1_vlan: left promiscuous mode [ 257.487492][ T2986] veth0_vlan: left promiscuous mode [ 257.587903][ T5854] Bluetooth: hci2: command tx timeout [ 257.916100][ T5845] usb 1-1: USB disconnect, device number 13 [ 259.670683][ T5854] Bluetooth: hci2: command tx timeout [ 260.061661][ T7986] Smack: duplicate mount options [ 260.271711][ T2986] team0 (unregistering): Port device team_slave_1 removed [ 260.838051][ T2986] team0 (unregistering): Port device team_slave_0 removed [ 261.628875][ T7973] syzkaller0: entered promiscuous mode [ 261.646712][ T7973] syzkaller0: entered allmulticast mode [ 261.679870][ T7883] chnl_net:caif_netlink_parms(): no params data found [ 262.485641][ T7883] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.532384][ T7883] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.540338][ T7883] bridge_slave_0: entered allmulticast mode [ 262.548361][ T7883] bridge_slave_0: entered promiscuous mode [ 262.557601][ T7883] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.566846][ T7883] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.577573][ T7883] bridge_slave_1: entered allmulticast mode [ 262.613611][ T7883] bridge_slave_1: entered promiscuous mode [ 263.518404][ T7883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.622560][ T7883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.722850][ T8033] netlink: 36 bytes leftover after parsing attributes in process `syz.5.457'. [ 264.567770][ T8034] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 265.550746][ T7883] team0: Port device team_slave_0 added [ 265.565045][ T7883] team0: Port device team_slave_1 added [ 265.925849][ T7883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.020009][ T7883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.069554][ T8067] Smack: duplicate mount options [ 266.201769][ T7883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.316289][ T7883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.351016][ T7883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.399165][ T7883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.004432][ T8079] fuse: Bad value for 'rootmode' [ 267.009805][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 267.016318][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 267.182650][ T8074] ceph: No mds server is up or the cluster is laggy [ 267.349789][ T9] libceph: connect (1)[c::]:6789 error -101 [ 267.356068][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 267.428999][ T5931] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 267.511743][ T7883] hsr_slave_0: entered promiscuous mode [ 267.558901][ T7883] hsr_slave_1: entered promiscuous mode [ 267.785305][ T8090] overlayfs: failed to resolve './file0': -2 [ 268.088016][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 268.101679][ T5931] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.132783][ T5931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.191782][ T5931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.228105][ T5931] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.271006][ T5931] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 268.281417][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.603769][ T8098] process 'syz.1.472' launched './file0' with NULL argv: empty string added [ 268.624292][ T5931] usb 5-1: GET_CAPABILITIES returned 0 [ 268.681624][ T5931] usbtmc 5-1:16.0: can't read capabilities [ 268.880080][ T43] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 268.982260][ T24] usb 5-1: USB disconnect, device number 11 [ 269.030530][ T7883] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 269.047951][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 269.060031][ T7883] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 269.071083][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 269.094128][ T43] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 269.098096][ T7883] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 269.126244][ T43] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 269.134801][ T43] usb 1-1: Product: syz [ 269.135442][ T7883] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 269.145061][ T43] usb 1-1: Manufacturer: syz [ 269.151101][ T43] usb 1-1: SerialNumber: syz [ 269.163979][ T43] usb 1-1: config 0 descriptor?? [ 269.176067][ T8101] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 269.326851][ T7883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.353924][ T7883] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.420435][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.427620][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.501977][ T3581] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.510089][ T3581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.824200][ T8127] Smack: duplicate mount options [ 269.996490][ T8132] overlayfs: failed to resolve './file1': -2 [ 270.636270][ T8137] fuse: Bad value for 'rootmode' [ 271.818433][ T5931] usb 1-1: USB disconnect, device number 14 [ 271.835320][ T7883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.235486][ T8173] netlink: 52 bytes leftover after parsing attributes in process `syz.5.485'. [ 272.363030][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 272.732843][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 272.743502][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.763973][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.786270][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.258020][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.271165][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 273.280309][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.495249][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 273.518136][ T24] usbtmc 5-1:16.0: can't read capabilities [ 273.614046][ T7883] veth0_vlan: entered promiscuous mode [ 273.745132][ T7883] veth1_vlan: entered promiscuous mode [ 273.851297][ T8198] netlink: 16 bytes leftover after parsing attributes in process `syz.5.489'. [ 273.892299][ T24] usb 5-1: USB disconnect, device number 12 [ 273.941623][ T7883] veth0_macvtap: entered promiscuous mode [ 274.176642][ T8207] overlay: ./file0 is not a directory [ 274.447051][ T7883] veth1_macvtap: entered promiscuous mode [ 274.611457][ T7883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.682125][ T7883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.761424][ T7883] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.816701][ T7883] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.826476][ T7883] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.835579][ T7883] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.639241][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.648824][ T43] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 276.693343][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.781125][ T5854] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 276.805635][ T3581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.816875][ T3581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.857936][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 276.878471][ T43] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 276.907896][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.916088][ T43] usb 5-1: Product: syz [ 276.921111][ T43] usb 5-1: Manufacturer: syz [ 276.925739][ T43] usb 5-1: SerialNumber: syz [ 276.963231][ T43] usb 5-1: config 0 descriptor?? [ 277.777906][ T43] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 277.805314][ T43] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 277.947867][ T43] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 278.314440][ T8258] overlayfs: failed to resolve './file1': -2 [ 278.795219][ T43] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 278.850030][ T43] usb 5-1: USB disconnect, device number 13 [ 279.276547][ T8267] Smack: duplicate mount options [ 280.352114][ T8272] netlink: zone id is out of range [ 280.389973][ T8272] netlink: zone id is out of range [ 280.753744][ T8272] netlink: set zone limit has 4 unknown bytes [ 280.805061][ T8277] netlink: del zone limit has 4 unknown bytes [ 281.483136][ T8298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.513'. [ 282.171673][ T8311] Smack: duplicate mount options [ 282.756509][ T8309] batadv_slave_1: entered promiscuous mode [ 282.767264][ T8309] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 282.774578][ T8309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.888641][ T8320] FAULT_INJECTION: forcing a failure. [ 282.888641][ T8320] name failslab, interval 1, probability 0, space 0, times 0 [ 282.901836][ T8303] batadv_slave_1: left promiscuous mode [ 283.026544][ T8320] CPU: 1 UID: 0 PID: 8320 Comm: syz.6.517 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 283.026572][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.026584][ T8320] Call Trace: [ 283.026591][ T8320] [ 283.026600][ T8320] dump_stack_lvl+0x189/0x250 [ 283.026627][ T8320] ? __pfx____ratelimit+0x10/0x10 [ 283.026648][ T8320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.026667][ T8320] ? __pfx__printk+0x10/0x10 [ 283.026693][ T8320] ? __pfx___might_resched+0x10/0x10 [ 283.026716][ T8320] should_fail_ex+0x414/0x560 [ 283.026740][ T8320] should_failslab+0xa8/0x100 [ 283.026762][ T8320] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 283.026782][ T8320] ? __alloc_skb+0x112/0x2d0 [ 283.026813][ T8320] __alloc_skb+0x112/0x2d0 [ 283.026840][ T8320] netlink_sendmsg+0x5c6/0xb30 [ 283.026878][ T8320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.026910][ T8320] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 283.026929][ T8320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.026954][ T8320] __sock_sendmsg+0x21c/0x270 [ 283.026979][ T8320] ____sys_sendmsg+0x505/0x830 [ 283.027012][ T8320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.027047][ T8320] ? import_iovec+0x74/0xa0 [ 283.027075][ T8320] ___sys_sendmsg+0x21f/0x2a0 [ 283.027104][ T8320] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.027165][ T8320] ? __fget_files+0x2a/0x420 [ 283.027185][ T8320] ? __fget_files+0x3a0/0x420 [ 283.027213][ T8320] __x64_sys_sendmsg+0x19b/0x260 [ 283.027242][ T8320] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 283.027297][ T8320] ? __pfx_ksys_write+0x10/0x10 [ 283.027312][ T8320] ? rcu_is_watching+0x15/0xb0 [ 283.027338][ T8320] ? do_syscall_64+0xbe/0x3b0 [ 283.027362][ T8320] do_syscall_64+0xfa/0x3b0 [ 283.027382][ T8320] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.027401][ T8320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.027418][ T8320] ? clear_bhb_loop+0x60/0xb0 [ 283.027440][ T8320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.027458][ T8320] RIP: 0033:0x7faa3e98ebe9 [ 283.027475][ T8320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.027491][ T8320] RSP: 002b:00007faa3f7ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.027510][ T8320] RAX: ffffffffffffffda RBX: 00007faa3ebb5fa0 RCX: 00007faa3e98ebe9 [ 283.027523][ T8320] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 283.027535][ T8320] RBP: 00007faa3f7ce090 R08: 0000000000000000 R09: 0000000000000000 [ 283.027547][ T8320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.027558][ T8320] R13: 00007faa3ebb6038 R14: 00007faa3ebb5fa0 R15: 00007ffcd53c0988 [ 283.027587][ T8320] [ 285.052868][ T8339] netlink: 28 bytes leftover after parsing attributes in process `syz.5.521'. [ 285.637784][ T8351] FAULT_INJECTION: forcing a failure. [ 285.637784][ T8351] name failslab, interval 1, probability 0, space 0, times 0 [ 285.685307][ T8351] CPU: 0 UID: 0 PID: 8351 Comm: syz.0.525 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 285.685333][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.685345][ T8351] Call Trace: [ 285.685353][ T8351] [ 285.685361][ T8351] dump_stack_lvl+0x189/0x250 [ 285.685386][ T8351] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.685408][ T8351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.685427][ T8351] ? __pfx__printk+0x10/0x10 [ 285.685455][ T8351] ? _printk+0xa/0x120 [ 285.685476][ T8351] should_fail_ex+0x414/0x560 [ 285.685499][ T8351] should_failslab+0xa8/0x100 [ 285.685520][ T8351] __kmalloc_cache_noprof+0x70/0x3d0 [ 285.685539][ T8351] ? snd_mixer_oss_put_volume1_sw+0xba/0x3c0 [ 285.685567][ T8351] snd_mixer_oss_put_volume1_sw+0xba/0x3c0 [ 285.685593][ T8351] snd_mixer_oss_put_recsrc1_sw+0x65/0x90 [ 285.685613][ T8351] ? __pfx_snd_mixer_oss_put_recsrc1_sw+0x10/0x10 [ 285.685632][ T8351] snd_mixer_oss_set_recsrc+0x269/0x400 [ 285.685657][ T8351] ? __pfx_snd_mixer_oss_set_recsrc+0x10/0x10 [ 285.685680][ T8351] ? __might_fault+0xb0/0x130 [ 285.685702][ T8351] snd_mixer_oss_ioctl1+0xebd/0x18b0 [ 285.685725][ T8351] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 285.685743][ T8351] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 285.685760][ T8351] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 285.685778][ T8351] ? smack_log+0xef/0x3f0 [ 285.685803][ T8351] ? __pfx_smack_log+0x10/0x10 [ 285.685829][ T8351] ? smk_access+0x14c/0x4e0 [ 285.685861][ T8351] ? smk_tskacc+0x2fc/0x370 [ 285.685900][ T8351] snd_mixer_oss_ioctl_card+0x10b/0x160 [ 285.685923][ T8351] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 285.685947][ T8351] ? __fget_files+0x2a/0x420 [ 285.685967][ T8351] ? __fget_files+0x3a0/0x420 [ 285.685992][ T8351] snd_pcm_oss_ioctl+0x264/0xdd0 [ 285.686015][ T8351] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 285.686037][ T8351] __se_sys_ioctl+0xfc/0x170 [ 285.686068][ T8351] do_syscall_64+0xfa/0x3b0 [ 285.686095][ T8351] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.686115][ T8351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.686133][ T8351] ? clear_bhb_loop+0x60/0xb0 [ 285.686157][ T8351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.686175][ T8351] RIP: 0033:0x7f5a7b98ebe9 [ 285.686193][ T8351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.686208][ T8351] RSP: 002b:00007f5a7c778038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.686229][ T8351] RAX: ffffffffffffffda RBX: 00007f5a7bbb5fa0 RCX: 00007f5a7b98ebe9 [ 285.686243][ T8351] RDX: 00002000000000c0 RSI: 00000000c0044dff RDI: 0000000000000003 [ 285.686255][ T8351] RBP: 00007f5a7c778090 R08: 0000000000000000 R09: 0000000000000000 [ 285.686267][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.686278][ T8351] R13: 00007f5a7bbb6038 R14: 00007f5a7bbb5fa0 R15: 00007ffc05be3f28 [ 285.686310][ T8351] [ 286.752614][ T8368] Smack: duplicate mount options [ 287.356268][ T8344] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 287.452685][ T5854] Bluetooth: hci0: command 0x0401 tx timeout [ 287.532352][ T8371] Smack: duplicate mount options [ 288.792759][ T8382] netlink: 'syz.4.529': attribute type 1 has an invalid length. [ 289.413340][ T8382] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.529' sets config #0 [ 289.625690][ T8375] lo speed is unknown, defaulting to 1000 [ 289.631881][ T8375] lo speed is unknown, defaulting to 1000 [ 289.641821][ T8375] lo speed is unknown, defaulting to 1000 [ 289.649128][ T8375] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 289.658705][ T8375] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 289.713989][ T8375] lo speed is unknown, defaulting to 1000 [ 289.723964][ T8375] lo speed is unknown, defaulting to 1000 [ 289.759904][ T8394] FAULT_INJECTION: forcing a failure. [ 289.759904][ T8394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.768882][ T8375] lo speed is unknown, defaulting to 1000 [ 289.790612][ T8375] lo speed is unknown, defaulting to 1000 [ 289.798589][ T8375] lo speed is unknown, defaulting to 1000 [ 289.929516][ T8394] CPU: 1 UID: 0 PID: 8394 Comm: syz.6.533 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 289.929540][ T8394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.929551][ T8394] Call Trace: [ 289.929566][ T8394] [ 289.929573][ T8394] dump_stack_lvl+0x189/0x250 [ 289.929599][ T8394] ? __pfx____ratelimit+0x10/0x10 [ 289.929620][ T8394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.929641][ T8394] ? __pfx__printk+0x10/0x10 [ 289.929663][ T8394] ? __might_fault+0xb0/0x130 [ 289.929689][ T8394] should_fail_ex+0x414/0x560 [ 289.929712][ T8394] _copy_from_iter+0x1db/0x16f0 [ 289.929739][ T8394] ? rcu_is_watching+0x15/0xb0 [ 289.929760][ T8394] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 289.929780][ T8394] ? __pfx__copy_from_iter+0x10/0x10 [ 289.929803][ T8394] ? __build_skb_around+0x257/0x3e0 [ 289.929830][ T8394] ? netlink_sendmsg+0x642/0xb30 [ 289.929851][ T8394] ? skb_put+0x11b/0x210 [ 289.929878][ T8394] netlink_sendmsg+0x6b2/0xb30 [ 289.929909][ T8394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.929940][ T8394] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.929956][ T8394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.929980][ T8394] __sock_sendmsg+0x21c/0x270 [ 289.930004][ T8394] ____sys_sendmsg+0x505/0x830 [ 289.930036][ T8394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.930074][ T8394] ? import_iovec+0x74/0xa0 [ 289.930103][ T8394] ___sys_sendmsg+0x21f/0x2a0 [ 289.930133][ T8394] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.930200][ T8394] ? __fget_files+0x2a/0x420 [ 289.930220][ T8394] ? __fget_files+0x3a0/0x420 [ 289.930251][ T8394] __x64_sys_sendmsg+0x19b/0x260 [ 289.930281][ T8394] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 289.930317][ T8394] ? __pfx_ksys_write+0x10/0x10 [ 289.930331][ T8394] ? rcu_is_watching+0x15/0xb0 [ 289.930356][ T8394] ? do_syscall_64+0xbe/0x3b0 [ 289.930382][ T8394] do_syscall_64+0xfa/0x3b0 [ 289.930401][ T8394] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.930421][ T8394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.930440][ T8394] ? clear_bhb_loop+0x60/0xb0 [ 289.930463][ T8394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.930480][ T8394] RIP: 