last executing test programs: 1m32.549485916s ago: executing program 32 (id=112): r0 = socket(0x2, 0x80805, 0x0) listen(r0, 0x5) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002002, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x84) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904002c11018b7500090583", @ANYBLOB="47e9b82e00f4bea2075508000000021a"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001f40)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x204}}], 0x30}], 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, r4, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xe9, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x3, 0x1, 0x2, 0x10, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0xff, "3c313919943b"}, @processing_unit={0xa, 0x24, 0x7, 0x2, 0x1, 0xb, "e4c2a5"}, @processing_unit={0x7, 0x24, 0x7, 0x2, 0x6, 0xb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0xd64, 0x5, "76a27f70eebea1"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x3, 0x2, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x40, 0x4, 0x1, {0x7, 0x25, 0x1, 0x81, 0x8, 0xa827}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x6d, 0xe, "8cee6f"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xff, 0x1, 0x6}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x1, "bd", "d1ca7a"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x31, 0x2, 0x3, 0x9, "90c0fb8afc7c0328"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5d, 0x91, "441f97", "50fde3"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0x3, 0x7, 0xff}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0xda898fb36917a824, 0x40, 0x3, 0x5, 0x8, 0xb}, 0x1c, &(0x7f0000000200)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "86384c8709489386400b693a8b6f9af7"}, @ptm_cap={0x3}]}, 0x2, [{0x37, &(0x7f0000000300)=ANY=[@ANYBLOB="37031b92092b8aed1de4e57a09ce7e875e2ff21871205d9ea462c608630000000000000000000000000090cfdc85f607c81919962e886d8cecd33df1f73231a7862085f6ba4ff03d20744fa1d98fb3ad1a9db125635f26d3d9b20fd23ed3fe4105e538f883f112c4005ef5a44fc5f3a68987065e4192b7b579995948734fbca2e32edfe6d660dcde82cb53a09bac000beadbb342b471fc161e76e546d1f28824eb7ccdf4aaaef66a6fff"]}, {0x18, &(0x7f0000000280)=@string={0x18, 0x3, "996f2932359b63b56456d4d28fafc95009e9f0ebd537"}}]}) 1m17.461928648s ago: executing program 33 (id=186): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="fdaf26bd7000001000000e000000080003"], 0x1c}}, 0x0) 1m14.51086868s ago: executing program 34 (id=201): syz_emit_ethernet(0xb0, &(0x7f0000000800)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf80", 0x7a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026"}, {0x1f, 0x1, "fe906d26efe393"}, {0x3}, {0x21}]}}}}}}, 0x0) 1m10.083578791s ago: executing program 0 (id=213): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) eventfd(0xf) r2 = epoll_create(0x4) r3 = signalfd4(r0, &(0x7f0000000200)={[0x9, 0x647]}, 0x8, 0x800) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090480000003"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000380)={0x24, &(0x7f00000000c0)={0x20, 0x19}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000004c0)={0xc, &(0x7f00000003c0)={0x20, 0x22, 0x45, {0x45, 0x8, "6a576cd904fe31d600dd8d3d9c012dbefec7492f1c0a69937f130cdd92fb9682e916de80004c860c208c440d451ee959ba732ba8003321b02c72ff5445ce99be3d11c1"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x10, &(0x7f0000000500)={0x0, 0x14, 0x3a, "67861f21fb8e3d2a7d5a14e0e6cfb446950b1b9049d347e23df65eba5823bb7d8b3d5c1364e02549447ae4ed0b4e8fb37a7ebbe9430551b7a3a2"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xe}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000180)=""/56, 0x38}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000005d00)=[{0x0}], 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0xe, r2, &(0x7f00000001c0), 0x0, 0x8, 0x0, 0x1, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, &(0x7f0000000280)="c9da70e50217e1149387587e0f4915ff9af9aad884ea4f384cb767269c5bb3ecd8f4179a6eadd615f54b70879e7084708d9c31cb9e53a447126722765eaf912fd5f6f54450da52953fdc1105c3d4a507841b20895c54f72b38", 0x59, 0x7, 0x0, 0x1, r7}]) 1m8.029375816s ago: executing program 0 (id=220): syz_open_dev$loop(&(0x7f0000000200), 0x7, 0x200000) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030000080000000000000000000000020001000000000010000007000000000200010000008a8c9e81bc04"], 0x30}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x4}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x74}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8903, 0x5820}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x118}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x50}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m6.227569303s ago: executing program 0 (id=224): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r1, &(0x7f00000017c0)=""/4109, 0x100d, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r2, 0x8, 0x1c, "d3461290d32cd7b30a7d2eaa2631d9998b3a1061825a741c56564c4c"}, 0x24) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x0, "fdbf1cf25d766ea97be36cd660ec1b7d9beef2e350ae108497305d1af2d08e97", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"a9d25e3af729b3fb7273e5d3b7f63206b683a06c109a1329cf50e751559269c6", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0383e04, &(0x7f0000000080)={"e855b7096bea58b68d7175a39e4b307cb0a400517f4739a8482d84491704042a", 0xffffffffffffffff, 0xffffffffffffffff, 0x2}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x401, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3c}, 0x1c) r6 = fanotify_init(0x40, 0x800) read(r6, &(0x7f0000000140)=""/4096, 0x1000) accept4$inet6(r0, 0x0, 0x0, 0x80800) 1m6.037423236s ago: executing program 0 (id=225): fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f00000000c0)={{0xffffffffffffffff}, {}, 0x0, 0x8}) gettid() mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r3 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000002200)=[{0x84, 0x77, 0x0, 0x0, @tick=0x3, {}, {0x7}, @raw32={[0x2]}}, {0x0, 0x0, 0x0, 0x83, @time={0x0, 0x7}, {}, {}, @note={0x1, 0x0, 0x0, 0x0, 0x3}}, {0x2, 0x0, 0x0, 0x0, @tick=0x4, {}, {0x2a}, @ext={0x0, 0x0}}], 0x54) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r6) creat(&(0x7f0000000080)='./cgroup\x00', 0x0) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x3d) utimensat(r7, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m4.778136205s ago: executing program 0 (id=227): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="7c01000019000100000000000000000020010000000000000000000000000000fc0200000000000000000000000000001648fbea2ecdf1a61864cf354000b837f68732a72063893da33d3324c309be5a910a5f0706e8c808289fd8e6d442fb45297c5149e6acfaad2b6a03092202a3a96bb0563107ce6c37fad576200374d69e440a37e4ba25126baa65c796791dc7540d3a24e0fe41d60c1be91b3d5a4d4fa943a26c3b926db9e0a3cca35ba9e19703d1f0c41f3ed3e005ae4bd400"/202, @ANYRES16=r0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000c4000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000030000000000000000000000000000fe8000000000000000000000000000bb000000003300000000000000fe8000000000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000003c0000000a000000fc0100"/304], 0x17c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000071100a000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0245628, &(0x7f0000000080)={0x0, 0x6, 0x8, '\x00', &(0x7f0000000040)=0x7}) io_setup(0x5, &(0x7f0000000000)=0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x3, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) io_submit(r2, 0x19, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000080)=0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x210000, 0x1) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc01c2, 0x1fe) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) clock_adjtime(0x7, &(0x7f0000000000)={0x10002, 0x0, 0x9, 0x7, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0xd8a8, 0x0, 0x3b9ac9ff, 0x8000000000000001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0xfffffff9, @mcast1, 0xa9}}, 0xe10c, 0x8}, &(0x7f0000000280)=0x88) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1m4.399633576s ago: executing program 0 (id=228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)={0x24, r1, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 1m4.051552967s ago: executing program 35 (id=228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)={0x24, r1, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 1m2.78632898s ago: executing program 5 (id=231): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40004, 0x3000}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4004800) (fail_nth: 3) 1m2.566301362s ago: executing program 5 (id=232): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400000, 0xa4, 0x21}, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @multicast}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x12, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, r0, 0x0, 0x1, &(0x7f00000002c0)='\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup=r0, r0, 0x15, 0x20, 0x0, @void, @void, @void, @value=r5, r4}, 0x20) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000340)={0x1, {0x0, 0x6, 0x6, 0x5, 0x3}}) (async) r6 = syz_io_uring_setup(0x7049, &(0x7f0000000380)={0x0, 0x3041, 0x1000, 0x3, 0x22b, 0x0, r0}, &(0x7f0000000400), &(0x7f0000000440)) io_uring_setup(0x996, &(0x7f0000000480)={0x0, 0xfb08, 0x40, 0x2, 0x65, 0x0, r6}) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000500)=0x5) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000540), &(0x7f0000000580)=0x4) (async) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550d, &(0x7f00000005c0)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000600)={@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0xf7, 0x8000, 0x1b63, 0x100, 0x3, 0x2000000, r1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000680)) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000740)={0x9, 0x2, "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"}) lseek(r6, 0x4, 0x0) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000880)) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) writev(r8, &(0x7f0000001a40)=[{&(0x7f00000008c0)="cb3bda9c7719b4c2baddaca5ca8d3f13fe1b1fc5e0f2e133398986f6291b1564a1f10c42", 0x24}, {&(0x7f0000000900)="7c0198889d333337fe58c89efc59016ff37e93cd128ad28e909cfc160134f4fc664d241a36154ea5973336d62f9d4fd2d4a19335f2c6d09063b3015974e6bfaed2ac543d0caa03ccb77c6c4ea618ad0657cf96eecb7396808932f446feb6894152ff828a798a20a243364fe85825ef005dc6ea20b342f9d9bbfa480f9a", 0x7d}, {&(0x7f0000000980)="97fa15aa2e2ce5f3bee64d40f9943e3db2124a5e3e16921db825a851702d8748b0a21423b1a30524c2b4c8cf5afc964ceced91d1a9d73090cb172522707807", 0x3f}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="18fcf423fc4dba45e55003581e7d61a264fa2c4df4e5b44145fd570f0b026abe9e645109e1062f6621283110615c2eb85a05383a2fca46e9ef5eb41db87f0181b9b1cfd04abe9449a211e829b188268130e87c7af746b06351d174b5c32751e72629a25d28e81c", 0x67}], 0x5) (async) r9 = getpgid(0xffffffffffffffff) ptrace$getregset(0x4204, r9, 0x202, &(0x7f0000001b80)={&(0x7f0000001a80)=""/254, 0xfe}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r10 = dup2(r6, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r10, 0xc08c5334, &(0x7f0000001bc0)={0x80000000, 0x6, 0x1, 'queue0\x00', 0x20a2}) (async) syz_emit_ethernet(0xb4, &(0x7f0000001c80)={@remote, @local, @void, {@mpls_uc={0x8847, {[{0x800, 0x0, 0x1}, {0xd}, {0x7, 0x0, 0x1}, {0x4}, {0xffffa}, {0x0, 0x0, 0x1}, {0x4}, {0x7ff, 0x0, 0x1}, {0x6, 0x0, 0x1}], @generic="7cd6ef4d9bbfaf494f6b0f2918bbf70fdac1064141295117f421b22fc4a963d69d9c43cd03ad5696e56aa92ec7231a33702812cd9fbb030fe2bb16438c08ad043ab46dfc10894b7f1b410c0f05fc63acef948e00afcd2acd79bd6b25ab54498864ed7912c52903733d7107ba9d13aeb987bb418d22f36598e0b26e5e3d560bd87ac4"}}}}, &(0x7f0000001d40)={0x1, 0x1, [0xf8f, 0x3c8, 0xc73, 0xe7b]}) (async) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000001d80)="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") ioctl$TUNSETOFFLOAD(r10, 0x400454d0, 0x12) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000001e80)={0x8, 'veth0_to_batadv\x00', {'batadv0\x00'}, 0x9}) 1m2.438243692s ago: executing program 5 (id=234): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_io_uring_setup(0x4c10, &(0x7f0000000140)={0x0, 0xfad6, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x202, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x51, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000006800010000000000000000000a00000043009e4904000b00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpgrp(0xffffffffffffffff) sendmmsg$unix(r6, &(0x7f00000071c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003480)=[@cred={{0x18, 0x1, 0x2, {r7}}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x28, 0x40000}}], 0x1, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(r8, 0x1) rt_tgsigqueueinfo(r7, r7, 0x1e, &(0x7f00000003c0)={0x23, 0xeb, 0x10}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="a73fb05f3771f083524131355247425216c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x88}]}}}]}, 0x3c}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 1m2.12799149s ago: executing program 5 (id=235): fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f00000000c0)={{0xffffffffffffffff}, {}, 0x0, 0x8}) gettid() mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r3 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000002200)=[{0x84, 0x77, 0x0, 0x0, @tick=0x3, {}, {0x7}, @raw32={[0x2]}}, {0x0, 0x0, 0x0, 0x83, @time={0x0, 0x7}, {}, {}, @note={0x1, 0x0, 0x0, 0x0, 0x3}}, {0x2, 0x0, 0x0, 0x0, @tick=0x4, {}, {0x2a}, @ext={0x0, 0x0}}], 0x54) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r6) creat(&(0x7f0000000080)='./cgroup\x00', 0x0) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x3d) utimensat(r7, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m1.159241557s ago: executing program 5 (id=240): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000000)='.\\\'*^$.]\xe5^$)]\x00') (fail_nth: 3) 1m0.795618716s ago: executing program 5 (id=242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ecm(0x2, 0x5e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfff, 0x0, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x4, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xd, 0x14, 0x10}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0xfe, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xb, 0x2}}}}}]}}]}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000380)=@ethtool_gstrings={0x1b, 0x7}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x54, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "b168fa3167"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}]}, 0x54}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000dc0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "06cbef", 0x18, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @rand_addr=' \x01\x00', {[@hopopts={0x0, 0x2, '\x00', [@ra, @generic, @enc_lim, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}, 0x0) 1m0.574569966s ago: executing program 36 (id=242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ecm(0x2, 0x5e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfff, 0x0, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x4, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xd, 0x14, 0x10}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0xfe, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xb, 0x2}}}}}]}}]}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000380)=@ethtool_gstrings={0x1b, 0x7}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x54, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "b168fa3167"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}]}, 0x54}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000dc0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "06cbef", 0x18, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @rand_addr=' \x01\x00', {[@hopopts={0x0, 0x2, '\x00', [@ra, @generic, @enc_lim, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}, 0x0) 37.03399381s ago: executing program 8 (id=326): r0 = openat$apparmor_task_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x241002) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000080)={0x3, 0x200, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x101, 0x8001}) ioctl$SG_BLKTRACESETUP(r1, 0xc0401273, &(0x7f00000000c0)={'\x00', 0x7, 0x401, 0xfffff08d, 0x6a, 0x1000, r2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) splice(r3, &(0x7f0000000100)=0x4, r0, &(0x7f0000000140)=0x8000, 0x40000000, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4d, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xab, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x0, 0x9, 0x7, @mcast2, @loopback, 0x20, 0x10, 0x5, 0xfffffff9}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x98, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000c4}, 0x8000) sendmmsg(r3, &(0x7f0000001f40)=[{{&(0x7f0000000740)=@l2tp={0x2, 0x0, @loopback, 0x4}, 0x80, &(0x7f0000001b40)=[{&(0x7f00000007c0)="2aad9dfa23d5cf2ddd81cdd003701fdf3b543c2b3464c67d0b21795e551eb959e99a15b933b818f0e845f422afa836d801ccb5cf6912cabd9601e08288b02e549d482169cd08d10e6deae4dc7e0feb192a4ea6169a6a5244d04b6e6432c5da0e1ce9973a3eac7303051ef070a6625296a18d4e7fb7f37624106c7b45e2bfc866079d86aa3e148e1b90eef82c912b67e17fc0f30e53f0f01f2e38cfedc383f5e4639a6e", 0xa3}, {&(0x7f0000000880)="ade34c14514adc5f46ffa29fba767904d4a1e703b5b5c2c73cd0e83c915d7254e727f83272c9f7feba7aac58f35ebf792e7b896ea2004c3e1b72e56d8db1609ea3e47849f77844b6b01a9eb66080240af715b8bbfee4d6fa3edcb529ae12985b5c6d1d69fa967fa90b34197bfa13704c616216af5de14d07aed14cde6dbabbeed20ef7c00f0b8a118c6fecd42210ef208332682a97c8fbfa6212e91e8eec95816a783b755894157b1ffa419c75692c731e6e76f45405b3392531b11ffd38677f2653ee8f4d6541c08ecddd1f84fd43abf8a37a7c40a23d9cc4b7828c79dee6be95a051378e", 0xe5}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="9c62a1428091651ec588a799dbc0061437b1bb829fff8be5bf22319f1de3fa4f", 0x20}, {&(0x7f00000019c0)="2f7a3434375bbaecb06e3d17c77e1fb4ef198cf2a1396b877b8a6c824cf565e1", 0x20}, {&(0x7f0000001a00)="c42eaf5913b92d2129ef8836a9c9b533bee24ad2eea62355df665a99dea8225c0f6448b9a8c39e06566114ec35833f052240ebda224892a16387e33cab4f23bf39a557df50b5a304b28b9fb9974bcbf492601d2526ca090f22a015427396181793853a059a2831ccac4efec2eb4a556cb05ba31197a94becabac4c1da3ad651c9e2eb4c98ad5c6da7f246418fd2efa53f905fb92dcd5e176481f243d045325", 0x9f}, {&(0x7f0000001ac0)="936320c11b31270afbd8bada5eae220d0e732ca9d058343d0eb0819850fec92282d1f6c437c5aaafdcc58f5a8c467a3aa87fb4d920a69d336fc39d924f3f7ad83c102b4867", 0x45}], 0x7, &(0x7f0000001b80)=[{0xb8, 0x88, 0x5, "57eb97680b0596b0f4761ccfd9c4004fe988e52cbfa1fb6100a80886c462a4d3f1b285af3ca177088cf80b9e110ba333484e9d707113bdd06e43b9badbd3533eaeda37aa5d1144d099ca41856a87b8e20998c4f2e8430416ebb068f3dc2e8ceb29939cfee54d632adee6e007ddde01dfa383ed25213556e63aef674fd571a528543a1ec34b0a96b2ca8a19416c6148864b1eb70a781f5a421d6935f2619d4e6fcd3482a49732a2e96e89a411"}, {0xc8, 0x102, 0x9, "475485571149621ee34b1a58b758f9b7ea4ef8a5864c0ed07fa1fb6aca6ff0ba4b38687f3d12268c1530b74c431bf74d583f1c2f383f48e5fa106579e3e7af134434df442f6f77bab92b49d3c27e4b24a7913be6f4a29c63632c925d043befb7b62102ae48f79cd26c92440c842d4c5b039ca4813a6da589ea4c6ccd728bc37352338b2bf89784d02ed5d3663197c00789ddffe878edf1368d3fee1c174e72db30f8bfb2563427a3f23f5e9404473edea8e674e2502d228b879fa556"}, {0x34, 0x118, 0x401, "b1f086c7d9cc8b7cce358e5c4c77b41d2a4decf340752560f7cb360a8f3b81583c6acfddc01b92"}, {0x30, 0x118, 0xdb6, "7e744c2564a6f77ad5994e1236a7b1e2174a4657761c3dd7eee6ce9bdc41da56a0057e26"}, {0x54, 0x117, 0x0, "4478d7e646f02c06d450488804441ab50b1dd9ed6505e98847fc616c9a9517b0aad68fd562b53978fe6737b952ac12191fa463577bd12edc292092f731c8b4a84e099f258d"}, {0x80, 0x10e, 0x5, "70c1e1591e3a894b082e5747430301c89a70e3e52b85842353088c246edc8130f927f3dcc843c0c3e8393fa98e7c69158fc75f79522a05f16766761004ff322baa8e5af93f23374adf484c3c784817274a075bd827249e9e86693090967790f9c3393a450393cfa85e977247b6fa34059d23"}, {0xd8, 0x107, 0x5, "2015415b15743581d802e8bb22944239a953ed431674c578b9930f716e3caa4560b28f7e98ef382d360251d095777ff5581bc0fd7a8f4923d48822bdf5e245d4df1128bae9748e3261b0e338e84e29d5a0994da73899573731a5bdfea17395f507f2e7a3e72f4cd1faa0d2a6f3c437d0b7f665d39f2f4f5baf9a97c97c35683dc12f71109aa35e6e190975232203681634f54ae22c29ec2a2de1b8d56fafc0932e38a59e2bfd9d76422fc174da0a298ed2b7d31e0265ba38e84c700d1febd6e32bc9ea0e9e7a13cb47c5b6"}], 0x390}}], 0x1, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$snapshot(0xffffff9c, &(0x7f0000001f80), 0x40, 0x0) write(r7, &(0x7f0000001fc0)="3f73107ab762f042edacb79db57999da08db0e86077de7290727579125c34afde8875d8c069f555e3bb42b82c664bb48b1ce7437f1c9d196f5caa26040c1b26cf90834d26508e04fefee10d6d45a070af61de32cf17d1136828a57b6f72e6e940ebd52f4e11c7a0e5d489a10c7c9a3f6fb9e2094e70815730e3e1d445d18cb83560964f61c492f4319298e55c94797185117eee3cbb31e9e52d3a6adf5cf55d9d55dd625e38bd6544461b755127a44b409357bf8734bf01b790fffed4902da9032cb411c6c112c2ec44f5648028d73d9f86839734242e3e17fc9ed3da6c911b3ba7b4c36407ecd15f37d925ca8193959bbd476fd9d", 0xf5) r8 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000020c0), 0x80000) connect$unix(r8, &(0x7f0000002100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002340)={0x18, 0xc, &(0x7f0000002180)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @tail_call, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffc0}, @ldst={0x2, 0x2, 0x4, 0x1, 0x7, 0x100, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], &(0x7f0000002200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002240)={0x5, 0xa, 0x5, 0x30fe}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000002280)=[0x1], &(0x7f00000022c0)=[{0x4, 0x3, 0x0, 0x4}, {0x4, 0x3, 0x8, 0x6}, {0x4, 0x5, 0xa, 0xa}, {0x3, 0x3, 0x5, 0x6}, {0x2, 0x1, 0x10}, {0x3, 0x5, 0x2, 0x3}], 0x10, 0xfffffffb, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002500)={@map=0x1, 0x6, 0x0, 0x10000, &(0x7f0000002400)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000002440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002480)=[0x0, 0x0, 0x0], &(0x7f00000024c0)=[0x0], 0x0}, 0x40) r12 = openat$dlm_plock(0xffffff9c, &(0x7f0000002580), 0x2bc000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002540)={@ifindex=r6, r9, 0x13, 0x10, 0x0, @void, @value=r12, @void, @void, r11}, 0x20) openat$qrtrtun(0xffffff9c, &(0x7f00000025c0), 0x109000) ioctl$TIOCL_BLANKSCREEN(r12, 0x541c, &(0x7f0000002600)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DMA_BUF_SET_NAME_A(r12, 0x40046201, &(0x7f0000002640)='\xfd#\x00') setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000002680)='ip6tnl0\x00', 0x10) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000026c0)=0x0) sendmmsg(r13, &(0x7f0000003200)=[{{&(0x7f0000002700)=@nfc_llcp={0x27, r14, 0x1, 0x5, 0x7, 0x4, "dfdd33dde1137417818e26555c962d1a8f556dad2885a01e4d1c17707b836f97530152c8eaa7c379c90a224bf74bc556fbd800e6e7bd03109cfa24f8788fc1", 0x1e}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002780)="3d6f8cf5637e9614f8b3b1df397aacbfbc6666bfe6c39c178cfa9d34800c28d0a3bbe49e3d9766c80c930dffbe80baa8afc94c58c7b9021b7da96eea45d56a16b8797cade380a71b2f9134110784ab22254ac90594c7fcd18734aaf01241d1f04775ad046577c9e3", 0x68}, {&(0x7f0000002800)="595fe1cab410e07595d3361deb4f9612d93896121b12c5d331456c625181c1b2caece444dc5323052c7a8a9d3bf34235f1131c41389d75be65df66753b66900dd6df270ae9f32aa59ba8c539b7c1733953b3252f3b7205800e4d139925b889ec8cb993bdb29956edeaa16d7e08eb56e02ed42200b26b2dbd4ed65feddefc4a9a41945d37a1fbe1f9bf7ca34a77e45bdf4cc8c7a240895e26425d26698fb1f85a418e6794be5dc5ab64891c549de72f70aca8bfdf5171cd6af04898ea24156ea0cf7d24ca299ed0a8becad71a8d79d544", 0xd0}, {&(0x7f0000002900)="81199492a49b61e962dd28f37cf349832f94c6b745b9252d5712e085618d752efc905464e35b34f7a194569b9e4ee25d50b84cd106a60e30d94af69a24feaaeb029189bc5dab9f6d14481a3c55e32b199375657ddb75e1e6373fa63ea3addadea58646f4970efcd82a94054160b1dd344cfee4ff4b47f1f1998d5d37500b80899e22e3f9b033cde4f725edc55d2eaa9d053929c81f2030f4375584e18a896c5dc8d598b036ff39c57df1e9ab", 0xac}], 0x3, &(0x7f0000002a00)=[{0xd4, 0x115, 0x4, "8bb246252bc4158cb7513112d6d3b06c374efcdb4162b6f903244ef4d7223a594771c56c71c21c8de91bf4f2c5f4df8a02c56cd08ef9c5d74fcdf53d024449eab30ebd32199988461621e996febaa3d8017537d955f5a7d1799124547c7dbdc47671a151cc78f5ec6d0353ada837bc4250c692659a0721eeb8f6ba24ca1fd00e2e8ef4cf1f5b0a2df3743170443e75f8e6dd039ae27f6594b15bd5142464a28892f288269bb9952f4befe22abff6880266d1db4fab318600cad10ff92bd6f9aab1c9af3172f3"}, {0x9c, 