0033:0x7faa3e98ebe9 [ 289.930496][ T8394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.930512][ T8394] RSP: 002b:00007faa3f7ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.930533][ T8394] RAX: ffffffffffffffda RBX: 00007faa3ebb5fa0 RCX: 00007faa3e98ebe9 [ 289.930550][ T8394] RDX: 0000000000000080 RSI: 0000200000000580 RDI: 0000000000000003 [ 289.930568][ T8394] RBP: 00007faa3f7ce090 R08: 0000000000000000 R09: 0000000000000000 [ 289.930579][ T8394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.930589][ T8394] R13: 00007faa3ebb6038 R14: 00007faa3ebb5fa0 R15: 00007ffcd53c0988 [ 289.930619][ T8394] [ 290.995706][ T8405] batadv_slave_1: entered promiscuous mode [ 291.100139][ T8392] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 291.113077][ T8392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.459808][ T8390] batadv_slave_1: left promiscuous mode [ 291.730346][ T8422] netlink: 28 bytes leftover after parsing attributes in process `syz.5.542'. [ 291.768191][ T8423] Smack: duplicate mount options [ 292.208227][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 292.904207][ T8439] netlink: 'syz.1.547': attribute type 12 has an invalid length. [ 292.912044][ T8439] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.547'. [ 293.179548][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 293.195871][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.287769][ T8449] netlink: 'syz.4.549': attribute type 21 has an invalid length. [ 293.295529][ T8449] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.322849][ T9] usb 1-1: config 0 descriptor?? [ 293.339158][ T8451] netlink: 48 bytes leftover after parsing attributes in process `syz.6.550'. [ 293.355446][ T9] gspca_main: spca508-2.14.0 probing 8086:0110 [ 294.315856][ T9] gspca_spca508: reg_read err -110 [ 294.317903][ T5854] Bluetooth: hci0: command 0x0401 tx timeout [ 294.331232][ T9] gspca_spca508: reg_read err -32 [ 294.349771][ T8426] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 294.672425][ T9] gspca_spca508: reg_read err -71 [ 294.688148][ T9] gspca_spca508: reg_read err -71 [ 294.740062][ T9] gspca_spca508: reg write: error -71 [ 294.745744][ T9] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 294.852279][ T9] usb 1-1: USB disconnect, device number 15 [ 295.136492][ T5854] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 295.148778][ T8475] Smack: duplicate mount options [ 296.249517][ T8492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.302151][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.562'. [ 296.722643][ T8497] netlink: 180 bytes leftover after parsing attributes in process `syz.1.563'. [ 296.736260][ T8494] netlink: 180 bytes leftover after parsing attributes in process `syz.1.563'. [ 296.745696][ T8494] netlink: 180 bytes leftover after parsing attributes in process `syz.1.563'. [ 297.538481][ T8509] FAULT_INJECTION: forcing a failure. [ 297.538481][ T8509] name failslab, interval 1, probability 0, space 0, times 0 [ 297.617862][ T8509] CPU: 0 UID: 0 PID: 8509 Comm: syz.5.566 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 297.617889][ T8509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.617900][ T8509] Call Trace: [ 297.617908][ T8509] [ 297.617916][ T8509] dump_stack_lvl+0x189/0x250 [ 297.617943][ T8509] ? __pfx____ratelimit+0x10/0x10 [ 297.617961][ T8509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.617981][ T8509] ? __pfx__printk+0x10/0x10 [ 297.618011][ T8509] ? ref_tracker_alloc+0x318/0x460 [ 297.618035][ T8509] should_fail_ex+0x414/0x560 [ 297.618063][ T8509] should_failslab+0xa8/0x100 [ 297.618085][ T8509] kmem_cache_alloc_noprof+0x73/0x3c0 [ 297.618101][ T8509] ? skb_clone+0x212/0x3a0 [ 297.618123][ T8509] skb_clone+0x212/0x3a0 [ 297.618143][ T8509] __netlink_deliver_tap+0x404/0x850 [ 297.618179][ T8509] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.618203][ T8509] netlink_deliver_tap+0x19c/0x1b0 [ 297.618227][ T8509] netlink_unicast+0x730/0x8e0 [ 297.618259][ T8509] netlink_sendmsg+0x805/0xb30 [ 297.618293][ T8509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.618334][ T8509] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 297.618352][ T8509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.618377][ T8509] __sock_sendmsg+0x21c/0x270 [ 297.618400][ T8509] sock_write_iter+0x258/0x330 [ 297.618421][ T8509] ? __pfx_sock_write_iter+0x10/0x10 [ 297.618451][ T8509] ? __lock_acquire+0xab9/0xd20 [ 297.618479][ T8509] do_iter_readv_writev+0x56b/0x7f0 [ 297.618502][ T8509] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 297.618526][ T8509] ? bpf_lsm_file_permission+0x9/0x20 [ 297.618546][ T8509] ? security_file_permission+0x75/0x290 [ 297.618567][ T8509] ? rw_verify_area+0x258/0x650 [ 297.618597][ T8509] vfs_writev+0x31a/0x960 [ 297.618623][ T8509] ? __lock_acquire+0xab9/0xd20 [ 297.618642][ T8509] ? __pfx_vfs_writev+0x10/0x10 [ 297.618677][ T8509] ? __fget_files+0x2a/0x420 [ 297.618701][ T8509] ? __fget_files+0x3a0/0x420 [ 297.618719][ T8509] ? __fget_files+0x2a/0x420 [ 297.618747][ T8509] do_writev+0x14d/0x2d0 [ 297.618773][ T8509] ? __pfx_do_writev+0x10/0x10 [ 297.618793][ T8509] ? rcu_is_watching+0x15/0xb0 [ 297.618817][ T8509] ? do_syscall_64+0xbe/0x3b0 [ 297.618842][ T8509] do_syscall_64+0xfa/0x3b0 [ 297.618862][ T8509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.618879][ T8509] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 297.618895][ T8509] ? clear_bhb_loop+0x60/0xb0 [ 297.618918][ T8509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.618934][ T8509] RIP: 0033:0x7f0634d8ebe9 [ 297.618951][ T8509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.618966][ T8509] RSP: 002b:00007f0635b3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 297.618984][ T8509] RAX: ffffffffffffffda RBX: 00007f0634fb5fa0 RCX: 00007f0634d8ebe9 [ 297.618996][ T8509] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 297.619007][ T8509] RBP: 00007f0635b3c090 R08: 0000000000000000 R09: 0000000000000000 [ 297.619018][ T8509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.619029][ T8509] R13: 00007f0634fb6038 R14: 00007f0634fb5fa0 R15: 00007ffc4b2263c8 [ 297.619060][ T8509] [ 297.619578][ T8509] netlink: 'syz.5.566': attribute type 6 has an invalid length. [ 298.136572][ T8528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.572'. [ 300.070495][ T8550] warning: `syz.0.576' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 300.084248][ T8550] FAULT_INJECTION: forcing a failure. [ 300.084248][ T8550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.108012][ T8550] CPU: 0 UID: 0 PID: 8550 Comm: syz.0.576 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 300.108036][ T8550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.108047][ T8550] Call Trace: [ 300.108055][ T8550] [ 300.108063][ T8550] dump_stack_lvl+0x189/0x250 [ 300.108091][ T8550] ? __pfx____ratelimit+0x10/0x10 [ 300.108112][ T8550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.108133][ T8550] ? __pfx__printk+0x10/0x10 [ 300.108168][ T8550] ? __might_fault+0xb0/0x130 [ 300.108194][ T8550] should_fail_ex+0x414/0x560 [ 300.108219][ T8550] _copy_to_user+0x31/0xb0 [ 300.108246][ T8550] simple_read_from_buffer+0xe1/0x170 [ 300.108267][ T8550] proc_fail_nth_read+0x1df/0x250 [ 300.108290][ T8550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.108314][ T8550] ? vfs_read+0x15f/0x980 [ 300.108341][ T8550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.108363][ T8550] vfs_read+0x200/0x980 [ 300.108390][ T8550] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 300.108422][ T8550] ? __pfx___mutex_lock+0x10/0x10 [ 300.108434][ T8550] ? __pfx_vfs_read+0x10/0x10 [ 300.108452][ T8550] ? __rcu_read_unlock+0x84/0xe0 [ 300.108467][ T8550] ? __fget_files+0x3a0/0x420 [ 300.108478][ T8550] ? __fget_files+0x2a/0x420 [ 300.108494][ T8550] ksys_read+0x145/0x250 [ 300.108504][ T8550] ? __pfx_ksys_read+0x10/0x10 [ 300.108520][ T8550] do_syscall_64+0xfa/0x3b0 [ 300.108533][ T8550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.108542][ T8550] ? asm_sysvec_call_function_single+0x1a/0x20 [ 300.108557][ T8550] ? clear_bhb_loop+0x60/0xb0 [ 300.108579][ T8550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.108596][ T8550] RIP: 0033:0x7f5a7b98d5fc [ 300.108611][ T8550] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 300.108627][ T8550] RSP: 002b:00007f5a7c757030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.108646][ T8550] RAX: ffffffffffffffda RBX: 00007f5a7bbb6090 RCX: 00007f5a7b98d5fc [ 300.108661][ T8550] RDX: 000000000000000f RSI: 00007f5a7c7570a0 RDI: 0000000000000009 [ 300.108673][ T8550] RBP: 00007f5a7c757090 R08: 0000000000000000 R09: 0000000000000000 [ 300.108685][ T8550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.108695][ T8550] R13: 00007f5a7bbb6128 R14: 00007f5a7bbb6090 R15: 00007ffc05be3f28 [ 300.108711][ T8550] [ 300.548457][ T5854] Bluetooth: hci0: command 0x0401 tx timeout [ 300.561098][ T8528] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 300.763431][ T8555] evm: overlay not supported [ 300.789800][ T8555] FAULT_INJECTION: forcing a failure. [ 300.789800][ T8555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.822973][ T8555] CPU: 1 UID: 0 PID: 8555 Comm: syz.6.577 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 300.823001][ T8555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.823012][ T8555] Call Trace: [ 300.823036][ T8555] [ 300.823045][ T8555] dump_stack_lvl+0x189/0x250 [ 300.823075][ T8555] ? __pfx____ratelimit+0x10/0x10 [ 300.823096][ T8555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.823118][ T8555] ? __pfx__printk+0x10/0x10 [ 300.823154][ T8555] should_fail_ex+0x414/0x560 [ 300.823180][ T8555] _copy_to_user+0x31/0xb0 [ 300.823210][ T8555] simple_read_from_buffer+0xe1/0x170 [ 300.823235][ T8555] proc_fail_nth_read+0x1df/0x250 [ 300.823262][ T8555] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.823289][ T8555] ? rw_verify_area+0x258/0x650 [ 300.823317][ T8555] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.823342][ T8555] vfs_read+0x200/0x980 [ 300.823376][ T8555] ? __pfx___mutex_lock+0x10/0x10 [ 300.823399][ T8555] ? __pfx_vfs_read+0x10/0x10 [ 300.823429][ T8555] ? __fget_files+0x2a/0x420 [ 300.823456][ T8555] ? __fget_files+0x3a0/0x420 [ 300.823476][ T8555] ? __fget_files+0x2a/0x420 [ 300.823507][ T8555] ksys_read+0x145/0x250 [ 300.823527][ T8555] ? __pfx_ksys_read+0x10/0x10 [ 300.823542][ T8555] ? rcu_is_watching+0x15/0xb0 [ 300.823569][ T8555] ? do_syscall_64+0xbe/0x3b0 [ 300.823595][ T8555] do_syscall_64+0xfa/0x3b0 [ 300.823615][ T8555] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.823634][ T8555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.823653][ T8555] ? clear_bhb_loop+0x60/0xb0 [ 300.823676][ T8555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.823694][ T8555] RIP: 0033:0x7faa3e98d5fc [ 300.823711][ T8555] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 300.823727][ T8555] RSP: 002b:00007faa3f7ce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.823747][ T8555] RAX: ffffffffffffffda RBX: 00007faa3ebb5fa0 RCX: 00007faa3e98d5fc [ 300.823761][ T8555] RDX: 000000000000000f RSI: 00007faa3f7ce0a0 RDI: 0000000000000004 [ 300.823773][ T8555] RBP: 00007faa3f7ce090 R08: 0000000000000000 R09: 0000000000000000 [ 300.823783][ T8555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.823795][ T8555] R13: 00007faa3ebb6038 R14: 00007faa3ebb5fa0 R15: 00007ffcd53c0988 [ 300.823827][ T8555] [ 302.653142][ T8590] netlink: 'syz.5.583': attribute type 6 has an invalid length. [ 302.677277][ T8589] mmap: syz.4.584 (8589): VmData 37597184 exceed data ulimit 10. Update limits or use boot option ignore_rlimit_data. [ 303.237644][ T8604] Smack: duplicate mount options [ 303.273337][ T8599] netlink: 'syz.5.588': attribute type 12 has an invalid length. [ 303.281222][ T8599] netlink: 'syz.5.588': attribute type 29 has an invalid length. [ 303.290236][ T8599] netlink: 148 bytes leftover after parsing attributes in process `syz.5.588'. [ 304.248038][ T8610] overlayfs: failed to resolve './file1': -2 [ 304.893223][ T8623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.595'. [ 305.513511][ T8631] overlayfs: missing 'lowerdir' [ 305.829664][ T8645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.600'. [ 307.377153][ T8666] overlayfs: failed to resolve './file1': -2 [ 308.428117][ T5948] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 308.601003][ T8675] fuse: Unknown parameter 'user_i00000000000000000000' [ 308.607807][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 308.626555][ T5948] usb 5-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 308.666812][ T8680] 9pnet_fd: Insufficient options for proto=fd [ 308.677884][ T5948] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 308.698140][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.706239][ T5948] usb 5-1: Product: syz [ 308.723266][ T8681] overlayfs: missing 'lowerdir' [ 308.757970][ T5948] usb 5-1: Manufacturer: syz [ 308.762756][ T5948] usb 5-1: SerialNumber: syz [ 308.788485][ T5948] usb 5-1: config 0 descriptor?? [ 308.809245][ T5948] cdc_ether 5-1:0.0: probe with driver cdc_ether failed with error -22 [ 308.833909][ T5948] usb 5-1: unsupported MDLM descriptors [ 309.655698][ T5930] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 309.849756][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 309.865109][ T5930] usb 6-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 309.915003][ T5930] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 309.954785][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.967766][ T5930] usb 6-1: Product: syz [ 309.971989][ T5930] usb 6-1: Manufacturer: syz [ 309.991305][ T5930] usb 6-1: SerialNumber: syz [ 310.030427][ T5930] usb 6-1: config 0 descriptor?? [ 310.058311][ T5930] cdc_ether 6-1:0.0: probe with driver cdc_ether failed with error -22 [ 310.082158][ T5930] usb 6-1: unsupported MDLM descriptors [ 310.328399][ T8700] netlink: 'syz.0.613': attribute type 10 has an invalid length. [ 310.456402][ T8700] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.525161][ T8700] bond0: (slave team0): Enslaving as an active interface with an up link [ 310.693346][ T5930] usb 5-1: USB disconnect, device number 14 [ 311.921251][ T24] usb 6-1: USB disconnect, device number 11 [ 313.132051][ T8735] Smack: duplicate mount options [ 314.602787][ T8750] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 314.786521][ T8747] overlayfs: missing 'lowerdir' [ 315.668586][ T8764] binder: 8763:8764 ioctl c0306201 2000000003c0 returned -14 [ 317.327367][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.626'. [ 317.328304][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.391932][ T8771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.626'. [ 318.027323][ T8800] Smack: duplicate mount options [ 318.725617][ T30] audit: type=1326 audit(1755846118.622:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe06b8ebe9 code=0x7ffc0000 [ 318.787805][ T30] audit: type=1326 audit(1755846118.622:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe06b8ebe9 code=0x7ffc0000 [ 318.957363][ T30] audit: type=1326 audit(1755846118.622:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe06b8d550 code=0x7ffc0000 [ 318.996905][ T30] audit: type=1326 audit(1755846118.622:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efe06b8d69f code=0x7ffc0000 [ 319.080882][ T30] audit: type=1326 audit(1755846118.622:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efe06b8d69f code=0x7ffc0000 [ 319.084188][ T8808] netlink: 16 bytes leftover after parsing attributes in process `syz.5.634'. [ 319.192502][ T30] audit: type=1326 audit(1755846118.622:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efe06b8ebe9 code=0x7ffc0000 [ 319.244676][ T30] audit: type=1326 audit(1755846118.992:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.1.633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe06b8ebe9 code=0x0 [ 320.074465][ T8834] netlink: 'syz.1.638': attribute type 10 has an invalid length. [ 320.088356][ T8834] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.098047][ T8834] bond0: (slave team0): Enslaving as an active interface with an up link [ 320.197822][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 320.440579][ T24] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 321.053222][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.099780][ T24] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 321.298600][ T24] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 321.319344][ T24] usb 7-1: Manufacturer: syz [ 321.328849][ T24] usb 7-1: config 0 descriptor?? [ 321.339988][ T24] igorplugusb 7-1:0.0: incorrect number of endpoints [ 321.348011][ T8815] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 321.354328][ T5854] Bluetooth: hci0: command 0x0401 tx timeout [ 321.462688][ T8845] vlan2: entered promiscuous mode [ 321.481215][ T8845] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 321.489350][ T8845] vlan2: entered allmulticast mode [ 321.494621][ T8845] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 321.529883][ T8845] team0: Device vlan2 is up. Set it down before adding it as a team port [ 321.634858][ T30] audit: type=1804 audit(1755846121.582:58): pid=8851 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.642" name="file0" dev="tmpfs" ino=862 res=1 errno=0 [ 323.076619][ T8862] Smack: duplicate mount options [ 323.992337][ T5843] usb 7-1: USB disconnect, device number 2 [ 325.922002][ T5908] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 326.861830][ T8908] Smack: duplicate mount options [ 327.179721][ T5908] usb 7-1: string descriptor 0 read error: -22 [ 327.186171][ T5908] usb 7-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 327.638342][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.659395][ T5908] usb 7-1: config 0 descriptor?? [ 327.667201][ T5908] usbtest 7-1:0.0: FX2 device [ 327.687736][ T5908] usbtest 