0x111, 0xd66a, "afec4a3eaf03588e846aeacf47bcff9e95c4bdb818fffdf9648c9346b91737ab766eb1391cf99ddcb18ad70171331f9d2c6234566ce6200da17027072c1bc01c0453cefe7fe1f7cdba9c0d682dab88508f6692f26c09a55c41eabb5f12d15d5126047fcf264008df943372e77559a69aa4b0fa77427c8b4413623128e7fea9fec676d12942f71ba813a2041abd5c5583"}, {0x5c, 0x113, 0x80000001, "766ecbe2df330db44a32afb736c48c5a2980363e0e59e773608661ab6c6209f5249d2ec44c432534cbc41cef3b1c580272bc225d478f017f29440071760ec780b1856f7c6f1ee92af603349c50"}, {0x3c, 0x1, 0x8, "16552fb56b2e22788d014c68fe13cf436772657a3712e19905cba95f2c3b9beedcc76b60032ef17e33e98311e3"}], 0x208}}, {{&(0x7f0000002c40)=@ll={0x11, 0x10, r5, 0x1, 0x22, 0x6, @local}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002cc0)="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", 0xff}], 0x1, &(0x7f0000002e00)=[{0xf0, 0x103, 0x7fffffff, "28bb6619f091f51cb7e7cba1f43a071695856edaef55919e7cb8e584ca182d8d51217cdc291b9ed15570bce94f05b32893ef5a2297f1be9f50c318ec51f9f8e0051de654d89b49272891db82697240c58e892b3ce7f10bc7fd784a82a4b1050d7a454c0e001c8c024225cbe637d81db9a81efdc4e8c631f574324b74b4cb9ad7c521dd34bbade097be2ffecc33705d6dbdaff9b2b6cd2d3794ead7bb51c9b44a1fd58149acbc35b56e02195489dd01e7a16068581e97b360265958286d6ebbbfe294f456444abb69ca7f52c9fbf89311dacf8a4c3c052c8bd1ad1f59e4370df5932f"}, {0x64, 0x10b, 0x1, "9d1186b6fd3017d6320a3f4422ab0dbefa38defa5f36b29db5f6d60791f8a8210483c4c1c131c24fbe30b7a6c3920c543d350814b8585e00385b4ed4ec041aa58b07d915f469d3e3ff242669a73cfadfb18db3485b61d4"}, {0x70, 0x29, 0x1, "f87210d24ab94567e6b41a82bdfafc9ddb6422bc812ff0a806f56a4465b7cd7693439d5730015b034b850f7b33bdaee136125982cfe55bb3c0b7f49d255ff26090b6eedeb861de83a373c1b879403d62da31cceb626dee64138fab86e3651d593e37"}, {0x108, 0x11, 0x7, "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"}, {0x90, 0x116, 0x0, "2a055c118b3b007d1531c0b068faccfab5d84f2064d01e7fcb4464180898cc53630da619ac50493c21ef18dcc3d1ece882dfd12409126a51ee79fa5bc6d3d2aab01afeb5223fe697296695213fd6d1870e72f659cac9fd482e989e762020192b66e6c5e838ee8f679c3a652f8fb94996ea7daa2d916218f1412a333d816ed556afbb74"}, {0x7c, 0x19c, 0x9, "6525885a5328546fc53d7a2fbf1e612eceaf088ef581eabe244d294c750aeb129adf19c59112c8cb35371b46192a5bac0e1cddf8abdf09b409ec35dea8294d644cc554c3637ef3aaeafe8abc82cf514682defc037a233a718150457680e7fcfcbb91bac6b80c3e1e895c661220de37"}], 0x3d8}}], 0x2, 0x24040840) fremovexattr(r1, &(0x7f0000003240)=@known='trusted.syz\x00') ioctl$SOUND_MIXER_READ_VOLUME(r10, 0x80044d06, &(0x7f0000003280)) 35.675593252s ago: executing program 6 (id=329): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-1'], 0x27) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) r5 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 35.505967545s ago: executing program 8 (id=331): setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000080)={r0, r0, 0x7}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x80, 0x10, 0x655e, 0x10000, {{0x12, 0x4, 0x1, 0x2f, 0x48, 0x65, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, {[@timestamp_prespec={0x44, 0x34, 0x46, 0x3, 0x3, [{@broadcast}, {@rand_addr=0x64010101, 0x3ff}, {@rand_addr=0x64010100, 0x80000001}, {@private=0xa010101, 0x80000001}, {@broadcast, 0xa5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@delqdisc={0xf8, 0x25, 0x2, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff1, 0xfff1}, {0x4, 0x12}, {0xf, 0x6}}, [@TCA_RATE={0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff5}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x83, 0x10, 0x8, 0xa, 0x2, 0x98, 0x8, 0x4}}, {0xc, 0x2, [0x9, 0x3, 0x6, 0x8]}}]}, @TCA_STAB={0x98, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x79, 0x80, 0x6, 0x2, 0xfffffffe, 0x80000001, 0x2}}, {0x8, 0x2, [0x35f, 0x3]}}, {{0x1c, 0x1, {0x1, 0x0, 0x6, 0xfe, 0x1, 0x3, 0x10000, 0x3}}, {0xa, 0x2, [0x5, 0x101, 0x94d]}}, {{0x1c, 0x1, {0x1, 0x7, 0xffff, 0x0, 0x2, 0xffffad41, 0xb60, 0x3}}, {0xa, 0x2, [0x0, 0x4, 0x728a]}}, {{0x1c, 0x1, {0x9, 0xd, 0x200, 0xea23, 0x0, 0x81, 0x3}}, {0x4}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x24) io_setup(0x1, &(0x7f0000000340)) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000380)={0x1, 0x34324948, 0x1, @stepwise={0x7f, 0x0, 0x8000, 0x7, 0x3ff, 0xfa2}}) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r1, 0x10, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x1, 0x3) write$ppp(r0, &(0x7f00000004c0)="663b8bc2359da4c985c66b99df2cdf4116e137d78c85486b128cca8a893c0311d6bf6eb8950131dd10f053ee63a606fb449e5001b14d3a727eebaddcc8bc1ec8ef1e118ab809d6542dd084b66214c031f7286560cc8c5a2165e4c8455576b36c08564c9c", 0x64) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000540)=""/183) r5 = eventfd(0x7f) bind$tipc(r0, &(0x7f0000000600)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x2}}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x100813, r0, 0x0) r6 = signalfd(r0, &(0x7f0000000640)={[0x718, 0x2]}, 0x8) readv(r6, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/103, 0x67}, {&(0x7f0000000700)=""/33, 0x21}, {&(0x7f0000000740)=""/93, 0x5d}], 0x3) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000800)={0x2, 0x4}) fstat(r5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f00000008c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATX(r6, &(0x7f0000000a00)={0x130, 0xfffffffffffffffe, 0x0, {0x355, 0xa2, 0x0, '\x00', {0x2000, 0x0, 0x80000000, 0x6d86, r7, r8, 0xa000, '\x00', 0x3, 0x4, 0x9, 0x6f00, {0x2, 0x4}, {0x101, 0x6}, {0x7ff, 0x9}, {0x7, 0xc0e7}, 0x5, 0x7f, 0xffff, 0x5}}}, 0x130) r9 = openat$udambuf(0xffffff9c, &(0x7f0000000b40), 0x2) ioctl$BTRFS_IOC_DEFRAG(r9, 0x50009402, 0x0) chdir(&(0x7f0000000b80)='./file0\x00') setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000bc0), 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r10, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x20004000) 34.586150291s ago: executing program 6 (id=334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89fb, &(0x7f0000000900)={'bond0\x00', @multicast}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)={0x0, 0x1000, "12d323c92ab10eb85b6703da64bbbb84592d9a3da5ad231c672e27d2ff58663a3a2239f168e47aa9d79a324613b08ce79717a1308fbfd1a4101a1b7895731b028a07f5623bff6dfe7b48e97e1c11fbea56b3171047b2cda845ed9767e0f15ea3b7ff10bd828d88538d26e95e7c5584adb734da658947f2515cb01f31a042c154e576bed20b3cab17c4b4d73303cdc5871cc93eae6942020a14061b65d710c36847ebf970680f43c2e7ffeecaa6adc408137ecaf03fff4579a412cda22f0ad59f6e370c6ac58f23c26b793951f4f7156f0b6a04c40a09883535203b28e905a7d7778988e46af8d16ec3188763343088371b1b66634a53845ef867e7f6034afdd7092fcf48985c60e4ed3d3c8f89821621e53a8cf61b630d30e62a8d66d58bb1b25f59edad1db89d26564423984fbde76a018c417375d72c4919d91313cf76c0885d56f455c06142f14975ed63fc457a0d70dc543464a34316d128449c83746e7f00e278439f17310fdcdda37474c494f5962c9cfef68f91704fc8826e8c407f4a240f9d5f5e80bc2d3e635ac412b8fcbb0617336a292f6e48d2b526dba103c10d639331b25dc1dbea3efa6bc1d952ce01f8be17d062849ece8f3d85bb71fa8e83c2a7e6bb10736e7b587daf497e5b202efbfb5b8a9e0bcf7750ce0ee9232dda5cd966cceaf84ca44dc036b6a4a84cbb75434521ee6e2a5d659b493f58316aa208ccea5e5683119fd66b78cf00955f120106f56a99035508fcbcf06c3f9b5eede1c5e285bf6eb9d6442f74d3ce3c546dcd4258737b55f0ebdc751ed012856b865e366a6ccde5f0673f85fe4d8af777e1edaa1c158ff9bf99a8e83b8426aea3c18ce193a67ee5725b9f7ed502a9573ef9c7ac9a201df0c234993e04afa2cddbfece18cf1e05e37039690a820f961e18271662c53f2d1e3025cd485adbf0372dbb87c2fc796e69962eea91bb3442ec9cee17c17ba378642a6921d8d6624cb337f68500097c9a5eead72cf4799b0211f5a845b89d0d6f0202c5cb2c78af4f8b3faf06a4b9ce67c64a23942c280212b6e8b4f6261815352dfb56b954dc9b8db46cb403603cb589fdb1ed45648913e505f572b68697db9e55c98b43e8381bff0b6bff803813602f2927187475f6426037b0cef94bcaa690c9f6ef0b656b9cbcd4e42be457cb3dde74275faef5fd8105420ea2a1799dcdb6206a4f5fa76cf450d5f54feb1d7964aeeb5aa486e625cb0da8c5c4a7c66d8ac2e1f3a242c90c3bd83509f158219a483ed58de98bdd619cff5fb445005b594393dc0fb952421e95df0ddfa1856d571bff8f61216e4235bdd835b23b2b641630de12adad0012d657b8b65b1beefa39be4290963a45fe7b4bd610472d8cb29d08722af05a26f477e728429040cd5456fc6cefbe30032e873cc10888fab61dd824f7963592f54a5203a31578f6188957ca73f608e595b4c09e74e0836dadc2780d170d9c7f7c82e94585e09479355d6c53ec11c444e3c097829a5a2c99fa7c949dfe3af99f684283df658d110ca85f17b59edd6d44b0411b10440990596e2978b9ab08d18cfaf73455b36fe5166f8cd8f351c8bf40bad8776d8aafe7f656e087126803f45661775265666c96a68a8a4c2df97bb737d2b79cdb772ca2d633b195169d2ec06a5fa9ae74226be5137c6ac7262883434e3e508fa98d56eecd4ba183e614bf280909aac65c6b7bf73f1cbf0a9516506e4c2cd51580aff7b023c8891a56ae05c42f7949ae1e18b10e16455cd0a3ebe3635965a9040e06406aa7a29294831b9c148c795d0a7774efc30fbdb397478e8ec41f24b07e94f03f048fb7932cd02f9e602abd6b160c51acd6096eb73e136b02e5c874f51eeb567a88da31d26bdb55efd790715b70e70ed90a323eb34afb63485e8ecb904495964d420732c0754de2993427998cdda9c4b0be93baabdf02b65df516f0840b1a5ba9e19b9c076776491a530328f3f47778f6ae672f6940b73c8f1b68cb57b9b29c163b8ff15530ddf6ef6bc39c3d5359af5c58872effef738ac58d6f605c2bb3b6300e878d19387e4792d3a3f6ab45df7e82a6daebc40631d26f63aeef2f75d40430409e068a49cc770af3b1153810eeb5b8e8094463d1582c3cef500ddbe6ae7dccf70f719e9f637ffb9db59b843ee31be6e2ef15f9ad94137cbd83ceaf1be3ac262bef73d4e476593b3cc432fb08364b4b5bf38af1526f60c6d9a52939b6ed1c99d963bb0bc0b13e5b5d0bbdecdc462ee7ba552f88cfd8cb1420dbbff89831f096d4c15017d8429199db53d81d94e7ab0e445b918a8be844eb7fc9db592a5189481e6b5633b9f61053dd7299daca90faef2216f8095a53880d5e36c4c0758ed1a48fa9e4c3063ff1362e84ab4f371f40ae23e3ef090bcfba64341b05b84d986240b6c7b1a7b89a7b5c51886795b2de229b467d13650c894607d38d7c6d18d08f6579fcbb73d76e34c6c5c5264194dc409ad7cb2852b742482f41c568b213881b588f1cbad97a6f87eda74ef9bb4f081963e0737939c5c8e7c349dc062a2dcc3a0ab32d9198dfc2533b86c72d940b875fa46548ae7d69fac6c7886899487bb72dfc6e247ca548017425f552efd757ce9f2baf1fbf8baeac94a1b4c2b4c1fae387988f5de8c30bea74e0a09938c96f0c21b4a59274e85e66d155b8ff0456b28427af9efbefbe5abb87a4153c35f2657cfd60518c23944724f9f51b5167b8c5210a83c954e964e5af425f9ed09234a88368dcd6ce5c2ebe6a8750c4f915efe5ce6c83b556a36456ed69ee8bcda8e261124920d4707290a96ff87173420d72af0d880437e3847adc56a39a0afb8071e490c63ecda866fb2a13fe502f911ddff431f37b2ac821592fae32b3f2de02bb0bc3e573e0bd1baa4d0434155c07ab246f053827eb6d8db1b70c5bba673f874c09ab4fe0e59ff297c9b231b7ea76f7a26810b8a0426cd2f84ae104b9789da1aa3631701605b3884dfe743d6375032dd685d49b973a20be5fee2ea731575047f3a416c96988a45796571f6732636f4854ac1c334ca31967595eb8a10d1aebfa0c8dfecf83a229ec412dbb81604a3e75ecdf8115d7c30c98e34685805601d83e44fff408c5d9f8dcb83cb1c4623a5dc82b6698193d9d27e534714f0463a39c17a9d790dcb1de47e12f4d9ad9e8b76727d234eb5b678c2aa42c87bac2d5e30d1dd702aafdab1a30eddfcd656302d1cebcf5ffb63556e7b16b6d3b1c492cd5dae054fe34df165f19d12c29ea1266cff89650546d049b3a9164d345c860869ec39c5d0391a17fa5fed39a3afe132e47e4ada01d9811c8dda012c905fe78f77d10b88b7fa9ab8f6c6bbe8a3a9210467ee150b533518a0032c08d02bc8562e4b26fbf7cde9f387c0bb4598327d5f2f10d5e7a74c0de217c97193c3759ab5aeefa910453db0cc099955297d154257f2976b33376c4bbfa3da81fce3542a1e176b33a16ccbb7fadc4f68397468fdb273519b6993927868c9823c1bce8a3b19265fb73263837874dbfcf120f439b42a5bc62a7f3c92eff407baccd053bead53fee25ed598c4e324bacf3afbfeb5180b0de274bc5e2f90d2dc7ff0494d28f10c502d26302657967920c2444e029d7c26c0e26eacac5226bb7956d027e281a92d89e3477dbf8639d8ed80bad220e433d3ad3c9ab364b6b8b96d9632978b0f0de981e2ac8559131e3d6de71449b3cdd034ea8889af0acbd7225d5588dc5ee396d460225819d5b7818c56abd4d6ada07f19bbfec5d932e8217c623ea9866119083905a3095ab832010bf061c89b006e98b634464f1336d6393ac0305684ae1b258def8c7175e69a735d1fff1316ccca98005567ae1109ba15716e7e5b5e28675370c7e8560aa3e4ff0f0153c7a5814070ae3f6d443c8d3546bd4f0d8366b6efb3c50bfa85db480c7fd83e3a5990e32f76b35892d9ad9390e63090eb88c930571d1d7b1b6658fc4d601d307c0dcbcd1845372005f9b8f68fe92a530330a795179db250faa3d94a256ff1c95dc4e32ccc3f37a90065b4a0fe3be041a02b0daaac805121de0e68339f66836b0095009461554e069ece7be5548663abd8fdcb1d6582730248269eeefe09c8884ef2abaeed84cd416fbbbd2f1c97cb300fc2221afa36778398388bb97c024976b22be33a10fa4b2d73fde35c81c31d89da62e53b6046182e0551c7db3160e22186fc4f28574c29f5dd918cc91bb313504bf7e3329520c65b8c6395dee3bdad3219b3e380a5c67281add00d56a1c706d882e79b1b1c062f8de87d897a3df150469436f08bf937b66c673dbd4793bc23b2c0273ce51d4d8e2e8c3436794b8bb28009150d223e09807f068509eb74b639af7c97cc55f8216b86e7386d3c7f04b517443424e14941e9888b79d07c2a1977bc962e18a1da102e29f7d5fe899412e6af8cac29b2b2a79e33968a6c97c47242f36b49d239857da56b2cdef4c37bdda725e0170068999c535570e4c2f105b9832f5876d52d581b1ea098dd6b3358e5855bfae1f3164ecdd3b41e4b9d4262256fdfa959b6e237fa7c2dda0956f67abf30f4ae1426b31b9530a0b7a46c93b253ce47ba634b32bf2bac5c4df777345a9809cf3512a583b1bedcb51155a68e00601febeba0150c98decc259b08884f67adb778912de7f9b3c23a75dd0bb45fb368c1809d18d50ba1872742eded2457bae0dc22c5d6f4078d1da2f5dcad3df09ebcfa30db573d6475aed178d51128eeea73c78d7712191cd6a660c8db23c592832c43c2aabafb04a50e4de41e66c1ecfc0257a206371148188d68c0f3a5799f7fc4b3c23845dc80cfc022a9a9ef86b9f7e1a2bef12716ea7ebc9dbb54e5c584aca620ba5697ac27f65bfd5e095a3ef8510782d0e44ba3916c8fb41f164d7e696f49372586f88c9fa6afefa1c2767f2ca8f5807064a9ee284785f11afc45feab7cde6b19f269219c459ea778c746935a9d7adc1d3a560238c78c7d1c080b1683dc25d80981573d9fba293264ed9d1f128059d6d217ceda25f6d3fc40137e551a02753791db8659584fdbf04fc794d6e5c0a59a487cec412c57cb8cf4e46aa6300ade31182aa919992853692f59627c21ae4bff03f4cee7e33af8208f48d267daa5f15c4a75023d2512f624493664adf393d372d7f99b36f44c6b7ab521cbae65a91fb517d9332c2e85a6bbf4f53a2ec51b3254bce745780a9a504f292ea3dafb6031812f46cd8d0f1bda4384f3c212448951cd64fe8b78e569efe488d7e9c65901d8b4190f0ced7db18ab9bbf504d7028c55f8c3d1a0bb3f4734e3863c2f0e339eebf8fbca46e36395fce12df9f1196a7924044b2102d1bb2898e4186d9a37a91420aa34940f835a43d63d05e9734e7f795171c2fb747d8c6d8ded40a08adf7137e039803bceb1021072f1c6496a74dfd93379e5a5f23974fd707ca7f4242889399eed44bbc81f00580417dafc5baf00d8149d663ac03ccb47f5088a74ffe08c91ce27daa409cb70b1f71dbb87d111cf786d69ed786d0be0f75d6bf144eab4516c65541ff0cea6d87b63ae58924623694675328aeedd3ab94c28ac8892332abd821563200424b9fda97bc9144a5782b57f37cef8415fda53a57c932ea8b9549560dd24682fe9902df3b7d3f2ef99c6b26b697aba502054f60b1a4bbd616e9446d730183119ae317b0f69ee8d75c2d90615419afa12d131522023a84603bf75b600a9ee6ae2dd2ad81725e6fd629c8298a097019e7037a0efea07f5435367ecbdb8a086f8bb7814142c5d3fafc72fb78876c860ae3a29e70"}, &(0x7f0000000000)=0x1008) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x400}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000100), 0xa3f6, 0x40040) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x90, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x7, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x3, 0x0, 0x6c, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0xf1, 0x0, 0x3, 0x400}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffe0, 0xffff, 0xc75, 0x7}}]}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r11, @ANYBLOB="60c000000800000024001280110001006272696467655f736c617665000000000c000580080022"], 0x44}, 0x1, 0x0, 0x0, 0x95}, 0x0) bind$can_raw(r6, &(0x7f00000001c0)={0x1d, r11}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e22, 0x4c, @dev={0xfe, 0x80, '\x00', 0x20}, 0x6}}, [0x7fff, 0x6, 0x800, 0x401, 0x1, 0x4, 0xab, 0x80000001, 0x5, 0xffffffff80000001, 0x3, 0x81cb, 0x10000, 0x8]}, &(0x7f0000000040)=0xfc) r12 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r12, 0x400, 0x0) write$binfmt_script(r12, &(0x7f0000000080)={'#! ', '', [{0x20, '#'}, {0x20, ' 4E\x90At\x9d|\xdc+\x16X[\x8d#\x85gF?T\x8eb\x94\xb0\xd19\xe2Gj[a\xe54A\x9b\xc5\x8b\x00\x95h>\xd1\xa8\xfbl\xce\x97e\x89\xbfd\x93,\x85&\xd0\xce5r\x7f\x95\xcfC\xef \xc6LQ\f\x7fg\x18\x9f\\\xc7\x03.\xeb:'}], 0xa, "e60718d59034d596e9a7ac952456d5fafaf8874aa13d6352933be57f8124399463cbeb78c43b2761"}, 0x7e) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000140)=0x7, 0x4) 34.291719897s ago: executing program 8 (id=336): syz_emit_ethernet(0x292, &(0x7f0000000800)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf80", 0x25c, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x19, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}]}}}}}}, 0x0) 34.291014957s ago: executing program 6 (id=337): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r2, &(0x7f0000002100)=[{&(0x7f0000002140)='K', 0x1}], 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r4, 0x0}]) socket(0x2, 0x3, 0x6) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) chdir(&(0x7f0000000480)='./cgroup\x00') fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe13) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) 34.046640508s ago: executing program 8 (id=338): r0 = fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f00000000c0)={{0xffffffffffffffff}, {}, 0x0, 0x8}) gettid() mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r4 = open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000002200)=[{0x84, 0x77, 0x0, 0x0, @tick=0x3, {}, {0x7}, @raw32={[0x2]}}, {0x0, 0x0, 0x0, 0x83, @time={0x0, 0x7}, {}, {}, @note={0x1, 0x0, 0x0, 0x0, 0x3}}, {0x2, 0x0, 0x0, 0x0, @tick=0x4, {}, {0x2a}, @ext={0x0, 0x0}}], 0x54) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r7) creat(&(0x7f0000000080)='./cgroup\x00', 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x3d) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 32.839654027s ago: executing program 8 (id=342): r0 = socket$inet6(0xa, 0x3, 0x4) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000080)={0xa, 0x0, 0x0, {0x3, 0xe, 0x8, 0x5}}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffd, 0x6, 0x40000, 0x5, 0x7}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@private=0xa010101, 0x0, 0x6c}, 0x0, @in=@multicast2, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 32.550308825s ago: executing program 8 (id=345): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xd9, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0xff, 0x20, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x4}, [@processing_unit={0xd, 0x24, 0x7, 0x1, 0x6, 0x3d, "129741733edf"}, @extension_unit={0x8, 0x24, 0x8, 0x6, 0xf93, 0x3, '8'}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x9, 'O'}, @extension_unit={0x8, 0x24, 0x8, 0x1, 0x9, 0x4, 'J'}, @mixer_unit={0x9, 0x24, 0x4, 0x1, 0x9, "2a4ce28b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x200, 0x4, "0110257ad6"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0xd, 0xab, "9e39c1"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc6, 0x2, 0x52, 0xff, "0f48", '@'}, @as_header={0x7, 0x24, 0x1, 0x9, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x3, 0xd7, {0x7, 0x25, 0x1, 0x3, 0x8, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x7, 0x4}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x4, 0x79, 0x9, "22c2"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7f, 0x0, {0x7, 0x25, 0x1, 0x0, 0x1, 0x99}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x341, 0xd6, 0x2, 0x4, 0xff, 0x1}, 0x29, &(0x7f0000000240)={0x5, 0xf, 0x29, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x4, 0x8, 0x2, 0xe}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xa, 0xf, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0xe, 0xce, 0x3, 0x7f}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x3}]}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x4a22}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x440a}}, {0x91, &(0x7f0000000400)=@string={0x91, 0x3, "fa322cf8f84d276680b13b1fc7cbecffdbca822e236b17c14f67596e60ec3b22c220bfec3a8715953492c4f5d65fc1e8c998ee5a2aaafdb187232c0c2cabd25383102c90ce6498f24b6205464c0a97109b90df3029d3286c48cdc52cac46c547ceff1f005949d0fdd8f7b4b2af610b65b2ccfc5e41041c49b2877f0e2051cb471152d97391cb239f9a38888e184d40"}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="401201000000b437177052f9d086081d021bbb89f2f58484fb8465bbe96771ebef5ad4ae6784536bb9f083a9a6378d43c8223fbf9a059b046a3ab7b7a6c0a7e584d8c86702abb1dead964c74d0f69be3d8a775a5626ada6c4c8a7d41de40eeb849c950a0163f80b5d7a8098aac7c07d450bd1c70ca4215f3310e1928d77709547b4e931aa2db57353aa7fccc51359b1f34638df2913b8d46b35be1ecccb7b50d16569420c97f0306"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8}, {0xf}}}, 0x24}}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = msgget(0x3, 0x200) msgrcv(r5, 0x0, 0x0, 0x0, 0x1400) msgrcv(r5, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000340)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800}, 0x0, 0x0, 0x6, 0x1000, 0x3, 0x100000000, 0x9, 0x8000, 0x100, 0x9}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'geneve1\x00'}) 32.035175601s ago: executing program 37 (id=345): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xd9, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0xff, 0x20, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x4}, [@processing_unit={0xd, 0x24, 0x7, 0x1, 0x6, 0x3d, "129741733edf"}, @extension_unit={0x8, 0x24, 0x8, 0x6, 0xf93, 0x3, '8'}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x9, 'O'}, @extension_unit={0x8, 0x24, 0x8, 0x1, 0x9, 0x4, 'J'}, @mixer_unit={0x9, 0x24, 0x4, 0x1, 0x9, "2a4ce28b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x200, 0x4, "0110257ad6"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0xd, 0xab, "9e39c1"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc6, 0x2, 0x52, 0xff, "0f48", '@'}, @as_header={0x7, 0x24, 0x1, 0x9, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x3, 0xd7, {0x7, 0x25, 0x1, 0x3, 0x8, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x7, 0x4}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x4, 0x79, 0x9, "22c2"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7f, 0x0, {0x7, 0x25, 0x1, 0x0, 0x1, 0x99}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x341, 0xd6, 0x2, 0x4, 0xff, 0x1}, 0x29, &(0x7f0000000240)={0x5, 0xf, 0x29, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x4, 0x8, 0x2, 0xe}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xa, 0xf, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0xe, 0xce, 0x3, 0x7f}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x3}]}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x4a22}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x440a}}, {0x91, &(0x7f0000000400)=@string={0x91, 0x3, "fa322cf8f84d276680b13b1fc7cbecffdbca822e236b17c14f67596e60ec3b22c220bfec3a8715953492c4f5d65fc1e8c998ee5a2aaafdb187232c0c2cabd25383102c90ce6498f24b6205464c0a97109b90df3029d3286c48cdc52cac46c547ceff1f005949d0fdd8f7b4b2af610b65b2ccfc5e41041c49b2877f0e2051cb471152d97391cb239f9a38888e184d40"}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="401201000000b437177052f9d086081d021bbb89f2f58484fb8465bbe96771ebef5ad4ae6784536bb9f083a9a6378d43c8223fbf9a059b046a3ab7b7a6c0a7e584d8c86702abb1dead964c74d0f69be3d8a775a5626ada6c4c8a7d41de40eeb849c950a0163f80b5d7a8098aac7c07d450bd1c70ca4215f3310e1928d77709547b4e931aa2db57353aa7fccc51359b1f34638df2913b8d46b35be1ecccb7b50d16569420c97f0306"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8}, {0xf}}}, 0x24}}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = msgget(0x3, 0x200) msgrcv(r5, 0x0, 0x0, 0x0, 0x1400) msgrcv(r5, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000340)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800}, 0x0, 0x0, 0x6, 0x1000, 0x3, 0x100000000, 0x9, 0x8000, 0x100, 0x9}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'geneve1\x00'}) 31.878368385s ago: executing program 6 (id=350): fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000000c0)={{0xffffffffffffffff}, {}, 0x0, 0x8}) gettid() mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000002200)=[{0x84, 0x77, 0x0, 0x0, @tick=0x3, {}, {0x7}, @raw32={[0x2]}}, {0x0, 0x0, 0x0, 0x83, @time={0x0, 0x7}, {}, {}, @note={0x1, 0x0, 0x0, 0x0, 0x3}}, {0x2, 0x0, 0x0, 0x0, @tick=0x4, {}, {0x2a}, @ext={0x0, 0x0}}], 0x54) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) fchdir(0xffffffffffffffff) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) utimensat(r5, 0x0, 0x0, 0x0) 30.826560236s ago: executing program 6 (id=354): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x3}, 0x0, 0x9, 0x1}}, 0xb4}}, 0x0) 29.781092806s ago: executing program 6 (id=363): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) fsopen(&(0x7f0000000080)='fuseblk\x00', 0x1) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) close(r0) 29.361229717s ago: executing program 38 (id=363): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) fsopen(&(0x7f0000000080)='fuseblk\x00', 0x1) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) close(r0) 23.425810003s ago: executing program 7 (id=384): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYBLOB="000000004040000008000a00dd84ebc40d1a6cae036bb52e3c2a99fbf9f218d66e2010a1850fadeb56fc21779e194ecb23d83095a77c38347d2a5722bbaeaf8491487a9adc6f4a0e55f69ef80d52c94ac5fff05d1c02de8424807e075f498bc735295d36903570a2cd53b764f4bc5116c711fcd2a79242007e3c771fc8d722ba52fb246905fb618a4382b2cfdfe0235933c0b2334c5c6806b46db616dc8686ff43c7e3a483060f31a29c410292e3fed99acfbd861983c2562241cbf4077b772f29f1bd074c06a664250a726d0080f0695c4e1f12626d", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000140)={0xc}) keyctl$revoke(0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f00000000c0)=0x9) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, 0x0) 21.435243224s ago: executing program 7 (id=387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000248000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a3c000000120a010100000000000000000200003c0900020073797a310000000008000440000000000900010073797a30000000000800034000000009"], 0x64}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000240), 0x1000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x38414262, 0x1, 0xc, [{0xffffffff}, {}, {}, {0x3}, {}, {}, {}, {0x9}]}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r1, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @rand_addr=0x64010102}, 0x3, 0x2, 0x1, 0x4}}, 0x2e) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f00000000c0)='rw\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) 21.189664814s ago: executing program 7 (id=389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x64, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) 20.910744271s ago: executing program 7 (id=390): fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000000c0)={{0xffffffffffffffff}, {}, 0x0, 0x8}) gettid() mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000002200)=[{0x84, 0x77, 0x0, 0x0, @tick=0x3, {}, {0x7}, @raw32={[0x2]}}, {0x0, 0x0, 0x0, 0x83, @time={0x0, 0x7}, {}, {}, @note={0x1, 0x0, 0x0, 0x0, 0x3}}, {0x2, 0x0, 0x0, 0x0, @tick=0x4, {}, {0x2a}, @ext={0x0, 0x0}}], 0x54) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) utimensat(r5, 0x0, 0x0, 0x0) 19.90326534s ago: executing program 7 (id=392): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x9ec, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r7, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x80, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME={0x61, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {}, @value=@ver_80211n={0x0, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x8, @default, 0x2, @void, @val, @void, @val={0x4, 0x6, {0x0, 0x0, 0x0, 0x7}}, @val={0x6, 0x2, 0x1}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x4, 0x0, {0x1fc, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x7cfadfd09456c782, 0x401, 0x7}}, @val={0x72, 0x6}, @void, @void}}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000080}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x24}}, 0x0) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x401, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, @in6={0xa, 0x4e22, 0x5, @private0, 0x7ff}], 0x38) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r14, 0xffffffffffffffff, 0x1, 0x0, @val=@netfilter={0x0, 0x0, 0x4}}, 0x20) 19.697557179s ago: executing program 7 (id=395): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0xc, 0x8, 0x1, 0x0, [{@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x8240) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0xd1, 0x0, 0x80000, 0xfc}) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) r2 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix={0x0, 0x0, 0x33565348, 0x33565348}}) mknodat$loop(r0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 19.205788047s ago: executing program 39 (id=395): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0xc, 0x8, 0x1, 0x0, [{@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x8240) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0xd1, 0x0, 0x80000, 0xfc}) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) r2 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix={0x0, 0x0, 0x33565348, 0x33565348}}) mknodat$loop(r0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 10.302888385s ago: executing program 1 (id=426): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9b, {"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", 0x1000}}, 0x1006) 9.593182562s ago: executing program 1 (id=430): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001080000", @ANYRES32=0x0, @ANYBLOB="000000004040000008000a00dd84ebc40d1a6cae036bb52e3c2a99fbf9f218d66e2010a1850fadeb56fc21779e194ecb23d83095a77c38347d2a5722bbaeaf8491487a9adc6f4a0e55f69ef80d52c94ac5fff05d1c02de8424807e075f498bc735295d36903570a2cd53b764f4bc5116c711fcd2a79242007e3c771fc8d722ba52fb246905fb618a4382b2cfdfe0235933c0b2334c5c6806b46db616dc8686ff43c7e3a483060f31a29c410292e3fed99acfbd861983c2562241cbf4077b772f29f1bd074c06a664250a726d0080f0695c4e1f12626d", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000140)={0xc}) r9 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r9) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f00000000c0)=0x9) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, 0x0) 7.783451416s ago: executing program 9 (id=444): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000060000000070000000900010073797a300000000044000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d05000d"], 0x8c}, 0x1, 0x0, 0x0, 0x8841}, 0x20050800) sendmsg$NFT_BATCH(r1, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1dc}}, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4008641c, &(0x7f0000001300)={r3, &(0x7f0000000240)=""/24}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={r4, 0x0, 0x9, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x100, 0xd], [0x0, 0x0, 0xfffffffffffffffd]}) r6 = openat$sndtimer(0xffffff9c, &(0x7f0000001340), 0x101000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private1, 0x884}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x8000}, 0x8) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000001380)={r4, 0x4, 0x100, 0x1, 0x2, [], [0x6, 0x7fffffff, 0xc53, 0xa33], [0x7, 0x1, 0x9, 0x1], [0x3, 0x3, 0x4, 0x7]}) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000001500)={@in={0x2, 0x4e22, @empty}, {&(0x7f0000001440)=""/93, 0x5d}, &(0x7f0000001400), 0x5}, 0xa0) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000005, 0x13, r9, 0x4000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010000304000900000000000000000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b00010067656e65766500000800028004000e00"], 0x38}}, 0x0) ftruncate(r2, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r9}) syz_emit_ethernet(0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe0e1c0b684a8000000000000400000000000000bb000000000000005700000000000000012421880b0000000000000057000086dd080088be00000000140000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000", @ANYRES32=r7], 0x0) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000300)=""/4080, &(0x7f0000000180)=0xff0) 7.20142328s ago: executing program 9 (id=448): r0 = io_uring_setup(0x2bcd, &(0x7f0000000000)={0x0, 0x6, 0x400, 0x0, 0x1f0}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {0x0}], 0x0}, 0x20) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x3}]}, 0x78) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00ac1e0001000000000000000000000000e000000100000000000000000000000000000d9f"], 0x38}}, 0x40000) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000300)=@multiplanar_mmap={0x0, 0x8, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2ad8607a"}, 0x0, 0x1, {0x0}}) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}]}}]}, 0x14c}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40046306, 0xfffffffd}], 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0, 0x32}, {0x0}], 0x0, 0x3}, 0x20) close_range(0xffffffffffffffff, r0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340"], 0xf0}, 0x1, 0x0, 0x0, 0x4c004}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414800c"], 0x528}}, 0xc000) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff0411"], 0x528}}, 0xc000) r8 = memfd_secret(0x0) write$6lowpan_enable(r8, &(0x7f0000000080)='0', 0x1) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r9, 0x11, 0x1, 0x0, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000140)=0x2) socket$tipc(0x1e, 0x5, 0x0) 7.026419575s ago: executing program 1 (id=450): sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'sit0\x00'}) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x14, 0x800) getsockopt$packet_buf(r2, 0x107, 0x0, &(0x7f0000000300)=""/53, &(0x7f0000000340)=0x35) r3 = syz_open_dev$loop(&(0x7f0000000380), 0xb48, 0x6080) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x6c) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000003c0)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'wlan1\x00'}}, 0x1e) r5 = openat$dlm_plock(0xffffff9c, &(0x7f0000000400), 0x381000, 0x0) lseek(r5, 0x9, 0x4) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r6, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x10, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x6, 0x5, 0x7]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x4c}}, 0x10) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x10, r5, 0x8000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r9, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r6, 0x12, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x48000) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r9) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000041}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r11, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r12 = open_tree(r5, &(0x7f0000000880)='./file0\x00', 0x901) sendmsg$NL80211_CMD_DEL_MPATH(r12, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) setsockopt$inet6_dccp_int(r5, 0x21, 0x6, &(0x7f0000000a00)=0x480000, 0x4) 6.833368819s ago: executing program 1 (id=452): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000004040000008000a00dd84ebc40d1a6cae036bb52e3c2a99fbf9f218d66e2010a1850fadeb56fc21779e194ecb23d83095a77c38347d2a5722bbaeaf8491487a9adc6f4a0e55f69ef80d52c94ac5fff05d1c02de8424807e075f498bc735295d36903570a2cd53b764f4bc5116c711fcd2a79242007e3c771fc8d722ba52fb246905fb618a4382b2cfdfe0235933c0b2334c5c6806b46db616dc8686ff43c7e3a483060f31a29c410292e3fed99acfbd861983c2562241cbf4077b772f29f1bd074c06a664250a726d0080f0695c4e1f12626d", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000140)={0xc}) keyctl$revoke(0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f00000000c0)=0x9) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, 0x0) 6.631490064s ago: executing program 9 (id=453): r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(0x4) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a00ac1e0001000000000000000000000000e000000100000000000000000000000000000d9f"], 0x38}}, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42802, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000008040050014000300766972745f77696669300000000000000c002b8008000800", @ANYRES32=r5, @ANYBLOB="088fef00f3ffffffffc800777e984092f351691b3e2cd6521239557bfc75fceaa5ed55c8f392d654060e20467a372ec12b73c594bdd87dd44f5006665fad9d61dd622bbe9221753f63fd614da27b6634b43e8ee6a8f92ed705f5c3e2187cea9eae424b42e1afc4f7821714ffc4300ec785cd0abbb09add374cb69bfa71d4e1bc55e14d93fbce3897"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x161000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f00000002c0)=0x7f, 0x4) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0) dup(r7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') 5.006623264s ago: executing program 4 (id=457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fddbdf000000000008000300", @ANYRES32=r2, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050007000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 4.711551816s ago: executing program 4 (id=459): timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/crash_elfcorehdr_size', 0x11100, 0x80) timerfd_gettime(r6, &(0x7f0000000280)) timer_settime(r1, 0x1, &(0x7f0000000100)={{r2, r3+60000000}, {r4, r5+10000000}}, &(0x7f0000000140)) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffc]}, 0x8, 0x80000) timer_gettime(r0, &(0x7f00000001c0)) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0xd, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socket$inet(0x2, 0x6, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) socket$inet6(0xa, 0x1, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r7) unshare(0x22020400) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 4.533146743s ago: executing program 4 (id=460): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x3, @loopback, 0x7}, 0x1c) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 4.267263387s ago: executing program 9 (id=461): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0022220000009603000700000000070c00000016090000007083"], 0x0}, 0x0) 4.253426967s ago: executing program 1 (id=462): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) socket$netlink(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x52d6, &(0x7f00000002c0)={0x0, 0x5626, 0x0, 0x0, 0x1fc}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) sched_getparam(0x0, &(0x7f0000000680)) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cc2e3f2063072110c08e0000000109023f0001000000000904880005ffb717000905b6b70000020154090501000004007f070905020c200009027e09050f042000410f04090505"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) creat(&(0x7f00000001c0)='./file0\x00', 0x0) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.093848469s ago: executing program 2 (id=464): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e8702000100000008000040000200000000050005"], 0x80}}, 0x0) (fail_nth: 8) 2.668577293s ago: executing program 2 (id=465): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x5000}], 0x1, 0x5) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r2, &(0x7f0000000100)='-1\x00', 0x2) close(r2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000083667d1040206402d14e01000e0109021b000100000000090400000190f19c00090584"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000200)=@multiplanar_mmap={0x6, 0x7, 0x4, 0x0, 0x8, {0x77359400}, {0x3, 0x0, 0x4, 0x0, 0x0, 0xd, "4a5f4bda"}, 0x5, 0x1, {&(0x7f0000000140)=[{0x2, 0x6, {0x1f871565}, 0x1}, {0x6, 0x3447, {0x1}, 0x6}]}, 0x5, 0x0, r4}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}, {&(0x7f0000000100)=""/35, 0x23}], 0x2, 0x0, 0x30000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.359835723s ago: executing program 4 (id=466): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000080), 0x30b000, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x400caed0, &(0x7f0000000180)={0x2, r5, 0xffffffff}) statx(r5, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x400, &(0x7f0000000440)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, r6}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r9, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r11, 0x0, 0x0) writev(r11, 0x0, 0x0) syz_fuse_handle_req(r9, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000400000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000f"], 0x0, 0x0, 0x0}) ioctl$DMA_BUF_SET_NAME_A(r8, 0x40086203, &(0x7f0000000080)='\x02\t\x00\x00i\xbeu_a\x8c\n\x00\x00\x00\xecP\x853g\x9a\x9e\xe7x\xb4l\x00'/40) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_int(r1, 0x10d, 0x9d, &(0x7f0000000000), &(0x7f0000000280)=0x4) 2.354058307s ago: executing program 1 (id=467): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_usb_connect$hid(0x2, 0x62, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002207000000b1143be441a873f719e65758e0f7dc8846cd4623f9fdcb85a4ec74"], 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x48}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x10}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x26000894) socket$inet6_dccp(0xa, 0x6, 0x0) 2.019668961s ago: executing program 3 (id=468): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 1.91065219s ago: executing program 3 (id=469): r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000001040)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000040)="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"}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f00000010c0)={0x30, r1, 0x1, 0x0, 0xa5d, 0x10001, 0xfffffffffffffff0, &(0x7f0000001080)=""/4}) (async, rerun: 32) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001100)={0xfd5, 0x3, 0x4000000000}) (async, rerun: 32) r2 = openat$iommufd(0xffffff9c, &(0x7f0000001140), 0x204400, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000001180)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f00000012c0)={0x28, 0x3, 0x0, r3, 0x0, 0x0, 0x0, 0xd1, &(0x7f00000011c0)="708207d29d7b65a4618e4400b077a35de87d53998a83b648fd52556f02b66aebade1758be955dc98de4c3d06337fb6ad890bdd9c394f74567851770c571b673d5c796e71cfb1167475a28c4ca47573189e87a6e00c8162fe0731765ed40c89c1351a80d801fcd32616566030111e35bce88b217168909cbffe278052b45417809d7b24267bf8f1aa3b78e14a0661d868c15ebefeaafdb93b99e4f9b16e11d2a50d4285258db24594a1c025e21216e2021969567525c083eda19530d1455ba38c57f207a7922646442ce485859d1fee217a"}) fcntl$notify(r0, 0x402, 0x8) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001380)={0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001600)={&(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[{}, {}, {}], &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0, 0x0], 0x3, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000001700)={0x301, 0x2, &(0x7f00000013c0)=[r4, r5], &(0x7f0000001400)=[0x4, 0x0, 0xfffffffd, 0x8, 0x101, 0x6], &(0x7f0000001680)=[r6], &(0x7f00000016c0)=[0x401, 0x1, 0x6, 0x800, 0x1], 0x0, 0xd}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000018c0)={r0, 0x58, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={r0, 0xe0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001980)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f00000019c0)=[0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x21, &(0x7f0000001a40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001a80), &(0x7f0000001ac0), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000001b00)}}, 0x10) r10 = openat$dlm_plock(0xffffff9c, &(0x7f0000001c80), 0x100, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001cc0)={0x1b, 0x0, 0x0, 0x6, 0x0, r0, 0x0, '\x00', 0x0, r0, 0x5, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x1b, 0x17, &(0x7f0000001740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001800)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', r7, @fallback=0x43, r0, 0x8, &(0x7f0000001900)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x0, 0x9, 0xffff7fff, 0x6}, 0x10, r9, r0, 0x5, &(0x7f0000001d40)=[r0, r0, r0, r10, r0, r11, r0, 0x1], &(0x7f0000001d80)=[{0x2, 0x4, 0x10, 0x9}, {0x2, 0x4, 0x5, 0x1}, {0x5, 0x3, 0x10, 0xc}, {0x0, 0x3, 0x5, 0x9}, {0x0, 0x1, 0xa}], 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000001f00)={0x1, 0x0, &(0x7f0000001ec0)=[0x0]}) (async, rerun: 64) ioctl$IOMMU_IOAS_IOVA_RANGES(r10, 0x3b84, &(0x7f0000001f80)={0x20, r3, 0x4, 0x0, &(0x7f0000001f40)=[{}, {}, {}, {}]}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000002040)={'syztnl0\x00', &(0x7f0000001fc0)={'syztnl0\x00', r8, 0x4, 0x9, 0x1, 0x1c00, 0xc, @mcast1, @rand_addr=' \x01\x00', 0x7, 0x700, 0x62, 0x101}}) r14 = fspick(r10, &(0x7f0000002080)='./file0\x00', 0x0) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002300)={0x11, 0xd, &(0x7f0000002100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}, [@alu={0x3, 0x1, 0xc, 0xa, 0x0, 0xfffffffffffffffe, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @generic={0xb7, 0x0, 0x3, 0xd4d4, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}]}, &(0x7f0000002180)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x30, '\x00', r13, 0x0, r10, 0x8, &(0x7f00000021c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000002200)=[r12, r10, r11, r10, r0], &(0x7f0000002240)=[{0x5, 0x3, 0x3, 0x6}, {0x5, 0x5, 0x4, 0x9}, {0x1, 0x4, 0x5, 0xb}, {0x5, 0x4, 0xb, 0x1}, {0x2, 0x5, 0x2, 0x9}, {0x5, 0x4, 0x4, 0xc}, {0x0, 0x2, 0x0, 0x2}, {0x0, 0x3, 0x8, 0xc}, {0x3, 0x3, 0x4, 0xa}], 0x10, 0xb50, @void, @value}, 0x94) fsconfig$FSCONFIG_SET_FD(r14, 0x5, &(0x7f00000020c0)='\x00', 0x0, r15) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4010, r11, 0x5ce78000) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000002400)={&(0x7f00000023c0)=[0x0, 0x0, 0x0], 0x3}) mknod(&(0x7f0000002440)='./file0\x00', 0xc000, 0x88) (async) sendto$inet6(r12, &(0x7f0000002480)="67ac4c5c1c4e91b00d595a85d41970f01cedae9130a676013f986fa97eec52d2f74d0fa211b6a9d89fb558ea971e8ce1a7241269bbe07130460fbe66b5779c960b9966b8edc5ecd772818d7686891dddc02f7719abb2d66c5b3121d297cd5b25c8b7cd4273263d5848c62572becb4505e6652281a662f3e3c273ebacbe84acfc5be3bc40b05daec46df66956060a292d9bb74c8f2a97b3c38dd0ba6a4a86ff470fab6f7d8b338286d64586c296103890bbacb46767afe0f0ea3c", 0xba, 0x0, &(0x7f0000002540)={0xa, 0x4e20, 0xc, @private2, 0x2}, 0x1c) (async, rerun: 64) r16 = add_key$fscrypt_v1(&(0x7f0000002580), &(0x7f00000025c0)={'fscrypt:', @desc3}, &(0x7f0000002600)={0x0, "9c6e42b6d8651d12539639ac8d259c574fd58dcaed6bedb97a1c83ad9f2e751facfab5d93d517b1aadc75ae4a7f9d0281fdd14bd91598665918a547f11f576d4", 0x35}, 0x48, 0xfffffffffffffffc) (async, rerun: 64) r17 = request_key(&(0x7f0000002680)='asymmetric\x00', &(0x7f00000026c0)={'syz', 0x3}, &(0x7f0000002700)='\x00', 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r16, r17, 0x0, 0x0) 1.854485405s ago: executing program 4 (id=470): timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/crash_elfcorehdr_size', 0x11100, 0x80) timerfd_gettime(r6, &(0x7f0000000280)) timer_settime(r1, 0x1, &(0x7f0000000100)={{r2, r3+60000000}, {r4, r5+10000000}}, &(0x7f0000000140)) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffc]}, 0x8, 0x80000) timer_gettime(r0, &(0x7f00000001c0)) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0xd, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socket$inet(0x2, 0x6, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) socket$inet6(0xa, 0x1, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r7) unshare(0x22020400) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 1.687745636s ago: executing program 3 (id=471): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.571319889s ago: executing program 4 (id=472): r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(0x4) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a00ac1e0001000000000000000000000000e000000100000000000000000000000000000d9f"], 0x38}}, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42802, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000008040050014000300766972745f77696669300000000000000c002b8008000800", @ANYRES32=r5, @ANYBLOB="088fef00f3ffffffffc800777e984092f351691b3e2cd6521239557bfc75fceaa5ed55c8f392d654060e20467a372ec12b73c594bdd87dd44f5006665fad9d61dd622bbe9221753f63fd614da27b6634b43e8ee6a8f92ed705f5c3e2187cea9eae424b42e1afc4f7821714ffc4300ec785cd0abbb09add374cb69bfa71d4e1bc55e14d93fbce3897"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x161000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f00000002c0)=0x7f, 0x4) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0) dup(r7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 1.568318075s ago: executing program 3 (id=473): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.044207685s ago: executing program 40 (id=472): r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(0x4) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a00ac1e0001000000000000000000000000e000000100000000000000000000000000000d9f"], 0x38}}, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42802, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000008040050014000300766972745f77696669300000000000000c002b8008000800", @ANYRES32=r5, @ANYBLOB="088fef00f3ffffffffc800777e984092f351691b3e2cd6521239557bfc75fceaa5ed55c8f392d654060e20467a372ec12b73c594bdd87dd44f5006665fad9d61dd622bbe9221753f63fd614da27b6634b43e8ee6a8f92ed705f5c3e2187cea9eae424b42e1afc4f7821714ffc4300ec785cd0abbb09add374cb69bfa71d4e1bc55e14d93fbce3897"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x161000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f00000002c0)=0x7f, 0x4) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0) dup(r7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 1.031336836s ago: executing program 2 (id=475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x20050800) (fail_nth: 