7-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 327.898152][ T8891] Bluetooth: MGMT ver 1.23 [ 327.923092][ T24] usb 7-1: USB disconnect, device number 3 [ 328.137777][ T8918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.661'. [ 328.339956][ T8918] bridge5: port 1(veth3) entered blocking state [ 328.346406][ T8918] bridge5: port 1(veth3) entered disabled state [ 328.356476][ T8918] veth3: entered allmulticast mode [ 328.363258][ T8918] veth3: entered promiscuous mode [ 331.451244][ T8946] lo speed is unknown, defaulting to 1000 [ 331.714963][ T8961] program syz.6.674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.799664][ T5908] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 331.962099][ T5908] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 331.980351][ T5908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.000049][ T5908] usb 5-1: config 0 has no interface number 0 [ 332.007212][ T5908] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 332.028828][ T5908] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.069154][ T5908] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 332.090275][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.107794][ T5908] usb 5-1: Product: syz [ 332.112013][ T5908] usb 5-1: Manufacturer: syz [ 332.116651][ T5908] usb 5-1: SerialNumber: syz [ 332.140674][ T5908] usb 5-1: config 0 descriptor?? [ 332.555057][ T5908] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 332.567952][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 332.580737][ T5908] usb 5-1: USB disconnect, device number 15 [ 332.740605][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 332.799077][ T9] usb 7-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 332.889648][ T9] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 332.899037][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.928074][ T9] usb 7-1: Product: syz [ 332.958421][ T9] usb 7-1: Manufacturer: syz [ 333.051403][ T9] usb 7-1: SerialNumber: syz [ 333.190794][ T8977] netlink: 'syz.5.679': attribute type 21 has an invalid length. [ 333.199461][ T9] usb 7-1: config 0 descriptor?? [ 333.213176][ T9] cdc_ether 7-1:0.0: probe with driver cdc_ether failed with error -22 [ 333.222321][ T9] usb 7-1: unsupported MDLM descriptors [ 334.648840][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 334.877773][ T5843] usb 7-1: USB disconnect, device number 4 [ 334.914632][ T9] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 334.929531][ T9] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 334.940839][ T9] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 334.954796][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 334.964530][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 334.967937][ T5930] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 334.981973][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.002888][ T9] usb 6-1: Product: 黍潹굀蠊䵲柙豈뀧䴁绖悭ፖშီ紊毽춗荣䄢㙪茗껴፭!ᥴᒻ碐톥븛튺뿾쾯ၞᾸ䈚ᢌዖὲ歐ⷚခꤦꊏ玙 [ 335.037521][ T9] usb 6-1: Manufacturer: ᐉ [ 335.050201][ T9] usb 6-1: SerialNumber: Ь [ 335.082937][ T8995] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 335.153708][ T5930] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 335.163548][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.250502][ T5930] usb 5-1: config 0 descriptor?? [ 335.320520][ T8994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.343341][ T9] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 335.387437][ T9011] netlink: set zone limit has 4 unknown bytes [ 335.394209][ T5908] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 335.412579][ T9] usb 6-1: USB disconnect, device number 12 [ 335.430215][ T9] usblp0: removed [ 335.587859][ T5908] usb 7-1: Using ep0 maxpacket: 32 [ 335.602445][ T5908] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 335.616298][ T5908] usb 7-1: config 0 has no interface number 0 [ 335.687555][ T5908] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 335.702937][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.715549][ T5908] usb 7-1: Product: syz [ 335.723309][ T5908] usb 7-1: Manufacturer: syz [ 335.731292][ T5908] usb 7-1: SerialNumber: syz [ 335.752547][ T5908] usb 7-1: config 0 descriptor?? [ 335.782200][ T5908] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 336.028833][ T5908] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 336.138605][ T5908] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 336.174240][ T9009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.217003][ T9009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.342901][ T5930] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 336.373146][ T5930] usb 5-1: USB disconnect, device number 16 [ 336.522088][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 336.524044][ T9] usb 7-1: USB disconnect, device number 5 [ 336.552798][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 336.659313][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 336.756035][ T9] quatech2 7-1:0.51: device disconnected [ 337.354684][ T9041] loop6: detected capacity change from 0 to 63 [ 337.373109][ T9041] Buffer I/O error on dev loop6, logical block 0, async page read [ 337.381471][ T9041] Buffer I/O error on dev loop6, logical block 1, async page read [ 337.390663][ T9041] Buffer I/O error on dev loop6, logical block 2, async page read [ 337.398685][ T9041] Buffer I/O error on dev loop6, logical block 3, async page read [ 337.406672][ T9041] Buffer I/O error on dev loop6, logical block 0, async page read [ 337.414684][ T9041] Buffer I/O error on dev loop6, logical block 1, async page read [ 337.422715][ T9041] Buffer I/O error on dev loop6, logical block 2, async page read [ 337.430773][ T9041] Buffer I/O error on dev loop6, logical block 3, async page read [ 337.438827][ T9041] Buffer I/O error on dev loop6, logical block 0, async page read [ 337.450583][ T9041] Buffer I/O error on dev loop6, logical block 1, async page read [ 338.008453][ T5931] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 338.197776][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 338.206265][ T5931] usb 1-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 338.225558][ T5931] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 338.235544][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.244017][ T5931] usb 1-1: Product: syz [ 338.248895][ T5931] usb 1-1: Manufacturer: syz [ 338.253674][ T5931] usb 1-1: SerialNumber: syz [ 338.265095][ T5931] usb 1-1: config 0 descriptor?? [ 338.280489][ T5931] cdc_ether 1-1:0.0: probe with driver cdc_ether failed with error -22 [ 338.291471][ T5931] usb 1-1: unsupported MDLM descriptors [ 338.317944][ T5908] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 338.467811][ T5908] usb 5-1: device descriptor read/64, error -71 [ 338.713213][ T5908] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 339.018732][ T5908] usb 5-1: device descriptor read/64, error -71 [ 339.729420][ T5908] usb usb5-port1: attempt power cycle [ 339.942969][ T9] usb 1-1: USB disconnect, device number 16 [ 340.040157][ T9069] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 340.049261][ T9069] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 340.137798][ T5908] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 340.168474][ T5908] usb 5-1: device descriptor read/8, error -71 [ 340.443940][ T9073] netlink: set zone limit has 4 unknown bytes [ 340.468017][ T5908] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 340.488606][ T5908] usb 5-1: device descriptor read/8, error -71 [ 340.598457][ T5908] usb usb5-port1: unable to enumerate USB device [ 340.772061][ T9077] netlink: 'syz.6.712': attribute type 10 has an invalid length. [ 340.830031][ T9077] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 342.067785][ T5843] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 342.247898][ T5843] usb 1-1: Using ep0 maxpacket: 32 [ 343.146412][ T9097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.159258][ T5843] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 343.181412][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.194357][ T5843] usb 1-1: config 0 descriptor?? [ 343.424313][ T5843] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 344.400129][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 344.429361][ T9089] netlink: 32 bytes leftover after parsing attributes in process `syz.0.715'. [ 344.468450][ T5843] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 344.491922][ T5843] usb 1-1: media controller created [ 344.560424][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 344.682705][ T9116] ======================================================= [ 344.682705][ T9116] WARNING: The mand mount option has been deprecated and [ 344.682705][ T9116] and is ignored by this kernel. Remove the mand [ 344.682705][ T9116] option from the mount to silence this warning. [ 344.682705][ T9116] ======================================================= [ 345.422175][ T9116] 9p: Unknown access argument 18446744073709551615: -34 [ 345.508081][ T5843] az6027: usb out operation failed. (-71) [ 345.553510][ T5843] az6027: usb out operation failed. (-71) [ 345.677977][ T5843] stb0899_attach: Driver disabled by Kconfig [ 345.713813][ T5843] az6027: no front-end attached [ 345.713813][ T5843] [ 345.756525][ T5843] az6027: usb out operation failed. (-71) [ 345.793020][ T5843] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 345.876682][ T5843] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 345.951244][ T5843] dvb-usb: schedule remote query interval to 400 msecs. [ 346.006161][ T5843] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 346.102568][ T5843] usb 1-1: USB disconnect, device number 17 [ 346.483876][ T9175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.726'. [ 347.506639][ T5843] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 350.265159][ T9207] overlayfs: failed to resolve './file1': -2 [ 350.806325][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.736'. [ 351.661316][ T5843] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 351.980327][ T5843] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.993664][ T9222] snd_dummy snd_dummy.0: control 3:4:-2:syz0:2147483647 is already present [ 352.140694][ T5843] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.193201][ T5843] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 352.203995][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.214348][ T5843] usb 7-1: Product: syz [ 352.218925][ T5843] usb 7-1: Manufacturer: syz [ 352.231873][ T5843] usb 7-1: SerialNumber: syz [ 352.266276][ T9226] loop2: detected capacity change from 0 to 7 [ 352.291895][ T9226] Dev loop2: unable to read RDB block 7 [ 352.304266][ T9226] loop2: unable to read partition table [ 352.330336][ T9226] loop2: partition table beyond EOD, truncated [ 352.342213][ T9226] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 352.708305][ T5843] usb 7-1: 0:2 : does not exist [ 352.730002][ T5843] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 352.751073][ T9238] hfsplus: unable to find HFS+ superblock [ 353.245414][ T5843] usb 7-1: USB disconnect, device number 6 [ 353.529932][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.173335][ T5908] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 354.259620][ T9254] program syz.6.749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.438102][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 354.446987][ T5908] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.458129][ T5908] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 354.469604][ T9255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.746'. [ 354.479746][ T5908] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 354.493048][ T5908] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.506922][ T5908] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 354.516317][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.591549][ T9257] program syz.6.749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.601832][ T9257] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 354.647361][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.749'. [ 354.960149][ T5908] usb 5-1: GET_CAPABILITIES returned 0 [ 354.976162][ T5908] usbtmc 5-1:16.0: can't read capabilities [ 355.355589][ T5948] usb 5-1: USB disconnect, device number 21 [ 357.115407][ T9283] Smack: duplicate mount options [ 357.369632][ T5948] psmouse serio2: Failed to reset mouse on : -5 [ 358.216089][ T9306] netlink: 52 bytes leftover after parsing attributes in process `syz.1.767'. [ 358.266116][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.767'. [ 358.323369][ T9307] netlink: 'syz.1.767': attribute type 10 has an invalid length. [ 358.502287][ T9310] xt_nat: multiple ranges no longer supported [ 358.734289][ T9307] team0: Port device dummy0 added [ 359.957506][ T9328] netlink: 420 bytes leftover after parsing attributes in process `syz.0.773'. [ 360.741581][ T9335] netlink: 'syz.0.776': attribute type 12 has an invalid length. [ 360.762639][ T9335] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.776'. [ 361.392322][ T9343] netlink: set zone limit has 4 unknown bytes [ 361.484375][ T9344] uprobe: syz.1.778:9344 failed to unregister, leaking uprobe [ 361.579539][ T9348] af_packet: tpacket_rcv: packet too big, clamped from 3404 to 4294967286. macoff=82 [ 361.626930][ T9350] Bluetooth: MGMT ver 1.23 [ 361.790700][ T5948] misc userio: Buffer overflowed, userio client isn't keeping up [ 362.337888][ T9357] netlink: 384 bytes leftover after parsing attributes in process `syz.0.780'. [ 362.347149][ T9357] netlink: 'syz.0.780': attribute type 2 has an invalid length. [ 363.771259][ T5948] input: PS/2 Generic Mouse as /devices/serio2/input/input8 [ 364.136621][ T5948] psmouse serio2: Failed to enable mouse on [ 364.251366][ T9377] netlink: 420 bytes leftover after parsing attributes in process `syz.0.786'. [ 365.342740][ T9381] vlan3: entered promiscuous mode [ 365.373574][ T9381] dummy0: entered promiscuous mode [ 365.406431][ T9381] vlan3: entered allmulticast mode [ 365.426899][ T9381] dummy0: entered allmulticast mode [ 366.574913][ T9401] tipc: Started in network mode [ 366.580134][ T9401] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 366.588762][ T9401] tipc: Enabled bearer , priority 10 [ 366.600680][ T9401] netlink: 40 bytes leftover after parsing attributes in process `syz.6.792'. [ 368.126338][ T5930] tipc: Node number set to 10005162 [ 370.382300][ T9436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.802'. [ 370.392167][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'. [ 370.654736][ T9438] pim6reg: entered allmulticast mode [ 370.693799][ T30] audit: type=1326 audit(1755846170.572:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9429 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0634d8ebe9 code=0x7ffc0000 [ 370.997779][ T30] audit: type=1326 audit(1755846170.572:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9429 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0634d8ebe9 code=0x7ffc0000 [ 371.530303][ T30] audit: type=1326 audit(1755846170.572:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9429 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0634d8ebe9 code=0x7ffc0000 [ 371.624030][ T30] audit: type=1326 audit(1755846170.572:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9429 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0634d8ebe9 code=0x7ffc0000 [ 372.192081][ T30] audit: type=1326 audit(1755846170.572:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9429 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0634d90b07 code=0x7ffc0000 [ 372.311498][ T30] audit: type=1326 audit(1755846170.572:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9429 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0634d90a7c code=0x7ffc0000 [ 372.396174][ T30] audit: type=1326 audit(1755846170.572:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9429 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0634d909b4 code=0x7ffc0000 [ 372.493714][ T30] audit: type=1326 audit(1755846170.572:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9429 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0634d909b4 code=0x7ffc0000 [ 372.622542][ T30] audit: type=1326 audit(1755846170.572:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9429 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0634d8d84a code=0x7ffc0000 [ 372.637930][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 372.712760][ T30] audit: type=1326 audit(1755846170.572:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9429 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0634d8ebe9 code=0x7ffc0000 [ 372.882614][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 373.188041][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 373.198268][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 373.216393][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 373.227321][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.240723][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 373.250550][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.475684][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 373.484287][ T9] usbtmc 7-1:16.0: can't read capabilities [ 374.007282][ T5908] usb 7-1: USB disconnect, device number 7 [ 374.978601][ T9487] overlayfs: conflicting lowerdir path [ 375.688128][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 376.257844][ T9493] netlink: 420 bytes leftover after parsing attributes in process `syz.0.818'. [ 378.272314][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 378.281233][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'. [ 378.731944][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.937929][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 380.693401][ T9520] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 