8) 1.030322627s ago: executing program 3 (id=476): lstat(&(0x7f0000002b00)='./file0/file0\x00', &(0x7f0000002b40)) 979.66852ms ago: executing program 9 (id=477): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1, 0x92, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 833.654954ms ago: executing program 3 (id=478): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x21, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = socket(0xf, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) getsockopt(r1, 0x200000000114, 0x9, 0x0, &(0x7f0000000000)) prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='/dev/snd/seq\x00') sendto$l2tp(r1, &(0x7f00000004c0)="499260b538d57fa6fa0407ff9989ca162e925bbbdab2cc1ba208822b91de2314b648238e86ee3b11abfe93445a0c895838777b0026ce07a1a91e90db54", 0x3d, 0x4000000, &(0x7f0000000500)={0x2, 0x0, @rand_addr=0x64010101, 0x3}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x50, 0x3, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xb, 0x1, 0x8}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x8, 0xa5, 0x3, 0x10, 0xf}, 0xb6, &(0x7f0000000100)={0x5, 0xf, 0xb6, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xe, 0x4, 0xfff9}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x6, 0xf, 0x6, [0xffff00, 0x3f, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0xd8, "217702c4945d8207b98b6539cfde0fe3"}, @generic={0x61, 0x10, 0x2, "2852a47bfc38e3f92f602fae037dcd206d590ca6cf805f5372b6a33e6e5bf43d49f920a757408242b5ad131e59d2ba8963260b8187af41e01c51b38472b0624c668e44c4344fc37dec7be84398f381843e5d680a18ae46611dbbe5f183bf"}, @ssp_cap={0x10, 0x10, 0xa, 0xe, 0x1, 0x1, 0x880, 0x1, [0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0x8, 0x9}]}, 0x8, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x92131992bb38bace}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x441}}, {0x41, &(0x7f0000000340)=@string={0x41, 0x3, "87128023c5d390779480148801abd645dcaa0d645a2141a60bfc7df4a7b45813aa01fb309d8679ab5066443c4783715598c5e69e52c476eeb4fc136860f1b3"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x418}}]}) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 566.488752ms ago: executing program 9 (id=479): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) readv(r0, &(0x7f0000003400)=[{&(0x7f0000001080)=""/107, 0x6b}], 0x1) 409.385897ms ago: executing program 2 (id=480): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x2000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 214.559952ms ago: executing program 2 (id=481): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 2 (id=482): timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/crash_elfcorehdr_size', 0x11100, 0x80) timerfd_gettime(r6, &(0x7f0000000280)) timer_settime(r1, 0x1, &(0x7f0000000100)={{r2, r3+60000000}, {r4, r5+10000000}}, &(0x7f0000000140)) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffc]}, 0x8, 0x80000) timer_gettime(r0, &(0x7f00000001c0)) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0xd, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socket$inet(0x2, 0x6, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) socket$inet6(0xa, 0x1, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r7) unshare(0x22020400) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) kernel console output (not intermixed with test programs): 000206 ORIG_RAX: 0000000000000172 [ 112.879562][ T6868] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 112.887534][ T6868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.895509][ T6868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.903478][ T6868] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 112.911514][ T6868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.919515][ T6868] [ 112.950998][ T6231] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.164080][ T1210] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 113.201938][ T1210] asix 8-1:0.0: probe with driver asix failed with error -61 [ 113.219709][ T6231] bridge_slave_1: left allmulticast mode [ 113.225694][ T6231] bridge_slave_1: left promiscuous mode [ 113.232137][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.245074][ T6231] bridge_slave_0: left allmulticast mode [ 113.250938][ T6231] bridge_slave_0: left promiscuous mode [ 113.259825][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.341841][ T976] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 113.501515][ T976] usb 7-1: Using ep0 maxpacket: 16 [ 113.515586][ T976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 113.549594][ T976] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 113.560591][ T976] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=14 [ 113.576986][ T976] usb 7-1: Manufacturer: syz [ 113.606334][ T976] usb 7-1: SerialNumber: syz [ 113.645734][ T976] usb 7-1: config 0 descriptor?? [ 113.660131][ T976] em28xx 7-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 113.680953][ T976] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 113.776863][ T6231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.801213][ T6231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.827482][ T6231] bond0 (unregistering): Released all slaves [ 113.952632][ T976] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 114.039021][ T976] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 114.048241][ T976] em28xx 7-1:0.0: board has no eeprom [ 114.102210][ T5837] Bluetooth: hci3: command tx timeout [ 114.126348][ T976] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 114.182073][ T976] em28xx 7-1:0.0: dvb set to bulk mode. [ 114.220020][ T1210] em28xx 7-1:0.0: Binding DVB extension [ 114.254902][ T976] usb 7-1: USB disconnect, device number 3 [ 114.283069][ T976] em28xx 7-1:0.0: Disconnecting em28xx [ 114.389777][ T1210] em28xx 7-1:0.0: Registering input extension [ 114.405476][ T6866] chnl_net:caif_netlink_parms(): no params data found [ 114.475789][ T6801] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 114.521593][ T976] em28xx 7-1:0.0: Closing input extension [ 114.575123][ T976] em28xx 7-1:0.0: Freeing device [ 114.625043][ T5837] Bluetooth: hci4: command tx timeout [ 114.679687][ T6231] hsr_slave_0: left promiscuous mode [ 114.691663][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.6.249'. [ 114.844123][ T5882] usb 8-1: USB disconnect, device number 3 [ 114.852666][ T6231] hsr_slave_1: left promiscuous mode [ 114.875084][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.887899][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.919397][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.934182][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.984545][ T6231] veth1_macvtap: left promiscuous mode [ 114.996591][ T6231] veth0_macvtap: left promiscuous mode [ 115.025106][ T6231] veth1_vlan: left promiscuous mode [ 115.050586][ T6231] veth0_vlan: left promiscuous mode [ 115.391363][ T5882] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 115.419490][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 115.561674][ T5882] usb 8-1: Using ep0 maxpacket: 8 [ 115.583266][ T5882] usb 8-1: unable to get BOS descriptor or descriptor too short [ 115.613507][ T5882] usb 8-1: config 7 has an invalid interface number: 67 but max is 0 [ 115.627913][ T5882] usb 8-1: config 7 has no interface number 0 [ 115.650296][ T5882] usb 8-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 115.665730][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.676675][ T5882] usb 8-1: Product: syz [ 115.680934][ T5882] usb 8-1: Manufacturer: syz [ 115.689505][ T5882] usb 8-1: SerialNumber: syz [ 115.800282][ T6231] team0 (unregistering): Port device team_slave_1 removed [ 115.859853][ T6231] team0 (unregistering): Port device team_slave_0 removed [ 116.185511][ T5837] Bluetooth: hci3: command tx timeout [ 116.398106][ T5882] usb 8-1: USB disconnect, device number 4 [ 116.671447][ T5837] Bluetooth: hci4: command tx timeout [ 116.828746][ T6801] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 116.867571][ T6801] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 116.977148][ T6801] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 117.305467][ T6866] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.317928][ T6866] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.351840][ T6866] bridge_slave_0: entered allmulticast mode [ 117.365186][ T6866] bridge_slave_0: entered promiscuous mode [ 117.412397][ T6866] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.452493][ T6866] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.486118][ T6866] bridge_slave_1: entered allmulticast mode [ 117.519600][ T6866] bridge_slave_1: entered promiscuous mode [ 117.554704][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.257'. [ 117.570795][ T6947] IPv6: syztnl1: Disabled Multicast RS [ 117.580985][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.257'. [ 117.602619][ T6950] macvlan1: entered promiscuous mode [ 117.620133][ T6950] team0: entered promiscuous mode [ 117.629804][ T6950] team_slave_0: entered promiscuous mode [ 117.637236][ T6950] team_slave_1: entered promiscuous mode [ 117.657180][ T6950] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 117.670780][ T6950] Cannot create hsr debugfs directory [ 117.756870][ T6866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.801239][ T6866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.956450][ T6866] team0: Port device team_slave_0 added [ 117.990317][ T6801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.012033][ T6866] team0: Port device team_slave_1 added [ 118.018647][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.260'. [ 118.110877][ T6866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.121130][ T6866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.210265][ T6866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.232784][ T6801] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.261423][ T5837] Bluetooth: hci3: command tx timeout [ 118.280074][ T6931] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.287214][ T6931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.368146][ T6931] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.375486][ T6931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.444257][ T6866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.452359][ T6866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.519841][ T6866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.741516][ T5837] Bluetooth: hci4: command tx timeout [ 118.789078][ T6866] hsr_slave_0: entered promiscuous mode [ 118.836609][ T6866] hsr_slave_1: entered promiscuous mode [ 118.862370][ T6866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.883910][ T6866] Cannot create hsr debugfs directory [ 119.207170][ T6801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.328266][ T6801] veth0_vlan: entered promiscuous mode [ 119.375269][ T6801] veth1_vlan: entered promiscuous mode [ 119.473161][ T6866] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 119.513975][ T6866] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 119.550511][ T6801] veth0_macvtap: entered promiscuous mode [ 119.566229][ T6866] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 119.583762][ T6866] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 119.631868][ T6801] veth1_macvtap: entered promiscuous mode [ 119.783740][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.825572][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.853486][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.875040][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.899564][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.964665][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.016173][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.058952][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.083077][ T6992] kAFS: unable to lookup cell '' [ 120.111079][ T6801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.170026][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.199493][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.210673][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.224613][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.235238][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.246792][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.257628][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.272433][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.286574][ T6801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.338049][ T6801] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.349271][ T6801] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.361923][ T6801] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.372079][ T6801] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.457016][ T6996] netlink: 200 bytes leftover after parsing attributes in process `syz.7.264'. [ 120.655456][ T6866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.731042][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.744840][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 120.767884][ T7002] FAULT_INJECTION: forcing a failure. [ 120.767884][ T7002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.768286][ T6866] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.783217][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.803149][ T6931] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.810336][ T6931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.821530][ T5837] Bluetooth: hci4: command tx timeout [ 120.832948][ T7002] CPU: 0 UID: 0 PID: 7002 Comm: syz.7.265 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 120.843583][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.847430][ T6931] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.853651][ T7002] Call Trace: [ 120.853663][ T7002] [ 120.853672][ T7002] dump_stack_lvl+0x241/0x360 [ 120.853708][ T7002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.853732][ T7002] ? __pfx__printk+0x10/0x10 [ 120.860821][ T6931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.864002][ T7002] ? __pfx_lock_release+0x10/0x10 [ 120.864038][ T7002] should_fail_ex+0x3b0/0x4e0 [ 120.898926][ T7002] _copy_from_user+0x2f/0xc0 [ 120.903555][ T7002] copy_uabi_to_xstate+0x4e7/0xb30 [ 120.908696][ T7002] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 120.912747][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.914334][ T7002] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 120.924031][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.927845][ T7002] ? __might_fault+0xaa/0x120 [ 120.927876][ T7002] ? __might_fault+0xc6/0x120 [ 120.927903][ T7002] fpu__restore_sig+0xe80/0x1270 [ 120.949445][ T7002] ? fpu__restore_sig+0xca5/0x1270 [ 120.954580][ T7002] ? __pfx_fpu__restore_sig+0x10/0x10 [ 120.960004][ T7002] ? __might_fault+0xc6/0x120 [ 120.964726][ T7002] ia32_restore_sigcontext+0x583/0x910 [ 120.970220][ T7002] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 120.976238][ T7002] ? lockdep_hardirqs_on+0x99/0x150 [ 120.981468][ T7002] ? _raw_spin_unlock_irq+0x2e/0x50 [ 120.986693][ T7002] ? __set_current_blocked+0x310/0x380 [ 120.992192][ T7002] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 120.998228][ T7002] __do_compat_sys_rt_sigreturn+0x17a/0x240 [ 121.004167][ T7002] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 121.010628][ T7002] ? lockdep_hardirqs_on+0x99/0x150 [ 121.015866][ T7002] ? do_int80_emulation+0xe8/0x200 [ 121.021023][ T7002] do_int80_emulation+0x11f/0x200 [ 121.026095][ T7002] ? clear_bhb_loop+0x35/0x90 [ 121.030787][ T7002] ? clear_bhb_loop+0x35/0x90 [ 121.035489][ T7002] asm_int80_emulation+0x1a/0x20 [ 121.040465][ T7002] RIP: 0023:0xf7f64579 [ 121.044561][ T7002] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 121.064466][ T7002] RSP: 002b:00000000f50b655c EFLAGS: 00000206 [ 121.070585][ T7002] RAX: 00000000fffffffc RBX: 0000000000000004 RCX: 0000000020000000 [ 121.078583][ T7002] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.086591][ T7002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.094589][ T7002] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 121.102586][ T7002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.110597][ T7002] [ 121.357302][ T6866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.487764][ T7024] netlink: 'syz.2.269': attribute type 10 has an invalid length. [ 121.524302][ T6866] veth0_vlan: entered promiscuous mode [ 121.633984][ T7024] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 121.664264][ T7023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.667879][ T6866] veth1_vlan: entered promiscuous mode [ 121.763105][ T6866] veth0_macvtap: entered promiscuous mode [ 121.782079][ T6866] veth1_macvtap: entered promiscuous mode [ 121.820672][ T6866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.849312][ T6866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.872603][ T6866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.897984][ T6866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.918352][ T6866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.939385][ T6866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.960054][ T6866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.982309][ T6866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.002571][ T6866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.022038][ T6866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.043751][ T6866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.063733][ T6866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.097385][ T6866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.111247][ T6866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.130583][ T6866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.147720][ T6866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.158387][ T6866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.176829][ T6866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.189231][ T6866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.200222][ T6866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.214448][ T6866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.228441][ T6866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.310290][ T6866] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.360569][ T6866] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.392017][ T6866] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.402660][ T29] audit: type=1326 audit(1734746293.359:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.6.270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711d579 code=0x7fc00000 [ 122.417632][ T6866] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.490860][ T29] audit: type=1326 audit(1734746293.359:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.6.270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf711d579 code=0x7fc00000 [ 122.578985][ T29] audit: type=1326 audit(1734746293.359:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.6.270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711d579 code=0x7fc00000 [ 122.605851][ T29] audit: type=1326 audit(1734746293.359:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.6.270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711d579 code=0x7fc00000 [ 122.697100][ T29] audit: type=1326 audit(1734746293.359:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.6.270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711d579 code=0x7fc00000 [ 122.733508][ T5882] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 122.807430][ T1215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.832848][ T1215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.847939][ T29] audit: type=1326 audit(1734746293.359:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.6.270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711d579 code=0x7fc00000 [ 122.928561][ T5882] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.955931][ T6931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.972003][ T29] audit: type=1326 audit(1734746293.359:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.6.270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711d579 code=0x7fc00000 [ 123.001855][ T6931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.033741][ T5882] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 123.085043][ T29] audit: type=1326 audit(1734746293.359:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.6.270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711d579 code=0x7fc00000 [ 123.155187][ T29] audit: type=1326 audit(1734746293.359:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.6.270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711d579 code=0x7fc00000 [ 123.228428][ T29] audit: type=1326 audit(1734746293.359:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.6.270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711d579 code=0x7fc00000 [ 123.229796][ T5882] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 123.434564][ T7065] netlink: 'syz.6.275': attribute type 12 has an invalid length. [ 123.458902][ T5882] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 123.486840][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.500368][ T7065] netlink: 120 bytes leftover after parsing attributes in process `syz.6.275'. [ 123.546901][ T7050] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.348060][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.278'. [ 125.004048][ T5885] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 125.190361][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 125.211028][ T5885] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 125.220352][ T5885] usb 7-1: config 0 has no interface number 0 [ 125.240451][ T5885] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 125.250417][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.270402][ T5885] usb 7-1: Product: syz [ 125.280500][ T5885] usb 7-1: Manufacturer: syz [ 125.297295][ T5885] usb 7-1: SerialNumber: syz [ 125.444749][ T5885] usb 7-1: config 0 descriptor?? [ 125.472313][ T5885] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 125.499816][ T5882] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 125.541960][ T5882] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input18 [ 125.571477][ T5884] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 125.642134][ T5882] usb 3-1: USB disconnect, device number 14 [ 125.648112][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 125.697344][ T5885] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 125.751561][ T5884] usb 8-1: device descriptor read/64, error -71 [ 125.781607][ T5885] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 125.900653][ T7094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.909929][ T7094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.012379][ T5884] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 126.125928][ T7094] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.127859][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 126.128927][ T8] usb 7-1: USB disconnect, device number 4 [ 126.171814][ T7131] netlink: 28 bytes leftover after parsing attributes in process `syz.8.285'. [ 126.180809][ T7131] netlink: 28 bytes leftover after parsing attributes in process `syz.8.285'. [ 126.190535][ T5884] usb 8-1: device descriptor read/64, error -71 [ 126.203131][ T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 126.224300][ T7131] macvlan1: entered promiscuous mode [ 126.241822][ T5882] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 126.242713][ T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 126.269090][ T7131] macvlan1: left promiscuous mode [ 126.269579][ T8] quatech2 7-1:0.51: device disconnected [ 126.323889][ T5884] usb usb8-port1: attempt power cycle [ 126.412253][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 126.433147][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 126.451149][ T5882] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 126.461208][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=14 [ 126.470205][ T5882] usb 3-1: Manufacturer: syz [ 126.475006][ T5882] usb 3-1: SerialNumber: syz [ 126.487332][ T5882] usb 3-1: config 0 descriptor?? [ 126.504421][ T5882] em28xx 3-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 126.523494][ T5882] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 