380.700048][ T9520] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 380.715558][ T9520] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 380.721636][ T9520] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 380.745616][ T9520] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 380.757513][ T9520] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 380.763559][ T9520] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 380.780754][ T9520] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 380.789449][ T9520] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.795455][ T9520] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 380.806560][ T9520] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 380.814256][ T9520] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 380.820264][ T9520] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 381.414600][ T9537] netlink: 420 bytes leftover after parsing attributes in process `syz.5.831'. [ 382.078341][ T5854] Bluetooth: hci0: command 0x0401 tx timeout [ 382.798040][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 382.804695][ T5854] Bluetooth: hci4: command 0x0406 tx timeout [ 382.928019][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 382.928364][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 384.147964][ T5858] Bluetooth: hci0: command 0x0401 tx timeout [ 384.284342][ T5843] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 384.344322][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 384.344333][ T30] audit: type=1326 audit(1755846184.202:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9560 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe06b8ebe9 code=0x7ffc0000 [ 384.488043][ T5843] usb 1-1: Using ep0 maxpacket: 32 [ 384.771901][ T30] audit: type=1326 audit(1755846184.202:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9560 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe06b8ebe9 code=0x7ffc0000 [ 384.793637][ T30] audit: type=1326 audit(1755846184.202:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9560 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe06b8ebe9 code=0x7ffc0000 [ 384.815849][ T30] audit: type=1326 audit(1755846184.202:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9560 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe06b8ebe9 code=0x7ffc0000 [ 384.844655][ T30] audit: type=1326 audit(1755846184.202:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9560 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe06b8ebe9 code=0x7ffc0000 [ 384.868074][ T5858] Bluetooth: hci4: command 0x0406 tx timeout [ 384.868168][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 384.891384][ T30] audit: type=1326 audit(1755846184.202:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9560 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe06b8ebe9 code=0x7ffc0000 [ 384.916445][ T30] audit: type=1326 audit(1755846184.292:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9560 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe06b8ebe9 code=0x7ffc0000 [ 385.005250][ T5843] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 385.014550][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 385.020705][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 385.051373][ T30] audit: type=1326 audit(1755846184.312:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9560 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe06b8ebe9 code=0x7ffc0000 [ 385.091595][ T30] audit: type=1326 audit(1755846184.312:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9560 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe06b8ebe9 code=0x7ffc0000 [ 385.113028][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.113055][ T5843] usb 1-1: Product: syz [ 385.113069][ T5843] usb 1-1: Manufacturer: syz [ 385.113084][ T5843] usb 1-1: SerialNumber: syz [ 385.236155][ T9567] syz_tun: entered allmulticast mode [ 385.299892][ T9567] dvmrp1: entered allmulticast mode [ 385.400171][ T9567] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 385.687311][ T5843] usb 1-1: config 0 descriptor?? [ 385.717605][ T30] audit: type=1326 audit(1755846184.312:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9560 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe06b8ebe9 code=0x7ffc0000 [ 385.723361][ T9562] syz_tun: left allmulticast mode [ 386.072544][ T5843] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 018 [ 386.977946][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 386.984411][ T5858] Bluetooth: hci4: command 0x0406 tx timeout [ 387.027789][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 387.049104][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.846'. [ 387.058157][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.846'. [ 387.121485][ T9] usb 1-1: USB disconnect, device number 18 [ 387.467912][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 387.674446][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 387.757613][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.830367][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.880163][ T24] usb 7-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 387.944513][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.009814][ T24] usb 7-1: config 0 descriptor?? [ 388.551033][ T24] waltop 0003:172F:0034.0001: item fetching failed at offset 0/2 [ 388.588541][ T24] waltop 0003:172F:0034.0001: probe with driver waltop failed with error -22 [ 388.745159][ T9] usb 7-1: USB disconnect, device number 8 [ 388.894371][ T9622] netlink: 'syz.0.853': attribute type 12 has an invalid length. [ 388.918135][ T9622] netlink: 'syz.0.853': attribute type 29 has an invalid length. [ 388.942681][ T9622] netlink: 148 bytes leftover after parsing attributes in process `syz.0.853'. [ 388.968768][ T9621] netlink: 72 bytes leftover after parsing attributes in process `syz.5.857'. [ 389.697267][ T9626] program syz.6.858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.708792][ T9638] netlink: set zone limit has 4 unknown bytes [ 392.535026][ T9662] fuse: Unknown parameter 'fd00000000000000000003' [ 393.937862][ T5908] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 393.991804][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 394.001145][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 394.512153][ T5908] usb 6-1: string descriptor 0 read error: -22 [ 394.556284][ T5908] usb 6-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 394.610302][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.662644][ T5908] usb 6-1: config 0 descriptor?? [ 394.681944][ T5908] usbtest 6-1:0.0: FX2 device [ 394.718240][ T5908] usbtest 6-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 394.923884][ T9] usb 6-1: USB disconnect, device number 13 [ 395.346156][ T9688] batadv_slave_1: entered promiscuous mode [ 395.353120][ T9688] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 395.360505][ T9688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.647786][ T9701] syz_tun: entered allmulticast mode [ 396.163880][ T9683] batadv_slave_1: left promiscuous mode [ 396.247633][ T9697] syz_tun: left allmulticast mode [ 402.055664][ T9745] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.063006][ T9745] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.181328][ T9754] overlayfs: missing 'lowerdir' [ 402.299908][ T9745] [ 402.302303][ T9745] ====================================================== [ 402.309333][ T9745] WARNING: possible circular locking dependency detected [ 402.316368][ T9745] 6.16.0-syzkaller #0 Not tainted [ 402.321386][ T9745] ------------------------------------------------------ [ 402.328781][ T9745] syz.1.886/9745 is trying to acquire lock: [ 402.334653][ T9745] ffff888023744e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_device_event+0x182/0xa20 [ 402.344673][ T9745] [ 402.344673][ T9745] but task is already holding lock: [ 402.352198][ T9745] ffff88805e10ad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 402.361882][ T9745] [ 402.361882][ T9745] which lock already depends on the new lock. [ 402.361882][ T9745] [ 402.372313][ T9745] [ 402.372313][ T9745] the existing dependency chain (in reverse order) is: [ 402.381349][ T9745] [ 402.381349][ T9745] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 402.389826][ T9745] lock_acquire+0x120/0x360 [ 402.394885][ T9745] __mutex_lock+0x182/0xe80 [ 402.399930][ T9745] dev_set_mtu+0x10e/0x260 [ 402.404888][ T9745] team_add_slave+0x8b8/0x2840 [ 402.410205][ T9745] do_set_master+0x530/0x6d0 [ 402.415433][ T9745] do_setlink+0xcf0/0x41c0 [ 402.420427][ T9745] rtnl_newlink+0x160b/0x1c70 [ 402.425659][ T9745] rtnetlink_rcv_msg+0x7cc/0xb70 [ 402.431190][ T9745] netlink_rcv_skb+0x205/0x470 [ 402.436501][ T9745] netlink_unicast+0x75c/0x8e0 [ 402.441802][ T9745] netlink_sendmsg+0x805/0xb30 [ 402.447116][ T9745] __sock_sendmsg+0x21c/0x270 [ 402.452351][ T9745] ____sys_sendmsg+0x505/0x830 [ 402.457662][ T9745] ___sys_sendmsg+0x21f/0x2a0 [ 402.462881][ T9745] __x64_sys_sendmsg+0x19b/0x260 [ 402.468365][ T9745] do_syscall_64+0xfa/0x3b0 [ 402.473404][ T9745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.479869][ T9745] [ 402.479869][ T9745] -> #0 (team->team_lock_key#3){+.