126.681852][ T5884] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 126.758215][ T5884] usb 8-1: device descriptor read/8, error -71 [ 126.812261][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.289'. [ 126.862328][ T5882] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 126.971446][ T5882] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 126.980526][ T5882] em28xx 3-1:0.0: board has no eeprom [ 127.002066][ T5884] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 127.042004][ T5884] usb 8-1: device descriptor read/8, error -71 [ 127.081443][ T5882] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 127.089387][ T5882] em28xx 3-1:0.0: dvb set to bulk mode. [ 127.126254][ T5885] em28xx 3-1:0.0: Binding DVB extension [ 127.140990][ T5882] usb 3-1: USB disconnect, device number 15 [ 127.154844][ T5884] usb usb8-port1: unable to enumerate USB device [ 127.178238][ T5882] em28xx 3-1:0.0: Disconnecting em28xx [ 127.198243][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.8.290'. [ 127.248359][ T5885] em28xx 3-1:0.0: Registering input extension [ 127.272281][ T5882] em28xx 3-1:0.0: Closing input extension [ 127.272594][ T5880] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 127.318648][ T5882] em28xx 3-1:0.0: Freeing device [ 127.432389][ T5880] usb 7-1: device descriptor read/64, error -71 [ 127.647631][ T7179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.292'. [ 127.691865][ T5880] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 127.832800][ T7183] netlink: 200 bytes leftover after parsing attributes in process `syz.9.293'. [ 127.861794][ T5880] usb 7-1: device descriptor read/64, error -71 [ 127.992111][ T5880] usb usb7-port1: attempt power cycle [ 128.363771][ T5880] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 128.402748][ T5880] usb 7-1: device descriptor read/8, error -71 [ 128.551480][ T5882] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 128.651838][ T5880] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 128.702737][ T5880] usb 7-1: device descriptor read/8, error -71 [ 128.722899][ T5882] usb 10-1: device descriptor read/64, error -71 [ 128.821066][ T5880] usb usb7-port1: unable to enumerate USB device [ 128.873250][ T5900] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 128.971416][ T5882] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 129.051715][ T5900] usb 8-1: Using ep0 maxpacket: 8 [ 129.092927][ T5900] usb 8-1: config 0 has an invalid interface number: 128 but max is 0 [ 129.128379][ T5900] usb 8-1: config 0 has no interface number 0 [ 129.150672][ T5900] usb 8-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 129.161567][ T5882] usb 10-1: device descriptor read/64, error -71 [ 129.169404][ T5900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.179111][ T5900] usb 8-1: Product: syz [ 129.187246][ T5900] usb 8-1: Manufacturer: syz [ 129.194048][ T5900] usb 8-1: SerialNumber: syz [ 129.210479][ T5900] usb 8-1: config 0 descriptor?? [ 129.249153][ T5900] radio-usb-si4713 8-1:0.128: Si4713 development board discovered: (10C4:8244) [ 129.321855][ T5882] usb usb10-port1: attempt power cycle [ 129.448012][ T7215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.297'. [ 129.457205][ T7215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.297'. [ 129.506589][ T5884] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 129.671576][ T5882] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 129.683968][ T5884] usb 9-1: config 251 has an invalid interface number: 108 but max is 0 [ 129.692572][ T5884] usb 9-1: config 251 has no interface number 0 [ 129.699115][ T5884] usb 9-1: config 251 interface 108 has no altsetting 0 [ 129.707736][ T5882] usb 10-1: device descriptor read/8, error -71 [ 129.715350][ T5884] usb 9-1: New USB device found, idVendor=0403, idProduct=d013, bcdDevice=29.e7 [ 129.724929][ T5884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.815599][ T5880] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 129.939699][ T5884] usb 9-1: string descriptor 0 read error: -71 [ 129.964307][ T5882] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 129.980243][ T5884] ftdi_sio 9-1:251.108: FTDI USB Serial Device converter detected [ 129.980696][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.008859][ T5884] ftdi_sio ttyUSB0: unknown device type: 0x29e7 [ 130.016229][ T5882] usb 10-1: device descriptor read/8, error -71 [ 130.019995][ T5880] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 130.033560][ T5884] usb 9-1: USB disconnect, device number 2 [ 130.041009][ T5884] ftdi_sio 9-1:251.108: device disconnected [ 130.075969][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.087762][ T5900] radio-usb-si4713 8-1:0.128: probe with driver radio-usb-si4713 failed with error -71 [ 130.112345][ T5900] usbhid 8-1:0.128: couldn't find an input interrupt endpoint [ 130.125851][ T5880] usb 3-1: config 0 descriptor?? [ 130.141935][ T5882] usb usb10-port1: unable to enumerate USB device [ 130.145830][ T5900] usb 8-1: USB disconnect, device number 9 [ 130.214260][ T7235] FAULT_INJECTION: forcing a failure. [ 130.214260][ T7235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.232236][ T7235] CPU: 0 UID: 0 PID: 7235 Comm: syz.6.299 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 130.242941][ T7235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.253034][ T7235] Call Trace: [ 130.256344][ T7235] [ 130.259304][ T7235] dump_stack_lvl+0x241/0x360 [ 130.264021][ T7235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.269255][ T7235] ? __pfx__printk+0x10/0x10 [ 130.273906][ T7235] ? __pfx_lock_release+0x10/0x10 [ 130.278982][ T7235] should_fail_ex+0x3b0/0x4e0 [ 130.283770][ T7235] _copy_from_user+0x2f/0xc0 [ 130.288369][ T7235] get_compat_msghdr+0xae/0x730 [ 130.293223][ T7235] ? __pfx_get_compat_msghdr+0x10/0x10 [ 130.298688][ T7235] __sys_sendmsg+0x233/0x350 [ 130.303284][ T7235] ? __pfx_lock_release+0x10/0x10 [ 130.308309][ T7235] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.313424][ T7235] ? __pfx_vfs_write+0x10/0x10 [ 130.318210][ T7235] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 130.324886][ T7235] ? lockdep_hardirqs_on+0x99/0x150 [ 130.330089][ T7235] __do_fast_syscall_32+0xb4/0x110 [ 130.335205][ T7235] ? exc_page_fault+0x590/0x8b0 [ 130.340057][ T7235] do_fast_syscall_32+0x34/0x80 [ 130.344907][ T7235] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.351340][ T7235] RIP: 0023:0xf711d579 [ 130.355443][ T7235] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 130.375150][ T7235] RSP: 002b:00000000f510f55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 130.383583][ T7235] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000400 [ 130.391583][ T7235] RDX: 0000000000008810 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.399561][ T7235] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.407549][ T7235] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 130.415520][ T7235] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.423506][ T7235] [ 130.677571][ T5880] aquacomputer_d5next 0003:0C70:F00A.0006: unknown main item tag 0x0 [ 130.686300][ T5880] aquacomputer_d5next 0003:0C70:F00A.0006: unknown main item tag 0x0 [ 130.695291][ T5880] aquacomputer_d5next 0003:0C70:F00A.0006: unknown main item tag 0x0 [ 130.704219][ T5880] aquacomputer_d5next 0003:0C70:F00A.0006: unknown main item tag 0x0 [ 130.713143][ T5880] aquacomputer_d5next 0003:0C70:F00A.0006: unknown main item tag 0x0 [ 130.805802][ T5880] aquacomputer_d5next 0003:0C70:F00A.0006: hidraw0: USB HID v0.09 Device [HID 0c70:f00a] on usb-dummy_hcd.2-1/input0 [ 130.923314][ T5880] usb 3-1: USB disconnect, device number 16 [ 130.950322][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.8.301'. [ 131.142795][ T7262] netlink: 200 bytes leftover after parsing attributes in process `syz.7.304'. [ 131.342293][ T7270] netlink: zone id is out of range [ 131.630233][ T7278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.308'. [ 131.671528][ T7278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.308'. [ 131.774899][ T7281] netlink: 16 bytes leftover after parsing attributes in process `syz.9.307'. [ 132.071408][ T58] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 132.351587][ T58] usb 3-1: device descriptor read/64, error -71 [ 132.631503][ T58] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 132.791378][ T58] usb 3-1: device descriptor read/64, error -71 [ 132.925154][ T58] usb usb3-port1: attempt power cycle [ 133.166815][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.173246][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.350175][ T7317] openvswitch: netlink: Tunnel attr 191 out of range max 16 [ 133.371580][ T58] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 133.451773][ T58] usb 3-1: device descriptor read/8, error -71 [ 133.583104][ T5880] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 133.590519][ T7323] netlink: 200 bytes leftover after parsing attributes in process `syz.6.316'. [ 133.642502][ T5900] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 133.691475][ T58] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 133.732708][ T58] usb 3-1: device descriptor read/8, error -71 [ 133.785556][ T5880] usb 8-1: Using ep0 maxpacket: 8 [ 133.803372][ T5880] usb 8-1: config 0 has an invalid interface number: 128 but max is 0 [ 133.821973][ T5900] usb 9-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 133.842666][ T5880] usb 8-1: config 0 has no interface number 0 [ 133.871962][ T5900] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.882877][ T58] usb usb3-port1: unable to enumerate USB device [ 133.896120][ T5880] usb 8-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 133.917976][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.928360][ T5900] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.956037][ T5880] usb 8-1: Product: syz [ 133.960255][ T5880] usb 8-1: Manufacturer: syz [ 133.967824][ T5900] usb 9-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 133.977489][ T5880] usb 8-1: SerialNumber: syz [ 133.994351][ T5880] usb 8-1: config 0 descriptor?? [ 134.010866][ T5900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.025485][ T5880] radio-usb-si4713 8-1:0.128: Si4713 development board discovered: (10C4:8244) [ 134.040087][ T5900] usb 9-1: config 0 descriptor?? [ 134.058642][ T5900] usb-storage 9-1:0.0: USB Mass Storage device detected [ 134.107639][ T5900] usb-storage 9-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 134.121494][ T5884] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 134.263005][ T5884] usb 7-1: device descriptor read/64, error -71 [ 134.334988][ T8] usb 9-1: USB disconnect, device number 3 [ 134.531379][ T5884] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 134.551438][ T5885] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 134.683476][ T5884] usb 7-1: device descriptor read/64, error -71 [ 134.722089][ T5885] usb 10-1: Using ep0 maxpacket: 8 [ 134.741394][ T5885] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 134.750584][ T5885] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.795972][ T5884] usb usb7-port1: attempt power cycle [ 134.811990][ T5885] usb 10-1: config 0 descriptor?? [ 134.868326][ T5880] radio-usb-si4713 8-1:0.128: probe with driver radio-usb-si4713 failed with error -71 [ 134.909353][ T5880] usbhid 8-1:0.128: couldn't find an input interrupt endpoint [ 134.943042][ T5880] usb 8-1: USB disconnect, device number 10 [ 135.151158][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 135.151178][ T29] audit: type=1326 audit(1734746306.119:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7367 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 135.181981][ T5884] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 135.206260][ T7368] MPI: mpi too large (16392 bits) [ 135.221242][ T5884] usb 7-1: device descriptor read/8, error -71 [ 135.237255][ T29] audit: type=1326 audit(1734746306.159:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7367 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=93 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 135.331042][ T29] audit: type=1326 audit(1734746306.159:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7367 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 135.371041][ T29] audit: type=1326 audit(1734746306.159:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7367 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 135.496661][ T5885] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 135.506922][ T5885] asix 10-1:0.0: probe with driver asix failed with error -61 [ 135.541891][ T29] audit: type=1326 audit(1734746306.179:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7367 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 135.552568][ T5884] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 135.635237][ T5884] usb 7-1: device descriptor read/8, error -71 [ 135.652012][ T29] audit: type=1326 audit(1734746306.179:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7367 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 135.657007][ T58] hid-generic 0000:0000:0000.0007: item fetching failed at offset 0/1 [ 135.683525][ T58] hid-generic 0000:0000:0000.0007: probe with driver hid-generic failed with error -22 [ 135.761787][ T29] audit: type=1326 audit(1734746306.179:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7367 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 135.764720][ T5884] usb usb7-port1: unable to enumerate USB device [ 135.868269][ T29] audit: type=1326 audit(1734746306.179:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7367 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 135.892043][ T29] audit: type=1326 audit(1734746306.179:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7367 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 135.916387][ T29] audit: type=1326 audit(1734746306.179:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7367 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 136.207469][ T7398] netlink: 'syz.7.327': attribute type 21 has an invalid length. [ 136.446368][ T7421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.328'. [ 136.598866][ T7389] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.607665][ T7389] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 136.632583][ T7389] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 136.656600][ T7389] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.692557][ T7389] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 136.708710][ T7389] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 136.719293][ T7389] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.736269][ T7389] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 136.774020][ T7389] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 136.794179][ T7389] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.800700][ T7389] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 136.823728][ T7389] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 136.839390][ T7389] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 136.886060][ T7389] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 136.997349][ T7389] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 137.443727][ T1210] usb 10-1: USB disconnect, device number 6 [ 137.501706][ T8] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 137.642043][ T8] usb 8-1: device descriptor read/64, error -71 [ 137.885224][ T8] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 138.021730][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.041844][ T8] usb 8-1: device descriptor read/64, error -71 [ 138.162985][ T8] usb usb8-port1: attempt power cycle [ 138.519283][ T8] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 138.585522][ T8] usb 8-1: device descriptor read/8, error -71 [ 138.671986][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.741757][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.829321][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.857917][ T8] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 138.882807][ T8] usb 8-1: device descriptor read/8, error -71 [ 138.909993][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 138.992097][ T8] usb usb8-port1: unable to enumerate USB device [ 140.101756][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.252975][ T6231] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.315893][ T7519] netlink: 16 bytes leftover after parsing attributes in process `syz.9.343'. [ 140.589142][ T6231] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.717678][ T7529] syz.2.347 (7529): /proc/7528/oom_adj is deprecated, please use /proc/7528/oom_score_adj instead. [ 140.741732][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.822585][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.946612][ T6231] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.961236][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 140.961248][ T29] audit: type=1326 audit(1734746311.929:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7531 comm="syz.6.350" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711d579 code=0x0 [ 140.981974][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 141.126186][ T6231] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.357209][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.366910][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.378003][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.386503][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.396824][ T5829] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 141.404463][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.574479][ T6231] bridge_slave_1: left allmulticast mode [ 141.589640][ T6231] bridge_slave_1: left promiscuous mode [ 141.596321][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.611985][ T6231] bridge_slave_0: left allmulticast mode [ 141.618089][ T6231] bridge_slave_0: left promiscuous mode [ 141.634643][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.771833][ T976] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 142.002041][ T7551] syz.2.353 uses obsolete (PF_INET,SOCK_PACKET) [ 142.192056][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.282963][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.7.356'. [ 142.549988][ T6231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.565270][ T6231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.578918][ T6231] bond0 (unregistering): Released all slaves [ 142.710157][ T976] usb 3-1: unable to get BOS descriptor or descriptor too short [ 142.733802][ T976] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 142.743037][ T976] usb 3-1: can't read configurations, error -71 [ 142.831801][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.852992][ T29] audit: type=1326 audit(1734746313.829:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.9.360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 142.880523][ T29] audit: type=1326 audit(1734746313.849:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.9.360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=43 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 142.893607][ T7577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.361'. [ 142.905013][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.939811][ T29] audit: type=1326 audit(1734746313.849:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.9.360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 142.963440][ T29] audit: type=1326 audit(1734746313.849:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.9.360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 142.985876][ T29] audit: type=1326 audit(1734746313.849:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.9.360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 143.009651][ T29] audit: type=1326 audit(1734746313.849:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.9.360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 143.035087][ T29] audit: type=1326 audit(1734746313.849:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.9.360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 143.059142][ T29] audit: type=1326 audit(1734746313.849:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.9.360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 143.082572][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 143.088986][ T29] audit: type=1326 audit(1734746313.849:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.9.360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 143.171944][ T8] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 143.343200][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 143.366732][ T7546] chnl_net:caif_netlink_parms(): no params data found [ 143.383107][ T8] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 143.403058][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.442611][ T8] usb 8-1: config 0 descriptor?? [ 143.471968][ T5837] Bluetooth: hci3: command tx timeout [ 143.524633][ T6231] hsr_slave_0: left promiscuous mode [ 143.539996][ T6231] hsr_slave_1: left promiscuous mode [ 143.563478][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.597478][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.621838][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.644312][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.654267][ T7594] netlink: 28 bytes leftover after parsing attributes in process `syz.9.367'. [ 143.680876][ T7594] netlink: 28 bytes leftover after parsing attributes in process `syz.9.367'. [ 143.684773][ T6231] veth1_macvtap: left promiscuous mode [ 143.699153][ T6231] veth0_macvtap: left promiscuous mode [ 143.710664][ T6231] veth1_vlan: left promiscuous mode [ 143.728020][ T6231] veth0_vlan: left promiscuous mode [ 143.840652][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 143.852360][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 143.864980][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 143.877107][ T8] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 143.888605][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 143.897136][ T8] asix 8-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 143.908686][ T5829] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 143.908962][ T8] asix 8-1:0.0: probe with driver asix failed with error -32 [ 143.927399][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 144.477995][ T6231] team0 (unregistering): Port device team_slave_1 removed [ 144.520723][ T6231] team0 (unregistering): Port device team_slave_0 removed [ 144.966544][ T7594] macvlan1: entered promiscuous mode [ 144.974162][ T7594] bond0: entered promiscuous mode [ 144.979243][ T7594] bond_slave_0: entered promiscuous mode [ 144.992394][ T7594] bond_slave_1: entered promiscuous mode [ 145.015586][ T7594] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 145.029023][ T7594] Cannot create hsr debugfs directory [ 145.196357][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 145.249784][ T7546] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.258031][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.265471][ T7546] bridge_slave_0: entered allmulticast mode [ 145.283735][ T7546] bridge_slave_0: entered promiscuous mode [ 145.358070][ T7546] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.372980][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.387581][ T7546] bridge_slave_1: entered allmulticast mode [ 145.395688][ T7546] bridge_slave_1: entered promiscuous mode [ 145.541622][ T5829] Bluetooth: hci3: command tx timeout [ 145.556937][ T7546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.638535][ T7546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.736840][ T7604] chnl_net:caif_netlink_parms(): no params data found [ 145.785768][ T7546] team0: Port device team_slave_0 added [ 145.820830][ T7546] team0: Port device team_slave_1 added [ 145.836315][ T5881] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 146.013529][ T5881] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.021945][ T5829] Bluetooth: hci2: command tx timeout [ 146.041649][ T5881] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.065105][ T5885] usb 8-1: USB disconnect, device number 15 [ 146.115888][ T5881] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 146.158745][ T5881] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.187639][ T5881] usb 10-1: config 0 descriptor?? [ 146.194340][ T6231] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.496374][ T6231] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.511193][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.519263][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.548102][ T7546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.560112][ T5885] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 146.586937][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.598931][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.627323][ T7546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.661044][ T6231] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.691678][ T58] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 146.699779][ T7604] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.744283][ T7604] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.753883][ T5885] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.767216][ T7604] bridge_slave_0: entered allmulticast mode [ 146.773746][ T5885] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.783098][ T7604] bridge_slave_0: entered promiscuous mode [ 146.785155][ T5885] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 146.791001][ T7604] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.805780][ T7604] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.811460][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.813466][ T7604] bridge_slave_1: entered allmulticast mode [ 146.821060][ T5885] usb 8-1: SerialNumber: syz [ 146.829033][ T7604] bridge_slave_1: entered promiscuous mode [ 146.870630][ T6231] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.881231][ T58] usb 3-1: Using ep0 maxpacket: 16 [ 146.888985][ T58] usb 3-1: unable to get BOS descriptor or descriptor too short [ 146.899359][ T58] usb 3-1: config 8 has an invalid interface number: 64 but max is 0 [ 146.911772][ T58] usb 3-1: config 8 has no interface number 0 [ 146.917953][ T58] usb 3-1: config 8 interface 64 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 146.930587][ T58] usb 3-1: config 8 interface 64 has no altsetting 0 [ 146.940495][ T58] usb 3-1: New USB device found, idVendor=19d2, idProduct=64c6, bcdDevice= e.34 [ 146.950914][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.961524][ T58] usb 3-1: Product: syz [ 146.965812][ T58] usb 3-1: Manufacturer: syz [ 146.970560][ T58] usb 3-1: SerialNumber: syz [ 146.998178][ T7604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.017237][ T7546] hsr_slave_0: entered promiscuous mode [ 147.029408][ T7546] hsr_slave_1: entered promiscuous mode [ 147.037264][ T7546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.048677][ T7546] Cannot create hsr debugfs directory [ 147.057619][ T5885] usb 8-1: 0:2 : does not exist [ 147.060964][ T7604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.109455][ T5885] usb 8-1: USB disconnect, device number 16 [ 147.170591][ T7604] team0: Port device team_slave_0 added [ 147.222088][ T7604] team0: Port device team_slave_1 added [ 147.274373][ T58] cdc_ether 3-1:8.64: invalid descriptor buffer length [ 147.289882][ T58] usb 3-1: bad CDC descriptors [ 147.316712][ T6148] udevd[6148]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.336683][ T58] usb 3-1: USB disconnect, device number 23 [ 147.347355][ T7661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.379376][ T7661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.448369][ T6231] bridge_slave_1: left allmulticast mode [ 147.454881][ T6231] bridge_slave_1: left promiscuous mode [ 147.462079][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.479188][ T6231] bridge_slave_0: left allmulticast mode [ 147.485692][ T6231] bridge_slave_0: left promiscuous mode [ 147.492103][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.625387][ T5829] Bluetooth: hci3: command tx timeout [ 147.916846][ T7678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.374'. [ 148.102033][ T5829] Bluetooth: hci2: command tx timeout [ 148.118229][ T6231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.133776][ T6231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.144733][ T6231] bond0 (unregistering): Released all slaves [ 148.157283][ T7604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.164574][ T7604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.192732][ T7604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.309207][ T7604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.332635][ T7604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.370841][ T7604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.457084][ T7681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.375'. [ 148.492895][ T7681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.375'. [ 148.547705][ T7604] hsr_slave_0: entered promiscuous mode [ 148.565026][ T7604] hsr_slave_1: entered promiscuous mode [ 148.574857][ T7604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.584078][ T7604] Cannot create hsr debugfs directory [ 148.642756][ T5881] usbhid 10-1:0.0: can't add hid device: -71 [ 148.653784][ T5881] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 148.691021][ T5881] usb 10-1: USB disconnect, device number 7 [ 148.850795][ T6231] hsr_slave_0: left promiscuous mode [ 148.857122][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.7.380'. [ 148.872325][ T6231] hsr_slave_1: left promiscuous mode [ 148.900944][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.925077][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.932149][ T7697] delete_channel: no stack [ 148.952129][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.969852][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.025164][ T7688] delete_channel: no stack [ 149.048814][ T6231] veth1_macvtap: left promiscuous mode [ 149.076348][ T6231] veth0_macvtap: left promiscuous mode [ 149.086781][ T6231] veth1_vlan: left promiscuous mode [ 149.117841][ T6231] veth0_vlan: left promiscuous mode [ 149.484744][ T7718] netlink: 16 bytes leftover after parsing attributes in process `syz.7.384'. [ 149.701625][ T5829] Bluetooth: hci3: command tx timeout [ 150.181602][ T5829] Bluetooth: hci2: command tx timeout [ 150.583203][ T6231] team0 (unregistering): Port device team_slave_1 removed [ 150.641825][ T976] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 150.651670][ T6231] team0 (unregistering): Port device team_slave_0 removed [ 150.811749][ T976] usb 3-1: Using ep0 maxpacket: 16 [ 150.820260][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 150.843345][ T976] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 150.853901][ T976] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=14 [ 150.862714][ T976] usb 3-1: Manufacturer: syz [ 150.867519][ T976] usb 3-1: SerialNumber: syz [ 150.875276][ T976] usb 3-1: config 0 descriptor?? [ 150.889832][ T976] em28xx 3-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 150.899974][ T976] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 151.172188][ T976] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 151.277089][ T976] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 151.302916][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.7.387'. [ 151.313355][ T976] em28xx 3-1:0.0: board has no eeprom [ 151.338441][ T7731] binder: 7730:7731 ioctl c0306201 0 returned -14 [ 151.370349][ T7731] binder: 7730:7731 ioctl c0189372 20000000 returned -22 [ 151.401852][ T976] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 151.419707][ T976] em28xx 3-1:0.0: dvb set to bulk mode. [ 151.429165][ T5900] em28xx 3-1:0.0: Binding DVB extension [ 151.485461][ T976] usb 3-1: USB disconnect, device number 24 [ 151.517697][ T976] em28xx 3-1:0.0: Disconnecting em28xx [ 151.551648][ T5881] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 151.555479][ T5900] em28xx 3-1:0.0: Registering input extension [ 151.581504][ T976] em28xx 3-1:0.0: Closing input extension [ 151.619781][ T976] em28xx 3-1:0.0: Freeing device [ 151.722044][ T5881] usb 10-1: device descriptor read/64, error -71 [ 151.826009][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 151.826027][ T29] audit: type=1326 audit(1734746322.789:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.7.390" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x0 [ 152.001510][ T5881] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 152.161851][ T5881] usb 10-1: device descriptor read/64, error -71 [ 152.262581][ T5829] Bluetooth: hci2: command tx timeout [ 152.282342][ T5881] usb usb10-port1: attempt power cycle [ 152.641535][ T5881] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 152.682430][ T5881] usb 10-1: device descriptor read/8, error -71 [ 152.893803][ T7604] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 152.929508][ T7604] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 152.946727][ T7604] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 152.961447][ T5881] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 152.964477][ T7604] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 153.002323][ T5881] usb 10-1: device descriptor read/8, error -71 [ 153.031008][ T7778] FAULT_INJECTION: forcing a failure. [ 153.031008][ T7778] name failslab, interval 1, probability 0, space 0, times 0 [ 153.043998][ T7778] CPU: 1 UID: 0 PID: 7778 Comm: syz.2.394 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 153.054631][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 153.064719][ T7778] Call Trace: [ 153.068023][ T7778] [ 153.070976][ T7778] dump_stack_lvl+0x241/0x360 [ 153.075697][ T7778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.080934][ T7778] ? __pfx__printk+0x10/0x10 [ 153.085556][ T7778] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 153.091579][ T7778] ? __pfx___might_resched+0x10/0x10 [ 153.096889][ T7778] should_fail_ex+0x3b0/0x4e0 [ 153.101599][ T7778] should_failslab+0xac/0x100 [ 153.106301][ T7778] kmem_cache_alloc_node_noprof+0x77/0x380 [ 153.112138][ T7778] ? __alloc_skb+0x1c3/0x440 [ 153.116753][ T7778] __alloc_skb+0x1c3/0x440 [ 153.121192][ T7778] ? __pfx___alloc_skb+0x10/0x10 [ 153.126150][ T7778] ? netlink_autobind+0xd6/0x2f0 [ 153.131137][ T7778] ? netlink_autobind+0x2b0/0x2f0 [ 153.136210][ T7778] netlink_sendmsg+0x638/0xcb0 [ 153.140987][ T7778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.146287][ T7778] ? __pfx_lock_release+0x10/0x10 [ 153.151325][ T7778] ? aa_sock_msg_perm+0x91/0x160 [ 153.156306][ T7778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.161625][ T7778] __sock_sendmsg+0x221/0x270 [ 153.166511][ T7778] ____sys_sendmsg+0x52a/0x7e0 [ 153.171385][ T7778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.176736][ T7778] __sys_sendmsg+0x269/0x350 [ 153.181348][ T7778] ? __pfx_lock_release+0x10/0x10 [ 153.186487][ T7778] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.191628][ T7778] ? __pfx_vfs_write+0x10/0x10 [ 153.196429][ T7778] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 153.203042][ T7778] ? lockdep_hardirqs_on+0x99/0x150 [ 153.208264][ T7778] __do_fast_syscall_32+0xb4/0x110 [ 153.213399][ T7778] ? exc_page_fault+0x590/0x8b0 [ 153.218271][ T7778] do_fast_syscall_32+0x34/0x80 [ 153.223143][ T7778] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.229482][ T7778] RIP: 0023:0xf7fd1579 [ 153.233558][ T7778] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 153.253178][ T7778] RSP: 002b:00000000f512655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 153.261604][ T7778] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200007c0 [ 153.269581][ T7778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.277551][ T7778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.285522][ T7778] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 153.293498][ T7778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.301497][ T7778] [ 153.304660][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.331453][ T5881] usb usb10-port1: unable to enumerate USB device [ 153.415522][ T71] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.479808][ T7546] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 153.514867][ T7781] FAULT_INJECTION: forcing a failure. [ 153.514867][ T7781] name failslab, interval 1, probability 0, space 0, times 0 [ 153.524447][ T7546] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 153.535078][ T7781] CPU: 1 UID: 0 PID: 7781 Comm: syz.2.397 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 153.545706][ T7781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 153.555782][ T7781] Call Trace: [ 153.559076][ T7781] [ 153.562023][ T7781] dump_stack_lvl+0x241/0x360 [ 153.566746][ T7781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.571975][ T7781] ? __pfx__printk+0x10/0x10 [ 153.576602][ T7781] should_fail_ex+0x3b0/0x4e0 [ 153.581304][ T7781] should_failslab+0xac/0x100 [ 153.586008][ T7781] ? skb_clone+0x20c/0x390 [ 153.590440][ T7781] kmem_cache_alloc_noprof+0x70/0x380 [ 153.595845][ T7781] skb_clone+0x20c/0x390 [ 153.600118][ T7781] __netlink_deliver_tap+0x3cc/0x7f0 [ 153.605529][ T7781] ? netlink_deliver_tap+0x2e/0x1b0 [ 153.610750][ T7781] netlink_deliver_tap+0x19d/0x1b0 [ 153.615883][ T7781] netlink_unicast+0x7c4/0x990 [ 153.620681][ T7781] ? __pfx_netlink_unicast+0x10/0x10 [ 153.625991][ T7781] ? __virt_addr_valid+0x45f/0x530 [ 153.631125][ T7781] ? __phys_addr_symbol+0x2f/0x70 [ 153.636174][ T7781] ? __check_object_size+0x47a/0x730 [ 153.641485][ T7781] netlink_sendmsg+0x8e4/0xcb0 [ 153.646371][ T7781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.651691][ T7781] ? aa_sock_msg_perm+0x91/0x160 [ 153.656657][ T7781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.661964][ T7781] __sock_sendmsg+0x221/0x270 [ 153.666670][ T7781] __sys_sendto+0x363/0x4c0 [ 153.671203][ T7781] ? __pfx___sys_sendto+0x10/0x10 [ 153.676268][ T7781] ? __might_fault+0xaa/0x120 [ 153.681019][ T7781] ? vfs_write+0x730/0xd30 [ 153.685477][ T7781] ? __might_fault+0xc6/0x120 [ 153.690184][ T7781] __se_compat_sys_socketcall+0xb18/0x1430 [ 153.696124][ T7781] ? __pfx___se_compat_sys_socketcall+0x10/0x10 [ 153.702423][ T7781] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 153.709138][ T7781] ? lockdep_hardirqs_on+0x99/0x150 [ 153.714457][ T7781] __do_fast_syscall_32+0xb4/0x110 [ 153.719601][ T7781] ? exc_page_fault+0x590/0x8b0 [ 153.724485][ T7781] do_fast_syscall_32+0x34/0x80 [ 153.729361][ T7781] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.735716][ T7781] RIP: 0023:0xf7fd1579 [ 153.739803][ T7781] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 153.759443][ T7781] RSP: 002b:00000000f5125430 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 153.767895][ T7781] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f5125444 [ 153.775902][ T7781] RDX: 0000000000000000 RSI: 00000000f5125560 RDI: 00000000f7463ff4 [ 153.783902][ T7781] RBP: 00000000f5125560 R08: 0000000000000000 R09: 0000000000000000 [ 153.791902][ T7781] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 153.799897][ T7781] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.808082][ T7781] [ 153.811166][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.822321][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.834344][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.843254][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.874283][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.882465][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.892595][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.915097][ T71] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.948318][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 153.964594][ T7546] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 153.978293][ T7546] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 154.030619][ T7787] process 'syz.2.399' launched './file0' with NULL argv: empty string added [ 154.072303][ T71] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.180222][ T71] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.217184][ T7604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.334056][ T7546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.350999][ T7546] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.362486][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.369599][ T6231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.431096][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.438284][ T6231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.485376][ T7604] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.634196][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.641400][ T6231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.659271][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.666471][ T6231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.696514][ T7785] chnl_net:caif_netlink_parms(): no params data found [ 154.757642][ T71] bridge_slave_1: left allmulticast mode [ 154.763933][ T71] bridge_slave_1: left promiscuous mode [ 154.769651][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.794841][ T71] bridge_slave_0: left allmulticast mode [ 154.800540][ T71] bridge_slave_0: left promiscuous mode [ 154.814146][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.368222][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.380509][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.393309][ T71] bond0 (unregistering): Released all slaves [ 155.414921][ T7795] netdevsim netdevsim9: Direct firmware load for ./bus failed with error -2 [ 155.426943][ T7795] netdevsim netdevsim9: Falling back to sysfs fallback for: ./bus [ 155.694162][ T7812] netlink: 'syz.2.405': attribute type 1 has an invalid length. [ 155.777144][ T7604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.852586][ T7818] FAULT_INJECTION: forcing a failure. [ 155.852586][ T7818] name failslab, interval 1, probability 0, space 0, times 0 [ 155.865667][ T7818] CPU: 1 UID: 0 PID: 7818 Comm: syz.9.407 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 155.876379][ T7818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.886469][ T7818] Call Trace: [ 155.889772][ T7818] [ 155.892727][ T7818] dump_stack_lvl+0x241/0x360 [ 155.897440][ T7818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.898223][ T7546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.902646][ T7818] ? __pfx__printk+0x10/0x10 [ 155.902747][ T7818] should_fail_ex+0x3b0/0x4e0 [ 155.902783][ T7818] should_failslab+0xac/0x100 [ 155.902807][ T7818] ? inet_bind_bucket_create+0x2f/0x230 [ 155.902831][ T7818] kmem_cache_alloc_noprof+0x70/0x380 [ 155.902861][ T7818] inet_bind_bucket_create+0x2f/0x230 [ 155.902888][ T7818] inet_csk_get_port+0x3c2/0x1660 [ 155.902941][ T7818] ? __pfx_inet_csk_get_port+0x10/0x10 [ 155.902966][ T7818] inet_csk_listen_start+0x134/0x320 [ 155.902990][ T7818] __inet_listen_sk+0x2a0/0x7c0 [ 155.903011][ T7818] ? __local_bh_enable_ip+0x168/0x200 [ 155.903037][ T7818] ? lockdep_hardirqs_on+0x99/0x150 [ 155.903064][ T7818] ? __pfx___inet_listen_sk+0x10/0x10 [ 155.903081][ T7818] ? __local_bh_enable_ip+0x168/0x200 [ 155.903109][ T7818] ? inet_listen+0x46/0x110 [ 155.903127][ T7818] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 155.903152][ T7818] ? inet_listen+0x46/0x110 [ 155.903169][ T7818] ? do_raw_spin_unlock+0x13c/0x8b0 [ 155.903195][ T7818] inet_listen+0xa3/0x110 [ 155.903217][ T7818] __ia32_sys_listen+0x1ac/0x230 [ 155.903241][ T7818] __do_fast_syscall_32+0xb4/0x110 [ 155.941961][ T5837] Bluetooth: hci1: command tx timeout [ 155.945338][ T7818] ? exc_page_fault+0x590/0x8b0 [ 156.026676][ T7818] do_fast_syscall_32+0x34/0x80 [ 156.031543][ T7818] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.037873][ T7818] RIP: 0023:0xf706d579 [ 156.041950][ T7818] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 156.061580][ T7818] RSP: 002b:00000000f505f55c EFLAGS: 00000206 ORIG_RAX: 000000000000016b [ 156.070196][ T7818] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000002 [ 156.078182][ T7818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.086153][ T7818] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.094123][ T7818] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 156.102092][ T7818] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.110071][ T7818] [ 156.200820][ T7820] FAULT_INJECTION: forcing a failure. [ 156.200820][ T7820] name failslab, interval 1, probability 0, space 0, times 0 [ 156.214563][ T7785] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.236106][ T7785] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.244324][ T7820] CPU: 1 UID: 0 PID: 7820 Comm: syz.9.408 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 156.254957][ T7820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 156.265019][ T7820] Call Trace: [ 156.268297][ T7820] [ 156.271226][ T7820] dump_stack_lvl+0x241/0x360 [ 156.275914][ T7820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.281125][ T7820] ? __pfx__printk+0x10/0x10 [ 156.285803][ T7820] ? kmem_cache_alloc_noprof+0x48/0x380 [ 156.291357][ T7820] ? __pfx___might_resched+0x10/0x10 [ 156.296655][ T7820] should_fail_ex+0x3b0/0x4e0 [ 156.301349][ T7820] should_failslab+0xac/0x100 [ 156.306037][ T7820] ? alloc_empty_file+0x9e/0x1d0 [ 156.310972][ T7820] kmem_cache_alloc_noprof+0x70/0x380 [ 156.316352][ T7820] alloc_empty_file+0x9e/0x1d0 [ 156.321144][ T7820] path_openat+0x107/0x3590 [ 156.325663][ T7820] ? __pfx_lock_release+0x10/0x10 [ 156.330703][ T7820] ? unwind_next_frame+0x18e6/0x22d0 [ 156.336002][ T7820] ? __pfx_validate_chain+0x10/0x10 [ 156.341210][ T7820] ? __pfx_validate_chain+0x10/0x10 [ 156.346416][ T7820] ? is_bpf_text_address+0x285/0x2a0 [ 156.351699][ T7820] ? is_bpf_text_address+0x26/0x2a0 [ 156.356910][ T7820] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 156.363064][ T7820] ? kernel_text_address+0xa7/0xe0 [ 156.368189][ T7820] ? __pfx_path_openat+0x10/0x10 [ 156.373214][ T7820] ? unwind_get_return_address+0x4d/0x90 [ 156.378867][ T7820] ? arch_stack_walk+0xfd/0x150 [ 156.383727][ T7820] do_filp_open+0x27f/0x4e0 [ 156.388229][ T7820] ? __pfx_do_filp_open+0x10/0x10 [ 156.393269][ T7820] ? do_open_execat+0x99/0x480 [ 156.398031][ T7820] do_open_execat+0x165/0x480 [ 156.402709][ T7820] ? __pfx_do_open_execat+0x10/0x10 [ 156.407908][ T7820] ? __pfx_lock_release+0x10/0x10 [ 156.412938][ T7820] alloc_bprm+0x28/0xa30 [ 156.417177][ T7820] ? __phys_addr_symbol+0x2f/0x70 [ 156.422202][ T7820] ? __check_object_size+0x47a/0x730 [ 156.427488][ T7820] ? __might_fault+0xc6/0x120 [ 156.432167][ T7820] do_execveat_common+0x18c/0x6f0 [ 156.437197][ T7820] __ia32_compat_sys_execve+0x97/0xb0 [ 156.442566][ T7820] __do_fast_syscall_32+0xb4/0x110 [ 156.447766][ T7820] ? exc_page_fault+0x590/0x8b0 [ 156.452629][ T7820] do_fast_syscall_32+0x34/0x80 [ 156.457484][ T7820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.463825][ T7820] RIP: 0023:0xf706d579 [ 156.467904][ T7820] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 156.487794][ T7820] RSP: 002b:00000000f505f55c EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 156.496214][ T7820] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 0000000000000000 [ 156.504190][ T7820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.512167][ T7820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.520132][ T7820] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 156.528099][ T7820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.536112][ T7820] [ 156.540985][ T7785] bridge_slave_0: entered allmulticast mode [ 156.548466][ T7785] bridge_slave_0: entered promiscuous mode [ 156.556152][ T7785] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.563304][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.570707][ T7785] bridge_slave_1: entered allmulticast mode [ 156.577768][ T7785] bridge_slave_1: entered promiscuous mode [ 156.593481][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 156.628203][ T7546] veth0_vlan: entered promiscuous mode [ 156.685364][ T71] hsr_slave_0: left promiscuous mode [ 156.729156][ T71] hsr_slave_1: left promiscuous mode [ 156.735905][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.751792][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.763410][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.782064][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.847881][ T71] veth1_macvtap: left promiscuous mode [ 156.854704][ T71] veth0_macvtap: left promiscuous mode [ 156.860346][ T71] veth1_vlan: left promiscuous mode [ 156.866542][ T71] veth0_vlan: left promiscuous mode [ 157.149898][ T58] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 157.316743][ T58] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 157.339168][ T58] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 157.350350][ T58] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 157.359634][ T58] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.380609][ T7830] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 157.407318][ T58] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.463511][ T71] team0 (unregistering): Port device team_slave_1 removed [ 157.546267][ T71] team0 (unregistering): Port device team_slave_0 removed [ 157.685512][ T5880] usb 10-1: USB disconnect, device number 12 [ 157.767691][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.9.412'. [ 158.022333][ T5837] Bluetooth: hci1: command tx timeout [ 158.195625][ T7785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.232643][ T7785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.270412][ T7546] veth1_vlan: entered promiscuous mode [ 158.316934][ T7785] team0: Port device team_slave_0 added [ 158.341072][ T7785] team0: Port device team_slave_1 added [ 158.360470][ T7604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.399877][ T7785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.407025][ T7785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.436884][ T7785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.471651][ T7785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.478743][ T7785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.506335][ T7785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.533400][ T7546] veth0_macvtap: entered promiscuous mode [ 158.578110][ T7546] veth1_macvtap: entered promiscuous mode [ 158.604950][ T7785] hsr_slave_0: entered promiscuous mode [ 158.611963][ T7785] hsr_slave_1: entered promiscuous mode [ 158.619004][ T7785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.630530][ T7785] Cannot create hsr debugfs directory [ 158.666811][ T7604] veth0_vlan: entered promiscuous mode [ 158.716303][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.727680][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.738124][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.749357][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.759506][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.787455][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.817248][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.832622][ T7604] veth1_vlan: entered promiscuous mode [ 158.856937][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.870295][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.882914][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.895727][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.908916][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.919668][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.931830][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.973678][ T7604] veth0_macvtap: entered promiscuous mode [ 158.998151][ T7604] veth1_macvtap: entered promiscuous mode [ 159.013198][ T7546] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.028851][ T7546] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.038495][ T7546] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.048802][ T7546] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.094450][ T7604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.106556][ T7604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.113660][ T5880] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 159.117457][ T7604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.136852][ T7604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.147063][ T7604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.158044][ T7604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.168203][ T7604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.179445][ T7604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.190741][ T7604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.261546][ T5880] usb 10-1: device descriptor read/64, error -71 [ 159.289415][ T7604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.301158][ T7604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.313465][ T7604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.324454][ T7604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.334703][ T7604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.345936][ T7604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.357210][ T7604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.368111][ T7604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.379272][ T7604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.448744][ T7604] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.467138][ T7604] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.476416][ T7604] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.485615][ T7604] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.504479][ T5880] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 159.588801][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.607803][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.661988][ T5880] usb 10-1: device descriptor read/64, error -71 [ 159.708611][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.743069][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.783797][ T5880] usb usb10-port1: attempt power cycle [ 159.811864][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.834079][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.895733][ T5103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.915296][ T5103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.919309][ T7785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 159.926521][ T7838] FAULT_INJECTION: forcing a failure. [ 159.926521][ T7838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.970158][ T7785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 159.978883][ T7838] CPU: 0 UID: 0 PID: 7838 Comm: syz.4.346 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 159.989502][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 159.999566][ T7838] Call Trace: [ 160.002875][ T7838] [ 160.005799][ T7838] dump_stack_lvl+0x241/0x360 [ 160.010481][ T7838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.015752][ T7838] ? __pfx__printk+0x10/0x10 [ 160.020372][ T7838] ? snprintf+0xda/0x120 [ 160.024624][ T7838] should_fail_ex+0x3b0/0x4e0 [ 160.029306][ T7838] _copy_to_user+0x31/0xb0 [ 160.033745][ T7838] simple_read_from_buffer+0xca/0x150 [ 160.039172][ T7838] proc_fail_nth_read+0x1e9/0x250 [ 160.044215][ T7838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.049762][ T7838] ? rw_verify_area+0x55e/0x6f0 [ 160.054627][ T7838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.060181][ T7838] vfs_read+0x1fc/0xb70 [ 160.064348][ T7838] ? __pfx___mutex_lock+0x10/0x10 [ 160.069380][ T7838] ? __pfx_vfs_read+0x10/0x10 [ 160.074519][ T7838] ? __fget_files+0x2a/0x410 [ 160.079149][ T7838] ? __fget_files+0x395/0x410 [ 160.083860][ T7838] ? __fget_files+0x2a/0x410 [ 160.086235][ T7785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 160.088522][ T7838] ksys_read+0x18f/0x2b0 [ 160.099443][ T7838] ? __pfx_ksys_read+0x10/0x10 [ 160.104232][ T7838] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 160.110858][ T7838] ? lockdep_hardirqs_on+0x99/0x150 [ 160.116252][ T7838] __do_fast_syscall_32+0xb4/0x110 [ 160.121366][ T7838] ? exc_page_fault+0x590/0x8b0 [ 160.126239][ T7838] do_fast_syscall_32+0x34/0x80 [ 160.131095][ T7838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.137430][ T7838] RIP: 0023:0xf714d579 [ 160.141500][ T7838] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 160.161565][ T7838] RSP: 002b:00000000f513f590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 160.169983][ T7838] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f513f620 [ 160.178075][ T7838] RDX: 000000000000000f RSI: 00000000f7483ff4 RDI: 0000000000000000 [ 160.186064][ T7838] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 160.194137][ T7838] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 160.202127][ T7838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.210097][ T7838] [ 160.219241][ T5837] Bluetooth: hci1: command tx timeout [ 160.272130][ T5880] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 160.297739][ T7785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 160.305049][ T5880] usb 10-1: device descriptor read/8, error -71 [ 160.314184][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.415'. [ 160.538923][ T7785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.562039][ T5880] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 160.585822][ T7846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.364'. [ 160.624372][ T7785] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.624996][ T7848] FAULT_INJECTION: forcing a failure. [ 160.624996][ T7848] name failslab, interval 1, probability 0, space 0, times 0 [ 160.650299][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.657808][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.662620][ T5880] usb 10-1: device descriptor read/8, error -71 [ 160.681013][ T7848] CPU: 0 UID: 0 PID: 7848 Comm: syz.4.417 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 160.692351][ T7848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 160.702720][ T7848] Call Trace: [ 160.706109][ T7848] [ 160.709075][ T7848] dump_stack_lvl+0x241/0x360 [ 160.713801][ T7848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.719027][ T7848] ? __pfx__printk+0x10/0x10 [ 160.724080][ T7848] ? kmem_cache_alloc_noprof+0x48/0x380 [ 160.729651][ T7848] ? __pfx___might_resched+0x10/0x10 [ 160.734962][ T7848] should_fail_ex+0x3b0/0x4e0 [ 160.739668][ T7848] should_failslab+0xac/0x100 [ 160.744463][ T7848] ? sk_prot_alloc+0x58/0x210 [ 160.749163][ T7848] kmem_cache_alloc_noprof+0x70/0x380 [ 160.754560][ T7848] sk_prot_alloc+0x58/0x210 [ 160.759077][ T7848] ? sk_alloc+0x26/0x370 [ 160.763335][ T7848] sk_alloc+0x38/0x370 [ 160.767420][ T7848] inet_create+0x648/0xea0 [ 160.771857][ T7848] ? inet_create+0x94/0xea0 [ 160.776388][ T7848] __sock_create+0x4c0/0xa30 [ 160.781011][ T7848] mptcp_subflow_create_socket+0x132/0xdf0 [ 160.786840][ T7848] ? mark_lock+0x9a/0x360 [ 160.791228][ T7848] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 160.797577][ T7848] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.803929][ T7848] __mptcp_nmpc_sk+0x178/0x800 [ 160.808729][ T7848] ? __local_bh_enable_ip+0x168/0x200 [ 160.814138][ T7848] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 160.819465][ T7848] mptcp_setsockopt+0xf69/0x3bc0 [ 160.824448][ T7848] ? aa_sk_perm+0x96d/0xab0 [ 160.828983][ T7848] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 160.834753][ T7848] ? __pfx_aa_sk_perm+0x10/0x10 [ 160.839636][ T7848] ? __pfx_lock_acquire+0x10/0x10 [ 160.844699][ T7848] ? aa_sock_opt_perm+0x79/0x120 [ 160.849660][ T7848] ? sock_common_setsockopt+0x37/0xc0 [ 160.855061][ T7848] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 160.860977][ T7848] do_sock_setsockopt+0x3af/0x720 [ 160.866027][ T7848] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 160.871596][ T7848] ? __fget_files+0x2a/0x410 [ 160.876210][ T7848] ? __fget_files+0x395/0x410 [ 160.881005][ T7848] ? __fget_files+0x2a/0x410 [ 160.885624][ T7848] __ia32_sys_setsockopt+0x1f2/0x280 [ 160.890932][ T7848] __do_fast_syscall_32+0xb4/0x110 [ 160.896062][ T7848] ? exc_page_fault+0x590/0x8b0 [ 160.900933][ T7848] do_fast_syscall_32+0x34/0x80 [ 160.905894][ T7848] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.912244][ T7848] RIP: 0023:0xf714d579 [ 160.916326][ T7848] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 160.935957][ T7848] RSP: 002b:00000000f513f55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 160.944391][ T7848] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 160.952384][ T7848] RDX: 0000000000000013 RSI: 0000000020000000 RDI: 0000000000000004 [ 160.960491][ T7848] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.968482][ T7848] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 160.976483][ T7848] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.984489][ T7848] [ 161.021969][ T5880] usb usb10-port1: unable to enumerate USB device [ 161.047980][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.055140][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.250809][ T7785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.300188][ T7785] veth0_vlan: entered promiscuous mode [ 161.347202][ T7785] veth1_vlan: entered promiscuous mode [ 161.390594][ T7785] veth0_macvtap: entered promiscuous mode [ 161.406556][ T7785] veth1_macvtap: entered promiscuous mode [ 161.454540][ T7785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.491706][ T6844] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 161.503838][ T7785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.521868][ T7785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.539186][ T7785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.560062][ T7785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.578700][ T7785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.591106][ T7785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.609059][ T7785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.620329][ T7785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.632123][ T7785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.643418][ T7785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.664985][ T7785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.676675][ T7785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.692017][ T6844] usb 5-1: Using ep0 maxpacket: 16 [ 161.697667][ T7785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.708965][ T7785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.719704][ T7785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.730450][ T7785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.740752][ T7785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.751413][ T6844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 161.761529][ T7785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.772078][ T7785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.790020][ T7785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.803093][ T6844] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 161.812426][ T6844] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=14 [ 161.820996][ T6844] usb 5-1: Manufacturer: syz [ 161.823052][ T7785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.837174][ T6844] usb 5-1: SerialNumber: syz [ 161.858727][ T6844] usb 5-1: config 0 descriptor?? [ 161.868566][ T7785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.879548][ T7785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.890988][ T6844] em28xx 5-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 161.931491][ T6844] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 161.943671][ T7785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.969085][ T7785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.198937][ T7874] tipc: Enabling not permitted [ 162.208912][ T7874] tipc: Enabling of bearer rejected, failed to enable media [ 162.211697][ T6844] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 162.227203][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.256325][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.264322][ T5837] Bluetooth: hci1: command tx timeout [ 162.331542][ T6844] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 162.373945][ T6844] em28xx 5-1:0.0: board has no eeprom [ 162.382673][ T5103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.404929][ T5103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.461875][ T6844] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 162.461906][ T6844] em28xx 5-1:0.0: dvb set to bulk mode. [ 162.462687][ T5881] em28xx 5-1:0.0: Binding DVB extension [ 162.489980][ T6844] usb 5-1: USB disconnect, device number 6 [ 162.542497][ T6844] em28xx 5-1:0.0: Disconnecting em28xx [ 162.672811][ T5881] em28xx 5-1:0.0: Registering input extension [ 162.672984][ T6844] em28xx 5-1:0.0: Closing input extension [ 162.728104][ T6844] em28xx 5-1:0.0: Freeing device [ 163.141694][ T6844] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 163.318101][ T7914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.430'. [ 163.331539][ T6844] usb 5-1: Using ep0 maxpacket: 8 [ 163.396845][ T6844] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 163.405393][ T6844] usb 5-1: config 0 has no interface number 0 [ 163.522629][ T6844] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 163.532186][ T6844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.541127][ T6844] usb 5-1: Product: syz [ 163.545430][ T6844] usb 5-1: Manufacturer: syz [ 163.550058][ T6844] usb 5-1: SerialNumber: syz [ 163.565178][ T6844] usb 5-1: config 0 descriptor?? [ 163.845717][ T7894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.912804][ T7894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.032730][ T6844] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 164.039232][ T6844] usb 5-1: No streaming interface found for terminal 6. [ 164.225228][ T6844] usb 5-1: USB disconnect, device number 7 [ 164.902818][ T7964] FAULT_INJECTION: forcing a failure. [ 164.902818][ T7964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.956450][ T7964] CPU: 0 UID: 0 PID: 7964 Comm: syz.4.443 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 164.967097][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.977167][ T7964] Call Trace: [ 164.980442][ T7964] [ 164.983501][ T7964] dump_stack_lvl+0x241/0x360 [ 164.988175][ T7964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.993362][ T7964] ? __pfx__printk+0x10/0x10 [ 164.997945][ T7964] ? __pfx_lock_release+0x10/0x10 [ 165.002966][ T7964] ? __lock_acquire+0x1397/0x2100 [ 165.007977][ T7964] should_fail_ex+0x3b0/0x4e0 [ 165.012657][ T7964] _copy_from_user+0x2f/0xc0 [ 165.017247][ T7964] kstrtouint_from_user+0xc6/0x190 [ 165.022349][ T7964] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 165.028086][ T7964] ? __pfx_lock_acquire+0x10/0x10 [ 165.033193][ T7964] proc_fail_nth_write+0xaa/0x2d0 [ 165.038207][ T7964] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 165.044109][ T7964] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 165.049748][ T7964] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 165.055378][ T7964] vfs_write+0x2a3/0xd30 [ 165.059643][ T7964] ? __pfx_vfs_write+0x10/0x10 [ 165.064440][ T7964] ? __fget_files+0x2a/0x410 [ 165.069058][ T7964] ? __fget_files+0x395/0x410 [ 165.073745][ T7964] ? __fget_files+0x2a/0x410 [ 165.078347][ T7964] ksys_write+0x18f/0x2b0 [ 165.082703][ T7964] ? __pfx_ksys_write+0x10/0x10 [ 165.087570][ T7964] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 165.094160][ T7964] ? lockdep_hardirqs_on+0x99/0x150 [ 165.099360][ T7964] __do_fast_syscall_32+0xb4/0x110 [ 165.104475][ T7964] ? exc_page_fault+0x590/0x8b0 [ 165.109355][ T7964] do_fast_syscall_32+0x34/0x80 [ 165.114211][ T7964] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.120537][ T7964] RIP: 0023:0xf714d579 [ 165.124601][ T7964] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 165.144224][ T7964] RSP: 002b:00000000f511e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 165.152641][ T7964] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f511e620 [ 165.160611][ T7964] RDX: 0000000000000001 RSI: 00000000f7483ff4 RDI: 0000000000000000 [ 165.168673][ T7964] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 165.176652][ T7964] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 165.184628][ T7964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.192610][ T7964] [ 165.361869][ T5900] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 165.511956][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 165.541022][ T5900] usb 4-1: unable to get BOS descriptor or descriptor too short [ 165.592764][ T5900] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 165.630522][ T5900] usb 4-1: config 128 has 0 interfaces, different from the descriptor's value: 4 [ 165.679912][ T5900] usb 4-1: language id specifier not provided by device, defaulting to English [ 165.716093][ T5900] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 165.732196][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.749256][ T5900] usb 4-1: Product: syz [ 165.764756][ T5900] usb 4-1: Manufacturer: syz [ 165.774885][ T5900] usb 4-1: SerialNumber: syz [ 165.777260][ T7982] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 165.813591][ T6844] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 165.839814][ T7982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.001790][ T6844] usb 5-1: Using ep0 maxpacket: 16 [ 166.018194][ T6844] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 166.025780][ T5900] usb 4-1: USB disconnect, device number 8 [ 166.040103][ T6844] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 33 [ 166.089453][ T6844] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 166.106818][ T6844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.140090][ T6844] usb 5-1: config 0 descriptor?? [ 166.212778][ T58] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 166.321598][ T5892] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 166.401429][ T58] usb 3-1: Using ep0 maxpacket: 16 [ 166.410050][ T58] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 166.429567][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 166.446775][ T58] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 166.464224][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.479271][ T58] usb 3-1: Product: syz [ 166.486327][ T5892] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 166.486369][ T58] usb 3-1: Manufacturer: syz [ 166.510488][ T58] usb 3-1: SerialNumber: syz [ 166.520401][ T5892] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 166.523488][ T58] usb 3-1: config 0 descriptor?? [ 166.547951][ T58] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 166.566730][ T58] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 166.580465][ T5892] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 166.606303][ T6844] logitech 0003:046D:C626.0008: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.4-1/input0 [ 166.620199][ T5892] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.651928][ T7998] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 166.706358][ T5892] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 166.796808][ T8015] FAULT_INJECTION: forcing a failure. [ 166.796808][ T8015] name failslab, interval 1, probability 0, space 0, times 0 [ 166.851458][ T6844] usb 5-1: USB disconnect, device number 8 [ 166.950280][ T8015] CPU: 1 UID: 0 PID: 8015 Comm: syz.3.454 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 166.960926][ T8015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.969858][ T5892] usb 10-1: USB disconnect, device number 17 [ 166.970986][ T8015] Call Trace: [ 166.980272][ T8015] [ 166.983228][ T8015] dump_stack_lvl+0x241/0x360 [ 166.987946][ T8015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.993179][ T8015] ? __pfx__printk+0x10/0x10 [ 166.997812][ T8015] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 167.004349][ T8015] ? __pfx___might_resched+0x10/0x10 [ 167.009642][ T8015] should_fail_ex+0x3b0/0x4e0 [ 167.014342][ T8015] should_failslab+0xac/0x100 [ 167.019141][ T8015] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 167.025505][ T8015] ? dh_data_from_key+0x169/0x280 [ 167.030541][ T8015] kmemdup_noprof+0x2a/0x60 [ 167.035075][ T8015] dh_data_from_key+0x169/0x280 [ 167.039930][ T8015] __keyctl_dh_compute+0x41f/0xf50 [ 167.045139][ T8015] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 167.050781][ T8015] ? __pfx___might_resched+0x10/0x10 [ 167.056111][ T8015] ? __might_fault+0xc6/0x120 [ 167.060805][ T8015] ? compat_keyctl_dh_compute+0x20a/0x310 [ 167.066546][ T8015] compat_keyctl_dh_compute+0x21f/0x310 [ 167.072111][ T8015] ? __pfx_compat_keyctl_dh_compute+0x10/0x10 [ 167.078186][ T8015] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 167.084175][ T8015] __do_fast_syscall_32+0xb4/0x110 [ 167.089287][ T8015] ? exc_page_fault+0x590/0x8b0 [ 167.094139][ T8015] do_fast_syscall_32+0x34/0x80 [ 167.098993][ T8015] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.105316][ T8015] RIP: 0023:0xf70ed579 [ 167.109386][ T8015] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 167.128999][ T8015] RSP: 002b:00000000f50df55c EFLAGS: 00000206 ORIG_RAX: 0000000000000120 [ 167.137436][ T8015] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000020000100 [ 167.145415][ T8015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 167.153379][ T8015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.161360][ T8015] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 167.169340][ T8015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.177325][ T8015] [ 167.180487][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.308732][ T8020] netlink: 32 bytes leftover after parsing attributes in process `syz.3.455'. [ 167.400702][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.9.453'. [ 167.439762][ T58] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 167.551918][ T58] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 168.492609][ T5892] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 168.527504][ T8052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.548567][ T8052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.633750][ T58] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 168.643234][ T58] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 168.650171][ T58] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 168.656504][ T5892] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 168.656533][ T5892] usb 5-1: config 0 has no interface number 0 [ 168.656564][ T5892] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.656589][ T5892] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.662426][ T5892] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 168.719712][ T5892] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 168.735310][ T5892] usb 5-1: Manufacturer: syz [ 168.762870][ T5892] usb 5-1: config 0 descriptor?? [ 168.772287][ T5900] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 168.792526][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 168.902098][ T5900] usb 10-1: device descriptor read/64, error -71 [ 168.916149][ T58] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 168.929762][ T58] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 168.943985][ T8] usb 2-1: config 0 has no interfaces? [ 168.944260][ T58] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 168.952706][ T8] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 168.968122][ T58] usb 3-1: USB disconnect, device number 25 [ 168.995007][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.004635][ T8] usb 2-1: Product: syz [ 169.010487][ T8] usb 2-1: Manufacturer: syz [ 169.076725][ T8] usb 2-1: SerialNumber: syz [ 169.104554][ T8] usb 2-1: config 0 descriptor?? [ 169.181898][ T5900] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 169.199758][ T5892] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.18/0003:054C:03D5.0009/input/input22 [ 169.271857][ T976] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 169.288564][ T5892] sony 0003:054C:03D5.0009: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.4-1/input18 [ 169.324428][ T5900] usb 10-1: device descriptor read/64, error -71 [ 169.376873][ T8054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.393067][ T8054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.425586][ T5892] usb 5-1: USB disconnect, device number 9 [ 169.442293][ T58] usb 2-1: USB disconnect, device number 13 [ 169.457530][ T976] usb 4-1: config 0 has no interfaces? [ 169.467694][ T5900] usb usb10-port1: attempt power cycle [ 169.480202][ T976] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 169.499284][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.508080][ T976] usb 4-1: Product: syz [ 169.512932][ T976] usb 4-1: Manufacturer: syz [ 169.517560][ T976] usb 4-1: SerialNumber: syz [ 169.543377][ T976] usb 4-1: config 0 descriptor?? [ 169.614873][ T8082] FAULT_INJECTION: forcing a failure. [ 169.614873][ T8082] name failslab, interval 1, probability 0, space 0, times 0 [ 169.628751][ T8082] CPU: 1 UID: 0 PID: 8082 Comm: syz.2.464 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 169.639383][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 169.649468][ T8082] Call Trace: [ 169.652785][ T8082] [ 169.655732][ T8082] dump_stack_lvl+0x241/0x360 [ 169.660433][ T8082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.665652][ T8082] ? __pfx__printk+0x10/0x10 [ 169.670260][ T8082] ? kmem_cache_alloc_noprof+0x48/0x380 [ 169.675809][ T8082] ? __pfx___might_resched+0x10/0x10 [ 169.681106][ T8082] should_fail_ex+0x3b0/0x4e0 [ 169.685791][ T8082] should_failslab+0xac/0x100 [ 169.690465][ T8082] ? skb_clone+0x20c/0x390 [ 169.694890][ T8082] kmem_cache_alloc_noprof+0x70/0x380 [ 169.700299][ T8082] ? __pfx_lock_release+0x10/0x10 [ 169.705330][ T8082] skb_clone+0x20c/0x390 [ 169.709574][ T8082] pfkey_broadcast_one+0x99/0x330 [ 169.714609][ T8082] ? pfkey_broadcast+0x45/0x400 [ 169.719472][ T8082] pfkey_broadcast+0x3ca/0x400 [ 169.724252][ T8082] ? pfkey_broadcast+0x45/0x400 [ 169.729121][ T8082] pfkey_sendmsg+0xe10/0x1050 [ 169.733815][ T8082] ? __lock_acquire+0x1397/0x2100 [ 169.738874][ T8082] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 169.744029][ T8082] ? __pfx_aa_sk_perm+0x10/0x10 [ 169.748899][ T8082] ? __might_fault+0xaa/0x120 [ 169.753592][ T8082] ? __pfx_lock_release+0x10/0x10 [ 169.758639][ T8082] ? aa_sock_msg_perm+0x91/0x160 [ 169.763617][ T8082] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 169.768760][ T8082] __sock_sendmsg+0x221/0x270 [ 169.773473][ T8082] ____sys_sendmsg+0x52a/0x7e0 [ 169.778292][ T8082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.783604][ T8082] __sys_sendmsg+0x269/0x350 [ 169.788187][ T8082] ? __pfx_lock_release+0x10/0x10 [ 169.793220][ T8082] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.798350][ T8082] ? __pfx_vfs_write+0x10/0x10 [ 169.803157][ T8082] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 169.809784][ T8082] ? lockdep_hardirqs_on+0x99/0x150 [ 169.815026][ T8082] __do_fast_syscall_32+0xb4/0x110 [ 169.820172][ T8082] ? exc_page_fault+0x590/0x8b0 [ 169.825026][ T8082] do_fast_syscall_32+0x34/0x80 [ 169.829881][ T8082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.836237][ T8082] RIP: 0023:0xf7fd1579 [ 169.840332][ T8082] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 169.859991][ T8082] RSP: 002b:00000000f512655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 169.868416][ T8082] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0 [ 169.876407][ T8082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.882888][ T5900] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 169.884402][ T8082] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.900020][ T8082] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 169.908013][ T8082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.916019][ T8082] [ 169.918560][ T5900] usb 10-1: device descriptor read/8, error -71 [ 169.919147][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.023870][ T58] usb 4-1: USB disconnect, device number 9 [ 170.162643][ T5900] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 170.198815][ T5900] usb 10-1: device descriptor read/8, error -71 [ 170.292795][ T5892] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 170.313116][ T5900] usb usb10-port1: unable to enumerate USB device [ 170.451947][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 170.460072][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 170.483799][ T5892] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 170.493719][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=14 [ 170.502909][ T5892] usb 3-1: Manufacturer: syz [ 170.507543][ T5892] usb 3-1: SerialNumber: syz [ 170.529876][ T5892] usb 3-1: config 0 descriptor?? [ 170.543173][ T5892] em28xx 3-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 170.552803][ T5892] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 170.681826][ T5900] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 170.812440][ T5900] usb 2-1: device descriptor read/64, error -71 [ 170.822171][ T5892] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 170.885008][ T5892] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 170.897173][ T5892] em28xx 3-1:0.0: board has no eeprom [ 170.991945][ T5892] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 171.000147][ T5892] em28xx 3-1:0.0: dvb set to bulk mode. [ 171.015816][ T976] em28xx 3-1:0.0: Binding DVB extension [ 171.036821][ T5892] usb 3-1: USB disconnect, device number 26 [ 171.055315][ T5892] em28xx 3-1:0.0: Disconnecting em28xx [ 171.074071][ T5900] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 171.127060][ T976] em28xx 3-1:0.0: Registering input extension [ 171.138547][ T5892] em28xx 3-1:0.0: Closing input extension [ 171.176926][ T5892] em28xx 3-1:0.0: Freeing device [ 171.221976][ T5900] usb 2-1: device descriptor read/64, error -71 [ 171.244491][ T5103] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.342126][ T5900] usb usb2-port1: attempt power cycle [ 171.432320][ T5103] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.546071][ T5103] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.718359][ T8148] FAULT_INJECTION: forcing a failure. [ 171.718359][ T8148] name failslab, interval 1, probability 0, space 0, times 0 [ 171.753983][ T5900] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 171.769525][ T8148] CPU: 0 UID: 0 PID: 8148 Comm: syz.2.475 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 171.780183][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 171.790364][ T8148] Call Trace: [ 171.793674][ T8148] [ 171.796671][ T8148] dump_stack_lvl+0x241/0x360 [ 171.801394][ T8148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.806624][ T8148] ? __pfx__printk+0x10/0x10 [ 171.811247][ T8148] ? __kmalloc_cache_noprof+0x48/0x390 [ 171.816731][ T8148] ? __pfx___might_resched+0x10/0x10 [ 171.822055][ T8148] should_fail_ex+0x3b0/0x4e0 [ 171.826772][ T8148] should_failslab+0xac/0x100 [ 171.831480][ T8148] __kmalloc_cache_noprof+0x70/0x390 [ 171.836876][ T8148] ? nf_tables_newtable+0x52c/0x1e10 [ 171.842187][ T8148] nf_tables_newtable+0x52c/0x1e10 [ 171.847341][ T8148] ? nfnl_pernet+0x23/0x240 [ 171.851877][ T8148] ? __pfx_nf_tables_newtable+0x10/0x10 [ 171.857458][ T8148] ? __nla_parse+0x40/0x60 [ 171.861906][ T8148] nfnetlink_rcv+0x14e3/0x2ab0 [ 171.866731][ T8148] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 171.871920][ T8148] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.877202][ T8148] ? skb_clone+0x240/0x390 [ 171.881745][ T8148] ? __pfx_lock_release+0x10/0x10 [ 171.886817][ T8148] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.892046][ T8148] netlink_unicast+0x7f6/0x990 [ 171.896854][ T8148] ? __pfx_netlink_unicast+0x10/0x10 [ 171.902179][ T8148] ? __virt_addr_valid+0x45f/0x530 [ 171.907322][ T8148] ? __phys_addr_symbol+0x2f/0x70 [ 171.912469][ T8148] ? __check_object_size+0x47a/0x730 [ 171.917797][ T8148] netlink_sendmsg+0x8e4/0xcb0 [ 171.922611][ T8148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.927939][ T8148] ? __pfx_lock_release+0x10/0x10 [ 171.933033][ T8148] ? aa_sock_msg_perm+0x91/0x160 [ 171.938093][ T8148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.943408][ T8148] __sock_sendmsg+0x221/0x270 [ 171.948135][ T8148] ____sys_sendmsg+0x52a/0x7e0 [ 171.952938][ T8148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.958271][ T8148] __sys_sendmsg+0x269/0x350 [ 171.962895][ T8148] ? __pfx_lock_release+0x10/0x10 [ 171.967961][ T8148] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.973119][ T8148] ? __pfx_vfs_write+0x10/0x10 [ 171.977988][ T8148] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 171.984617][ T8148] ? lockdep_hardirqs_on+0x99/0x150 [ 171.989853][ T8148] __do_fast_syscall_32+0xb4/0x110 [ 171.995002][ T8148] ? exc_page_fault+0x590/0x8b0 [ 171.999892][ T8148] do_fast_syscall_32+0x34/0x80 [ 172.004789][ T8148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.011150][ T8148] RIP: 0023:0xf7fd1579 [ 172.015254][ T8148] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 172.034926][ T8148] RSP: 002b:00000000f512655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 172.043487][ T8148] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 172.051595][ T8148] RDX: 0000000020050800 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.059749][ T8148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.067756][ T8148] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 172.075765][ T8148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.083790][ T8148] [ 172.136110][ T5900] usb 2-1: device descriptor read/8, error -71 [ 172.148523][ T5103] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.284480][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.298120][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.306854][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.328150][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.341247][ T5829] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 172.349188][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.356771][ T5880] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 172.381852][ T5900] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 172.412431][ T5900] usb 2-1: device descriptor read/8, error -71 [ 172.513716][ T5880] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 172.525574][ T5900] usb usb2-port1: unable to enumerate USB device [ 172.550867][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.562667][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.572973][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 172.586409][ T5880] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 172.596214][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.616543][ T5880] usb 4-1: config 0 descriptor?? [ 172.642113][ T5103] bridge_slave_1: left allmulticast mode [ 172.648515][ T5103] bridge_slave_1: left promiscuous mode [ 172.654617][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.762792][ T5103] bridge_slave_0: left allmulticast mode [ 172.768523][ T5103] bridge_slave_0: left promiscuous mode [ 172.774568][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.784607][ C0] ------------[ cut here ]------------ [ 172.791016][ C0] WARNING: CPU: 0 PID: 8174 at kernel/signal.c:2050 posixtimer_send_sigqueue+0xa08/0xce0 [ 172.800879][ C0] Modules linked in: [ 172.804805][ C0] CPU: 0 UID: 0 PID: 8174 Comm: syz.2.482 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 172.815427][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 172.825503][ C0] RIP: 0010:posixtimer_send_sigqueue+0xa08/0xce0 [ 172.831842][ C0] Code: 00 0f 85 f4 02 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 23 20 3b 00 4c 8b 64 24 08 e9 28 ff ff ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 80 3c 03 00 74 08 4c 89 f7 [ 172.851463][ C0] RSP: 0018:ffffc90000007c00 EFLAGS: 00010086 [ 172.857544][ C0] RAX: dffffc0000000000 RBX: 1ffff110023be5e3 RCX: ffff888028ef0000 [ 172.865519][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.873609][ C0] RBP: ffffc90000007cf8 R08: ffffffff8164639c R09: ffffffff81646341 [ 172.881600][ C0] R10: 0000000000000002 R11: ffff888028ef0000 R12: ffff888011df2f00 [ 172.889575][ C0] R13: 1ffff110023be5f0 R14: ffff888011df2f18 R15: ffff888011df2fc0 [ 172.897545][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0063) knlGS:00000000f5126b40 [ 172.906500][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 172.913124][ C0] CR2: 0000561a60f9e7f0 CR3: 0000000055924000 CR4: 00000000003526f0 [ 172.921117][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 172.929084][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 172.937056][ C0] Call Trace: [ 172.940342][ C0] [ 172.943197][ C0] ? __warn+0x165/0x4d0 [ 172.947356][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 172.953076][ C0] ? report_bug+0x2b3/0x500 [ 172.957711][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 172.963540][ C0] ? handle_bug+0x60/0x90 [ 172.968101][ C0] ? exc_invalid_op+0x1a/0x50 [ 172.972789][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 172.977820][ C0] ? prepare_signal+0x931/0xc90 [ 172.982673][ C0] ? prepare_signal+0x98c/0xc90 [ 172.987528][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 172.993249][ C0] ? posixtimer_send_sigqueue+0xd3/0xce0 [ 172.998885][ C0] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 173.004981][ C0] posix_timer_fn+0xe2/0x160 [ 173.009586][ C0] ? __pfx_posix_timer_fn+0x10/0x10 [ 173.014791][ C0] __hrtimer_run_queues+0x59b/0xd30 [ 173.020006][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 173.025722][ C0] ? handle_softirqs+0x7e0/0x9b0 [ 173.030660][ C0] ? read_tsc+0x9/0x20 [ 173.034722][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 173.040786][ C0] hrtimer_interrupt+0x403/0xa40 [ 173.045741][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 173.051724][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 173.057360][ C0] [ 173.060375][ C0] [ 173.063411][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 173.069430][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 173.075957][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 5e 79 3a f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 d3 26 a2 f5 65 8b 05 74 7a 38 74 85 c0 74 43 48 c7 04 24 0e 36 [ 173.095761][ C0] RSP: 0018:ffffc900044dfc40 EFLAGS: 00000206 [ 173.101832][ C0] RAX: 3c64420675771000 RBX: 1ffff9200089bf8c RCX: ffffffff9a3ab903 [ 173.109795][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0a9760 RDI: 0000000000000001 [ 173.117765][ C0] RBP: ffffc900044dfcd0 R08: ffffffff90197d77 R09: 1ffffffff2032fae [ 173.125729][ C0] R10: dffffc0000000000 R11: fffffbfff2032faf R12: dffffc0000000000 [ 173.133692][ C0] R13: 1ffff9200089bf88 R14: ffffc900044dfc60 R15: 0000000000000246 [ 173.141671][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 173.148011][ C0] do_timer_settime+0x37f/0x3e0 [ 173.152871][ C0] ? __pfx_do_timer_settime+0x10/0x10 [ 173.158242][ C0] ? handle_softirqs+0x7e0/0x9b0 [ 173.163189][ C0] __ia32_sys_timer_settime32+0x1a6/0x250 [ 173.168919][ C0] ? __pfx___ia32_sys_timer_settime32+0x10/0x10 [ 173.175152][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 173.181218][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 173.187572][ C0] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 173.194178][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 173.199385][ C0] __do_fast_syscall_32+0xb4/0x110 [ 173.204500][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 173.210656][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 173.215955][ C0] do_fast_syscall_32+0x34/0x80 [ 173.220808][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.227201][ C0] RIP: 0023:0xf7fd1579 [ 173.231293][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 173.250910][ C0] RSP: 002b:00000000f512655c EFLAGS: 00000206 ORIG_RAX: 0000000000000104 [ 173.259327][ C0] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000001 [ 173.267297][ C0] RDX: 0000000020000100 RSI: 0000000020000140 RDI: 0000000000000000 [ 173.275268][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.283241][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 173.291208][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.299191][ C0] [ 173.302235][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 173.309593][ C0] CPU: 0 UID: 0 PID: 8174 Comm: syz.2.482 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 173.320168][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 173.330220][ C0] Call Trace: [ 173.333493][ C0] [ 173.336329][ C0] dump_stack_lvl+0x241/0x360 [ 173.341053][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.346248][ C0] ? __pfx__printk+0x10/0x10 [ 173.350830][ C0] ? _printk+0xd5/0x120 [ 173.354989][ C0] ? __init_begin+0x41000/0x41000 [ 173.360031][ C0] ? vscnprintf+0x5d/0x90 [ 173.364367][ C0] panic+0x349/0x880 [ 173.368259][ C0] ? __warn+0x174/0x4d0 [ 173.372420][ C0] ? __pfx_panic+0x10/0x10 [ 173.376843][ C0] __warn+0x344/0x4d0 [ 173.380826][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 173.386542][ C0] report_bug+0x2b3/0x500 [ 173.390866][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 173.396585][ C0] handle_bug+0x60/0x90 [ 173.400732][ C0] exc_invalid_op+0x1a/0x50 [ 173.405236][ C0] asm_exc_invalid_op+0x1a/0x20 [ 173.410124][ C0] RIP: 0010:posixtimer_send_sigqueue+0xa08/0xce0 [ 173.416536][ C0] Code: 00 0f 85 f4 02 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 23 20 3b 00 4c 8b 64 24 08 e9 28 ff ff ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 80 3c 03 00 74 08 4c 89 f7 [ 173.436135][ C0] RSP: 0018:ffffc90000007c00 EFLAGS: 00010086 [ 173.442459][ C0] RAX: dffffc0000000000 RBX: 1ffff110023be5e3 RCX: ffff888028ef0000 [ 173.450424][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.458397][ C0] RBP: ffffc90000007cf8 R08: ffffffff8164639c R09: ffffffff81646341 [ 173.466809][ C0] R10: 0000000000000002 R11: ffff888028ef0000 R12: ffff888011df2f00 [ 173.474775][ C0] R13: 1ffff110023be5f0 R14: ffff888011df2f18 R15: ffff888011df2fc0 [ 173.482747][ C0] ? prepare_signal+0x931/0xc90 [ 173.487595][ C0] ? prepare_signal+0x98c/0xc90 [ 173.492458][ C0] ? posixtimer_send_sigqueue+0xd3/0xce0 [ 173.498111][ C0] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 173.504185][ C0] posix_timer_fn+0xe2/0x160 [ 173.508783][ C0] ? __pfx_posix_timer_fn+0x10/0x10 [ 173.513978][ C0] __hrtimer_run_queues+0x59b/0xd30 [ 173.519185][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 173.524902][ C0] ? handle_softirqs+0x7e0/0x9b0 [ 173.529851][ C0] ? read_tsc+0x9/0x20 [ 173.533909][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 173.539975][ C0] hrtimer_interrupt+0x403/0xa40 [ 173.544933][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 173.550913][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 173.556544][ C0] [ 173.559468][ C0] [ 173.562480][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 173.568464][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 173.574979][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 5e 79 3a f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 d3 26 a2 f5 65 8b 05 74 7a 38 74 85 c0 74 43 48 c7 04 24 0e 36 [ 173.594672][ C0] RSP: 0018:ffffc900044dfc40 EFLAGS: 00000206 [ 173.600742][ C0] RAX: 3c64420675771000 RBX: 1ffff9200089bf8c RCX: ffffffff9a3ab903 [ 173.608707][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0a9760 RDI: 0000000000000001 [ 173.616670][ C0] RBP: ffffc900044dfcd0 R08: ffffffff90197d77 R09: 1ffffffff2032fae [ 173.624637][ C0] R10: dffffc0000000000 R11: fffffbfff2032faf R12: dffffc0000000000 [ 173.632602][ C0] R13: 1ffff9200089bf88 R14: ffffc900044dfc60 R15: 0000000000000246 [ 173.640600][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 173.646964][ C0] do_timer_settime+0x37f/0x3e0 [ 173.651832][ C0] ? __pfx_do_timer_settime+0x10/0x10 [ 173.657221][ C0] ? handle_softirqs+0x7e0/0x9b0 [ 173.662174][ C0] __ia32_sys_timer_settime32+0x1a6/0x250 [ 173.667895][ C0] ? __pfx___ia32_sys_timer_settime32+0x10/0x10 [ 173.674143][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 173.680216][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 173.686539][ C0] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 173.693127][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 173.698396][ C0] __do_fast_syscall_32+0xb4/0x110 [ 173.703595][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 173.709800][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 173.715000][ C0] do_fast_syscall_32+0x34/0x80 [ 173.719851][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.726184][ C0] RIP: 0023:0xf7fd1579 [ 173.730245][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 173.749847][ C0] RSP: 002b:00000000f512655c EFLAGS: 00000206 ORIG_RAX: 0000000000000104 [ 173.758260][ C0] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000001 [ 173.766225][ C0] RDX: 0000000020000100 RSI: 0000000020000140 RDI: 0000000000000000 [ 173.774216][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.782196][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 173.790181][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.798179][ C0] [ 173.801466][ C0] Kernel Offset: disabled [ 173.805894][ C0] Rebooting in 86400 seconds..