+.}-{4:4}: [ 402.488083][ T9745] validate_chain+0xb9b/0x2140 [ 402.493388][ T9745] __lock_acquire+0xab9/0xd20 [ 402.498599][ T9745] lock_acquire+0x120/0x360 [ 402.503631][ T9745] __mutex_lock+0x182/0xe80 [ 402.508673][ T9745] team_device_event+0x182/0xa20 [ 402.514148][ T9745] notifier_call_chain+0x1b3/0x3e0 [ 402.519803][ T9745] __dev_notify_flags+0x18d/0x2e0 [ 402.525369][ T9745] netif_change_flags+0xe8/0x1a0 [ 402.530849][ T9745] do_setlink+0xc55/0x41c0 [ 402.535905][ T9745] rtnl_newlink+0x149f/0x1c70 [ 402.541244][ T9745] rtnetlink_rcv_msg+0x7cc/0xb70 [ 402.546734][ T9745] netlink_rcv_skb+0x205/0x470 [ 402.552061][ T9745] netlink_unicast+0x75c/0x8e0 [ 402.557374][ T9745] netlink_sendmsg+0x805/0xb30 [ 402.562682][ T9745] __sock_sendmsg+0x21c/0x270 [ 402.567897][ T9745] ____sys_sendmsg+0x505/0x830 [ 402.573208][ T9745] ___sys_sendmsg+0x21f/0x2a0 [ 402.578431][ T9745] __x64_sys_sendmsg+0x19b/0x260 [ 402.583914][ T9745] do_syscall_64+0xfa/0x3b0 [ 402.588953][ T9745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.595385][ T9745] [ 402.595385][ T9745] other info that might help us debug this: [ 402.595385][ T9745] [ 402.605617][ T9745] Possible unsafe locking scenario: [ 402.605617][ T9745] [ 402.613085][ T9745] CPU0 CPU1 [ 402.618459][ T9745] ---- ---- [ 402.623911][ T9745] lock(&dev_instance_lock_key#3); [ 402.629138][ T9745] lock(team->team_lock_key#3); [ 402.636621][ T9745] lock(&dev_instance_lock_key#3); [ 402.644368][ T9745] lock(team->team_lock_key#3); [ 402.649330][ T9745] [ 402.649330][ T9745] *** DEADLOCK *** [ 402.649330][ T9745] [ 402.657485][ T9745] 2 locks held by syz.1.886/9745: [ 402.662525][ T9745] #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 402.671627][ T9745] #1: ffff88805e10ad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 402.681774][ T9745] [ 402.681774][ T9745] stack backtrace: [ 402.687688][ T9745] CPU: 1 UID: 0 PID: 9745 Comm: syz.1.886 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 402.687712][ T9745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.687735][ T9745] Call Trace: [ 402.687744][ T9745] [ 402.687754][ T9745] dump_stack_lvl+0x189/0x250 [ 402.687781][ T9745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.687802][ T9745] ? __pfx__printk+0x10/0x10 [ 402.687828][ T9745] ? print_lock_name+0xde/0x100 [ 402.687853][ T9745] print_circular_bug+0x2ee/0x310 [ 402.687878][ T9745] check_noncircular+0x134/0x160 [ 402.687904][ T9745] validate_chain+0xb9b/0x2140 [ 402.687929][ T9745] ? __lock_acquire+0xab9/0xd20 [ 402.687953][ T9745] __lock_acquire+0xab9/0xd20 [ 402.687974][ T9745] ? team_device_event+0x182/0xa20 [ 402.687991][ T9745] lock_acquire+0x120/0x360 [ 402.688014][ T9745] ? team_device_event+0x182/0xa20 [ 402.688035][ T9745] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 402.688069][ T9745] __mutex_lock+0x182/0xe80 [ 402.688089][ T9745] ? team_device_event+0x182/0xa20 [ 402.688111][ T9745] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 402.688150][ T9745] ? team_device_event+0x182/0xa20 [ 402.688170][ T9745] ? __pfx___mutex_lock+0x10/0x10 [ 402.688189][ T9745] ? __timer_delete_sync+0x218/0x2d0 [ 402.688225][ T9745] team_device_event+0x182/0xa20 [ 402.688245][ T9745] notifier_call_chain+0x1b3/0x3e0 [ 402.688279][ T9745] __dev_notify_flags+0x18d/0x2e0 [ 402.688309][ T9745] ? __pfx___dev_notify_flags+0x10/0x10 [ 402.688335][ T9745] ? __dev_change_flags+0x4cc/0x6d0 [ 402.688365][ T9745] ? __pfx___dev_change_flags+0x10/0x10 [ 402.688391][ T9745] ? netif_state_change+0x256/0x3a0 [ 402.688420][ T9745] netif_change_flags+0xe8/0x1a0 [ 402.688450][ T9745] do_setlink+0xc55/0x41c0 [ 402.688479][ T9745] ? __kernel_text_address+0xd/0x40 [ 402.688508][ T9745] ? arch_stack_walk+0xfc/0x150 [ 402.688532][ T9745] ? __pfx_do_setlink+0x10/0x10 [ 402.688566][ T9745] ? __lock_acquire+0xab9/0xd20 [ 402.688587][ T9745] ? __mutex_trylock_common+0x153/0x260 [ 402.688612][ T9745] ? __pfx___mutex_trylock_common+0x10/0x10 [ 402.688637][ T9745] ? rcu_is_watching+0x15/0xb0 [ 402.688658][ T9745] ? trace_contention_end+0x39/0x120 [ 402.688680][ T9745] ? __mutex_lock+0x330/0xe80 [ 402.688706][ T9745] ? rtnl_newlink+0x8db/0x1c70 [ 402.688729][ T9745] ? rcu_is_watching+0x15/0xb0 [ 402.688749][ T9745] ? __pfx___mutex_lock+0x10/0x10 [ 402.688775][ T9745] ? ns_capable+0x8a/0xf0 [ 402.688795][ T9745] ? rtnl_link_get_net_capable+0x16a/0x350 [ 402.688824][ T9745] rtnl_newlink+0x149f/0x1c70 [ 402.688848][ T9745] ? netlink_sendmsg+0x805/0xb30 [ 402.688879][ T9745] ? __pfx_rtnl_newlink+0x10/0x10 [ 402.688914][ T9745] ? kasan_quarantine_put+0xdd/0x220 [ 402.688942][ T9745] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.688965][ T9745] ? nlmon_xmit+0xb0/0x100 [ 402.688987][ T9745] ? kmem_cache_free+0x18f/0x400 [ 402.689010][ T9745] ? __local_bh_enable_ip+0x12d/0x1c0 [ 402.689030][ T9745] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.689050][ T9745] ? __local_bh_enable_ip+0x12d/0x1c0 [ 402.689070][ T9745] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 402.689092][ T9745] ? __dev_queue_xmit+0x27e/0x3a70 [ 402.689111][ T9745] ? __dev_queue_xmit+0x27e/0x3a70 [ 402.689136][ T9745] ? __dev_queue_xmit+0x27e/0x3a70 [ 402.689156][ T9745] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 402.689177][ T9745] ? __lock_acquire+0xab9/0xd20 [ 402.689206][ T9745] ? __pfx_rtnl_newlink+0x10/0x10 [ 402.689230][ T9745] rtnetlink_rcv_msg+0x7cc/0xb70 [ 402.689256][ T9745] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 402.689280][ T9745] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 402.689304][ T9745] ? ref_tracker_free+0x63a/0x7d0 [ 402.689324][ T9745] ? __copy_skb_header+0xa7/0x550 [ 402.689342][ T9745] ? __pfx_ref_tracker_free+0x10/0x10 [ 402.689363][ T9745] ? __skb_clone+0x63/0x7a0 [ 402.689383][ T9745] netlink_rcv_skb+0x205/0x470 [ 402.689409][ T9745] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 402.689434][ T9745] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 402.689466][ T9745] ? netlink_deliver_tap+0x2e/0x1b0 [ 402.689492][ T9745] ? netlink_deliver_tap+0x2e/0x1b0 [ 402.689520][ T9745] netlink_unicast+0x75c/0x8e0 [ 402.689548][ T9745] netlink_sendmsg+0x805/0xb30 [ 402.689580][ T9745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.689610][ T9745] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 402.689629][ T9745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.689656][ T9745] __sock_sendmsg+0x21c/0x270 [ 402.689680][ T9745] ____sys_sendmsg+0x505/0x830 [ 402.689710][ T9745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.689760][ T9745] ? import_iovec+0x74/0xa0 [ 402.689788][ T9745] ___sys_sendmsg+0x21f/0x2a0 [ 402.689817][ T9745] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.689862][ T9745] ? __fget_files+0x2a/0x420 [ 402.689882][ T9745] ? __fget_files+0x3a0/0x420 [ 402.689908][ T9745] __x64_sys_sendmsg+0x19b/0x260 [ 402.689938][ T9745] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 402.689971][ T9745] ? rcu_is_watching+0x15/0xb0 [ 402.689994][ T9745] ? do_syscall_64+0xbe/0x3b0 [ 402.690018][ T9745] do_syscall_64+0xfa/0x3b0 [ 402.690038][ T9745] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.690057][ T9745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.690076][ T9745] ? clear_bhb_loop+0x60/0xb0 [ 402.690098][ T9745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.690118][ T9745] RIP: 0033:0x7efe06b8ebe9 [ 402.690142][ T9745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.690160][ T9745] RSP: 002b:00007efe07a27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.690180][ T9745] RAX: ffffffffffffffda RBX: 00007efe06db5fa0 RCX: 00007efe06b8ebe9 [ 402.690195][ T9745] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000005 [ 402.690209][ T9745] RBP: 00007efe06c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 402.690221][ T9745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.690233][ T9745] R13: 00007efe06db6038 R14: 00007efe06db5fa0 R15: 00007ffc81a517e8 [ 402.690255][ T9745] [ 403.538917][ T9745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.550204][ T9745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.580467][ T9745] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.590088][ T9745] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.599505][ T9745] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.609940][ T9745] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.964157][ T9745] bridge1: left promiscuous mode [ 403.970668][ T9745] bridge2: left promiscuous mode [ 403.975828][ T9745] bridge3: left promiscuous mode [ 403.981065][ T9745] bridge4: left promiscuous mode [ 403.991857][ T9762] syz_tun: entered allmulticast mode [ 404.002010][ T9764] dvmrp1: entered allmulticast mode [ 404.257511][ T9756] syz_tun: left allmulticast mode